$ rpki-client -vvf repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft File: D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft (raw, json) Hash identifier: F1Dc10qFxWWnDCJnl8BtL2d0EBGKdL1o6YoA81MpyJo= Subject key identifier: E1:6E:BB:3B:42:80:6A:E0:00:11:8A:F7:58:D3:95:84:E0:B7:CE:AA Authority key identifier: D5:54:24:C9:15:3D:E3:C2:85:DA:2B:00:86:FF:76:EF:FD:F6:D0:ED Certificate issuer: /CN=D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED Certificate serial: 01DB00EC3A6905334B77FA67A5A0DF44581E81A8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft Manifest number: D8 Signing time: Thu 05 Mar 2026 18:11:12 +0000 Manifest this update: Thu 05 Mar 2026 18:06:12 +0000 Manifest next update: Mon 09 Mar 2026 03:12:12 +0000 Files and hashes: 1: 323030313a6466343a366234303a3a2f34382d3438203d3e20313533313331.roa (hash: U1yBT1SPjwTm71wjsvPBRQ+2gxg77ajbPlJlD+suADk=) 2: D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.crl (hash: z5v0WPMv+OglIhq3GWHiB5LFRTzaleATkPC+EwhBWes=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.crl rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:db:00:ec:3a:69:05:33:4b:77:fa:67:a5:a0:df:44:58:1e:81:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED Validity Not Before: Mar 5 18:06:12 2026 GMT Not After : Mar 9 03:12:12 2026 GMT Subject: CN=E16EBB3B42806AE000118AF758D39584E0B7CEAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1b:f7:4d:95:47:da:b4:e2:b2:96:99:d0:cd: ad:32:27:d1:8f:d8:8d:81:14:fe:1b:47:5a:86:08: ec:11:d6:34:b7:5d:8b:cf:20:7b:44:49:63:d8:48: 4d:b6:f8:a0:c9:8d:69:1a:0d:de:6c:5d:0e:fe:3d: ba:f4:c1:ed:77:45:83:91:2a:bc:37:17:73:22:cb: af:eb:f8:6b:3e:07:da:59:07:fe:f0:24:54:c7:fa: 56:de:ea:15:21:54:70:8b:38:bd:57:df:a4:93:73: a9:10:24:cc:f2:ce:85:81:51:b2:4d:e5:a5:ba:89: 67:ea:7c:f3:dc:50:ba:d9:6c:13:d2:92:42:b7:a2: 5c:90:b5:ba:9a:57:6c:e7:15:57:a3:52:7c:c6:36: 18:4b:f2:4c:ee:9b:15:03:b3:b4:cc:c4:46:7c:23: 1c:c0:bf:ed:93:70:95:45:5c:ae:85:58:c7:87:e4: 84:9b:3b:26:eb:dc:2b:d8:4f:fe:4c:75:05:23:68: c2:6d:69:4e:e3:50:ea:c7:a1:55:c5:64:a8:57:d0: 01:5c:64:35:9f:61:d7:74:22:84:90:1d:77:23:2a: 9a:be:be:74:07:6a:45:8e:fe:d6:e6:f8:0f:f8:ce: 84:cd:c4:8b:7b:b6:3d:3c:4e:23:16:8e:b5:a8:3a: 1c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:6E:BB:3B:42:80:6A:E0:00:11:8A:F7:58:D3:95:84:E0:B7:CE:AA X509v3 Authority Key Identifier: keyid:D5:54:24:C9:15:3D:E3:C2:85:DA:2B:00:86:FF:76:EF:FD:F6:D0:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:62:cc:ed:4a:6b:db:5c:d0:fc:97:55:3f:54:25:16:4f:33: 22:91:f9:e4:70:8e:c2:af:a3:82:df:d7:12:e8:38:a9:36:0d: ff:2c:52:e6:3c:79:61:c2:1e:f5:2b:c5:c5:70:3f:7a:d4:a3: 2c:72:60:02:e7:50:a8:8a:80:4d:3d:1a:ca:d8:20:d1:0a:88: 22:f0:4e:2c:be:5a:fe:d8:a9:3e:db:bd:0f:10:00:03:ca:bc: c4:eb:25:20:51:55:40:b9:a1:a1:d8:bf:87:03:72:8a:02:df: 0a:73:cc:d4:09:0d:38:44:e4:f3:9c:6c:49:33:43:01:cc:b5: 96:b2:97:cb:5d:01:6a:a0:74:44:fa:f3:01:d1:f6:e9:8c:d9: b2:19:b3:97:05:6d:95:e1:cd:89:16:dd:b5:85:b4:d6:d5:f1: 38:4b:a6:00:aa:46:34:dd:52:7c:0b:ca:44:42:7e:a6:92:2c: fd:7a:3f:62:df:76:c5:1e:be:83:9e:4e:ad:83:80:f8:32:af: e9:45:53:a7:96:56:6f:5d:9e:03:8c:f5:ac:b4:63:ce:34:9a: 8f:ce:21:e4:ac:2e:c8:2f:f8:3d:0e:ee:6c:e5:42:77:eb:9c: 80:9f:f2:d7:d9:27:8d:83:47:55:48:b9:c8:66:9f:56:61:71: 66:7f:3c:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAdsA7DppBTNLd/pnpaDfRFgegagwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU1NDI0QzkxNTNERTNDMjg1REEyQjAwODZGRjc2RUZG REY2RDBFRDAeFw0yNjAzMDUxODA2MTJaFw0yNjAzMDkwMzEyMTJaMDMxMTAvBgNV BAMTKEUxNkVCQjNCNDI4MDZBRTAwMDExOEFGNzU4RDM5NTg0RTBCN0NFQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKG/dNlUfatOKylpnQza0yJ9GP 2I2BFP4bR1qGCOwR1jS3XYvPIHtESWPYSE22+KDJjWkaDd5sXQ7+Pbr0we13RYOR Krw3F3Miy6/r+Gs+B9pZB/7wJFTH+lbe6hUhVHCLOL1X36STc6kQJMzyzoWBUbJN 5aW6iWfqfPPcULrZbBPSkkK3olyQtbqaV2znFVejUnzGNhhL8kzumxUDs7TMxEZ8 IxzAv+2TcJVFXK6FWMeH5ISbOybr3CvYT/5MdQUjaMJtaU7jUOrHoVXFZKhX0AFc ZDWfYdd0IoSQHXcjKpq+vnQHakWO/tbm+A/4zoTNxIt7tj08TiMWjrWoOhwfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4W67O0KAauAAEYr3WNOVhOC3zqowHwYDVR0j BBgwFoAU1VQkyRU948KF2isAhv927/320O0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MjExZjM0Ny1hMWU3LTQ3MWQtYWQyMC1kYTc2YWFiZjM4NGMvMS9ENTU0MjRDOTE1 M0RFM0MyODVEQTJCMDA4NkZGNzZFRkZERjZEMEVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDU1NDI0QzkxNTNERTNDMjg1REEyQjAwODZGRjc2RUZGREY2 RDBFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTIxMWYzNDctYTFlNy00NzFkLWFk MjAtZGE3NmFhYmYzODRjLzEvRDU1NDI0QzkxNTNERTNDMjg1REEyQjAwODZGRjc2 RUZGREY2RDBFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACFizO1Ka9tc0PyXVT9UJRZPMyKR+eRwjsKv o4Lf1xLoOKk2Df8sUuY8eWHCHvUrxcVwP3rUoyxyYALnUKiKgE09GsrYINEKiCLw Tiy+Wv7YqT7bvQ8QAAPKvMTrJSBRVUC5oaHYv4cDcooC3wpzzNQJDThE5POcbEkz QwHMtZayl8tdAWqgdET68wHR9umM2bIZs5cFbZXhzYkW3bWFtNbV8ThLpgCqRjTd UnwLykRCfqaSLP16P2LfdsUevoOeTq2DgPgyr+lFU6eWVm9dngOM9ay0Y840mo/O IeSsLsgv+D0O7mzlQnfrnICf8tfZJ42DR1VIuchmn1ZhcWZ/PE0= -----END CERTIFICATE-----Generated at Sun Mar 8 00:35:35 2026 by rpki-client