$ rpki-client -vvf repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft File: 688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft (raw, json) Hash identifier: cXB2Zr2NIC06xHek5u96iLDfsPTC0I8m3uo2bzBdhIw= Subject key identifier: 01:99:43:A5:7B:24:E8:B8:B7:B7:64:84:F3:AE:66:35:08:70:FD:C5 Authority key identifier: 68:82:00:16:9D:93:CC:55:E4:8C:5F:39:38:8B:F1:F8:A3:D6:1A:EC Certificate issuer: /CN=688200169D93CC55E48C5F39388BF1F8A3D61AEC Certificate serial: 7C5F39B9F92621036D13C7908394735F4B99D692 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688200169D93CC55E48C5F39388BF1F8A3D61AEC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft Manifest number: 028B Signing time: Sat 07 Mar 2026 05:21:30 +0000 Manifest this update: Sat 07 Mar 2026 05:16:30 +0000 Manifest next update: Tue 10 Mar 2026 15:43:30 +0000 Files and hashes: 1: 3130332e3138342e31322e302f32332d3234203d3e20313531303030.roa (hash: Nm3m5tocLRAVbY4DRmLGKJyvH8opyslr8Wu/151pWIw=) 2: 688200169D93CC55E48C5F39388BF1F8A3D61AEC.crl (hash: /Rw+gDeZ5NDzXbeJ92i+2P+iMe5Py2p16331KNNRGd0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.crl rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688200169D93CC55E48C5F39388BF1F8A3D61AEC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 22:43:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:5f:39:b9:f9:26:21:03:6d:13:c7:90:83:94:73:5f:4b:99:d6:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688200169D93CC55E48C5F39388BF1F8A3D61AEC Validity Not Before: Mar 7 05:16:30 2026 GMT Not After : Mar 10 15:43:30 2026 GMT Subject: CN=019943A57B24E8B8B7B76484F3AE66350870FDC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a9:87:5e:80:5e:88:44:c6:e7:ca:26:03:30: 1d:b9:94:32:18:c5:f5:24:27:af:33:e2:f1:ea:31: 99:71:39:c7:dc:27:ee:8b:40:f0:4e:b0:69:09:73: bc:7c:2d:8b:45:57:f0:e9:1e:00:88:1b:2c:67:cf: 72:7f:3a:c5:b2:62:16:05:d6:9a:0c:37:5f:85:90: 17:5b:a6:d1:7c:8a:0b:1a:bc:01:a6:95:bb:95:4c: 97:c4:3d:38:20:19:f9:73:6a:dd:21:61:d9:e5:90: 6b:7a:9a:53:0f:e7:64:91:59:48:0b:8b:c5:08:bb: 1d:ac:4b:e2:46:22:af:2a:21:a4:86:0f:10:da:a0: b4:d2:d0:99:a8:f7:ce:81:cd:18:ab:cd:17:00:42: 7c:71:41:81:b2:a7:2e:12:99:62:64:07:4c:aa:ce: c6:11:92:d6:0f:cb:15:74:9c:49:21:88:01:fa:4f: cf:e8:e2:5f:ee:55:bb:44:6a:b2:c5:9d:d8:68:89: ee:89:53:9c:0a:96:f2:a6:54:14:d1:bf:45:c4:58: 8c:ab:34:58:16:b1:55:08:f0:20:ab:7f:99:44:da: f8:fc:14:97:a9:08:d3:bd:27:fc:ca:13:63:64:e0: e7:e7:a2:fa:24:4a:f6:19:0f:1e:35:81:0e:4e:7e: 17:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:99:43:A5:7B:24:E8:B8:B7:B7:64:84:F3:AE:66:35:08:70:FD:C5 X509v3 Authority Key Identifier: keyid:68:82:00:16:9D:93:CC:55:E4:8C:5F:39:38:8B:F1:F8:A3:D6:1A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688200169D93CC55E48C5F39388BF1F8A3D61AEC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:48:9d:8e:19:e3:56:62:ae:31:4e:a4:79:67:6f:fd:b5:b8: b1:ed:89:97:37:db:35:31:ce:f2:d7:32:3b:98:f2:42:3a:14: 02:08:fa:ae:16:54:e1:79:1f:54:b7:0e:e0:7b:2d:f9:db:a9: a1:dc:f3:a1:f2:94:5c:62:1b:a3:7f:12:70:6b:f8:65:a0:64: fd:f8:27:23:98:8a:84:d4:29:e5:33:05:3c:15:03:a1:77:78: 4c:f2:52:4c:42:47:a8:18:46:a5:5f:9e:cd:5e:f9:12:b1:a7: 5b:af:10:61:9b:eb:4d:6d:84:d0:42:12:8f:bd:9b:73:62:4b: e9:3b:3c:21:8b:f7:cb:08:22:5c:45:0a:62:5b:25:ad:f1:8e: 8c:ac:45:0c:83:de:9d:3e:a1:39:ce:c5:f3:74:80:61:b2:1c: 31:25:03:78:7a:b1:a7:25:6c:ef:ac:fe:97:a2:fd:7f:bf:97: f1:6c:bf:08:df:52:6f:a2:ba:28:a7:37:99:01:0e:40:77:52: dc:fe:a1:dc:79:43:fa:6b:b1:52:cc:69:f0:32:d5:73:d2:34: 73:67:41:ef:f1:91:5e:f9:93:99:f8:a6:83:a3:31:61:8c:4f: e5:2f:31:6d:e2:e2:ab:f6:69:09:1c:bf:69:68:1c:5c:25:60: 7e:a8:18:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfF85ufkmIQNtE8eQg5RzX0uZ1pIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg4MjAwMTY5RDkzQ0M1NUU0OEM1RjM5Mzg4QkYxRjhB M0Q2MUFFQzAeFw0yNjAzMDcwNTE2MzBaFw0yNjAzMTAxNTQzMzBaMDMxMTAvBgNV BAMTKDAxOTk0M0E1N0IyNEU4QjhCN0I3NjQ4NEYzQUU2NjM1MDg3MEZEQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoqYdegF6IRMbnyiYDMB25lDIY xfUkJ68z4vHqMZlxOcfcJ+6LQPBOsGkJc7x8LYtFV/DpHgCIGyxnz3J/OsWyYhYF 1poMN1+FkBdbptF8igsavAGmlbuVTJfEPTggGflzat0hYdnlkGt6mlMP52SRWUgL i8UIux2sS+JGIq8qIaSGDxDaoLTS0Jmo986BzRirzRcAQnxxQYGypy4SmWJkB0yq zsYRktYPyxV0nEkhiAH6T8/o4l/uVbtEarLFndhoie6JU5wKlvKmVBTRv0XEWIyr NFgWsVUI8CCrf5lE2vj8FJepCNO9J/zKE2Nk4OfnovokSvYZDx41gQ5OfhdvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAZlDpXsk6Li3t2SE865mNQhw/cUwHwYDVR0j BBgwFoAUaIIAFp2TzFXkjF85OIvx+KPWGuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTVjMWFlOC1kOTdkLTQwNDgtOWE3ZS02YjcxYjg1Nzc3NDAvMC82ODgyMDAxNjlE OTNDQzU1RTQ4QzVGMzkzODhCRjFGOEEzRDYxQUVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg4MjAwMTY5RDkzQ0M1NUU0OEM1RjM5Mzg4QkYxRjhBM0Q2 MUFFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk1YzFhZTgtZDk3ZC00MDQ4LTlh N2UtNmI3MWI4NTc3NzQwLzAvNjg4MjAwMTY5RDkzQ0M1NUU0OEM1RjM5Mzg4QkYx RjhBM0Q2MUFFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB5InY4Z41ZirjFOpHlnb/21uLHtiZc32zUx zvLXMjuY8kI6FAII+q4WVOF5H1S3DuB7LfnbqaHc86HylFxiG6N/EnBr+GWgZP34 JyOYioTUKeUzBTwVA6F3eEzyUkxCR6gYRqVfns1e+RKxp1uvEGGb601thNBCEo+9 m3NiS+k7PCGL98sIIlxFCmJbJa3xjoysRQyD3p0+oTnOxfN0gGGyHDElA3h6sacl bO+s/pei/X+/l/FsvwjfUm+iuiinN5kBDkB3Utz+odx5Q/prsVLMafAy1XPSNHNn Qe/xkV75k5n4poOjMWGMT+UvMW3i4qv2aQkcv2loHFwlYH6oGH0= -----END CERTIFICATE-----Generated at Sat Mar 7 21:06:38 2026 by rpki-client