$ rpki-client -vvf repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft File: 0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft (raw, json) Hash identifier: Dcxv92vl2FqRmUvW/vJ86f64tiZDS9NgKnKUbh2JTY0= Subject key identifier: 89:00:91:71:ED:66:C7:1A:96:17:42:F7:71:A1:74:7A:B4:65:DD:34 Authority key identifier: 02:46:DD:14:AF:68:F5:E5:51:2A:BD:88:D1:DB:75:07:E6:91:3C:96 Certificate issuer: /CN=0246DD14AF68F5E5512ABD88D1DB7507E6913C96 Certificate serial: 6BA93E7576F281C48F9C764EECDEA6D9F49E5385 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft Manifest number: 01E3 Signing time: Wed 18 Mar 2026 17:31:07 +0000 Manifest this update: Wed 18 Mar 2026 17:26:07 +0000 Manifest next update: Sat 21 Mar 2026 19:45:07 +0000 Files and hashes: 1: 323430373a366434303a3a2f33322d3438203d3e203538383230.roa (hash: HVzVEZKhesoTY020j8ak7SvbYVxGbYC4+RXUTxdFP9U=) 2: 0246DD14AF68F5E5512ABD88D1DB7507E6913C96.crl (hash: dQISIxaPbRkOhOPgAxLrLQKGRKtLXWFPXAORIHjyaCY=) 3: 3130332e3136372e3133362e302f32332d3234203d3e20313339343536.roa (hash: obYtUl2lQpNdpgObPXIZcvY8GGanlMGkMuiOZqIlQPc=) 4: 323430373a366434303a3a2f33322d3332203d3e203538383230.roa (hash: oqNdF4uJU42w94bKSytVgmfGCQbpEC2b6KNqL//ouqg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.crl rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 19:45:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:a9:3e:75:76:f2:81:c4:8f:9c:76:4e:ec:de:a6:d9:f4:9e:53:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0246DD14AF68F5E5512ABD88D1DB7507E6913C96 Validity Not Before: Mar 18 17:26:07 2026 GMT Not After : Mar 21 19:45:07 2026 GMT Subject: CN=89009171ED66C71A961742F771A1747AB465DD34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:9d:88:63:ea:3c:2c:d8:cd:c4:ab:29:e8:5a: 52:fd:aa:b6:0c:b0:94:e9:7b:ff:10:f0:41:33:38: ce:a3:6c:43:58:4f:2c:ab:74:8d:55:a3:9c:22:01: 2a:5f:47:a4:d3:03:4a:21:41:3a:ef:f7:45:8f:a4: 04:22:8c:c9:8a:59:8b:19:a6:b9:7e:c2:bf:46:a7: 5e:4a:c9:26:5c:e2:49:30:c4:e7:4b:b0:3d:88:c3: f9:62:13:07:e0:ef:b4:f7:6d:c9:1a:19:ca:fc:d4: 10:45:bb:57:a4:99:e9:5a:ee:fc:77:c7:9f:14:75: c1:6c:75:25:a8:5e:0b:70:8a:1d:ba:32:1f:70:18: 9f:92:f8:2c:b8:49:54:89:e7:f5:d3:20:73:bf:0a: 4a:83:b6:bf:20:27:4e:3d:72:93:a1:57:62:22:cf: aa:31:a0:57:b0:6c:12:ab:4d:86:b7:19:b1:4e:83: 68:37:b4:3c:b4:55:91:d6:93:f6:70:ad:27:39:97: 4c:dd:c5:2a:d3:43:1f:09:66:b0:28:35:f2:27:87: 9b:c8:e9:d4:5f:56:8d:3d:03:ff:1d:a6:ee:13:3b: dd:e0:07:a2:aa:30:b7:22:da:82:e4:4e:c6:06:7c: ab:dd:e9:18:5a:2f:50:86:94:19:e4:e1:89:28:3e: b4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:00:91:71:ED:66:C7:1A:96:17:42:F7:71:A1:74:7A:B4:65:DD:34 X509v3 Authority Key Identifier: keyid:02:46:DD:14:AF:68:F5:E5:51:2A:BD:88:D1:DB:75:07:E6:91:3C:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:26:41:7b:0c:92:6d:c0:7d:07:67:c3:21:b6:fb:d6:37:8a: b8:29:18:b2:51:3a:59:78:9a:a5:fd:61:b6:50:b3:22:94:11: f9:b6:19:32:98:ad:87:fb:07:2d:6a:5c:10:7f:04:8f:9c:27: e1:d4:22:ea:73:90:cf:cb:45:74:4a:2d:e8:a2:d3:7e:c1:bb: df:61:b6:f8:fe:50:f9:8b:9a:31:b5:a2:21:c9:25:56:e4:1a: 70:dc:35:73:0d:b7:77:97:96:1f:06:6c:8d:d2:03:99:8c:f6: e9:aa:12:27:2b:6f:27:df:fe:d3:b9:35:70:08:7b:89:3d:cd: 3e:c7:c6:5f:d6:be:cb:9a:a3:b8:c0:19:e8:f2:34:1e:d5:61: 42:94:ca:cc:d2:4c:14:0e:35:2c:04:79:86:20:9c:23:68:a4: 80:10:7c:1f:5a:30:55:c9:f3:57:d6:f9:d8:03:42:44:1a:b2: 6e:8a:5d:9f:3a:1e:a0:67:bb:00:a4:21:86:26:10:d4:22:f2: 38:02:dd:b0:17:a8:1b:e4:1e:c7:bc:6a:24:e6:b9:a7:73:a1: 55:86:bd:82:92:9a:1e:fe:aa:f9:dc:ea:2c:dd:f1:2a:6a:cb: d8:c8:65:01:6d:f5:7c:b3:22:4b:30:ab:2c:80:54:67:27:5f: eb:d5:1b:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa6k+dXbygcSPnHZO7N6m2fSeU4UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI0NkREMTRBRjY4RjVFNTUxMkFCRDg4RDFEQjc1MDdF NjkxM0M5NjAeFw0yNjAzMTgxNzI2MDdaFw0yNjAzMjExOTQ1MDdaMDMxMTAvBgNV BAMTKDg5MDA5MTcxRUQ2NkM3MUE5NjE3NDJGNzcxQTE3NDdBQjQ2NUREMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfnYhj6jws2M3EqynoWlL9qrYM sJTpe/8Q8EEzOM6jbENYTyyrdI1Vo5wiASpfR6TTA0ohQTrv90WPpAQijMmKWYsZ prl+wr9Gp15KySZc4kkwxOdLsD2Iw/liEwfg77T3bckaGcr81BBFu1ekmela7vx3 x58UdcFsdSWoXgtwih26Mh9wGJ+S+Cy4SVSJ5/XTIHO/CkqDtr8gJ049cpOhV2Ii z6oxoFewbBKrTYa3GbFOg2g3tDy0VZHWk/ZwrSc5l0zdxSrTQx8JZrAoNfInh5vI 6dRfVo09A/8dpu4TO93gB6KqMLci2oLkTsYGfKvd6RhaL1CGlBnk4YkoPrQtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiQCRce1mxxqWF0L3caF0erRl3TQwHwYDVR0j BBgwFoAUAkbdFK9o9eVRKr2I0dt1B+aRPJYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGZiMzk5Mi0xZDJmLTQ2Y2UtODg2YS04ZTIyYTMyNjExZjgvMC8wMjQ2REQxNEFG NjhGNUU1NTEyQUJEODhEMURCNzUwN0U2OTEzQzk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDI0NkREMTRBRjY4RjVFNTUxMkFCRDg4RDFEQjc1MDdFNjkx M0M5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRmYjM5OTItMWQyZi00NmNlLTg4 NmEtOGUyMmEzMjYxMWY4LzAvMDI0NkREMTRBRjY4RjVFNTUxMkFCRDg4RDFEQjc1 MDdFNjkxM0M5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHomQXsMkm3AfQdnwyG2+9Y3irgpGLJROll4 mqX9YbZQsyKUEfm2GTKYrYf7By1qXBB/BI+cJ+HUIupzkM/LRXRKLeii037Bu99h tvj+UPmLmjG1oiHJJVbkGnDcNXMNt3eXlh8GbI3SA5mM9umqEicrbyff/tO5NXAI e4k9zT7Hxl/Wvsuao7jAGejyNB7VYUKUyszSTBQONSwEeYYgnCNopIAQfB9aMFXJ 81fW+dgDQkQasm6KXZ86HqBnuwCkIYYmENQi8jgC3bAXqBvkHse8aiTmuadzoVWG vYKSmh7+qvnc6izd8Spqy9jIZQFt9XyzIkswqyyAVGcnX+vVGyE= -----END CERTIFICATE-----Generated at Thu Mar 19 09:58:35 2026 by rpki-client