$ rpki-client -vvf repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft File: 01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft (raw, json) Hash identifier: ZKaK6gJMKKpFtlI6OVw7RgZxsR30HxUSDhCXo6Aa79w= Subject key identifier: D4:F1:13:70:3A:A7:52:D6:1D:4A:21:8B:47:51:AB:A4:44:F0:2B:CA Authority key identifier: 01:A2:34:9B:25:C1:8B:C1:56:CE:E5:3A:EA:E6:3E:E3:01:09:10:E2 Certificate issuer: /CN=01A2349B25C18BC156CEE53AEAE63EE3010910E2 Certificate serial: 29B8DA52E12F3489149551B62918EAE430E256A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/01A2349B25C18BC156CEE53AEAE63EE3010910E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft Manifest number: 0113 Signing time: Sat 07 Mar 2026 11:21:26 +0000 Manifest this update: Sat 07 Mar 2026 11:16:26 +0000 Manifest next update: Tue 10 Mar 2026 23:16:26 +0000 Files and hashes: 1: 3136302e31392e3135362e302f32332d3233203d3e20313532373638.roa (hash: CbUawBdc6/owSFYBdX6zk907J+9GwiPGZDz88NQXPnI=) 2: 3136302e31392e3135372e302f32342d3234203d3e20313532373638.roa (hash: /U+44U6OBvCGsv3ed3z+YxR73loB+6G9DzRSbiFpHC4=) 3: 3136302e31392e3135362e302f32342d3234203d3e20313532373638.roa (hash: YwfkNT9uJxp+XppevLMj2drKR6MOyIxH6IZjcA7OFyw=) 4: 01A2349B25C18BC156CEE53AEAE63EE3010910E2.crl (hash: KMcy6aFENmW+lASnoW9QZipSvOfkO9UpE4wf7i4+G/4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.crl rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/01A2349B25C18BC156CEE53AEAE63EE3010910E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:b8:da:52:e1:2f:34:89:14:95:51:b6:29:18:ea:e4:30:e2:56:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01A2349B25C18BC156CEE53AEAE63EE3010910E2 Validity Not Before: Mar 7 11:16:26 2026 GMT Not After : Mar 10 23:16:26 2026 GMT Subject: CN=D4F113703AA752D61D4A218B4751ABA444F02BCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:01:ac:1b:75:f2:d8:0d:e7:da:7a:15:d0:f6: f4:03:0a:18:a1:83:b6:e2:96:85:e7:e1:bb:ab:cc: 77:64:e6:eb:92:32:39:76:ee:f2:9f:e0:46:be:d1: ae:85:88:4b:46:46:5f:e1:bd:63:94:75:f9:6c:53: c6:15:16:76:8f:c5:6b:a2:dc:19:46:e2:e8:54:a9: f0:68:dc:08:5d:e1:6d:dc:a2:a2:fd:8b:cc:3a:7b: 65:6f:27:92:f5:06:e1:b8:bc:e5:4c:8e:9a:f4:21: f0:1f:45:bc:f9:26:08:e5:5d:ad:99:87:be:a7:10: 6f:79:31:33:bb:80:05:32:4b:46:8e:96:2d:f4:ad: 90:19:6c:d8:8a:cc:46:b6:32:8b:6c:04:8e:5e:fd: 36:ec:a5:90:14:18:25:eb:b0:59:35:3d:cd:ef:15: 49:7c:e9:e8:0c:56:81:46:a2:83:c1:d1:94:e1:15: ae:33:69:b9:1c:2e:86:36:75:40:8a:e8:4b:7d:43: 2e:42:dc:32:2a:eb:e6:3d:3c:09:bd:55:ce:81:b8: 31:80:7a:d9:cb:85:98:47:65:39:53:37:2b:7b:54: ad:6e:aa:1b:52:27:21:1d:f1:96:4d:7a:9e:35:44: 4c:9d:94:fc:26:6a:01:18:87:46:84:36:62:9d:bb: 14:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:F1:13:70:3A:A7:52:D6:1D:4A:21:8B:47:51:AB:A4:44:F0:2B:CA X509v3 Authority Key Identifier: keyid:01:A2:34:9B:25:C1:8B:C1:56:CE:E5:3A:EA:E6:3E:E3:01:09:10:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/01A2349B25C18BC156CEE53AEAE63EE3010910E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:1b:89:0a:60:e1:de:04:6c:a3:bc:ef:cf:35:c4:58:ca:06: b8:5c:89:76:9d:5b:62:45:ae:fd:6d:32:1d:79:c6:85:f7:38: 60:04:97:80:00:0c:de:bf:ee:ba:d0:b8:43:83:07:e0:87:dd: ab:9b:52:8c:c2:3d:fc:f6:11:7d:4d:f3:95:cd:f1:0f:13:51: 4e:bb:93:17:cc:fd:cc:d3:36:fb:1e:43:cb:04:1e:23:b5:f0: a2:f7:94:8c:42:95:16:74:fc:4f:52:4f:b6:a0:ba:06:3f:54: a8:c6:22:cd:3d:68:db:59:19:45:95:e1:67:85:48:86:a3:f8: 76:a1:70:aa:c3:0b:e5:32:9b:c4:5d:7b:9f:b8:86:41:f4:8b: f0:dc:2c:5b:d9:35:59:40:b5:e2:dc:8a:f4:3a:5f:8a:53:5e: 01:13:42:4f:56:05:5a:bf:a1:3f:91:3a:58:2b:0c:9f:2f:6a: 9a:fc:0a:c7:7b:35:8d:05:ce:ad:0b:0e:d5:fd:e0:e6:5c:59: 4d:52:d0:a1:d4:16:f0:f1:ab:ac:f4:2b:55:56:f8:ac:0a:c4: c8:db:8f:83:23:99:70:5f:85:0c:e0:11:33:60:96:83:3a:89: 57:2a:aa:a3:f1:a8:40:d4:d1:89:cd:b4:35:a4:9b:7d:cd:6e: 22:84:80:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKbjaUuEvNIkUlVG2KRjq5DDiVqkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFBMjM0OUIyNUMxOEJDMTU2Q0VFNTNBRUFFNjNFRTMw MTA5MTBFMjAeFw0yNjAzMDcxMTE2MjZaFw0yNjAzMTAyMzE2MjZaMDMxMTAvBgNV BAMTKEQ0RjExMzcwM0FBNzUyRDYxRDRBMjE4QjQ3NTFBQkE0NDRGMDJCQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVAawbdfLYDefaehXQ9vQDChih g7biloXn4burzHdk5uuSMjl27vKf4Ea+0a6FiEtGRl/hvWOUdflsU8YVFnaPxWui 3BlG4uhUqfBo3Ahd4W3coqL9i8w6e2VvJ5L1BuG4vOVMjpr0IfAfRbz5JgjlXa2Z h76nEG95MTO7gAUyS0aOli30rZAZbNiKzEa2MotsBI5e/TbspZAUGCXrsFk1Pc3v FUl86egMVoFGooPB0ZThFa4zabkcLoY2dUCK6Et9Qy5C3DIq6+Y9PAm9Vc6BuDGA etnLhZhHZTlTNyt7VK1uqhtSJyEd8ZZNep41REydlPwmagEYh0aENmKduxSZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1PETcDqnUtYdSiGLR1GrpETwK8owHwYDVR0j BBgwFoAUAaI0myXBi8FWzuU66uY+4wEJEOIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmY4MDhhNC05ZGIzLTQ2OTgtYTA3Yi00NzY5ZGNlMThlYzcvMC8wMUEyMzQ5QjI1 QzE4QkMxNTZDRUU1M0FFQUU2M0VFMzAxMDkxMEUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDFBMjM0OUIyNUMxOEJDMTU2Q0VFNTNBRUFFNjNFRTMwMTA5 MTBFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJmODA4YTQtOWRiMy00Njk4LWEw N2ItNDc2OWRjZTE4ZWM3LzAvMDFBMjM0OUIyNUMxOEJDMTU2Q0VFNTNBRUFFNjNF RTMwMTA5MTBFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD0biQpg4d4EbKO87881xFjKBrhciXadW2JF rv1tMh15xoX3OGAEl4AADN6/7rrQuEODB+CH3aubUozCPfz2EX1N85XN8Q8TUU67 kxfM/czTNvseQ8sEHiO18KL3lIxClRZ0/E9ST7agugY/VKjGIs09aNtZGUWV4WeF SIaj+HahcKrDC+Uym8Rde5+4hkH0i/DcLFvZNVlAteLcivQ6X4pTXgETQk9WBVq/ oT+ROlgrDJ8vapr8Csd7NY0Fzq0LDtX94OZcWU1S0KHUFvDxq6z0K1VW+KwKxMjb j4MjmXBfhQzgETNgloM6iVcqqqPxqEDU0YnNtDWkm33NbiKEgJ0= -----END CERTIFICATE-----Generated at Sat Mar 7 17:50:29 2026 by rpki-client