$ rpki-client -vvf repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft File: 1678828C849BDE3472FE846308767F54ED7F8232.mft (raw, json) Hash identifier: 1Pdblwzll8HQ3oAWtUVTaca6ydXjSzM5Usog1klHtPI= Subject key identifier: D3:F7:1D:4B:9E:53:16:FA:B7:38:16:85:3B:7A:96:2C:C2:C1:B5:FB Authority key identifier: 16:78:82:8C:84:9B:DE:34:72:FE:84:63:08:76:7F:54:ED:7F:82:32 Certificate issuer: /CN=1678828C849BDE3472FE846308767F54ED7F8232 Certificate serial: 2F391BAE9BE7A212A3D271A6695CB92B5256D960 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft Manifest number: 0262 Signing time: Fri 06 Mar 2026 12:30:56 +0000 Manifest this update: Fri 06 Mar 2026 12:25:56 +0000 Manifest next update: Mon 09 Mar 2026 23:36:56 +0000 Files and hashes: 1: 3130332e3138342e3138312e302f32342d3234203d3e20313339333831.roa (hash: amwDD/Sw1ZMDPleCIfQ45Yvn4tCtR3QQCTma/8S3s6A=) 2: 3130332e3138342e3138302e302f32342d3234203d3e203435333035.roa (hash: bd57lftDDk/LNoDF2KUhmKXFCa0cbwtrVskfNqH8nl0=) 3: 1678828C849BDE3472FE846308767F54ED7F8232.crl (hash: 2DyAsqjiAAfHe8yAnC6j7981N94DVUrJpeZh5kjMBR4=) 4: 3130332e3138342e3138302e302f32342d3234203d3e20313339333831.roa (hash: oyydVMYyKXkpYDIFM7y9X8uh6d+LkiuOE6srFgEvka0=) 5: 3130332e3138342e3138312e302f32342d3234203d3e203435333035.roa (hash: +6suBy02VBYIADpzrjVT+EfPKFC0O5f32zxYKkvXd28=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.crl rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 22:43:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:39:1b:ae:9b:e7:a2:12:a3:d2:71:a6:69:5c:b9:2b:52:56:d9:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1678828C849BDE3472FE846308767F54ED7F8232 Validity Not Before: Mar 6 12:25:56 2026 GMT Not After : Mar 9 23:36:56 2026 GMT Subject: CN=D3F71D4B9E5316FAB73816853B7A962CC2C1B5FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:3f:8d:83:ef:64:54:31:b8:de:14:62:07:70: 5c:83:3e:44:2c:fe:0b:6d:9f:17:a4:ce:59:ea:3f: fd:f3:30:48:fa:65:5a:e4:44:b4:ef:19:f4:ae:1b: 2e:14:f3:82:af:54:b4:4f:a4:cd:c8:80:b9:e1:7a: 10:70:8e:f4:53:bd:b9:2d:c7:58:4a:1d:30:78:55: 19:3e:6c:e9:27:9a:1b:06:05:3f:16:8f:10:ae:e1: 45:3f:24:08:38:15:46:22:5f:bf:cb:6c:8e:e3:06: d6:01:97:43:e6:1c:ef:1c:c4:8e:e0:3a:a6:96:a4: b3:af:40:e4:74:eb:a0:94:6e:df:1d:a6:81:bc:3d: 9f:02:b6:b4:0f:4c:98:e1:85:2f:37:3d:54:bf:5d: 29:10:fd:f5:f1:0b:8d:ac:fc:de:2e:00:94:9b:d3: ae:d8:6a:a6:7a:0d:05:0f:84:2f:d7:71:d0:f0:6f: 2e:ac:a5:51:8b:82:22:c7:f7:23:17:19:72:0e:a4: 46:3b:f8:bf:af:a7:cb:d9:2b:90:3d:72:ab:eb:02: e4:f9:a0:43:f2:ff:af:14:11:8b:d7:66:d1:42:f2: 87:1e:7c:dd:17:26:42:e8:17:fa:51:71:7f:8a:17: 0a:49:8a:3d:a3:d4:fb:19:ae:e5:e5:4b:c4:ed:8d: 6d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:F7:1D:4B:9E:53:16:FA:B7:38:16:85:3B:7A:96:2C:C2:C1:B5:FB X509v3 Authority Key Identifier: keyid:16:78:82:8C:84:9B:DE:34:72:FE:84:63:08:76:7F:54:ED:7F:82:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ec:d4:f7:6d:17:e3:dd:69:28:7b:60:ef:b5:48:02:d0:31:d2: 54:24:10:fb:78:4f:db:a2:12:ac:66:0b:a8:bf:62:7e:c5:fe: 03:0b:05:49:49:ba:4a:0d:52:cc:9c:c2:4b:dc:12:7e:b2:70: a1:80:e7:26:1b:bf:d4:e2:fe:aa:d5:43:ad:8d:22:34:8e:32: cc:54:62:ad:bb:55:2f:da:6c:47:4e:31:3f:53:23:03:d5:05: 57:03:2c:60:e9:77:2a:6a:db:3d:99:3f:bc:82:5a:8e:eb:2e: 25:b1:fd:1d:ef:af:d4:d7:9f:36:d1:97:77:8b:c1:50:d9:17: 9e:7d:f4:9a:57:db:6d:53:06:6e:14:da:a0:5e:7b:13:27:0a: 03:bb:04:b8:27:85:6e:1f:b3:a1:7f:9c:03:b1:60:b8:7f:31: 24:2f:90:33:d6:8f:90:3a:ac:76:f9:e0:54:60:43:34:b2:35: a7:f6:39:98:28:75:19:b2:e1:60:09:ca:96:09:ae:6d:23:12: b7:e3:09:8c:6b:a4:50:ac:d4:5e:e4:96:8f:d9:6b:8d:6f:f0: 20:eb:22:31:17:be:2a:a4:fb:09:e9:01:34:0d:d8:67:e3:06: cc:42:47:f9:c9:86:85:87:1e:c7:36:9d:ce:fd:9f:f4:17:e3: 31:8a:1e:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULzkbrpvnohKj0nGmaVy5K1JW2WAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdGNTRF RDdGODIzMjAeFw0yNjAzMDYxMjI1NTZaFw0yNjAzMDkyMzM2NTZaMDMxMTAvBgNV BAMTKEQzRjcxRDRCOUU1MzE2RkFCNzM4MTY4NTNCN0E5NjJDQzJDMUI1RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnP42D72RUMbjeFGIHcFyDPkQs /gttnxekzlnqP/3zMEj6ZVrkRLTvGfSuGy4U84KvVLRPpM3IgLnhehBwjvRTvbkt x1hKHTB4VRk+bOknmhsGBT8WjxCu4UU/JAg4FUYiX7/LbI7jBtYBl0PmHO8cxI7g OqaWpLOvQOR066CUbt8dpoG8PZ8CtrQPTJjhhS83PVS/XSkQ/fXxC42s/N4uAJSb 067YaqZ6DQUPhC/XcdDwby6spVGLgiLH9yMXGXIOpEY7+L+vp8vZK5A9cqvrAuT5 oEPy/68UEYvXZtFC8ocefN0XJkLoF/pRcX+KFwpJij2j1PsZruXlS8TtjW2tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0/cdS55TFvq3OBaFO3qWLMLBtfswHwYDVR0j BBgwFoAUFniCjISb3jRy/oRjCHZ/VO1/gjIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTU3OTkxYS0xNTZkLTRiNTUtOTBjYi03OWI4NzZjZjZhNGEvMC8xNjc4ODI4Qzg0 OUJERTM0NzJGRTg0NjMwODc2N0Y1NEVEN0Y4MjMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdGNTRFRDdG ODIzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU1Nzk5MWEtMTU2ZC00YjU1LTkw Y2ItNzliODc2Y2Y2YTRhLzAvMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdG NTRFRDdGODIzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOzU920X491pKHtg77VIAtAx0lQkEPt4T9ui EqxmC6i/Yn7F/gMLBUlJukoNUsycwkvcEn6ycKGA5yYbv9Ti/qrVQ62NIjSOMsxU Yq27VS/abEdOMT9TIwPVBVcDLGDpdypq2z2ZP7yCWo7rLiWx/R3vr9TXnzbRl3eL wVDZF5599JpX221TBm4U2qBeexMnCgO7BLgnhW4fs6F/nAOxYLh/MSQvkDPWj5A6 rHb54FRgQzSyNaf2OZgodRmy4WAJypYJrm0jErfjCYxrpFCs1F7klo/Za41v8CDr IjEXviqk+wnpATQN2GfjBsxCR/nJhoWHHsc2nc79n/QX4zGKHmE= -----END CERTIFICATE-----Generated at Sun Mar 8 00:17:41 2026 by rpki-client