$ rpki-client -vvf repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft File: 2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft (raw, json) Hash identifier: RS7BfmgpGMBbo/uxGOJdX7A154djyIXrJo9J4epk8Vs= Subject key identifier: A5:4D:7D:7E:DF:89:9C:23:D7:61:F0:66:FA:EE:F0:BF:EC:46:E2:CA Authority key identifier: 20:98:B3:BD:04:6C:FF:F2:8B:48:95:4F:28:8A:33:3F:AD:DD:1D:E9 Certificate issuer: /CN=2098B3BD046CFFF28B48954F288A333FADDD1DE9 Certificate serial: 735D04E0BB4D7EF69E39963CA10A1CC047033FFB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2098B3BD046CFFF28B48954F288A333FADDD1DE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft Manifest number: E7 Signing time: Thu 05 Mar 2026 12:20:46 +0000 Manifest this update: Thu 05 Mar 2026 12:15:46 +0000 Manifest next update: Sun 08 Mar 2026 22:15:46 +0000 Files and hashes: 1: 3136302e32352e3232392e302f32342d3234203d3e20313533313036.roa (hash: ZsjBtNoWEJx2NTRYL99sTUHqHLXTfuWH/2StZO9wGXM=) 2: 2098B3BD046CFFF28B48954F288A333FADDD1DE9.crl (hash: aHLkv5WMuq9NeOHSEUNz2MgcK0e6V2bTRFlBeTB+MRg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.crl rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2098B3BD046CFFF28B48954F288A333FADDD1DE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:5d:04:e0:bb:4d:7e:f6:9e:39:96:3c:a1:0a:1c:c0:47:03:3f:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2098B3BD046CFFF28B48954F288A333FADDD1DE9 Validity Not Before: Mar 5 12:15:46 2026 GMT Not After : Mar 8 22:15:46 2026 GMT Subject: CN=A54D7D7EDF899C23D761F066FAEEF0BFEC46E2CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:01:f3:1d:ef:f7:e0:e2:c8:41:34:6a:48:60: 46:44:12:5b:60:61:43:c0:28:91:b3:e0:a0:e3:a2: 4c:70:6f:93:6b:47:0f:7c:52:b7:65:58:4e:70:4b: b2:12:91:38:41:4d:b6:38:5d:95:4e:7f:a1:8f:15: 62:84:24:da:35:37:7f:ac:c2:62:0b:29:e7:a0:87: 06:c9:02:f8:b9:a0:e7:9b:81:f6:bb:79:57:4b:e4: b4:8c:34:cf:52:d2:c2:79:64:0a:f5:f7:2f:e5:0d: 4d:fa:a6:a9:82:f1:fa:5c:a0:7c:9e:ba:cf:64:8a: 55:1a:d0:cc:86:2b:af:8d:13:60:9b:da:6a:71:80: 39:3f:f6:59:f1:8f:d8:53:54:55:d0:3b:e0:c1:22: c5:67:e3:8b:3e:cc:97:d4:8a:95:1a:c8:f1:07:57: ec:75:37:de:64:d2:c8:c6:ec:eb:69:0e:96:29:83: 18:21:57:3e:a0:96:dc:cf:9d:d8:6f:3a:ba:db:69: a9:dd:7e:6c:bf:6e:cb:c8:8c:ab:b4:73:76:e3:ab: e8:6f:d8:24:0d:31:17:00:f1:6e:80:aa:6c:cc:05: f0:78:e6:25:d2:c1:ba:4b:f3:d7:29:44:03:a2:f3: 14:04:51:48:ea:1f:4c:9e:d5:be:ee:91:aa:86:c8: 98:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:4D:7D:7E:DF:89:9C:23:D7:61:F0:66:FA:EE:F0:BF:EC:46:E2:CA X509v3 Authority Key Identifier: keyid:20:98:B3:BD:04:6C:FF:F2:8B:48:95:4F:28:8A:33:3F:AD:DD:1D:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2098B3BD046CFFF28B48954F288A333FADDD1DE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:40:10:bd:e1:e2:4f:de:b6:99:b3:89:57:0d:db:73:8f:c2: ed:12:31:7e:c2:a0:89:c7:0f:09:a6:7f:a4:33:9e:5c:39:f2: 67:f5:28:ef:e4:1a:80:11:eb:a7:17:30:f8:f7:8c:d1:11:64: c9:0f:de:e1:13:e2:46:e5:63:ed:3e:15:a5:60:cc:41:5c:20: 16:b3:40:e6:ed:f8:a6:0f:b9:9f:71:bb:17:66:ee:d5:9f:b2: fc:ea:c5:10:fb:be:f2:32:cf:45:da:c3:58:b7:8a:4a:50:78: 39:f7:e0:d9:88:57:b9:90:88:7d:31:56:65:2a:e3:a2:fb:59: 7b:83:28:77:25:89:ef:77:11:bc:46:d2:c1:89:ef:c8:4e:63: a0:bc:d8:b7:99:78:1c:a1:7e:37:84:ea:59:9d:54:df:06:fa: 9d:83:25:98:d4:3b:d0:ca:17:dc:d4:72:10:7c:6a:22:13:f6: 77:c7:8f:cd:2c:30:bc:d3:c9:5c:fa:ce:82:85:3a:da:6c:d1: ce:a6:e3:98:57:d6:7d:29:03:5b:e0:72:03:b3:ba:24:8b:4a: 65:fc:e5:34:f6:7f:a2:f4:86:55:d2:d3:b6:aa:77:9f:0e:23: a7:4a:97:c2:d3:54:a0:54:b1:02:fb:dc:4d:b2:5c:dd:d5:34: ab:6e:6c:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc10E4LtNfvaeOZY8oQocwEcDP/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5OEIzQkQwNDZDRkZGMjhCNDg5NTRGMjg4QTMzM0ZB REREMURFOTAeFw0yNjAzMDUxMjE1NDZaFw0yNjAzMDgyMjE1NDZaMDMxMTAvBgNV BAMTKEE1NEQ3RDdFREY4OTlDMjNENzYxRjA2NkZBRUVGMEJGRUM0NkUyQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6AfMd7/fg4shBNGpIYEZEEltg YUPAKJGz4KDjokxwb5NrRw98UrdlWE5wS7ISkThBTbY4XZVOf6GPFWKEJNo1N3+s wmILKeeghwbJAvi5oOebgfa7eVdL5LSMNM9S0sJ5ZAr19y/lDU36pqmC8fpcoHye us9kilUa0MyGK6+NE2Cb2mpxgDk/9lnxj9hTVFXQO+DBIsVn44s+zJfUipUayPEH V+x1N95k0sjG7OtpDpYpgxghVz6gltzPndhvOrrbaandfmy/bsvIjKu0c3bjq+hv 2CQNMRcA8W6AqmzMBfB45iXSwbpL89cpRAOi8xQEUUjqH0ye1b7ukaqGyJjDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpU19ft+JnCPXYfBm+u7wv+xG4sowHwYDVR0j BBgwFoAUIJizvQRs//KLSJVPKIozP63dHekwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YTQxNzYwOC0xNmI4LTQ0OTctODFlMy05NDdkNzhkYmNmMTEvMC8yMDk4QjNCRDA0 NkNGRkYyOEI0ODk1NEYyODhBMzMzRkFEREQxREU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjA5OEIzQkQwNDZDRkZGMjhCNDg5NTRGMjg4QTMzM0ZBRERE MURFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWE0MTc2MDgtMTZiOC00NDk3LTgx ZTMtOTQ3ZDc4ZGJjZjExLzAvMjA5OEIzQkQwNDZDRkZGMjhCNDg5NTRGMjg4QTMz M0ZBREREMURFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJdAEL3h4k/etpmziVcN23OPwu0SMX7CoInH Dwmmf6Qznlw58mf1KO/kGoAR66cXMPj3jNERZMkP3uET4kblY+0+FaVgzEFcIBaz QObt+KYPuZ9xuxdm7tWfsvzqxRD7vvIyz0Xaw1i3ikpQeDn34NmIV7mQiH0xVmUq 46L7WXuDKHclie93EbxG0sGJ78hOY6C82LeZeByhfjeE6lmdVN8G+p2DJZjUO9DK F9zUchB8aiIT9nfHj80sMLzTyVz6zoKFOtps0c6m45hX1n0pA1vgcgOzuiSLSmX8 5TT2f6L0hlXS07aqd58OI6dKl8LTVKBUsQL73E2yXN3VNKtubIk= -----END CERTIFICATE-----Generated at Sat Mar 7 17:50:39 2026 by rpki-client