$ rpki-client -vvf repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.mft File: 993D6DBC0B37BB59CEA86CE024A349353C57D366.mft (raw, json) Hash identifier: UPaVKREiZfmMXP2kPZoAyh9zV1zP5C0ZB/pT3zMn1SI= Subject key identifier: 89:76:DF:1D:9C:ED:46:5C:8A:B9:15:A3:97:8E:A5:BA:67:55:65:64 Authority key identifier: 99:3D:6D:BC:0B:37:BB:59:CE:A8:6C:E0:24:A3:49:35:3C:57:D3:66 Certificate issuer: /CN=993D6DBC0B37BB59CEA86CE024A349353C57D366 Certificate serial: 232D2D89575503C7B6C84DD9A67328E7CEF23BB0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/993D6DBC0B37BB59CEA86CE024A349353C57D366.cer Subject info access: rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.mft Manifest number: 025F Signing time: Wed 25 Mar 2026 16:42:15 +0000 Manifest this update: Wed 25 Mar 2026 16:37:15 +0000 Manifest next update: Sat 28 Mar 2026 16:48:15 +0000 Files and hashes: 1: 993D6DBC0B37BB59CEA86CE024A349353C57D366.crl (hash: P9jzwxuC5mrrq+UEBwNj79jJyUG9g4bjILdffU9ka2Q=) 2: 3130332e3136392e37322e302f32332d3234203d3e203338333230.roa (hash: cdGAeUhe3kIPmDecWgpPKnokA1KeiEEUi4vBzlg/GUY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.crl rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/993D6DBC0B37BB59CEA86CE024A349353C57D366.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 16:48:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:2d:2d:89:57:55:03:c7:b6:c8:4d:d9:a6:73:28:e7:ce:f2:3b:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=993D6DBC0B37BB59CEA86CE024A349353C57D366 Validity Not Before: Mar 25 16:37:15 2026 GMT Not After : Mar 28 16:48:15 2026 GMT Subject: CN=8976DF1D9CED465C8AB915A3978EA5BA67556564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:35:5a:f7:9e:14:1e:4b:f8:3e:d0:87:02:48: 18:16:4d:a8:19:71:cb:91:12:e4:20:5c:45:4d:91: 93:4c:f1:fc:9c:78:0b:49:b2:d4:7f:55:2b:85:71: 21:9b:bc:82:af:8a:ee:77:72:3b:e5:f9:1b:04:d0: bf:65:3f:72:4c:3e:c4:d1:86:30:03:66:91:ec:a1: a4:9e:a4:f1:fb:2d:9d:fa:b8:36:a4:40:64:c6:0f: 66:d7:40:9e:e8:90:74:9b:97:d4:26:9a:79:e1:d1: 60:a8:35:37:fc:06:39:6c:60:da:66:4e:26:d8:7e: 6c:73:f4:e4:a0:e4:4e:04:17:19:16:6e:46:6b:4b: fc:72:1c:d2:8e:33:48:18:a7:a4:1b:d9:61:d1:51: c6:99:f1:73:4b:00:db:3f:d7:f7:06:dd:bd:64:72: d4:46:70:26:54:fe:06:08:f3:30:e4:bd:58:80:73: d8:81:1c:c1:50:c3:de:e1:f6:53:09:50:20:8d:fb: 8d:3b:58:ba:c4:9b:8b:7f:33:15:74:99:6b:93:b6: 01:30:8a:2d:e6:25:de:15:b0:c1:b8:f3:6a:82:9f: b2:52:c9:49:b7:34:bb:35:76:e5:30:c3:5b:6a:db: 2e:0c:3d:2a:e1:eb:9d:90:89:9c:62:94:7d:c1:61: dd:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:76:DF:1D:9C:ED:46:5C:8A:B9:15:A3:97:8E:A5:BA:67:55:65:64 X509v3 Authority Key Identifier: keyid:99:3D:6D:BC:0B:37:BB:59:CE:A8:6C:E0:24:A3:49:35:3C:57:D3:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/993D6DBC0B37BB59CEA86CE024A349353C57D366.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:0a:8e:ff:30:08:f0:d1:3f:95:24:99:59:5a:b8:c9:53:0c: 2b:e0:56:cd:8f:24:b1:e2:6c:ac:e1:78:f2:ae:12:6f:e0:67: 43:4c:37:56:34:1a:d1:c4:32:63:be:d1:66:f7:4b:3f:c4:df: b0:95:ee:a6:81:93:af:42:aa:8f:1b:fa:90:c6:b5:4a:36:c7: cb:e4:a8:57:f5:11:85:32:04:40:88:32:87:51:04:05:0a:3f: f5:c9:10:60:28:33:6c:91:21:f4:26:9e:60:39:7d:f0:c3:ff: e1:44:88:e8:ad:53:cf:2a:6c:f1:ac:7e:87:34:9b:82:6d:d6: de:e2:54:34:16:f2:3c:01:2d:36:fb:d3:af:1c:73:31:f8:87: f5:93:36:1e:0a:ea:da:e6:1c:aa:11:95:92:1d:ce:b1:6e:13: 9f:bf:6c:d6:77:69:ca:be:0e:02:0c:fc:38:73:40:e1:83:65: a9:ee:45:35:ef:32:9e:b5:27:78:99:58:1e:3c:71:d1:f8:e7: 37:11:75:c3:25:c4:73:5d:fd:35:7f:7a:59:da:15:88:44:e7: 86:ae:18:88:31:24:87:9b:f5:0a:60:03:77:af:ef:9c:5f:95: 11:cb:16:71:26:9b:e7:25:ba:58:5f:96:43:d1:40:d4:e9:cb: 24:f4:e0:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIy0tiVdVA8e2yE3ZpnMo587yO7AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTkzRDZEQkMwQjM3QkI1OUNFQTg2Q0UwMjRBMzQ5MzUz QzU3RDM2NjAeFw0yNjAzMjUxNjM3MTVaFw0yNjAzMjgxNjQ4MTVaMDMxMTAvBgNV BAMTKDg5NzZERjFEOUNFRDQ2NUM4QUI5MTVBMzk3OEVBNUJBNjc1NTY1NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8NVr3nhQeS/g+0IcCSBgWTagZ ccuREuQgXEVNkZNM8fyceAtJstR/VSuFcSGbvIKviu53cjvl+RsE0L9lP3JMPsTR hjADZpHsoaSepPH7LZ36uDakQGTGD2bXQJ7okHSbl9Qmmnnh0WCoNTf8BjlsYNpm TibYfmxz9OSg5E4EFxkWbkZrS/xyHNKOM0gYp6Qb2WHRUcaZ8XNLANs/1/cG3b1k ctRGcCZU/gYI8zDkvViAc9iBHMFQw97h9lMJUCCN+407WLrEm4t/MxV0mWuTtgEw ii3mJd4VsMG482qCn7JSyUm3NLs1duUww1tq2y4MPSrh652QiZxilH3BYd3hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiXbfHZztRlyKuRWjl46lumdVZWQwHwYDVR0j BBgwFoAUmT1tvAs3u1nOqGzgJKNJNTxX02YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDFhMDJlNi0yMTcxLTQ3YzktODZjOS1kNWQ4MGY0NTg4MzYvMC85OTNENkRCQzBC MzdCQjU5Q0VBODZDRTAyNEEzNDkzNTNDNTdEMzY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTkzRDZEQkMwQjM3QkI1OUNFQTg2Q0UwMjRBMzQ5MzUzQzU3 RDM2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQxYTAyZTYtMjE3MS00N2M5LTg2 YzktZDVkODBmNDU4ODM2LzAvOTkzRDZEQkMwQjM3QkI1OUNFQTg2Q0UwMjRBMzQ5 MzUzQzU3RDM2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHAKjv8wCPDRP5UkmVlauMlTDCvgVs2PJLHi bKzhePKuEm/gZ0NMN1Y0GtHEMmO+0Wb3Sz/E37CV7qaBk69Cqo8b+pDGtUo2x8vk qFf1EYUyBECIModRBAUKP/XJEGAoM2yRIfQmnmA5ffDD/+FEiOitU88qbPGsfoc0 m4Jt1t7iVDQW8jwBLTb7068cczH4h/WTNh4K6trmHKoRlZIdzrFuE5+/bNZ3acq+ DgIM/DhzQOGDZanuRTXvMp61J3iZWB48cdH45zcRdcMlxHNd/TV/elnaFYhE54au GIgxJIeb9QpgA3ev75xflRHLFnEmm+clulhflkPRQNTpyyT04Mw= -----END CERTIFICATE-----Generated at Thu Mar 26 23:05:00 2026 by rpki-client