$ rpki-client -vvf repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft File: D5265466AE0186702AF52D11170A29AC32F54EF5.mft (raw, json) Hash identifier: cGM9DLzCG0FZCVpCHHzmDZwmyAkuPSrtmsW2Xd7gQn8= Subject key identifier: F7:25:A1:EA:C7:B9:D8:4A:6C:CA:B5:F8:D1:E8:6A:BD:F3:9A:C2:F3 Authority key identifier: D5:26:54:66:AE:01:86:70:2A:F5:2D:11:17:0A:29:AC:32:F5:4E:F5 Certificate issuer: /CN=D5265466AE0186702AF52D11170A29AC32F54EF5 Certificate serial: 512E8258ED902CECDC15FE008AA9F71DC90FC8F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D5265466AE0186702AF52D11170A29AC32F54EF5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft Manifest number: 011F Signing time: Sat 07 Mar 2026 01:20:48 +0000 Manifest this update: Sat 07 Mar 2026 01:15:48 +0000 Manifest next update: Tue 10 Mar 2026 03:43:48 +0000 Files and hashes: 1: 3135372e31352e302e302f32332d3234203d3e20313532373639.roa (hash: wP7WlQEFbQk8vKWjoSw9Vlhgkk9UBNqB1fB0mYPDnk8=) 2: D5265466AE0186702AF52D11170A29AC32F54EF5.crl (hash: BIJ665O33pPehIGIYa/oobl6VEkl6pN5LzNra1Z3+Hs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.crl rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D5265466AE0186702AF52D11170A29AC32F54EF5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:2e:82:58:ed:90:2c:ec:dc:15:fe:00:8a:a9:f7:1d:c9:0f:c8:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5265466AE0186702AF52D11170A29AC32F54EF5 Validity Not Before: Mar 7 01:15:48 2026 GMT Not After : Mar 10 03:43:48 2026 GMT Subject: CN=F725A1EAC7B9D84A6CCAB5F8D1E86ABDF39AC2F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f5:be:00:0f:65:bd:7d:ae:00:25:2a:89:bc: bb:5b:02:3f:b6:e5:6a:7f:73:01:55:c9:a6:07:a4: 9c:09:73:d2:02:26:b4:28:22:fe:a6:fd:64:38:62: 7b:3c:66:4e:00:28:7a:2c:c1:f6:b5:b4:78:cd:77: 6d:e6:bb:66:e2:19:72:dc:58:e5:21:a2:b3:cc:f8: de:88:d5:7a:2e:3b:16:1f:c5:10:3b:b9:06:c6:49: 69:ca:3f:cf:c3:90:d8:b2:24:8a:a5:d1:25:34:d2: 7c:35:78:b4:e4:57:3b:87:9d:4e:c6:28:2d:d4:d2: a0:25:ce:d2:61:67:3a:8c:0f:8d:4e:f0:20:76:d3: 57:b4:60:12:21:a6:38:73:9b:da:8a:5a:8c:08:4a: 94:3d:22:1c:6b:fa:82:b5:85:b0:e5:b5:7e:3d:13: 04:ff:7b:82:5d:33:1a:c2:23:72:7b:ce:6c:1e:21: 62:8a:09:1c:26:54:23:90:c4:ef:be:8c:a8:f9:94: 45:ce:fe:23:44:c0:b9:63:e9:cf:74:4a:4f:98:e1: 32:29:2b:25:de:22:a4:75:81:24:9d:cf:44:2f:b4: 95:fa:7a:46:16:52:07:93:e5:be:84:e2:56:8b:23: 38:b5:57:a9:d0:3b:5f:18:6f:22:8e:27:84:f9:5f: e4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:25:A1:EA:C7:B9:D8:4A:6C:CA:B5:F8:D1:E8:6A:BD:F3:9A:C2:F3 X509v3 Authority Key Identifier: keyid:D5:26:54:66:AE:01:86:70:2A:F5:2D:11:17:0A:29:AC:32:F5:4E:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D5265466AE0186702AF52D11170A29AC32F54EF5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:a7:23:0a:2f:91:a6:e9:cd:83:34:1d:de:85:06:47:1c:e9: 36:c3:86:d9:e3:10:e4:0d:ff:cf:ec:77:51:a6:68:1d:2c:70: da:a9:d7:6a:4e:e9:81:ad:59:a5:c3:a0:20:55:43:21:c7:fc: ed:aa:86:4c:b0:b9:57:2f:45:be:bf:0f:ed:1c:75:e4:a7:2a: ec:58:98:eb:35:26:38:78:16:49:2d:86:76:fc:9a:33:9b:24: 03:ed:5d:d8:23:e9:d7:24:4f:e2:fb:01:c8:80:ea:b1:ce:4b: 11:cb:1e:71:f3:dc:ef:c9:ea:7f:6b:43:eb:97:a2:a9:b1:99: 05:24:1f:5b:24:c8:1c:89:93:e3:45:4d:11:c8:a9:9c:da:12: 54:47:e9:34:6c:c5:d2:d0:ab:21:b7:b9:5d:8a:63:a5:2c:37: 73:79:0c:12:02:4c:3d:ff:71:73:2e:0e:bc:15:dd:1a:bd:ff: 09:6c:81:c5:18:b8:b0:de:72:43:21:11:d9:a6:56:98:76:35: 4a:e0:31:97:0a:6c:ad:cc:87:b4:55:42:ae:38:e8:92:b0:dc: de:91:f2:dc:d9:05:21:b9:b1:1f:f9:64:5a:a5:52:22:8d:d8: 64:af:3e:45:9f:48:04:64:79:8a:3b:d0:83:18:e1:3b:ae:62: 60:1b:19:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUS6CWO2QLOzcFf4Aiqn3HckPyPIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUyNjU0NjZBRTAxODY3MDJBRjUyRDExMTcwQTI5QUMz MkY1NEVGNTAeFw0yNjAzMDcwMTE1NDhaFw0yNjAzMTAwMzQzNDhaMDMxMTAvBgNV BAMTKEY3MjVBMUVBQzdCOUQ4NEE2Q0NBQjVGOEQxRTg2QUJERjM5QUMyRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS9b4AD2W9fa4AJSqJvLtbAj+2 5Wp/cwFVyaYHpJwJc9ICJrQoIv6m/WQ4Yns8Zk4AKHoswfa1tHjNd23mu2biGXLc WOUhorPM+N6I1XouOxYfxRA7uQbGSWnKP8/DkNiyJIql0SU00nw1eLTkVzuHnU7G KC3U0qAlztJhZzqMD41O8CB201e0YBIhpjhzm9qKWowISpQ9Ihxr+oK1hbDltX49 EwT/e4JdMxrCI3J7zmweIWKKCRwmVCOQxO++jKj5lEXO/iNEwLlj6c90Sk+Y4TIp KyXeIqR1gSSdz0QvtJX6ekYWUgeT5b6E4laLIzi1V6nQO18YbyKOJ4T5X+QlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9yWh6se52EpsyrX40ehqvfOawvMwHwYDVR0j BBgwFoAU1SZUZq4BhnAq9S0RFwoprDL1TvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDYxMzdhZS0yZWZiLTQzYzAtYmRiNy00M2Y1ZDkzOWNmMGMvMC9ENTI2NTQ2NkFF MDE4NjcwMkFGNTJEMTExNzBBMjlBQzMyRjU0RUY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDUyNjU0NjZBRTAxODY3MDJBRjUyRDExMTcwQTI5QUMzMkY1 NEVGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjQ2MTM3YWUtMmVmYi00M2MwLWJk YjctNDNmNWQ5MzljZjBjLzAvRDUyNjU0NjZBRTAxODY3MDJBRjUyRDExMTcwQTI5 QUMzMkY1NEVGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMSnIwovkabpzYM0Hd6FBkcc6TbDhtnjEOQN /8/sd1GmaB0scNqp12pO6YGtWaXDoCBVQyHH/O2qhkywuVcvRb6/D+0cdeSnKuxY mOs1Jjh4Fkkthnb8mjObJAPtXdgj6dckT+L7AciA6rHOSxHLHnHz3O/J6n9rQ+uX oqmxmQUkH1skyByJk+NFTRHIqZzaElRH6TRsxdLQqyG3uV2KY6UsN3N5DBICTD3/ cXMuDrwV3Rq9/wlsgcUYuLDeckMhEdmmVph2NUrgMZcKbK3Mh7RVQq446JKw3N6R 8tzZBSG5sR/5ZFqlUiKN2GSvPkWfSARkeYo70IMY4TuuYmAbGUw= -----END CERTIFICATE-----Generated at Sat Mar 7 17:49:05 2026 by rpki-client