$ rpki-client -vvf repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft File: 284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft (raw, json) Hash identifier: AzPeNLHDvp4UNdqgJXRu6GQZdFMOs8WBkHVctR3QGL0= Subject key identifier: 83:2C:7F:56:B0:17:B6:A8:BB:DB:6B:EE:28:18:C0:64:68:9B:2D:F7 Authority key identifier: 28:4B:8A:DA:D3:E0:98:E9:BF:BE:AC:6A:91:29:EF:A6:44:4D:F2:EA Certificate issuer: /CN=284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA Certificate serial: 5D000D11C36E8400E1856FA34374418394EC39B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft Manifest number: 02A5 Signing time: Wed 25 Mar 2026 18:21:54 +0000 Manifest this update: Wed 25 Mar 2026 18:16:54 +0000 Manifest next update: Sun 29 Mar 2026 03:14:54 +0000 Files and hashes: 1: 323430343a356434303a343a3a2f34382d3438203d3e20313338353938.roa (hash: /selJRjYRY2RXdacberK6RXbNBqDD4h8KJuD+6tSmiM=) 2: 3130332e3133342e34392e302f32342d3234203d3e20313332383239.roa (hash: DY64pprFnHFOaGNLsgUuWKWN2nPg3FOgN/Io+biTvOM=) 3: 3130332e3133342e35312e302f32342d3234203d3e20313338353938.roa (hash: rzmqH60uJRn3sGzkNJLLdHpbEepRCB0kAM+v2dcsYmc=) 4: 323430343a356434303a363a3a2f34382d3438203d3e20313338353938.roa (hash: BMaPZKd4S9fQAuwU5kc5O93/vGGp5sulKN1fvWKFFuE=) 5: 323430343a356434303a333a3a2f34382d3438203d3e20313338353938.roa (hash: xTc48z78x2hTWAz50fsj2u48rca6GyIeaspfgC6Ied0=) 6: 3130332e3133342e34382e302f32342d3234203d3e20313338353938.roa (hash: vdRaqu+ifEWqE1r8nytgBjN36IR5VUDio5Qen7pybes=) 7: 323430343a356434303a323a3a2f34382d3438203d3e20313338353938.roa (hash: vUuh6v5PPRzVvuwUZOwe6R6chuRFULbcu3aLCW2qA2Y=) 8: 323430343a356434303a383a3a2f34382d3438203d3e20313338353938.roa (hash: LCHOag0uJb1cjVFsg2v6UKKoMu1dXnSpGeS35y1AH+w=) 9: 284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl (hash: Ytyi8GN7dqwFgepDi2VzhsfqDjqAmx1wJKpb4kj4hP0=) 10: 323430343a356434303a393a3a2f34382d3438203d3e20313338353938.roa (hash: s7BQD7yLxj5kSwHPL3ObyjKROEx8KemxAu+k28dACKE=) 11: 323430343a356434303a353a3a2f34382d3438203d3e20313338353938.roa (hash: Lbx56bi7U9t4V4gIX7m4fulkNS6DqtlvmzQW0U2Yss4=) 12: 323430343a356434303a373a3a2f34382d3438203d3e20313338353938.roa (hash: 2JoT7M7m37m0xJyrGZ0XzlMJ4mVcLTVKVu699zp/2U0=) 13: 323430343a356434303a3a2f34382d3438203d3e20313338353938.roa (hash: XQn6RBqlg6RuaEoPTX1Jp1jRKOhAgtTrK3uAW566Uwk=) 14: 323430343a356434303a313a3a2f34382d3438203d3e20313338353938.roa (hash: 7Ra3Fe83WVldtrwmBn6CcKZZT+lK+aCd/JbT64/wrRw=) 15: 3130332e3133342e35302e302f32342d3234203d3e20313332383239.roa (hash: wPGQG7Rt1kacm2tmufY49AIhUGmQ/veZ5+jCQWW/f5U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 19:43:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:00:0d:11:c3:6e:84:00:e1:85:6f:a3:43:74:41:83:94:ec:39:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA Validity Not Before: Mar 25 18:16:54 2026 GMT Not After : Mar 29 03:14:54 2026 GMT Subject: CN=832C7F56B017B6A8BBDB6BEE2818C064689B2DF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:94:ac:c0:4e:9a:65:55:57:0e:c6:a5:62:03: 72:25:b4:10:53:59:e4:b5:98:ba:35:11:14:39:95: ab:aa:29:d2:ca:d4:b8:00:33:47:37:44:e6:be:ef: 77:64:57:82:f3:97:79:0a:48:a8:84:f1:0c:b5:1e: 56:cd:9f:11:b9:d4:d4:c4:90:ee:35:24:73:e3:d6: d9:02:08:f1:98:71:40:a3:4d:86:05:d3:31:06:bd: 6d:a1:58:13:eb:4f:4a:0c:6d:06:e7:be:25:a4:f2: 07:8a:99:12:63:84:81:04:e6:a0:4d:5b:df:c2:e2: 80:c5:25:d3:3d:91:50:31:0c:2a:aa:9f:1a:d0:4e: 48:a9:d5:82:0f:6d:b4:0f:33:fe:45:e3:ae:c9:9d: 9c:e8:17:b8:51:22:dd:31:ef:80:52:6a:de:f9:7d: 9a:8d:4a:a4:17:94:3a:c5:11:7e:e9:3f:db:b9:0d: 9e:b7:a6:ec:0f:0b:4c:4a:61:84:e1:db:cf:60:f9: f5:92:f1:18:70:a5:06:ef:43:44:e1:b9:8e:4c:96: 5d:e0:43:29:52:05:d8:7c:74:3d:db:67:07:e7:a4: 35:19:8d:9e:59:0e:8b:22:f6:00:0d:2a:cb:af:4c: c8:98:0d:d5:7b:2a:0d:8c:8b:b2:7f:95:7c:e6:64: 0a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:2C:7F:56:B0:17:B6:A8:BB:DB:6B:EE:28:18:C0:64:68:9B:2D:F7 X509v3 Authority Key Identifier: keyid:28:4B:8A:DA:D3:E0:98:E9:BF:BE:AC:6A:91:29:EF:A6:44:4D:F2:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:f3:f9:8c:8a:9c:4f:2f:40:05:75:49:a4:b2:68:20:d8:64: b6:0f:fe:33:df:15:75:a4:38:f7:89:a3:43:7d:ca:53:85:0e: 9c:1b:c0:7f:82:23:03:90:6c:75:9c:4b:fb:b7:b4:46:65:f5: 40:36:54:42:b6:4c:3b:0b:32:f4:9d:b0:c1:6b:1a:17:3b:94: 25:7f:01:56:51:9d:49:eb:8d:11:5c:29:0e:d4:11:81:21:37: 8d:be:8f:20:8f:eb:02:7b:b6:5c:cc:d0:80:75:39:1a:a2:3e: 87:d9:50:ea:88:35:4a:ab:10:eb:55:14:35:8e:eb:7d:7e:d3: ff:30:2e:4a:0e:6b:cb:70:fa:30:81:1b:91:f0:64:c5:5b:50: 67:a8:4b:33:15:43:b9:70:f2:9b:9f:a2:fc:40:cd:33:1a:60: a3:be:d7:3b:41:2a:83:63:44:0e:8f:86:54:4b:0d:20:e7:bc: c4:5f:2b:02:bd:11:cb:3b:88:16:ee:5d:c5:57:66:a4:23:17: a5:14:be:80:4c:ef:bf:03:a7:81:e1:ec:58:84:24:2c:ed:85: f7:84:e3:54:1f:d1:1b:c8:1f:0f:18:f8:4c:49:7e:31:45:97: 06:a5:bc:06:61:5a:a4:aa:3c:5d:40:e6:b6:a9:01:05:28:ca: 5d:ce:2b:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXQANEcNuhADhhW+jQ3RBg5TsObgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg0QjhBREFEM0UwOThFOUJGQkVBQzZBOTEyOUVGQTY0 NDRERjJFQTAeFw0yNjAzMjUxODE2NTRaFw0yNjAzMjkwMzE0NTRaMDMxMTAvBgNV BAMTKDgzMkM3RjU2QjAxN0I2QThCQkRCNkJFRTI4MThDMDY0Njg5QjJERjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWlKzATpplVVcOxqViA3IltBBT WeS1mLo1ERQ5lauqKdLK1LgAM0c3ROa+73dkV4Lzl3kKSKiE8Qy1HlbNnxG51NTE kO41JHPj1tkCCPGYcUCjTYYF0zEGvW2hWBPrT0oMbQbnviWk8geKmRJjhIEE5qBN W9/C4oDFJdM9kVAxDCqqnxrQTkip1YIPbbQPM/5F467JnZzoF7hRIt0x74BSat75 fZqNSqQXlDrFEX7pP9u5DZ63puwPC0xKYYTh289g+fWS8RhwpQbvQ0ThuY5Mll3g QylSBdh8dD3bZwfnpDUZjZ5ZDosi9gANKsuvTMiYDdV7Kg2Mi7J/lXzmZAoVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgyx/VrAXtqi722vuKBjAZGibLfcwHwYDVR0j BBgwFoAUKEuK2tPgmOm/vqxqkSnvpkRN8uowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Yzg1YzZiOS0zNGY5LTRhODUtOWNlYS1jMTZlOThhOGI1ZTAvMC8yODRCOEFEQUQz RTA5OEU5QkZCRUFDNkE5MTI5RUZBNjQ0NERGMkVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg0QjhBREFEM0UwOThFOUJGQkVBQzZBOTEyOUVGQTY0NDRE RjJFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWM4NWM2YjktMzRmOS00YTg1LTlj ZWEtYzE2ZTk4YThiNWUwLzAvMjg0QjhBREFEM0UwOThFOUJGQkVBQzZBOTEyOUVG QTY0NDRERjJFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMTz+YyKnE8vQAV1SaSyaCDYZLYP/jPfFXWk OPeJo0N9ylOFDpwbwH+CIwOQbHWcS/u3tEZl9UA2VEK2TDsLMvSdsMFrGhc7lCV/ AVZRnUnrjRFcKQ7UEYEhN42+jyCP6wJ7tlzM0IB1ORqiPofZUOqINUqrEOtVFDWO 631+0/8wLkoOa8tw+jCBG5HwZMVbUGeoSzMVQ7lw8pufovxAzTMaYKO+1ztBKoNj RA6PhlRLDSDnvMRfKwK9Ecs7iBbuXcVXZqQjF6UUvoBM778Dp4Hh7FiEJCzthfeE 41Qf0RvIHw8Y+ExJfjFFlwalvAZhWqSqPF1A5rapAQUoyl3OK9w= -----END CERTIFICATE-----Generated at Wed Mar 25 21:51:08 2026 by rpki-client