$ rpki-client -vvf repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft File: 199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft (raw, json) Hash identifier: WxDBEZNJY06AbN8m5eCsxCPvJpEKGcFgNiq5X+yYnFk= Subject key identifier: 69:5E:5B:23:28:34:7E:F8:DF:2A:10:77:30:08:DB:FA:8B:8E:1B:48 Authority key identifier: 19:9D:3D:68:4E:CE:EF:FB:B1:7D:D5:98:A2:68:88:35:A6:F4:8C:E7 Certificate issuer: /CN=199D3D684ECEEFFBB17DD598A2688835A6F48CE7 Certificate serial: 32E1DBA89CD15287FF0643C5139A42D1190C2CE0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft Manifest number: 0261 Signing time: Tue 24 Mar 2026 11:31:06 +0000 Manifest this update: Tue 24 Mar 2026 11:26:06 +0000 Manifest next update: Fri 27 Mar 2026 18:56:06 +0000 Files and hashes: 1: 3130332e3139302e35312e302f32342d3234203d3e2039333431.roa (hash: Alr3MmF3FComiYShgHs/7REcddrGc/AGrj1Fejo7KUI=) 2: 3130332e3139302e35302e302f32342d3234203d3e2039333431.roa (hash: pIxViXZoycBV8A7CIi1fmiiQDu+3Ugcswhk6WPEdvN8=) 3: 3130332e3139302e35302e302f32332d3233203d3e2039333431.roa (hash: b9POD8lIGTkSBPPG5UCEDWwytPa4KOI/X1gSRB0o140=) 4: 199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl (hash: FjolKuTphdI+LfCnARfvE2eMWXeSupJdzZOUaQrOJM0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 18:56:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:e1:db:a8:9c:d1:52:87:ff:06:43:c5:13:9a:42:d1:19:0c:2c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=199D3D684ECEEFFBB17DD598A2688835A6F48CE7 Validity Not Before: Mar 24 11:26:06 2026 GMT Not After : Mar 27 18:56:06 2026 GMT Subject: CN=695E5B2328347EF8DF2A10773008DBFA8B8E1B48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:da:ab:c6:bd:1c:cd:4b:5d:fc:90:24:6a:1b: 56:bb:ae:62:1b:90:a8:3e:eb:76:93:71:1c:b3:24: e0:ae:a0:21:a4:7a:51:90:0b:1f:f6:12:97:0a:ed: ff:55:56:3b:1f:96:c6:fb:20:03:96:e7:57:8c:0c: 8a:76:3d:53:06:fe:7d:bd:bf:be:f5:90:27:a9:04: e8:21:29:a1:1b:6b:25:f8:7d:09:47:41:92:e1:a2: 02:66:1e:f7:61:7a:07:83:f9:bd:5b:ec:43:73:e3: d2:96:b0:dd:85:74:e7:5a:44:c4:67:eb:b4:73:1e: 39:7d:98:16:3a:aa:d3:4e:68:23:5a:59:2d:cc:ab: 32:33:83:86:fe:4b:29:03:07:23:71:65:b8:44:4e: d3:42:60:f6:c0:24:04:f1:3c:d2:cd:fe:cd:0c:9b: a8:6d:fe:b4:94:2f:53:a6:f6:a7:fd:99:01:1d:65: fd:ed:03:d7:fe:4a:7a:e9:ec:70:ac:0c:59:e5:87: 7c:e7:32:29:9a:57:e0:78:fa:2d:b5:d3:35:03:3a: b2:37:fa:28:bc:33:02:25:f5:79:52:af:de:da:d0: 46:66:1f:81:0c:5b:4c:7d:b2:76:29:97:11:78:47: 6d:50:41:e2:10:74:0e:ad:39:b6:64:9d:8a:68:c5: 99:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:5E:5B:23:28:34:7E:F8:DF:2A:10:77:30:08:DB:FA:8B:8E:1B:48 X509v3 Authority Key Identifier: keyid:19:9D:3D:68:4E:CE:EF:FB:B1:7D:D5:98:A2:68:88:35:A6:F4:8C:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:7c:f7:b3:b1:1c:8a:df:b6:83:af:c6:b8:95:6b:ab:0b:c7: 55:de:ad:7c:da:a7:ff:03:d7:e4:35:69:65:03:49:87:8e:43: af:1a:40:60:2e:e7:38:60:ac:9e:e5:a1:2c:60:f3:87:66:9b: 8a:65:0b:a6:30:e4:cf:9b:98:5b:0d:be:ae:28:b4:e2:35:b0: e2:ee:44:ef:20:f3:51:38:e9:40:c3:71:18:44:e0:f0:54:2c: 02:44:90:15:18:ce:b5:ca:81:0d:98:dc:b1:65:cd:a2:dc:86: f8:15:4b:fa:54:89:87:ff:f4:0c:d3:65:ee:33:9b:47:82:3f: 3a:a7:98:e4:ac:ed:b5:e3:e8:06:50:6f:ab:38:1b:b8:95:49: ba:a4:41:14:97:35:10:19:21:be:39:6d:b3:75:3c:f5:86:66: 9e:d6:c6:14:d2:29:72:77:47:e5:4d:8d:83:70:e4:59:0c:76: 5a:00:5f:61:31:d9:2b:71:7a:21:a3:8d:9a:87:a8:db:7c:9d: 6d:d9:d1:2b:59:79:22:c7:fe:90:28:68:ca:b0:cd:66:42:71: ee:c5:bc:95:40:81:7e:0b:d7:3c:c8:47:83:31:e7:4e:e7:7e: 96:b0:05:b8:91:9e:a5:c3:74:a9:68:06:3e:ce:da:0e:95:11: 91:ab:78:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMuHbqJzRUof/BkPFE5pC0RkMLOAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk5RDNENjg0RUNFRUZGQkIxN0RENTk4QTI2ODg4MzVB NkY0OENFNzAeFw0yNjAzMjQxMTI2MDZaFw0yNjAzMjcxODU2MDZaMDMxMTAvBgNV BAMTKDY5NUU1QjIzMjgzNDdFRjhERjJBMTA3NzMwMDhEQkZBOEI4RTFCNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh2qvGvRzNS138kCRqG1a7rmIb kKg+63aTcRyzJOCuoCGkelGQCx/2EpcK7f9VVjsflsb7IAOW51eMDIp2PVMG/n29 v771kCepBOghKaEbayX4fQlHQZLhogJmHvdhegeD+b1b7ENz49KWsN2FdOdaRMRn 67RzHjl9mBY6qtNOaCNaWS3MqzIzg4b+SykDByNxZbhETtNCYPbAJATxPNLN/s0M m6ht/rSUL1Om9qf9mQEdZf3tA9f+Snrp7HCsDFnlh3znMimaV+B4+i210zUDOrI3 +ii8MwIl9XlSr97a0EZmH4EMW0x9snYplxF4R21QQeIQdA6tObZknYpoxZkvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaV5bIyg0fvjfKhB3MAjb+ouOG0gwHwYDVR0j BBgwFoAUGZ09aE7O7/uxfdWYomiINab0jOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTgzODNlMi0yMDZjLTRiNzQtYmE0YS1jZDhhNGQ3Y2Q4NjEvMC8xOTlEM0Q2ODRF Q0VFRkZCQjE3REQ1OThBMjY4ODgzNUE2RjQ4Q0U3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk5RDNENjg0RUNFRUZGQkIxN0RENTk4QTI2ODg4MzVBNkY0 OENFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjU4MzgzZTItMjA2Yy00Yjc0LWJh NGEtY2Q4YTRkN2NkODYxLzAvMTk5RDNENjg0RUNFRUZGQkIxN0RENTk4QTI2ODg4 MzVBNkY0OENFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAJ897OxHIrftoOvxriVa6sLx1XerXzap/8D 1+Q1aWUDSYeOQ68aQGAu5zhgrJ7loSxg84dmm4plC6Yw5M+bmFsNvq4otOI1sOLu RO8g81E46UDDcRhE4PBULAJEkBUYzrXKgQ2Y3LFlzaLchvgVS/pUiYf/9AzTZe4z m0eCPzqnmOSs7bXj6AZQb6s4G7iVSbqkQRSXNRAZIb45bbN1PPWGZp7WxhTSKXJ3 R+VNjYNw5FkMdloAX2Ex2StxeiGjjZqHqNt8nW3Z0StZeSLH/pAoaMqwzWZCce7F vJVAgX4L1zzIR4Mx507nfpawBbiRnqXDdKloBj7O2g6VEZGreNA= -----END CERTIFICATE-----Generated at Thu Mar 26 07:31:12 2026 by rpki-client