$ rpki-client -vvf repo-rpki.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/D85F6D41E807D8825356A681A7518FA27664A965.mft File: D85F6D41E807D8825356A681A7518FA27664A965.mft (raw, json) Hash identifier: 6TlUH7JhrudcDhjP+OIzwcbraI/jLAGccYWxZNBDLwQ= Subject key identifier: 4F:74:21:23:62:E9:AF:7B:EA:15:75:CE:C4:E1:4B:1C:90:25:CC:D9 Authority key identifier: D8:5F:6D:41:E8:07:D8:82:53:56:A6:81:A7:51:8F:A2:76:64:A9:65 Certificate issuer: /CN=D85F6D41E807D8825356A681A7518FA27664A965 Certificate serial: 46C4BC42851AAB09528E161FBBE128F20076167F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85F6D41E807D8825356A681A7518FA27664A965.cer Subject info access: rsync://repo-rpki.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/D85F6D41E807D8825356A681A7518FA27664A965.mft Manifest number: 01BF Signing time: Fri 13 Mar 2026 20:52:33 +0000 Manifest this update: Fri 13 Mar 2026 20:47:33 +0000 Manifest next update: Tue 17 Mar 2026 06:38:33 +0000 Files and hashes: 1: 3130332e3136372e3137302e302f32342d3234203d3e20313431393833.roa (hash: 2X5KoMU/cWrAj0o88iqREF+W66XbV79s9jtdMfDvn84=) 2: 323430373a396363303a3a2f33322d3332203d3e20313431393833.roa (hash: X3XCCURHmUEWOKsujokS9KRQ2ATuG6WfjZ6Xo/ilPmk=) 3: 3130332e3136372e3137302e302f32332d3233203d3e20313431393833.roa (hash: hFj4Uh0PGeOBka7Cx4rmARhSt9TGPmz98D01cPT+PF4=) 4: D85F6D41E807D8825356A681A7518FA27664A965.crl (hash: TritJMfzORTdnppfdfulcrOuX7wI6ykbGCCobRKvKwQ=) 5: 3130332e3136372e3137312e302f32342d3234203d3e20313431393833.roa (hash: mLhBYPkwACBbxlJsTnV03pPrOs7jfGDROaGC1YIb24I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/D85F6D41E807D8825356A681A7518FA27664A965.crl rsync://repo-rpki.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/D85F6D41E807D8825356A681A7518FA27664A965.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85F6D41E807D8825356A681A7518FA27664A965.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Mar 2026 06:38:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:c4:bc:42:85:1a:ab:09:52:8e:16:1f:bb:e1:28:f2:00:76:16:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D85F6D41E807D8825356A681A7518FA27664A965 Validity Not Before: Mar 13 20:47:33 2026 GMT Not After : Mar 17 06:38:33 2026 GMT Subject: CN=4F74212362E9AF7BEA1575CEC4E14B1C9025CCD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3c:32:34:aa:4c:a5:3d:8c:73:65:d3:18:0a: 40:96:85:47:a9:4a:36:2a:3d:06:f1:f6:dc:c1:e0: 61:67:c2:7a:48:37:dc:37:26:b8:ea:d0:c0:54:60: f0:ce:9f:2a:3d:f3:91:d6:6e:18:e0:38:a9:a1:2a: 0a:02:54:26:d6:0d:d8:1f:cf:8e:91:b2:d3:37:89: e4:4e:e0:b0:13:bc:62:ba:1a:51:74:48:dc:34:69: 92:46:6b:82:65:8d:86:b8:74:ab:ad:61:ee:01:09: a8:b7:88:d3:8d:ad:40:bd:33:f2:28:4a:40:51:01: 5e:04:a8:c8:b5:63:ee:5a:12:fc:72:b8:f2:2e:88: cc:26:73:13:16:b9:5d:da:22:f2:29:7d:44:c1:60: 99:3e:48:bd:05:22:90:62:f5:9a:78:e7:17:45:e3: 5b:73:1c:7d:83:ec:41:0a:59:c4:36:94:52:c8:ee: 70:c4:73:33:0c:f1:38:13:ec:f0:95:53:8f:bd:8f: ca:4c:af:b0:0d:32:ba:f7:9a:de:48:e5:38:25:dc: 62:c5:6d:13:73:87:cf:12:3d:a5:f8:62:f5:5a:37: af:06:fc:57:85:5a:80:81:bd:ce:45:9f:4a:ac:c7: a2:e6:80:d5:e9:63:2a:d3:19:91:2e:c4:66:78:9e: d5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:74:21:23:62:E9:AF:7B:EA:15:75:CE:C4:E1:4B:1C:90:25:CC:D9 X509v3 Authority Key Identifier: keyid:D8:5F:6D:41:E8:07:D8:82:53:56:A6:81:A7:51:8F:A2:76:64:A9:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/D85F6D41E807D8825356A681A7518FA27664A965.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85F6D41E807D8825356A681A7518FA27664A965.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/D85F6D41E807D8825356A681A7518FA27664A965.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:ea:a4:2a:46:e9:17:95:d1:9c:75:42:0c:83:35:60:3f:f5: 7c:29:c7:f5:cb:ec:d4:90:b8:ab:09:dc:34:e8:eb:c9:8a:cd: 13:b1:04:ba:41:00:9d:5d:b2:ee:d3:a7:7b:4f:75:7e:ca:16: c3:79:89:a5:c6:cf:a6:0e:f4:15:79:79:96:ac:02:ca:01:1b: e1:d3:ff:10:2a:d0:0b:5d:e0:26:e9:12:2a:75:51:90:98:a2: 0a:72:b0:bf:f1:46:a7:cb:56:f3:2e:2c:d4:3f:52:e6:b1:83: 2d:fc:65:ec:b8:18:82:7c:13:d1:70:05:6a:7e:2b:d3:38:d7: 9f:50:90:08:94:7c:d2:e8:a3:ac:b3:b9:53:f3:68:b7:c3:af: 16:d3:c5:a6:72:5a:54:3e:e6:ff:7b:fe:1c:eb:15:00:83:e1: 5b:3e:3c:5b:f6:bd:55:52:80:fb:68:d9:a3:8d:75:95:1d:f1: b1:90:5e:c0:87:a5:26:ce:98:af:48:5d:fc:90:7c:fe:6c:3e: 9c:45:c5:47:4b:f6:68:75:44:69:66:5d:27:30:fd:aa:8e:51: 60:3c:65:9e:d8:2f:f6:e6:5b:23:31:42:22:84:e9:38:32:cd: fb:83:6c:94:20:aa:98:16:b9:ef:8d:ca:0d:8c:80:9a:26:0a: f0:d5:73:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURsS8QoUaqwlSjhYfu+Eo8gB2Fn8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1RjZENDFFODA3RDg4MjUzNTZBNjgxQTc1MThGQTI3 NjY0QTk2NTAeFw0yNjAzMTMyMDQ3MzNaFw0yNjAzMTcwNjM4MzNaMDMxMTAvBgNV BAMTKDRGNzQyMTIzNjJFOUFGN0JFQTE1NzVDRUM0RTE0QjFDOTAyNUNDRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/PDI0qkylPYxzZdMYCkCWhUep SjYqPQbx9tzB4GFnwnpIN9w3Jrjq0MBUYPDOnyo985HWbhjgOKmhKgoCVCbWDdgf z46RstM3ieRO4LATvGK6GlF0SNw0aZJGa4JljYa4dKutYe4BCai3iNONrUC9M/Io SkBRAV4EqMi1Y+5aEvxyuPIuiMwmcxMWuV3aIvIpfUTBYJk+SL0FIpBi9Zp45xdF 41tzHH2D7EEKWcQ2lFLI7nDEczMM8TgT7PCVU4+9j8pMr7ANMrr3mt5I5Tgl3GLF bRNzh88SPaX4YvVaN68G/FeFWoCBvc5Fn0qsx6LmgNXpYyrTGZEuxGZ4ntUDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT3QhI2Lpr3vqFXXOxOFLHJAlzNkwHwYDVR0j BBgwFoAU2F9tQegH2IJTVqaBp1GPonZkqWUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NmJlZGYzYS1kN2QxLTQ5YTYtOTNlZC1iMjc3ZjFmN2E2ZWIvMC9EODVGNkQ0MUU4 MDdEODgyNTM1NkE2ODFBNzUxOEZBMjc2NjRBOTY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDg1RjZENDFFODA3RDg4MjUzNTZBNjgxQTc1MThGQTI3NjY0 QTk2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDZiZWRmM2EtZDdkMS00OWE2LTkz ZWQtYjI3N2YxZjdhNmViLzAvRDg1RjZENDFFODA3RDg4MjUzNTZBNjgxQTc1MThG QTI3NjY0QTk2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABDqpCpG6ReV0Zx1QgyDNWA/9Xwpx/XL7NSQ uKsJ3DTo68mKzROxBLpBAJ1dsu7Tp3tPdX7KFsN5iaXGz6YO9BV5eZasAsoBG+HT /xAq0Atd4CbpEip1UZCYogpysL/xRqfLVvMuLNQ/Uuaxgy38Zey4GIJ8E9FwBWp+ K9M4159QkAiUfNLoo6yzuVPzaLfDrxbTxaZyWlQ+5v97/hzrFQCD4Vs+PFv2vVVS gPto2aONdZUd8bGQXsCHpSbOmK9IXfyQfP5sPpxFxUdL9mh1RGlmXScw/aqOUWA8 ZZ7YL/bmWyMxQiKE6TgyzfuDbJQgqpgWue+Nyg2MgJomCvDVc3g= -----END CERTIFICATE-----Generated at Sat Mar 14 21:46:08 2026 by rpki-client