$ rpki-client -vvf repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft File: 2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft (raw, json) Hash identifier: l6u5JVoMO8qMGbsqjo3FnY9t6CEkzdRBxpwO1WzbD0Q= Subject key identifier: 8E:EA:1A:50:A8:74:96:FD:95:93:A0:4B:9D:7D:0D:C5:41:95:01:A3 Authority key identifier: 29:76:AD:C7:44:8B:F0:CA:9B:57:DC:D7:88:49:A1:E0:F9:5F:2B:45 Certificate issuer: /CN=2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45 Certificate serial: 4F1885FED10D901F9AEA8C914F65DDCFDDFED240 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft Manifest number: 0110 Signing time: Thu 05 Mar 2026 11:41:01 +0000 Manifest this update: Thu 05 Mar 2026 11:36:01 +0000 Manifest next update: Sun 08 Mar 2026 21:40:01 +0000 Files and hashes: 1: 2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.crl (hash: rnMchypBBsEXxPd3YGk0L18klHOs2PZFBq4Q8JhmJAo=) 2: 3136302e32352e3137382e302f32332d3234203d3e20313533303735.roa (hash: FYy5UtFCXZKGCZxosr1oqFzrTkMP7sB8ytiR2n56UZs=) 3: 3136302e32352e3137382e302f32342d3234203d3e20313533303735.roa (hash: iPqRbkelW4W9hPKQlPKh7dVapT99d9ruqUsqOdahl18=) 4: 3136302e32352e3137392e302f32342d3234203d3e20313533303735.roa (hash: duCuSDamX6IXj6dNr3R2KvTWuX1Y0Ld9dMd4eFNkJZc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.crl rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 21:40:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:18:85:fe:d1:0d:90:1f:9a:ea:8c:91:4f:65:dd:cf:dd:fe:d2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45 Validity Not Before: Mar 5 11:36:01 2026 GMT Not After : Mar 8 21:40:01 2026 GMT Subject: CN=8EEA1A50A87496FD9593A04B9D7D0DC5419501A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:71:0b:b3:b1:4e:55:3e:7e:c3:34:82:ce:36: 41:e3:4a:2f:5e:93:c5:69:84:30:8f:c6:1c:44:25: fd:52:57:ab:03:2b:4d:12:93:14:d0:4e:79:b2:ea: f9:d8:24:0d:df:38:9b:80:95:72:20:e6:fd:8f:58: f2:f3:c0:ba:ce:63:50:22:b0:2a:d1:b6:d4:c5:55: 35:3c:0f:52:cd:04:1f:51:bc:82:7e:4e:0b:0d:ac: 2c:6f:c7:b5:6e:71:43:ac:a7:3f:e7:fd:b7:6f:82: dd:0a:e4:5a:fc:f6:ae:85:c7:c4:3d:06:00:65:98: 72:d9:49:5b:07:6e:4a:9c:58:aa:3c:76:2d:55:a2: 9b:40:d8:11:6e:e1:b2:57:e8:1a:18:e4:ae:d3:df: 7e:c9:80:c3:ce:57:b1:9a:44:b5:94:e8:6b:96:ae: 82:1d:e8:9a:0b:7e:14:28:53:94:21:e3:6c:ae:4e: fb:b5:24:eb:8a:bd:f5:8c:51:40:f2:77:ce:88:ea: e1:ff:61:a7:ac:06:16:42:53:9d:8f:e5:f5:b1:6e: af:0f:f4:95:91:2b:16:bc:eb:bc:71:ce:11:2b:51: da:04:8f:83:9d:24:9d:59:e5:e9:18:86:a0:90:20: 13:b8:46:ea:eb:fb:6c:ea:06:93:24:6b:51:bd:94: 0a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:EA:1A:50:A8:74:96:FD:95:93:A0:4B:9D:7D:0D:C5:41:95:01:A3 X509v3 Authority Key Identifier: keyid:29:76:AD:C7:44:8B:F0:CA:9B:57:DC:D7:88:49:A1:E0:F9:5F:2B:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:0e:26:37:23:21:80:b9:82:22:c1:a3:a3:85:bd:9b:6e:18: da:96:33:2e:28:a0:b4:aa:fe:69:c5:a8:86:de:2e:2e:0e:54: 1a:3c:ea:5e:ac:73:fe:7e:c8:64:12:03:f7:08:60:81:a9:a8: 66:2e:33:92:8a:51:28:e0:c0:24:75:1b:49:e8:8c:cb:e2:59: dd:d6:c0:74:52:13:e0:de:10:03:66:e9:eb:26:e3:01:e8:93: 3c:f0:db:04:e9:af:99:4d:b9:7e:f3:b2:73:8e:f4:5b:b4:fa: a5:b3:b7:d3:c0:bb:cb:8b:c4:5d:91:64:27:f2:55:26:50:54: 39:7f:ec:47:24:5f:8c:3d:7f:df:d8:44:43:41:7c:d7:42:8f: 6b:b3:fb:15:32:1a:d5:67:4c:b3:1a:7f:12:96:78:0d:77:e5: f7:ba:e7:56:82:50:3a:79:f0:4e:64:8f:1e:9f:3c:e3:27:92: 09:13:a0:e8:34:95:36:58:50:7a:6b:0a:99:18:52:79:b9:a7: fa:e1:94:e1:37:14:72:bc:7f:b5:81:d0:16:b0:72:40:d6:5a: d4:62:da:fc:ed:11:b9:5a:82:77:d7:2d:c7:78:bf:78:af:9f: 29:40:c0:ee:59:64:72:94:01:fd:ac:5a:20:5c:77:9b:7c:11: 2e:37:1b:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTxiF/tENkB+a6oyRT2Xdz93+0kAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk3NkFEQzc0NDhCRjBDQTlCNTdEQ0Q3ODg0OUExRTBG OTVGMkI0NTAeFw0yNjAzMDUxMTM2MDFaFw0yNjAzMDgyMTQwMDFaMDMxMTAvBgNV BAMTKDhFRUExQTUwQTg3NDk2RkQ5NTkzQTA0QjlEN0QwREM1NDE5NTAxQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8cQuzsU5VPn7DNILONkHjSi9e k8VphDCPxhxEJf1SV6sDK00SkxTQTnmy6vnYJA3fOJuAlXIg5v2PWPLzwLrOY1Ai sCrRttTFVTU8D1LNBB9RvIJ+TgsNrCxvx7VucUOspz/n/bdvgt0K5Fr89q6Fx8Q9 BgBlmHLZSVsHbkqcWKo8di1VoptA2BFu4bJX6BoY5K7T337JgMPOV7GaRLWU6GuW roId6JoLfhQoU5Qh42yuTvu1JOuKvfWMUUDyd86I6uH/YaesBhZCU52P5fWxbq8P 9JWRKxa867xxzhErUdoEj4OdJJ1Z5ekYhqCQIBO4Rurr+2zqBpMka1G9lAqtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjuoaUKh0lv2Vk6BLnX0NxUGVAaMwHwYDVR0j BBgwFoAUKXatx0SL8MqbV9zXiEmh4PlfK0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 N2M0MzJlMC1kYzNlLTQyY2MtYmNjMC02MjliMTYyMDZjOWEvMC8yOTc2QURDNzQ0 OEJGMENBOUI1N0RDRDc4ODQ5QTFFMEY5NUYyQjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjk3NkFEQzc0NDhCRjBDQTlCNTdEQ0Q3ODg0OUExRTBGOTVG MkI0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODdjNDMyZTAtZGMzZS00MmNjLWJj YzAtNjI5YjE2MjA2YzlhLzAvMjk3NkFEQzc0NDhCRjBDQTlCNTdEQ0Q3ODg0OUEx RTBGOTVGMkI0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADkOJjcjIYC5giLBo6OFvZtuGNqWMy4ooLSq /mnFqIbeLi4OVBo86l6sc/5+yGQSA/cIYIGpqGYuM5KKUSjgwCR1G0nojMviWd3W wHRSE+DeEANm6esm4wHokzzw2wTpr5lNuX7zsnOO9Fu0+qWzt9PAu8uLxF2RZCfy VSZQVDl/7EckX4w9f9/YRENBfNdCj2uz+xUyGtVnTLMafxKWeA135fe651aCUDp5 8E5kjx6fPOMnkgkToOg0lTZYUHprCpkYUnm5p/rhlOE3FHK8f7WB0BawckDWWtRi 2vztEblagnfXLcd4v3ivnylAwO5ZZHKUAf2sWiBcd5t8ES43Gyo= -----END CERTIFICATE-----Generated at Sat Mar 7 17:50:31 2026 by rpki-client