$ rpki-client -vvf repo-rpki.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/D4171C4C06975A4309FC59F2D340D6801EC26DD1.mft File: D4171C4C06975A4309FC59F2D340D6801EC26DD1.mft (raw, json) Hash identifier: 2K3/PuP/P55PRWdleOmRNnRGFPGYFAlKIYkP9REyyGg= Subject key identifier: D7:0C:1D:BB:C7:B8:F9:8F:B4:BA:9D:B1:D5:07:2C:89:BD:0E:33:6B Authority key identifier: D4:17:1C:4C:06:97:5A:43:09:FC:59:F2:D3:40:D6:80:1E:C2:6D:D1 Certificate issuer: /CN=D4171C4C06975A4309FC59F2D340D6801EC26DD1 Certificate serial: 234E653A539CF244E1C42C07E11F522887B1DB8B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4171C4C06975A4309FC59F2D340D6801EC26DD1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/D4171C4C06975A4309FC59F2D340D6801EC26DD1.mft Manifest number: 024B Signing time: Thu 26 Mar 2026 05:01:19 +0000 Manifest this update: Thu 26 Mar 2026 04:56:19 +0000 Manifest next update: Sun 29 Mar 2026 06:45:19 +0000 Files and hashes: 1: 3130332e3138362e3230342e302f32342d3234203d3e20313439373233.roa (hash: 6UhOGV8DI7PfyTejWhCSmpLpe0trLgn56lREPd3WDVA=) 2: D4171C4C06975A4309FC59F2D340D6801EC26DD1.crl (hash: mSSnOCRsLQbGOyQrBiz2kriLw9cG4YFMShMxsHefF08=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/D4171C4C06975A4309FC59F2D340D6801EC26DD1.crl rsync://repo-rpki.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/D4171C4C06975A4309FC59F2D340D6801EC26DD1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4171C4C06975A4309FC59F2D340D6801EC26DD1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 06:45:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:4e:65:3a:53:9c:f2:44:e1:c4:2c:07:e1:1f:52:28:87:b1:db:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4171C4C06975A4309FC59F2D340D6801EC26DD1 Validity Not Before: Mar 26 04:56:19 2026 GMT Not After : Mar 29 06:45:19 2026 GMT Subject: CN=D70C1DBBC7B8F98FB4BA9DB1D5072C89BD0E336B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2f:99:88:a3:14:57:93:f4:67:63:bc:13:d5: 08:bd:43:fd:e7:f8:23:1c:fe:b7:7a:a1:e5:8b:51: a9:07:5f:1e:3d:47:b4:c2:62:20:dc:a8:14:23:74: 25:f2:e8:7b:82:1d:70:04:6e:f0:fa:79:a6:9f:1c: d0:3a:46:0e:ea:1d:7a:2d:67:9f:fb:f2:05:b1:4f: 86:f3:7b:36:5d:5d:33:c1:3d:bd:7a:3f:65:bb:91: 50:d3:bc:aa:13:e4:6e:cc:d5:0a:79:5a:b2:21:7e: 18:e6:a7:b7:90:53:6f:69:c1:7f:86:af:2e:fd:5f: 38:0b:d6:12:f4:34:fb:62:19:8b:8e:52:e0:47:41: 87:94:51:de:bc:9a:d0:7a:b6:96:b5:5a:8f:0d:91: 94:7d:8e:5e:d6:31:da:54:cc:0e:6a:39:2f:1c:a7: c8:f6:ad:d7:17:9b:0e:32:1c:4b:a6:d3:5e:61:1b: 56:14:63:3f:3f:0d:3c:34:db:b8:0a:4a:6b:74:82: 3d:f4:8d:86:87:55:2c:9a:a7:a7:87:c4:52:c3:f1: 85:20:60:4d:e2:c9:05:cc:16:fb:d1:bc:72:93:9c: 73:ea:07:29:3d:94:e7:ae:f3:b6:8f:6c:f8:fb:fb: 75:bc:8d:d9:e0:77:83:1c:71:0b:2b:59:ef:87:f8: 5f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:0C:1D:BB:C7:B8:F9:8F:B4:BA:9D:B1:D5:07:2C:89:BD:0E:33:6B X509v3 Authority Key Identifier: keyid:D4:17:1C:4C:06:97:5A:43:09:FC:59:F2:D3:40:D6:80:1E:C2:6D:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/D4171C4C06975A4309FC59F2D340D6801EC26DD1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4171C4C06975A4309FC59F2D340D6801EC26DD1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/D4171C4C06975A4309FC59F2D340D6801EC26DD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:de:1b:d0:31:75:98:c7:f3:d3:a6:ce:2e:a5:46:e9:fc:a6: 30:7c:f5:8d:e4:68:b3:46:38:f8:04:7b:7b:02:99:50:cb:d6: 55:e7:9e:1c:25:01:17:18:cb:da:49:87:24:2f:a5:15:62:e0: 02:c1:e9:df:dc:9d:0e:c8:04:d2:5b:d6:dd:02:d7:cf:23:3d: 05:07:8e:67:f3:07:57:c9:fe:70:5e:df:8c:90:cd:3f:0e:4a: 1c:10:f3:e3:45:33:22:f6:29:21:21:c8:aa:2c:22:50:c8:58: 0a:dc:4d:64:f1:71:53:ca:ad:0b:e0:87:44:f1:df:ce:ee:e3: b7:67:b0:82:a8:fc:00:0c:c0:27:8e:51:7a:b6:83:72:c9:38: 6d:b8:b3:40:2b:b6:e9:73:5a:20:e8:61:52:5f:ac:05:38:04: e0:d9:40:c1:55:8a:44:51:32:01:e4:28:13:a3:32:2e:14:0c: eb:20:05:43:14:ab:d7:ad:db:68:e4:e7:a5:a7:d3:d0:c1:b2: 68:2d:75:f2:76:f8:06:ac:84:11:cb:f1:67:90:90:38:6c:4c: a5:13:15:58:71:bf:b1:57:74:00:31:a9:a5:3d:3c:b3:bc:9d: d5:bb:85:17:5b:fa:20:c5:fd:bf:9f:f9:66:4a:77:5d:cb:8d: 0f:fa:58:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI05lOlOc8kThxCwH4R9SKIex24swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQxNzFDNEMwNjk3NUE0MzA5RkM1OUYyRDM0MEQ2ODAx RUMyNkREMTAeFw0yNjAzMjYwNDU2MTlaFw0yNjAzMjkwNjQ1MTlaMDMxMTAvBgNV BAMTKEQ3MEMxREJCQzdCOEY5OEZCNEJBOURCMUQ1MDcyQzg5QkQwRTMzNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGL5mIoxRXk/RnY7wT1Qi9Q/3n +CMc/rd6oeWLUakHXx49R7TCYiDcqBQjdCXy6HuCHXAEbvD6eaafHNA6Rg7qHXot Z5/78gWxT4bzezZdXTPBPb16P2W7kVDTvKoT5G7M1Qp5WrIhfhjmp7eQU29pwX+G ry79XzgL1hL0NPtiGYuOUuBHQYeUUd68mtB6tpa1Wo8NkZR9jl7WMdpUzA5qOS8c p8j2rdcXmw4yHEum015hG1YUYz8/DTw027gKSmt0gj30jYaHVSyap6eHxFLD8YUg YE3iyQXMFvvRvHKTnHPqByk9lOeu87aPbPj7+3W8jdngd4MccQsrWe+H+F83AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1wwdu8e4+Y+0up2x1Qcsib0OM2swHwYDVR0j BBgwFoAU1BccTAaXWkMJ/Fny00DWgB7CbdEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NzY4MGQwZC1lMjQwLTRhYWYtYmMyMy0yODIzNTkzNzMyODkvMC9ENDE3MUM0QzA2 OTc1QTQzMDlGQzU5RjJEMzQwRDY4MDFFQzI2REQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDQxNzFDNEMwNjk3NUE0MzA5RkM1OUYyRDM0MEQ2ODAxRUMy NkREMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDc2ODBkMGQtZTI0MC00YWFmLWJj MjMtMjgyMzU5MzczMjg5LzAvRDQxNzFDNEMwNjk3NUE0MzA5RkM1OUYyRDM0MEQ2 ODAxRUMyNkREMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ3eG9AxdZjH89Omzi6lRun8pjB89Y3kaLNG OPgEe3sCmVDL1lXnnhwlARcYy9pJhyQvpRVi4ALB6d/cnQ7IBNJb1t0C188jPQUH jmfzB1fJ/nBe34yQzT8OShwQ8+NFMyL2KSEhyKosIlDIWArcTWTxcVPKrQvgh0Tx 387u47dnsIKo/AAMwCeOUXq2g3LJOG24s0ArtulzWiDoYVJfrAU4BODZQMFVikRR MgHkKBOjMi4UDOsgBUMUq9et22jk56Wn09DBsmgtdfJ2+AashBHL8WeQkDhsTKUT FVhxv7FXdAAxqaU9PLO8ndW7hRdb+iDF/b+f+WZKd13LjQ/6WH8= -----END CERTIFICATE-----Generated at Thu Mar 26 07:27:33 2026 by rpki-client