$ rpki-client -vvf repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft File: C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft (raw, json) Hash identifier: xBA84VtXH05GA76okwQ5As6k4za9Ztq0gqflbaAvTmg= Subject key identifier: 20:B0:BC:04:C0:CA:D0:B0:DA:7C:63:8D:10:28:7B:B5:51:75:C7:EA Authority key identifier: C8:88:64:DD:3C:1E:6D:0D:5F:A9:14:67:F0:3B:26:6D:F5:F7:92:55 Certificate issuer: /CN=C88864DD3C1E6D0D5FA91467F03B266DF5F79255 Certificate serial: 44FF69D18FA30C3B1D0FB8862A8316852C3FCA39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer Subject info access: rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft Manifest number: 0161 Signing time: Fri 06 Mar 2026 05:51:54 +0000 Manifest this update: Fri 06 Mar 2026 05:46:54 +0000 Manifest next update: Mon 09 Mar 2026 11:44:54 +0000 Files and hashes: 1: 3135372e31302e38382e302f32332d3233203d3e20313532303832.roa (hash: 2xXRATtqKTFJTL45kpKCrmgQ+OKbp2ZlcGtRfjkIZUg=) 2: 3135372e31302e38392e302f32342d3234203d3e20313532303832.roa (hash: r0yQckJKHz7cgtDpBZ5DT3GZabnNshDA9NVYp4KqxPI=) 3: C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl (hash: bogVoEyymdy5UlDsv48G5OlIiAAeX+Lz/ciQFUAIAM8=) 4: 3135372e31302e38382e302f32342d3234203d3e20313532303832.roa (hash: iu1Dc54YlpkWXrRrlgFt9MyI1bbMWnH2lViKwPc2SC4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:ff:69:d1:8f:a3:0c:3b:1d:0f:b8:86:2a:83:16:85:2c:3f:ca:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C88864DD3C1E6D0D5FA91467F03B266DF5F79255 Validity Not Before: Mar 6 05:46:54 2026 GMT Not After : Mar 9 11:44:54 2026 GMT Subject: CN=20B0BC04C0CAD0B0DA7C638D10287BB55175C7EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:92:e8:de:c8:c5:80:bd:27:e1:81:ee:45:4d: 85:4d:05:92:80:2b:b6:51:ce:8e:a2:6d:e2:82:5a: 64:33:6c:2d:59:16:0a:7f:5b:51:bf:83:86:fb:0a: 03:e0:43:ef:ad:01:1a:78:14:5f:1d:95:c6:65:10: 5d:31:21:c2:5a:b1:81:45:75:5f:dd:fc:fc:59:ef: e2:50:26:56:0e:f1:d6:76:c6:17:d8:c5:57:70:1f: 73:38:55:4b:16:d0:95:9d:8e:b7:23:f8:71:3a:7b: d7:7f:90:c4:12:b5:f8:89:23:82:e8:c3:66:ed:dc: 0f:cf:b9:f8:54:e8:3e:8e:2e:f3:58:1d:43:13:e2: c0:13:31:e3:2a:3d:5e:92:76:3f:05:6a:83:d5:05: 05:cd:a5:c7:13:ee:ca:b2:98:9d:7b:4e:aa:2e:23: 56:91:7b:fa:9f:df:e8:9d:3a:e6:bb:9d:c3:cb:4b: f0:36:3a:83:15:66:47:21:51:92:ab:9b:55:30:db: b5:e1:4b:f2:95:bd:13:c9:b6:81:88:b5:01:f9:bf: 6e:2f:aa:11:b4:c9:2b:53:83:c8:52:dd:19:cd:fa: 6d:89:0d:26:6f:4a:29:e9:7a:69:b8:b5:71:5a:01: 1d:14:11:df:5e:29:9b:56:b7:ab:d2:77:68:0a:01: 7c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:B0:BC:04:C0:CA:D0:B0:DA:7C:63:8D:10:28:7B:B5:51:75:C7:EA X509v3 Authority Key Identifier: keyid:C8:88:64:DD:3C:1E:6D:0D:5F:A9:14:67:F0:3B:26:6D:F5:F7:92:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:40:a4:9a:85:62:69:5f:69:0c:5a:7e:5e:12:01:db:b5:e5: 14:a1:d5:c9:40:78:62:84:f6:4f:b0:9c:8f:e0:68:38:43:26: 96:4e:e7:b7:b5:40:9e:68:5d:1f:08:04:6d:8f:d5:5b:80:87: 29:06:09:bd:e5:96:b5:07:11:55:81:38:bb:9f:c7:05:e2:36: d2:f6:2b:19:f0:85:18:40:07:95:49:68:23:ec:87:68:f0:7a: 2d:44:e7:e9:6d:9a:0d:0f:9b:d8:d1:e4:1a:f7:6e:20:2d:6e: 9f:61:14:e2:86:94:b2:9b:5c:61:4f:f5:39:a1:1d:5d:f7:20: fb:61:42:72:e1:ea:3d:84:40:5e:e3:5f:86:c7:3d:42:5a:22: 43:c3:0e:aa:ab:68:61:e8:65:80:57:ab:cf:0f:7c:2e:8c:f1: 95:18:27:0f:6e:eb:14:ae:d9:4e:69:94:41:f6:4f:22:8e:53: 0b:2c:b4:03:c1:ce:f6:36:d0:b7:02:8e:c5:2e:fb:ae:c2:75: 6b:2b:e6:6a:cb:e2:9d:98:62:c4:57:cb:fd:ec:d9:6f:44:c4: 93:e6:1b:af:ec:f2:09:72:16:48:25:1e:fe:c8:f7:74:00:49: 7b:77:b2:5e:7f:51:85:b5:05:ec:27:41:00:67:c3:42:9b:24: 5d:e3:d2:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURP9p0Y+jDDsdD7iGKoMWhSw/yjkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2NkRG NUY3OTI1NTAeFw0yNjAzMDYwNTQ2NTRaFw0yNjAzMDkxMTQ0NTRaMDMxMTAvBgNV BAMTKDIwQjBCQzA0QzBDQUQwQjBEQTdDNjM4RDEwMjg3QkI1NTE3NUM3RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5kujeyMWAvSfhge5FTYVNBZKA K7ZRzo6ibeKCWmQzbC1ZFgp/W1G/g4b7CgPgQ++tARp4FF8dlcZlEF0xIcJasYFF dV/d/PxZ7+JQJlYO8dZ2xhfYxVdwH3M4VUsW0JWdjrcj+HE6e9d/kMQStfiJI4Lo w2bt3A/PufhU6D6OLvNYHUMT4sATMeMqPV6Sdj8FaoPVBQXNpccT7sqymJ17Tqou I1aRe/qf3+idOua7ncPLS/A2OoMVZkchUZKrm1Uw27XhS/KVvRPJtoGItQH5v24v qhG0yStTg8hS3RnN+m2JDSZvSinpemm4tXFaAR0UEd9eKZtWt6vSd2gKAXyHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUILC8BMDK0LDafGONECh7tVF1x+owHwYDVR0j BBgwFoAUyIhk3TwebQ1fqRRn8DsmbfX3klUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MzJlNGY4Ni00OGU3LTQ4YzctYmE5MS1lMjU5NjgzNzhlOTUvMC9DODg4NjRERDND MUU2RDBENUZBOTE0NjdGMDNCMjY2REY1Rjc5MjU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2NkRGNUY3 OTI1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzMyZTRmODYtNDhlNy00OGM3LWJh OTEtZTI1OTY4Mzc4ZTk1LzAvQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2 NkRGNUY3OTI1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFtApJqFYmlfaQxafl4SAdu15RSh1clAeGKE 9k+wnI/gaDhDJpZO57e1QJ5oXR8IBG2P1VuAhykGCb3llrUHEVWBOLufxwXiNtL2 KxnwhRhAB5VJaCPsh2jwei1E5+ltmg0Pm9jR5Br3biAtbp9hFOKGlLKbXGFP9Tmh HV33IPthQnLh6j2EQF7jX4bHPUJaIkPDDqqraGHoZYBXq88PfC6M8ZUYJw9u6xSu 2U5plEH2TyKOUwsstAPBzvY20LcCjsUu+67CdWsr5mrL4p2YYsRXy/3s2W9ExJPm G6/s8glyFkglHv7I93QASXt3sl5/UYW1BewnQQBnw0KbJF3j0lE= -----END CERTIFICATE-----Generated at Sat Mar 7 17:49:02 2026 by rpki-client