$ rpki-client -vvf repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft File: 322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft (raw, json) Hash identifier: HWoDjbvKZSbovhSaNsPTLaozVniNi2EUDGAQaRnaekA= Subject key identifier: D2:0B:CD:C1:62:49:66:35:B9:48:EF:39:08:FC:99:4B:8F:DC:76:DA Authority key identifier: 32:2B:7B:BC:7B:E2:A8:4D:8D:64:4A:6B:68:33:39:63:51:7C:AF:FA Certificate issuer: /CN=322B7BBC7BE2A84D8D644A6B68333963517CAFFA Certificate serial: 737A62292D202B4C1DF18CDDA68B9BE5804F11B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft Manifest number: 024F Signing time: Tue 24 Mar 2026 22:12:41 +0000 Manifest this update: Tue 24 Mar 2026 22:07:41 +0000 Manifest next update: Sat 28 Mar 2026 02:47:41 +0000 Files and hashes: 1: 322B7BBC7BE2A84D8D644A6B68333963517CAFFA.crl (hash: 4izuYabrbbefh+yIEiobNhIpNkaREGn8qvfAR9qUEMA=) 2: 3130332e3138372e38382e302f32332d3233203d3e20313439393439.roa (hash: z3n/tIXZwtPYvBaaNLrRacxN7HfPUi9J+DnSjLm+L1k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.crl rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 02:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:7a:62:29:2d:20:2b:4c:1d:f1:8c:dd:a6:8b:9b:e5:80:4f:11:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=322B7BBC7BE2A84D8D644A6B68333963517CAFFA Validity Not Before: Mar 24 22:07:41 2026 GMT Not After : Mar 28 02:47:41 2026 GMT Subject: CN=D20BCDC162496635B948EF3908FC994B8FDC76DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:df:3a:90:cb:8b:90:52:1e:35:a6:60:34:31: 9a:a7:9f:e7:7d:0d:96:a2:e2:57:98:c2:3a:16:8d: e0:5c:8c:f9:db:a1:d4:54:f6:ed:3f:32:fb:26:75: ac:18:60:9a:72:eb:16:c3:29:d6:ad:56:50:1e:56: 79:d9:2e:78:fd:c0:a1:70:56:78:31:54:fd:f6:19: 5e:df:8d:55:ea:df:9a:4b:08:4e:29:9b:57:2f:e2: 8f:2e:b7:9c:c9:10:76:55:68:3a:d2:0a:45:09:79: 0c:6a:3c:af:6d:77:85:f1:fd:03:1a:96:a3:22:df: 65:00:f6:a3:13:98:ff:ec:d5:c4:95:88:d6:fd:f3: 1f:48:c1:97:85:d2:c9:97:3c:0d:e5:97:29:c2:04: 73:43:4d:e3:7b:4a:38:98:3b:b9:5d:b6:1c:48:3f: c9:2a:76:0c:49:50:1e:06:69:ff:0a:15:69:cf:71: 2d:3d:0b:64:9d:95:ab:8b:8e:eb:86:04:35:c7:0f: 7b:b0:72:2a:be:47:77:f0:67:61:4d:a7:cc:e9:dc: 8e:58:a5:f4:7a:a2:2a:38:c1:12:d2:a3:ae:d1:26: 70:fa:b5:39:79:cb:d1:71:6c:80:4d:b4:aa:55:74: 89:85:c6:01:28:78:67:57:2f:74:7a:cc:6f:24:cd: b5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:0B:CD:C1:62:49:66:35:B9:48:EF:39:08:FC:99:4B:8F:DC:76:DA X509v3 Authority Key Identifier: keyid:32:2B:7B:BC:7B:E2:A8:4D:8D:64:4A:6B:68:33:39:63:51:7C:AF:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:14:d2:4f:65:12:eb:b5:bd:11:1e:e7:24:5f:fb:59:9e:42: 25:68:00:3a:b8:b5:e6:8e:4b:b2:ac:08:2f:88:dc:65:38:5d: d2:cd:09:d8:a0:f9:64:aa:df:77:ca:19:50:d6:8d:ff:7c:08: 01:e1:e0:91:41:f3:f6:90:41:bc:8f:ce:46:8f:85:06:fd:13: 55:bd:0c:43:52:05:1f:d4:e6:d3:82:87:61:04:7b:ad:cb:4a: 31:3e:c5:6f:df:ca:56:bd:c8:f0:0a:9d:56:53:f6:d4:03:07: f9:98:64:3b:f9:73:ae:ae:0f:be:f1:35:ca:70:13:d6:79:ae: 60:bf:33:be:ce:55:f3:2f:59:76:2e:d6:19:8c:7e:94:1b:f6: 00:1a:00:bc:16:2e:f8:cc:af:ef:98:5d:1b:09:99:0c:62:1e: 13:d5:77:0a:71:d1:4f:15:c8:04:3b:cd:32:75:e2:06:22:2c: c8:9a:c6:72:95:c9:3f:d2:a3:85:ba:af:2a:55:6a:c8:43:d7: c9:f4:90:18:10:15:c9:63:73:84:43:a6:40:7e:3f:be:31:06: d1:40:d8:a3:cc:c7:0a:8e:2a:bc:d1:71:8b:6a:e6:33:b9:5f: 01:b1:84:23:cb:8f:71:86:68:24:f1:3d:40:d2:d0:70:f6:dc: d2:f9:b1:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc3piKS0gK0wd8Yzdpoub5YBPEbEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzIyQjdCQkM3QkUyQTg0RDhENjQ0QTZCNjgzMzM5NjM1 MTdDQUZGQTAeFw0yNjAzMjQyMjA3NDFaFw0yNjAzMjgwMjQ3NDFaMDMxMTAvBgNV BAMTKEQyMEJDREMxNjI0OTY2MzVCOTQ4RUYzOTA4RkM5OTRCOEZEQzc2REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC33zqQy4uQUh41pmA0MZqnn+d9 DZai4leYwjoWjeBcjPnbodRU9u0/MvsmdawYYJpy6xbDKdatVlAeVnnZLnj9wKFw VngxVP32GV7fjVXq35pLCE4pm1cv4o8ut5zJEHZVaDrSCkUJeQxqPK9td4Xx/QMa lqMi32UA9qMTmP/s1cSViNb98x9IwZeF0smXPA3llynCBHNDTeN7SjiYO7ldthxI P8kqdgxJUB4Gaf8KFWnPcS09C2SdlauLjuuGBDXHD3uwciq+R3fwZ2FNp8zp3I5Y pfR6oio4wRLSo67RJnD6tTl5y9FxbIBNtKpVdImFxgEoeGdXL3R6zG8kzbX1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0gvNwWJJZjW5SO85CPyZS4/cdtowHwYDVR0j BBgwFoAUMit7vHviqE2NZEpraDM5Y1F8r/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDUwZjBmNS1iODgzLTRiMjQtOTc5Mi03ZTk1N2FmODhiZjgvMC8zMjJCN0JCQzdC RTJBODREOEQ2NDRBNkI2ODMzMzk2MzUxN0NBRkZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzIyQjdCQkM3QkUyQTg0RDhENjQ0QTZCNjgzMzM5NjM1MTdD QUZGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ1MGYwZjUtYjg4My00YjI0LTk3 OTItN2U5NTdhZjg4YmY4LzAvMzIyQjdCQkM3QkUyQTg0RDhENjQ0QTZCNjgzMzM5 NjM1MTdDQUZGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHEU0k9lEuu1vREe5yRf+1meQiVoADq4teaO S7KsCC+I3GU4XdLNCdig+WSq33fKGVDWjf98CAHh4JFB8/aQQbyPzkaPhQb9E1W9 DENSBR/U5tOCh2EEe63LSjE+xW/fyla9yPAKnVZT9tQDB/mYZDv5c66uD77xNcpw E9Z5rmC/M77OVfMvWXYu1hmMfpQb9gAaALwWLvjMr++YXRsJmQxiHhPVdwpx0U8V yAQ7zTJ14gYiLMiaxnKVyT/So4W6rypVashD18n0kBgQFcljc4RDpkB+P74xBtFA 2KPMxwqOKrzRcYtq5jO5XwGxhCPLj3GGaCTxPUDS0HD23NL5sZY= -----END CERTIFICATE-----Generated at Thu Mar 26 16:29:22 2026 by rpki-client