$ rpki-client -vvf repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft File: D3BDA2123144839640DA280D6B971C12D0C9C929.mft (raw, json) Hash identifier: OgONdO369bXEnTaMZxZjCy9X+PyElhIvGhlOm+W+kvw= Subject key identifier: 0B:25:78:7D:B7:7B:A3:77:36:FE:EA:77:22:53:23:D1:1E:33:29:CC Authority key identifier: D3:BD:A2:12:31:44:83:96:40:DA:28:0D:6B:97:1C:12:D0:C9:C9:29 Certificate issuer: /CN=D3BDA2123144839640DA280D6B971C12D0C9C929 Certificate serial: 7F6BBF15616148D16C8736134F7B53B5361B2737 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer Subject info access: rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft Manifest number: 0227 Signing time: Mon 23 Mar 2026 23:51:53 +0000 Manifest this update: Mon 23 Mar 2026 23:46:53 +0000 Manifest next update: Fri 27 Mar 2026 07:31:53 +0000 Files and hashes: 1: D3BDA2123144839640DA280D6B971C12D0C9C929.crl (hash: TziCwW0tEQF5TvO559JS7jaVC64AM0T56HA1DSciL58=) 2: 323030313a6466333a336630303a3a2f34382d3438203d3e20313336383731.roa (hash: swZnIrS/N8jbG3MiapPB8F24idMt8GRsGrJ6YtoYjjc=) 3: 3130332e3130342e3133302e302f32342d3234203d3e20313336383731.roa (hash: 4X1JxcSmayIhgSwsgvbbBh0nVrfOfdW4VG7Ltuesc5s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.crl rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 07:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:6b:bf:15:61:61:48:d1:6c:87:36:13:4f:7b:53:b5:36:1b:27:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3BDA2123144839640DA280D6B971C12D0C9C929 Validity Not Before: Mar 23 23:46:53 2026 GMT Not After : Mar 27 07:31:53 2026 GMT Subject: CN=0B25787DB77BA37736FEEA77225323D11E3329CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cb:0e:19:4a:41:26:0c:88:4b:c4:c6:f9:2c: ba:13:d3:b3:e1:f4:12:ca:3a:aa:4e:cf:97:f2:9c: 1e:7a:76:f9:fd:21:3c:13:1f:8d:62:43:6a:34:6d: 82:d4:f0:45:68:57:f5:bc:ae:c0:bf:55:90:6a:06: 1a:61:9b:4a:e1:65:2e:85:0e:d2:3b:02:3e:98:3c: c7:6f:09:83:eb:8f:33:04:6c:0c:ff:c5:b7:53:09: c9:60:1e:48:cf:81:9b:b8:0f:d2:94:92:a0:ee:f3: e3:20:48:c5:48:3c:20:cc:01:59:b1:ff:aa:52:5a: ac:79:72:41:50:70:32:56:56:1f:27:2f:42:3b:b6: 50:ac:eb:0f:42:04:a7:10:77:13:61:37:ff:aa:4e: b2:11:00:89:90:27:d7:0b:fe:65:23:83:d0:3c:43: bb:b2:a0:48:65:ab:fb:2e:a6:9a:88:79:c6:d6:28: 57:52:1b:19:7b:20:cc:41:d8:28:d4:2a:0d:0a:09: 63:50:26:65:f9:f8:ba:07:bc:dd:6d:26:71:1a:fa: 86:9a:05:48:87:d2:98:f1:5d:53:f8:81:42:80:db: 4b:89:26:18:2e:06:96:d6:a5:5c:ad:f9:1a:e1:a5: d8:70:74:5a:da:f9:9a:95:1f:cd:c6:be:98:8d:a6: bb:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:25:78:7D:B7:7B:A3:77:36:FE:EA:77:22:53:23:D1:1E:33:29:CC X509v3 Authority Key Identifier: keyid:D3:BD:A2:12:31:44:83:96:40:DA:28:0D:6B:97:1C:12:D0:C9:C9:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:44:16:ba:12:48:5c:8b:04:87:1f:39:f9:a4:08:e3:2e:22: ae:ef:2b:3c:e3:00:24:23:30:19:c9:ec:89:6d:5e:ac:b1:eb: 34:52:53:2a:ba:d3:b5:0d:19:49:07:b1:a4:8c:20:5f:a4:68: 3e:7a:07:91:e3:79:16:75:e3:8a:ee:35:70:48:0d:b2:55:77: 9b:ad:ab:0a:b6:24:c3:3f:56:59:04:c0:9d:f0:33:e6:38:13: 22:b9:76:58:1d:ca:6b:71:ae:be:19:e3:c3:73:23:2f:16:9b: ca:f7:e9:95:5b:d9:0d:06:79:c7:12:56:33:ca:a0:66:1e:0c: 8c:6e:e9:e1:d4:fa:dc:c7:0c:35:2c:5e:77:38:53:56:94:7c: ff:fc:86:b8:64:43:9d:84:dc:42:ab:34:90:7d:11:f8:1d:f3: 50:74:89:b9:b2:4d:a9:b2:27:00:90:14:15:40:43:92:ab:73: 1a:bd:42:f5:a5:1d:47:29:5e:23:52:2e:ea:5a:ed:2d:aa:b8: c4:e9:d9:bc:c6:a0:96:d7:6d:0c:b2:62:be:e1:ab:c7:e0:c0: 0a:20:c5:f2:d3:c5:c9:1f:80:12:ee:16:ae:cb:17:5b:c1:3f: 4f:aa:0e:27:4e:c0:3e:dd:c9:85:4d:e8:da:e2:4a:b0:66:2b: 8d:77:00:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf2u/FWFhSNFshzYTT3tTtTYbJzcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNCREEyMTIzMTQ0ODM5NjQwREEyODBENkI5NzFDMTJE MEM5QzkyOTAeFw0yNjAzMjMyMzQ2NTNaFw0yNjAzMjcwNzMxNTNaMDMxMTAvBgNV BAMTKDBCMjU3ODdEQjc3QkEzNzczNkZFRUE3NzIyNTMyM0QxMUUzMzI5Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxyw4ZSkEmDIhLxMb5LLoT07Ph 9BLKOqpOz5fynB56dvn9ITwTH41iQ2o0bYLU8EVoV/W8rsC/VZBqBhphm0rhZS6F DtI7Aj6YPMdvCYPrjzMEbAz/xbdTCclgHkjPgZu4D9KUkqDu8+MgSMVIPCDMAVmx /6pSWqx5ckFQcDJWVh8nL0I7tlCs6w9CBKcQdxNhN/+qTrIRAImQJ9cL/mUjg9A8 Q7uyoEhlq/suppqIecbWKFdSGxl7IMxB2CjUKg0KCWNQJmX5+LoHvN1tJnEa+oaa BUiH0pjxXVP4gUKA20uJJhguBpbWpVyt+RrhpdhwdFra+ZqVH83GvpiNprtLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCyV4fbd7o3c2/up3IlMj0R4zKcwwHwYDVR0j BBgwFoAU072iEjFEg5ZA2igNa5ccEtDJySkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjA3NDRiMS0yNTI5LTRhZTItYjVkNS01ZDQ5OWQzZjUyYzIvMC9EM0JEQTIxMjMx NDQ4Mzk2NDBEQTI4MEQ2Qjk3MUMxMkQwQzlDOTI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDNCREEyMTIzMTQ0ODM5NjQwREEyODBENkI5NzFDMTJEMEM5 QzkyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYwNzQ0YjEtMjUyOS00YWUyLWI1 ZDUtNWQ0OTlkM2Y1MmMyLzAvRDNCREEyMTIzMTQ0ODM5NjQwREEyODBENkI5NzFD MTJEMEM5QzkyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB5EFroSSFyLBIcfOfmkCOMuIq7vKzzjACQj MBnJ7IltXqyx6zRSUyq607UNGUkHsaSMIF+kaD56B5HjeRZ144ruNXBIDbJVd5ut qwq2JMM/VlkEwJ3wM+Y4EyK5dlgdymtxrr4Z48NzIy8Wm8r36ZVb2Q0GeccSVjPK oGYeDIxu6eHU+tzHDDUsXnc4U1aUfP/8hrhkQ52E3EKrNJB9Efgd81B0ibmyTamy JwCQFBVAQ5Krcxq9QvWlHUcpXiNSLupa7S2quMTp2bzGoJbXbQyyYr7hq8fgwAog xfLTxckfgBLuFq7LF1vBP0+qDidOwD7dyYVN6NriSrBmK413AKs= -----END CERTIFICATE-----Generated at Thu Mar 26 07:37:13 2026 by rpki-client