$ rpki-client -vvf repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.mft File: 629890514AA221B57B4953527F103DA692ECA8E7.mft (raw, json) Hash identifier: rRTNJkul7kDUqmPpkq4k9XT7x/Z07c19eHYfw0wE2gA= Subject key identifier: 14:A3:4B:C0:29:7C:BD:46:6F:19:84:88:D0:39:A5:7F:C5:2B:C3:77 Authority key identifier: 62:98:90:51:4A:A2:21:B5:7B:49:53:52:7F:10:3D:A6:92:EC:A8:E7 Certificate issuer: /CN=629890514AA221B57B4953527F103DA692ECA8E7 Certificate serial: 5EFEC42A6BBD884DAA89502C42385B6298007225 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/629890514AA221B57B4953527F103DA692ECA8E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.mft Manifest number: 0176 Signing time: Mon 02 Mar 2026 05:11:34 +0000 Manifest this update: Mon 02 Mar 2026 05:06:34 +0000 Manifest next update: Thu 05 Mar 2026 15:14:34 +0000 Files and hashes: 1: 3130332e36372e38322e302f32332d3234203d3e20313532303131.roa (hash: xozAiF19qdvD8L8pC2OGg0/fqZR+yELFs8DYCAlXKWU=) 2: 629890514AA221B57B4953527F103DA692ECA8E7.crl (hash: 4jP1fHbySoigGuhNvuLBQW6LwhYoIb+W73Q/RDpO5/c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.crl rsync://repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/629890514AA221B57B4953527F103DA692ECA8E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:fe:c4:2a:6b:bd:88:4d:aa:89:50:2c:42:38:5b:62:98:00:72:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=629890514AA221B57B4953527F103DA692ECA8E7 Validity Not Before: Mar 2 05:06:34 2026 GMT Not After : Mar 5 15:14:34 2026 GMT Subject: CN=14A34BC0297CBD466F198488D039A57FC52BC377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b9:e0:2f:4c:eb:6e:be:a3:e5:b0:4c:b5:52: 1d:af:4c:74:1f:a4:b5:da:28:24:0c:90:cd:37:af: db:f7:f8:8a:34:76:74:8d:16:64:7d:51:0c:2b:f3: b0:cc:c1:9d:48:94:8b:69:20:57:98:13:75:85:0f: 7a:83:ff:ea:34:89:c2:1c:13:ae:95:bc:1e:97:5e: a5:c7:44:91:cd:97:f1:db:c3:a2:3e:b3:6a:29:bb: 6a:72:5b:7e:cd:77:e3:f2:34:25:fe:9b:9a:f0:0d: d8:99:da:30:16:b7:03:71:95:90:9d:11:7c:c2:98: 59:af:1d:a7:c7:b4:5f:f0:99:4f:ed:5c:ba:2b:38: 8d:3b:5f:84:d7:1e:5e:c5:d4:13:94:58:00:be:55: 96:df:bc:e5:26:b9:aa:95:0a:23:01:69:e3:a0:02: cd:b9:39:5c:80:61:c7:33:5d:fc:8e:b1:82:1d:34: 32:d6:6e:57:86:bb:fd:d1:41:8d:95:91:64:21:d0: 04:af:73:a2:d4:20:d5:ab:e7:4c:79:eb:88:a8:ed: 58:7b:53:33:3b:51:bd:8b:0a:a3:d9:2d:b9:02:13: 16:97:c4:2e:0d:f7:67:67:ef:f4:61:fc:3c:10:3d: 29:8c:0b:5c:c8:c8:01:7d:f5:0a:37:1d:8a:04:3e: 63:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:A3:4B:C0:29:7C:BD:46:6F:19:84:88:D0:39:A5:7F:C5:2B:C3:77 X509v3 Authority Key Identifier: keyid:62:98:90:51:4A:A2:21:B5:7B:49:53:52:7F:10:3D:A6:92:EC:A8:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/629890514AA221B57B4953527F103DA692ECA8E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:9e:79:74:c7:0a:e2:e2:38:36:82:93:81:60:67:3d:5f:89: 89:d9:24:da:b2:a9:b7:e9:3c:bd:4c:5d:81:5a:95:5c:ad:38: 8f:7a:ee:b6:29:70:88:67:be:7f:66:37:af:ee:6d:b8:c6:d2: 52:ca:47:df:50:61:86:10:2b:29:fc:9e:05:66:13:d1:17:c3: 18:b9:e8:87:5b:c7:94:d4:64:dd:42:e6:54:cc:9c:1c:83:63: b1:d1:48:3d:15:2b:e1:70:18:df:72:45:2e:31:f4:92:f8:01: c6:55:86:e9:6f:0f:f6:0b:b5:e4:08:c2:d7:67:67:4f:0b:7a: a8:54:1a:e7:ed:62:32:b0:21:c0:4a:68:37:fe:95:a4:7b:ab: c0:b9:22:a4:fc:ec:17:c9:13:7b:b8:8e:dd:3a:f6:c5:d0:8b: 56:42:7b:b3:ea:3c:b7:ec:e0:a8:b6:00:d5:e6:b3:ff:1b:b8: ec:21:f5:3d:15:7f:1c:31:b7:d3:68:bd:9c:5a:83:ff:46:95: f9:29:10:65:3c:ce:61:04:41:65:7f:61:a7:b6:4f:b7:11:3f: 84:aa:03:5b:00:d9:1a:ac:da:de:34:d6:ad:a1:de:a4:f5:46: fb:23:ca:e6:2a:82:df:de:8e:17:d6:d7:d8:b8:b6:7e:aa:3d: 82:68:7d:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXv7EKmu9iE2qiVAsQjhbYpgAciUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI5ODkwNTE0QUEyMjFCNTdCNDk1MzUyN0YxMDNEQTY5 MkVDQThFNzAeFw0yNjAzMDIwNTA2MzRaFw0yNjAzMDUxNTE0MzRaMDMxMTAvBgNV BAMTKDE0QTM0QkMwMjk3Q0JENDY2RjE5ODQ4OEQwMzlBNTdGQzUyQkMzNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnueAvTOtuvqPlsEy1Uh2vTHQf pLXaKCQMkM03r9v3+Io0dnSNFmR9UQwr87DMwZ1IlItpIFeYE3WFD3qD/+o0icIc E66VvB6XXqXHRJHNl/Hbw6I+s2opu2pyW37Nd+PyNCX+m5rwDdiZ2jAWtwNxlZCd EXzCmFmvHafHtF/wmU/tXLorOI07X4TXHl7F1BOUWAC+VZbfvOUmuaqVCiMBaeOg As25OVyAYcczXfyOsYIdNDLWbleGu/3RQY2VkWQh0ASvc6LUINWr50x564io7Vh7 UzM7Ub2LCqPZLbkCExaXxC4N92dn7/Rh/DwQPSmMC1zIyAF99Qo3HYoEPmMdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFKNLwCl8vUZvGYSI0Dmlf8Urw3cwHwYDVR0j BBgwFoAUYpiQUUqiIbV7SVNSfxA9ppLsqOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDZlMTQ3Zi0xMzA0LTRlNjktOTUxYy04OTMxMGRmZTg1OWUvMC82Mjk4OTA1MTRB QTIyMUI1N0I0OTUzNTI3RjEwM0RBNjkyRUNBOEU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjI5ODkwNTE0QUEyMjFCNTdCNDk1MzUyN0YxMDNEQTY5MkVD QThFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQ2ZTE0N2YtMTMwNC00ZTY5LTk1 MWMtODkzMTBkZmU4NTllLzAvNjI5ODkwNTE0QUEyMjFCNTdCNDk1MzUyN0YxMDNE QTY5MkVDQThFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADueeXTHCuLiODaCk4FgZz1fiYnZJNqyqbfp PL1MXYFalVytOI967rYpcIhnvn9mN6/ubbjG0lLKR99QYYYQKyn8ngVmE9EXwxi5 6Idbx5TUZN1C5lTMnByDY7HRSD0VK+FwGN9yRS4x9JL4AcZVhulvD/YLteQIwtdn Z08LeqhUGuftYjKwIcBKaDf+laR7q8C5IqT87BfJE3u4jt069sXQi1ZCe7PqPLfs 4Ki2ANXms/8buOwh9T0Vfxwxt9NovZxag/9GlfkpEGU8zmEEQWV/Yae2T7cRP4Sq A1sA2Rqs2t401q2h3qT1RvsjyuYqgt/ejhfW19i4tn6qPYJofec= -----END CERTIFICATE-----Generated at Mon Mar 2 21:56:07 2026 by rpki-client