$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.mft File: D0C90407CCD53717DFEA21D51A8921F20564AB25.mft (raw, json) Hash identifier: I1TAauqi4bkNOgdDquw+rZtnXebZL8ngvXpAkhZOMcs= Subject key identifier: F1:AF:C3:4D:82:58:04:1C:D0:21:EA:A8:06:BE:F3:95:CF:66:AA:9E Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25 Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25 Certificate serial: 05CCBA0F7ABE1AE5BB917C959B56C53ED27D6DEF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.mft Manifest number: 029A Signing time: Wed 25 Mar 2026 23:31:49 +0000 Manifest this update: Wed 25 Mar 2026 23:26:49 +0000 Manifest next update: Sun 29 Mar 2026 09:21:49 +0000 Files and hashes: 1: 3130332e31302e3133362e302f32342d3234203d3e203137363731.roa (hash: BoMk9BYxWAU3dq1MQNVtsM0MFrBh7p78QyltKqr9g0c=) 2: 3131342e3139392e38372e302f32342d3234203d3e203137363731.roa (hash: JDZ++3NswdcZTs4b1/7mdW+9JV5zG2BgJsHiceF53Vw=) 3: 3131342e3139392e39322e302f32342d3234203d3e20313338313036.roa (hash: nNepIgJrVfI6kOsD5oZ0/fFz2bnrI39ni1C56NkTJIY=) 4: 3230322e34372e37332e302f32342d3234203d3e20313338303936.roa (hash: XsFU8yDi1UVggRL6xF0CjtMg+pheAyho1MH6HaT3ACY=) 5: 3230322e35382e3232312e302f32342d3234203d3e203137363731.roa (hash: NQnLihc3rIsn0oRPp4k7z+uE8ME37YgOG3cS++ymF8g=) 6: 3131342e3139392e38312e302f32342d3234203d3e203137363731.roa (hash: ykSonLYEyu0zm2mh6ggpWONNbKSaAiZY5Moyu/n9AQs=) 7: 3230322e34372e37302e302f32342d3234203d3e203137363731.roa (hash: AOmv/SETLNpCT8mPfARWIldWEmKwNYJ3UgZ9KZMV5ok=) 8: 3230322e34372e36392e302f32342d3234203d3e203538383234.roa (hash: G15emKlFtrQ/Qz174DFzSajHhjAQlZRYNTmG97OYqeg=) 9: 3230322e34372e36372e302f32342d3234203d3e20313339393732.roa (hash: vaQrEnH5vf6cf1uIaBJSWFc5DLz4UCNc+eGkZ94HH38=) 10: 3230322e34372e37312e302f32342d3234203d3e203137363731.roa (hash: +hoHmBQr7ApYQgz85gxs1oJo881VmpLZspg+2dnvkNc=) 11: 3230322e35322e31302e302f32342d3234203d3e203137363731.roa (hash: BsaEGsDIb4NpxVBD+sRt/VyT26f80s0GzmcuTCzJC/Y=) 12: 3230322e35382e3231392e302f32342d3234203d3e203137363731.roa (hash: ys/9e5PWPAXuTo/Wlh1t1FxESj9yRQl91Bh52CcgQO4=) 13: 3131342e3139392e39302e302f32342d3234203d3e203137363731.roa (hash: JqkEwt8fBwmfmnn43vrVB0n4hoKtEkYtLlcur6N61OA=) 14: 3230322e35382e3232322e302f32342d3234203d3e203137363731.roa (hash: L3O6+bPJ6FkUpywUrNx192CibpEm+euY/WbZY0PZ9U8=) 15: 3230322e34372e37382e302f32342d3234203d3e203137363731.roa (hash: qXBEjFFBwy4hNLKWOABBNUB74G+pyKFh72GB53OO+Yw=) 16: 3230322e34372e36382e302f32342d3234203d3e203137363731.roa (hash: qGTNSBg3jOaN8YlbKiTzvAp6zwDO016zGRm/3lEYpS8=) 17: 3131342e3139392e38302e302f32302d3234203d3e203137363731.roa (hash: DQZbAqbZ2I0qbK8uPFs0DHGVDv3X2XlrbYWS072ZRbg=) 18: 3131342e3139392e39332e302f32342d3234203d3e203137363731.roa (hash: 1zSFHEmNd9QLY8mygXA5zr5Mq4c/IhErZ5P/75OgoQs=) 19: 3230322e34372e37362e302f32342d3234203d3e203137363731.roa (hash: NvlWGRbgoaPnRwf+M44dpKPct6bFYMbAL45ankh6oyE=) 20: 3230322e34372e37322e302f32342d3234203d3e203137363731.roa (hash: z0Sv37EqWulezugs4tkdJdCi8TQQVOz+RAMb9RgGue4=) 21: 3130332e31302e3133392e302f32342d3234203d3e203137363731.roa (hash: C9aeBtgr/OnDZJouAlW2wzdcSxs3qGDuh0UEN8xtu8g=) 22: 3131342e3139392e39352e302f32342d3234203d3e203137363731.roa (hash: sz26CHnKr2F8bmuHUWlBoeNQHpfLSIWJ3cXYCPj2JO0=) 23: 3230322e34372e37392e302f32342d3234203d3e203137363731.roa (hash: CcZ/f9UBxjacZvewtTGTBAPHEPkzq10sezCgqhKug1M=) 24: 3131342e3139392e38362e302f32342d3234203d3e203137363731.roa (hash: c2VbbDQIyw3QtOscBEnOIDt8U8np1mPhzuBYK+L6dGU=) 25: 3130332e31302e3133372e302f32342d3234203d3e203137363731.roa (hash: UceqEmsycGgmOvI4VAQQDo+Wd935j4iJaijnxaXgEkU=) 26: 3131342e3139392e38392e302f32342d3234203d3e203137363731.roa (hash: 5ECouxUYd8eZmtOvODQgQTwBQOs8grikpWyheHqoFRU=) 27: D0C90407CCD53717DFEA21D51A8921F20564AB25.crl (hash: zliz6FvURrgotEZsJ0/nRjgzgmKyoWAr99+RfWxCbWI=) 28: 3131342e3139392e39342e302f32342d3234203d3e203137363731.roa (hash: r3hHZQIsPrP24iXENG0rrTLwOaZGAcHfqGESyHWi1gM=) 29: 3230322e35382e3232302e302f32342d3234203d3e203137363731.roa (hash: Kp6hGwCGyGljeujbbbqSffFk9wLWV+G8ij/2bSRySwk=) 30: 3230322e35382e3231372e302f32342d3234203d3e203137363731.roa (hash: HPe4jRCPDwwA5Zyt+nzGEw5v+LustK+gT9SG1i2YaBM=) 31: 3230322e34372e37342e302f32342d3234203d3e203137363731.roa (hash: QdnAW3+fNntSRQUmYw3AiOOQYfUv3VxxLkSfW3lcO1M=) 32: 3230322e34372e36342e302f32342d3234203d3e20313533313230.roa (hash: HIqGuJtPzrFT5AnvLFyHAn/sNaNJd9ABV3MSzpl+Vwc=) 33: 3230322e35322e31312e302f32342d3234203d3e203137363731.roa (hash: GKI/Hj8wUUsqN8Q8yfvDKK5ZNvrTH37P4B+L6/osyPE=) 34: 3230322e34372e37352e302f32342d3234203d3e203137363731.roa (hash: +Vrx8uQFpKOMJHRuDx9FRLmIAy1v6fBAIwmY0BDeKSQ=) 35: 3230322e35322e382e302f32322d3234203d3e203137363731.roa (hash: tpvXDmXyqfBEiieUemN2Ig5wH3PBigf9A/HOg8htJ9c=) 36: 3230322e35382e3231362e302f32342d3234203d3e203137363731.roa (hash: 1Gx57kSy80O6p8cV39zMvTYixmzGuWD65pwpn7gUy5o=) 37: 3230322e35322e382e302f32342d3234203d3e203137363731.roa (hash: B1THNE4N4xDkKOCbO8bC6Ot8jW6BKyQuWTvhN8PDnRs=) 38: 3131342e3139392e38342e302f32342d3234203d3e203137363731.roa (hash: Fv+qIC3IfNuQO1habWtHbwVmfjWUghYayGqwlU7TWhU=) 39: 3230322e34372e37372e302f32342d3234203d3e203137363731.roa (hash: how+iSLniq7WxikmzEju5lni1AJZwBpBR0ynCA0f1bo=) 40: 3230322e35382e3232332e302f32342d3234203d3e203137363731.roa (hash: Zo/eyRZ8seZM2sZsVLDwUFuRMCvHDlMgzYAS9X3QA/s=) 41: 3230322e34372e36342e302f32342d3234203d3e203137363731.roa (hash: GQqimsS9pYpCliIJp8Ur2/BXJ/lrvG/GIXvKRIWHVVE=) 42: 3131342e3139392e38352e302f32342d3234203d3e203137363731.roa (hash: YDfOFZknJmltQShuVuku7DAx1bdpp2m0/8NLO2GpGPY=) 43: 3230322e34372e36342e302f32302d3234203d3e203137363731.roa (hash: KkDsIIEEW5r+h28jqzbrp+5dJNhmjw3WNWLTtPmkuoc=) 44: 3230322e34372e36362e302f32342d3234203d3e203137363731.roa (hash: 17fEqri4JUAUXxgdu/DILoU+kG4T3VkhdKb44stMtbs=) 45: 3131342e3139392e38332e302f32342d3234203d3e203137363731.roa (hash: OjzwPaiIZzWvbKf3eUdq+3sA4Hq//1pfhBmb+fsLC9Y=) 46: 3131342e3139392e39312e302f32342d3234203d3e203137363731.roa (hash: UB7oQvGMEaBAkJ6kIncI+D/+f6PwdV9Mq3k6snGKU64=) 47: 3230322e34372e36362e302f32342d3234203d3e20313338313036.roa (hash: 9ONX+mDl1Jj5P9OXYWWfQJp+9GA+K7q1hje2+Cod9xM=) 48: 3131342e3139392e38382e302f32342d3234203d3e203137363731.roa (hash: gA6E3IMlc+H+5Xi0cVjESL/t6P36p2dZ23sSt643iF0=) 49: 3130332e31302e3133362e302f32322d3234203d3e203137363731.roa (hash: 5YpGxbntRalodhdbzlYCNtjpBYFDZO05yo+Rh10i0pc=) 50: 3230322e35322e392e302f32342d3234203d3e203137363731.roa (hash: rqqsP9o/TpuDPorLMjHWSKKkcJUIMoRD9zeQV33gc+I=) 51: 3230322e34372e36352e302f32342d3234203d3e20313431303833.roa (hash: 0k6NhznMzTxaSkOFRjyqYBNGbMAdlnus4yilyWVzugU=) 52: 3130332e31302e3133382e302f32342d3234203d3e203137363731.roa (hash: F7+gl+f8MbuTtbMVTsg+YacNdPLM9/YHfdjl7w3FJYk=) 53: 3230322e35382e3231382e302f32342d3234203d3e203137363731.roa (hash: n3ornI3HiKvDhJRhcYlEKsvXiG8UbF+s9EDMb4jzGvo=) 54: 3230322e34372e36352e302f32342d3234203d3e203137363731.roa (hash: pMpCCe1Hy4mKrMAoTNVpPCTdWuHWThvt6WKFojySHE4=) 55: 3230322e35382e3231362e302f32312d3234203d3e203137363731.roa (hash: o7MQIpgAqLDibBg9CXwAkrwP0AUOc+SR1c18RIspqaM=) 56: 3131342e3139392e38322e302f32342d3234203d3e203137363731.roa (hash: 8Fqd+ys2XJvqKZDASVV3Kfj7Eqrkw1ZgWKMDvwqF1lI=) 57: 3131342e3139392e38302e302f32342d3234203d3e203137363731.roa (hash: fZD0RhHbaI5aYXXJ2OUUqS2SFxWWXb/qjgfnDshrIo4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 09:21:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:cc:ba:0f:7a:be:1a:e5:bb:91:7c:95:9b:56:c5:3e:d2:7d:6d:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25 Validity Not Before: Mar 25 23:26:49 2026 GMT Not After : Mar 29 09:21:49 2026 GMT Subject: CN=F1AFC34D8258041CD021EAA806BEF395CF66AA9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:29:20:7b:1d:bc:32:f8:70:42:54:7a:9d:57: b1:13:52:e1:5f:7b:71:3a:7d:eb:64:6e:a5:c6:44: e0:c1:e5:8b:f0:19:5e:34:79:bc:81:56:62:63:35: 83:cf:cf:a5:1d:14:ff:91:d5:71:6e:e8:80:00:0c: 99:f1:68:53:61:10:7a:fa:9c:97:d6:48:2d:38:75: 7d:ff:35:30:06:b7:95:2f:35:5d:85:d6:e3:08:bf: e1:b2:4e:1e:d3:87:3f:29:fa:0b:42:0f:bf:c0:41: ec:a9:df:55:5d:97:96:fd:84:98:2c:51:fa:f9:73: c7:10:19:e2:4a:7b:e2:3f:9c:68:50:b9:77:46:0b: f7:05:1d:73:65:dd:83:60:ae:ef:25:e3:e7:90:76: 49:a2:ed:61:31:c8:58:18:ba:c7:52:4a:0d:7e:5c: ae:d2:79:8f:c3:bf:85:d9:bd:19:e7:f8:e6:10:a0: ad:71:c2:94:6d:c7:9b:99:01:c6:e3:4a:e5:c7:38: 89:cf:52:6c:17:31:ee:34:6a:a2:1f:07:23:f9:9a: 76:6e:d5:e9:02:42:36:d9:70:95:b8:b6:83:e8:77: 9a:2d:89:09:34:76:5c:5b:fa:9f:ef:69:c6:3f:25: 18:9d:44:f4:39:db:f4:5b:1d:2b:d1:dc:d0:9d:7d: e1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:AF:C3:4D:82:58:04:1C:D0:21:EA:A8:06:BE:F3:95:CF:66:AA:9E X509v3 Authority Key Identifier: keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:e3:4e:2e:0d:c5:a1:da:6d:0f:3f:9f:e7:18:78:42:a7:b4: 85:7e:cb:b1:30:06:87:69:7d:65:6b:1c:14:af:bb:02:21:67: fb:0d:6b:b7:22:78:6a:c0:fc:44:6d:3c:ec:c5:3e:1c:3a:41: ad:4c:70:fb:ee:1e:a3:76:e7:b5:54:97:20:0c:3f:a4:01:6c: 65:62:61:3a:a9:5d:c7:69:e0:f7:9a:95:ee:4f:01:ab:eb:8c: 15:ab:48:c9:8c:85:5b:db:ed:47:31:75:ea:73:2a:3c:c3:d2: 25:03:d1:5e:1c:a2:9b:5c:72:a4:59:35:17:09:76:40:ea:f9: 65:6a:08:23:02:65:57:d3:8c:11:02:c5:8a:40:23:8d:24:bd: 18:d9:7a:9a:3a:8e:8b:4d:bf:01:6e:c5:72:3f:0e:e0:84:78: bd:3a:b0:6b:66:15:8c:c4:ca:70:0f:be:f7:4d:56:94:e5:b5: 4c:e3:9d:fa:65:b2:ab:63:d9:4f:a9:b7:be:3d:e0:5e:cb:d5: 3c:76:95:87:de:0e:63:2e:38:e6:13:47:79:08:90:fa:86:25: 00:97:e8:c7:55:ec:cc:29:27:c7:02:67:e7:25:30:23:5f:4e: de:24:5a:8e:24:bb:e5:ac:fb:e4:4d:fc:34:89:f6:f8:f9:a5: ff:81:e4:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBcy6D3q+GuW7kXyVm1bFPtJ9be8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIw NTY0QUIyNTAeFw0yNjAzMjUyMzI2NDlaFw0yNjAzMjkwOTIxNDlaMDMxMTAvBgNV BAMTKEYxQUZDMzREODI1ODA0MUNEMDIxRUFBODA2QkVGMzk1Q0Y2NkFBOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdKSB7Hbwy+HBCVHqdV7ETUuFf e3E6fetkbqXGRODB5YvwGV40ebyBVmJjNYPPz6UdFP+R1XFu6IAADJnxaFNhEHr6 nJfWSC04dX3/NTAGt5UvNV2F1uMIv+GyTh7Thz8p+gtCD7/AQeyp31Vdl5b9hJgs Ufr5c8cQGeJKe+I/nGhQuXdGC/cFHXNl3YNgru8l4+eQdkmi7WExyFgYusdSSg1+ XK7SeY/Dv4XZvRnn+OYQoK1xwpRtx5uZAcbjSuXHOInPUmwXMe40aqIfByP5mnZu 1ekCQjbZcJW4toPod5otiQk0dlxb+p/vacY/JRidRPQ52/RbHSvR3NCdfeH3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8a/DTYJYBBzQIeqoBr7zlc9mqp4wHwYDVR0j BBgwFoAU0MkEB8zVNxff6iHVGokh8gVkqyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2ViZjExNi1mZTJhLTQ5MWItYWFjOC0yMjBlYWQwYjU0ZTIvMC9EMEM5MDQwN0ND RDUzNzE3REZFQTIxRDUxQTg5MjFGMjA1NjRBQjI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIwNTY0 QUIyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGNlYmYxMTYtZmUyYS00OTFiLWFh YzgtMjIwZWFkMGI1NGUyLzAvRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIx RjIwNTY0QUIyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAnjTi4NxaHabQ8/n+cYeEKntIV+y7EwBodp fWVrHBSvuwIhZ/sNa7cieGrA/ERtPOzFPhw6Qa1McPvuHqN257VUlyAMP6QBbGVi YTqpXcdp4Peale5PAavrjBWrSMmMhVvb7UcxdepzKjzD0iUD0V4coptccqRZNRcJ dkDq+WVqCCMCZVfTjBECxYpAI40kvRjZepo6jotNvwFuxXI/DuCEeL06sGtmFYzE ynAPvvdNVpTltUzjnfplsqtj2U+pt7494F7L1Tx2lYfeDmMuOOYTR3kIkPqGJQCX 6MdV7MwpJ8cCZ+clMCNfTt4kWo4ku+Ws++RN/DSJ9vj5pf+B5P4= -----END CERTIFICATE-----Generated at Thu Mar 26 10:53:07 2026 by rpki-client