$ rpki-client -vvf repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft File: 04D3D2E060243AD917D4F682922E4A805EDE3300.mft (raw, json) Hash identifier: vwZeZXy/l/Y6zcguAAvSCZEvDGylPSHhlbiafgaavTo= Subject key identifier: 8F:7D:B0:F6:64:29:4F:1E:03:C4:87:AA:E6:B8:12:BF:91:F9:7C:77 Authority key identifier: 04:D3:D2:E0:60:24:3A:D9:17:D4:F6:82:92:2E:4A:80:5E:DE:33:00 Certificate issuer: /CN=04D3D2E060243AD917D4F682922E4A805EDE3300 Certificate serial: 53EE4C3C5A9C1C427EDC04EF11F7DDECFAB1E546 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft Manifest number: 0125 Signing time: Wed 04 Mar 2026 07:22:11 +0000 Manifest this update: Wed 04 Mar 2026 07:17:11 +0000 Manifest next update: Sat 07 Mar 2026 09:38:11 +0000 Files and hashes: 1: 3135372e32302e3235322e302f32342d3234203d3e20313338303839.roa (hash: tAOR3+qopwEEpOJ1MoufsE4Gb6QgCqX7uwexYPM3lns=) 2: 3135372e32302e3235332e302f32342d3234203d3e20313338303839.roa (hash: MxcV0VQaTxMuBGbZxjauXv5QA5Vg8BL6BVoMBR3myP8=) 3: 04D3D2E060243AD917D4F682922E4A805EDE3300.crl (hash: SmtlT7pe1tIEoXpAcxMfqgqFZLS54UHfBGKM4T3jgPU=) 4: 3135372e32302e3235322e302f32332d3233203d3e20313338303839.roa (hash: UvJvnJi0DpPbEtS7oOVZoco+ytQPNHRypimtkzre3+M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.crl rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 09:38:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:ee:4c:3c:5a:9c:1c:42:7e:dc:04:ef:11:f7:dd:ec:fa:b1:e5:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04D3D2E060243AD917D4F682922E4A805EDE3300 Validity Not Before: Mar 4 07:17:11 2026 GMT Not After : Mar 7 09:38:11 2026 GMT Subject: CN=8F7DB0F664294F1E03C487AAE6B812BF91F97C77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:db:68:f0:91:7c:c2:91:3f:17:d0:01:7f:a2: 1f:d8:1f:3d:86:d1:16:13:27:29:8e:8c:f7:72:e2: eb:0b:18:7f:de:e3:5b:2b:cd:2c:76:96:65:db:c6: b3:c5:17:9c:23:f0:33:d5:e9:a6:f0:76:4c:ef:3d: 4f:89:cc:5d:c6:f2:0a:f5:f9:f5:b5:7e:04:c0:2b: 87:c7:0a:bf:7a:8d:3d:d3:1c:22:fb:45:0b:90:a5: 8e:ce:72:10:e2:96:4b:07:5e:2c:5e:2d:b1:8f:cd: f2:05:3a:a3:31:f1:7c:6b:6b:e2:b3:6f:a0:77:dd: 9b:4a:28:e1:fd:f8:cc:8f:2c:b4:4d:8d:e6:d7:5f: 84:d7:41:48:38:2c:92:6e:04:f6:12:d0:db:b0:1c: ad:cb:97:ed:7d:31:13:0d:be:13:9e:e0:83:fd:ed: 01:ef:a8:29:0b:26:5a:f6:6e:34:70:38:0a:f9:9d: d3:5c:08:71:33:1d:b6:30:3e:5c:f1:d5:69:8a:34: 37:85:5f:87:14:cd:f1:bd:3a:e5:04:bf:81:e3:4c: f0:db:91:97:89:f9:38:3f:02:ff:41:ef:9a:3a:a2: b8:ce:c1:c2:6f:30:65:2b:6e:10:cb:cf:f0:f1:6c: ed:de:86:e7:f0:2f:cd:bb:6a:3d:56:12:d7:a4:15: 00:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:7D:B0:F6:64:29:4F:1E:03:C4:87:AA:E6:B8:12:BF:91:F9:7C:77 X509v3 Authority Key Identifier: keyid:04:D3:D2:E0:60:24:3A:D9:17:D4:F6:82:92:2E:4A:80:5E:DE:33:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:85:cf:a2:14:25:5a:64:b6:3d:e5:0e:c3:a5:61:5d:03:84: 6f:cd:53:a3:e4:17:06:8a:55:69:f1:1c:d1:08:61:be:70:d2: c4:d9:03:eb:35:8d:5d:f6:d6:01:ee:04:43:4c:82:25:26:e7: 85:ab:48:73:b2:f6:06:a5:a5:a7:50:3a:ba:ae:df:20:71:0e: 77:cf:f5:ae:f7:05:6c:c8:30:f6:ef:e2:3e:d7:4f:65:95:cc: 72:83:23:f1:00:bc:03:61:53:57:ea:26:42:61:8d:e0:1b:9d: 00:b2:d1:c4:ae:99:aa:71:37:af:16:88:de:1d:82:96:33:e3: f5:b4:f7:95:3b:97:3f:76:7b:a7:c7:06:17:79:84:a2:30:3a: 03:ab:85:46:45:93:af:6f:9d:89:ba:7f:01:df:b4:ae:fc:62: 21:85:4e:d7:9e:95:f5:da:f3:89:c6:20:bf:0d:6a:fe:a4:3e: e0:c9:73:2e:fb:b5:33:d1:2e:01:25:d9:87:40:6b:ab:89:3f: 1d:0b:58:a0:45:eb:4c:8b:9d:6e:bb:e2:4e:09:cb:97:1a:87: 44:53:33:82:85:a2:94:cf:7a:d3:e6:ea:92:2d:66:d9:55:93: 45:4c:3f:1a:f1:e3:ec:37:4c:a0:9c:9a:c9:fd:51:09:eb:2f: ff:f3:b9:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU+5MPFqcHEJ+3ATvEffd7Pqx5UYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRBODA1 RURFMzMwMDAeFw0yNjAzMDQwNzE3MTFaFw0yNjAzMDcwOTM4MTFaMDMxMTAvBgNV BAMTKDhGN0RCMEY2NjQyOTRGMUUwM0M0ODdBQUU2QjgxMkJGOTFGOTdDNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK22jwkXzCkT8X0AF/oh/YHz2G 0RYTJymOjPdy4usLGH/e41srzSx2lmXbxrPFF5wj8DPV6abwdkzvPU+JzF3G8gr1 +fW1fgTAK4fHCr96jT3THCL7RQuQpY7OchDilksHXixeLbGPzfIFOqMx8Xxra+Kz b6B33ZtKKOH9+MyPLLRNjebXX4TXQUg4LJJuBPYS0NuwHK3Ll+19MRMNvhOe4IP9 7QHvqCkLJlr2bjRwOAr5ndNcCHEzHbYwPlzx1WmKNDeFX4cUzfG9OuUEv4HjTPDb kZeJ+Tg/Av9B75o6orjOwcJvMGUrbhDLz/DxbO3ehufwL827aj1WEtekFQBNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj32w9mQpTx4DxIeq5rgSv5H5fHcwHwYDVR0j BBgwFoAUBNPS4GAkOtkX1PaCki5KgF7eMwAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZThkNThhOC1lMTk3LTQxNzktYjczYy02MDhlMDQ3ZDA5YTMvMC8wNEQzRDJFMDYw MjQzQUQ5MTdENEY2ODI5MjJFNEE4MDVFREUzMzAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRBODA1RURF MzMwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU4ZDU4YTgtZTE5Ny00MTc5LWI3 M2MtNjA4ZTA0N2QwOWEzLzAvMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRB ODA1RURFMzMwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH+Fz6IUJVpktj3lDsOlYV0DhG/NU6PkFwaK VWnxHNEIYb5w0sTZA+s1jV321gHuBENMgiUm54WrSHOy9galpadQOrqu3yBxDnfP 9a73BWzIMPbv4j7XT2WVzHKDI/EAvANhU1fqJkJhjeAbnQCy0cSumapxN68WiN4d gpYz4/W095U7lz92e6fHBhd5hKIwOgOrhUZFk69vnYm6fwHftK78YiGFTteelfXa 84nGIL8Nav6kPuDJcy77tTPRLgEl2YdAa6uJPx0LWKBF60yLnW674k4Jy5cah0RT M4KFopTPetPm6pItZtlVk0VMPxrx4+w3TKCcmsn9UQnrL//zufY= -----END CERTIFICATE-----Generated at Wed Mar 4 15:41:00 2026 by rpki-client