$ rpki-client -vvf repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft File: D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft (raw, json) Hash identifier: YJ5zA5YnkiGPvIU/tEQkrAqRPP4u+n/a3Vje2/oOgF8= Subject key identifier: 35:B7:3B:2B:8C:C8:C5:59:1A:71:62:11:75:B3:1A:8B:82:13:A9:FC Authority key identifier: D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28 Certificate issuer: /CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428 Certificate serial: 0CBC9920B07CCB110E05604A06DDD645042B6954 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft Manifest number: 0394 Signing time: Fri 06 Mar 2026 03:01:06 +0000 Manifest this update: Fri 06 Mar 2026 02:56:06 +0000 Manifest next update: Mon 09 Mar 2026 04:29:06 +0000 Files and hashes: 1: 3130332e38322e3138322e302f32342d3234203d3e20313336303631.roa (hash: WjIjT3NjVVlR5hMapPhqI5pb0J0MFGcIoHXnqSGNGKM=) 2: 3130332e38322e3138322e302f32342d3234203d3e203535303032.roa (hash: TOlmToT6ArG31254ugnepFlJm7GRal9sFalZQtBB9ZU=) 3: 3130332e38322e3138302e302f32342d3234203d3e20313336303631.roa (hash: J0EZhqosWRvlsFynFqUSuIzOBFwrUDGcW8i8aa6gdz0=) 4: 3130332e38322e3138332e302f32342d3234203d3e20313336303631.roa (hash: jcnGTwMxragJZygMI7x8GrOzTkyTrpwEdMq5rorWZ5w=) 5: D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl (hash: DkF2scwWj9IMV+ArQzbQDDURoILN+XcWQDmIx3tJODY=) 6: 3130332e38322e3138332e302f32342d3234203d3e203535303032.roa (hash: fgpsoyfDzLyMcnx59ChelAzY0mutvwsLTeGKdYegbvA=) 7: 3130332e38322e3138302e302f32332d3233203d3e20313336303631.roa (hash: aFm1cy3NmwA8t2HY8uThbjC+zS/PKRo7I8s9/bpxDts=) 8: 3130332e38322e3138312e302f32342d3234203d3e20313336303631.roa (hash: JBTT95tgZh/X/QugtDrHY7+xX4nEcgcpicxDVZKVxRA=) 9: 3130332e38322e3138302e302f32332d3233203d3e203535303032.roa (hash: +FTF4nfRYC5wsN7EuNxSdS7IKhjhi49gS7F0z0AapdE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 04:29:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:bc:99:20:b0:7c:cb:11:0e:05:60:4a:06:dd:d6:45:04:2b:69:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428 Validity Not Before: Mar 6 02:56:06 2026 GMT Not After : Mar 9 04:29:06 2026 GMT Subject: CN=35B73B2B8CC8C5591A71621175B31A8B8213A9FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b9:cf:e8:9c:a2:6c:61:00:e1:4f:54:6d:87: 16:90:47:4f:22:c4:27:42:78:03:d0:6a:56:f2:22: f8:7e:70:27:f1:1b:19:2b:90:61:4f:33:62:21:72: 47:f8:6b:b2:7f:3f:cf:f4:4d:f9:e1:fb:c9:26:12: 28:7d:43:1b:57:ed:90:f8:8f:c9:66:cc:53:4d:ca: 13:93:f0:50:1c:91:93:e8:da:03:3e:a7:77:f2:52: 37:75:07:7f:cd:5b:db:82:9c:d0:8a:a6:a8:4a:6f: 85:3a:54:3f:6b:ee:82:f3:7e:93:13:f8:11:a4:0f: 46:99:a0:60:66:27:36:6b:41:e1:7f:0a:a6:c4:a7: 5b:74:8b:dd:85:1a:55:d8:8c:82:bd:18:3e:de:87: 17:9f:a0:55:5c:f1:0d:d2:5a:5b:49:05:f7:f4:82: dc:2e:20:7a:a8:89:f2:ac:fb:6e:bd:d4:ee:ac:05: 56:10:66:0e:73:2f:92:63:4f:a6:6a:31:d8:44:40: 9a:eb:c2:ef:4e:ea:d8:c5:bb:d7:13:b3:6a:fd:97: eb:57:30:a3:93:5c:34:c4:54:bb:4a:c5:16:a8:29: 30:1e:6f:64:bf:52:0f:1b:82:c1:c9:a7:ac:b2:59: dd:02:93:1f:8a:e3:d3:5f:70:5c:64:d4:93:07:c4: cd:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B7:3B:2B:8C:C8:C5:59:1A:71:62:11:75:B3:1A:8B:82:13:A9:FC X509v3 Authority Key Identifier: keyid:D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:32:54:70:fe:b8:7e:52:29:ca:89:f2:3f:23:4d:eb:03:19: 8f:cd:8a:56:32:7c:c7:ee:bb:01:4d:8c:da:48:0f:47:14:58: bb:ec:00:5e:d9:83:88:77:a4:79:0e:a9:43:e7:8d:56:7a:93: c7:49:20:fc:74:60:9b:61:22:94:e0:cc:37:43:ad:39:09:d8: 4d:7a:bd:45:36:4c:f7:e1:ec:ae:61:0f:a6:fd:c3:63:98:5c: dc:b2:c7:4c:c5:ff:66:b3:81:a1:1a:19:6f:91:4e:9a:0f:96: fe:1b:6b:02:09:3b:9f:f3:4b:33:4f:40:d5:f0:54:c1:05:92: 9f:9d:77:27:40:f0:8d:93:cf:44:0f:70:78:ac:ea:06:e8:c7: 7e:0f:07:4e:02:d8:a1:2f:91:a6:d6:39:3b:8b:49:1c:62:2c: b8:74:a9:32:43:f8:ec:79:2d:0b:1e:08:6c:19:31:20:52:06: 6e:ac:db:8a:ba:96:b6:89:1a:6e:18:35:c7:8f:6e:c8:bc:ea: b4:70:a8:5c:af:c1:49:21:59:d0:4c:af:19:dd:cd:68:d5:63: 7a:a5:6b:ed:2f:85:f2:8e:32:28:21:ea:2a:af:f4:64:18:35: a4:0b:cf:32:56:59:01:71:3d:b2:27:d4:0e:b4:c6:ea:c6:65: 96:a1:01:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDLyZILB8yxEOBWBKBt3WRQQraVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5MkZD QjNBMzQyODAeFw0yNjAzMDYwMjU2MDZaFw0yNjAzMDkwNDI5MDZaMDMxMTAvBgNV BAMTKDM1QjczQjJCOENDOEM1NTkxQTcxNjIxMTc1QjMxQThCODIxM0E5RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4uc/onKJsYQDhT1RthxaQR08i xCdCeAPQalbyIvh+cCfxGxkrkGFPM2Ihckf4a7J/P8/0Tfnh+8kmEih9QxtX7ZD4 j8lmzFNNyhOT8FAckZPo2gM+p3fyUjd1B3/NW9uCnNCKpqhKb4U6VD9r7oLzfpMT +BGkD0aZoGBmJzZrQeF/CqbEp1t0i92FGlXYjIK9GD7ehxefoFVc8Q3SWltJBff0 gtwuIHqoifKs+2691O6sBVYQZg5zL5JjT6ZqMdhEQJrrwu9O6tjFu9cTs2r9l+tX MKOTXDTEVLtKxRaoKTAeb2S/Ug8bgsHJp6yyWd0Ckx+K49NfcFxk1JMHxM1nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNbc7K4zIxVkacWIRdbMai4ITqfwwHwYDVR0j BBgwFoAU0c5O+RDKt4TvKT0m2YOpL8s6NCgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDc1OGYxNS01ZGU4LTQ4N2QtOTk0NS1jM2VhMjA3ZTQ0YWQvMC9EMUNFNEVGOTEw Q0FCNzg0RUYyOTNEMjZEOTgzQTkyRkNCM0EzNDI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5MkZDQjNB MzQyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODA3NThmMTUtNWRlOC00ODdkLTk5 NDUtYzNlYTIwN2U0NGFkLzAvRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5 MkZDQjNBMzQyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKAyVHD+uH5SKcqJ8j8jTesDGY/NilYyfMfu uwFNjNpID0cUWLvsAF7Zg4h3pHkOqUPnjVZ6k8dJIPx0YJthIpTgzDdDrTkJ2E16 vUU2TPfh7K5hD6b9w2OYXNyyx0zF/2azgaEaGW+RTpoPlv4bawIJO5/zSzNPQNXw VMEFkp+ddydA8I2Tz0QPcHis6gbox34PB04C2KEvkabWOTuLSRxiLLh0qTJD+Ox5 LQseCGwZMSBSBm6s24q6lraJGm4YNcePbsi86rRwqFyvwUkhWdBMrxndzWjVY3ql a+0vhfKOMigh6iqv9GQYNaQLzzJWWQFxPbIn1A60xurGZZahAT4= -----END CERTIFICATE-----Generated at Sun Mar 8 03:50:55 2026 by rpki-client