$ rpki-client -vvf repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft File: 732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft (raw, json) Hash identifier: 1cub/u1OVK+H3ib+bCCE8mbq4sRRO/8CLZjbtoPIEZU= Subject key identifier: 12:85:DD:0A:E8:E2:FE:9E:F5:90:AA:EA:35:D1:C1:DA:5D:05:2F:0F Authority key identifier: 73:2F:46:D7:4C:7A:8C:5D:88:8A:70:91:A7:06:F3:A0:9E:FE:96:A3 Certificate issuer: /CN=732F46D74C7A8C5D888A7091A706F3A09EFE96A3 Certificate serial: 11AF1718FF310E6680296C6B3E4C413E79B5B8AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft Manifest number: 02DE Signing time: Thu 26 Mar 2026 05:01:14 +0000 Manifest this update: Thu 26 Mar 2026 04:56:14 +0000 Manifest next update: Sun 29 Mar 2026 10:45:14 +0000 Files and hashes: 1: 3230322e3138332e302e302f31392d3139203d3e203338313630.roa (hash: ZbhTpnhvlC+ot1vXIGnAO0O9YCHrvhbkpZrUJwD0KO4=) 2: 732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl (hash: Au0h+1QTJ6KoGme+UBQ+1XurK03IULRz3GtEPBLaEpE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 10:45:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:af:17:18:ff:31:0e:66:80:29:6c:6b:3e:4c:41:3e:79:b5:b8:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=732F46D74C7A8C5D888A7091A706F3A09EFE96A3 Validity Not Before: Mar 26 04:56:14 2026 GMT Not After : Mar 29 10:45:14 2026 GMT Subject: CN=1285DD0AE8E2FE9EF590AAEA35D1C1DA5D052F0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:31:44:82:11:77:47:1d:34:62:0b:2c:c4:57: ee:6a:9d:aa:15:1d:22:51:e5:c0:ab:d7:ec:00:b5: e5:53:e0:f6:8b:4b:ea:69:ee:73:90:15:3b:5c:3f: fa:9a:1e:ae:7b:f8:35:e1:74:a2:4f:42:ea:80:9c: 45:e2:a7:b2:97:00:7f:3e:be:f1:7d:82:d2:30:62: 40:2d:7f:9c:0a:17:c1:52:e0:93:3a:35:8c:5c:83: 8e:43:bf:e6:a6:84:56:e9:e3:4c:64:e5:63:27:4c: 22:02:87:8c:8f:26:44:b0:2b:5f:71:30:2d:6e:dc: 3d:0d:ef:b8:08:9c:cb:fe:7f:c3:4d:6d:72:53:0c: 71:27:f7:8a:66:18:cd:1f:f1:02:16:68:fa:02:2f: 62:c7:99:60:1d:3a:4f:49:62:5e:db:d8:95:62:b8: 0b:ba:f5:db:59:09:70:8d:6f:10:b6:1e:fc:ca:75: 48:67:2f:c4:2d:63:f1:25:29:fd:b9:71:5d:28:d2: e1:00:97:e3:81:d8:af:f4:17:ca:08:e6:70:57:76: 57:80:e1:24:c8:0a:1f:41:fb:88:86:d0:a3:d1:43: 2e:78:90:ab:5a:86:88:93:0d:ef:e7:b9:c0:02:84: f9:8c:25:ae:1f:d0:07:82:54:7b:80:c5:3e:f1:6b: 92:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:85:DD:0A:E8:E2:FE:9E:F5:90:AA:EA:35:D1:C1:DA:5D:05:2F:0F X509v3 Authority Key Identifier: keyid:73:2F:46:D7:4C:7A:8C:5D:88:8A:70:91:A7:06:F3:A0:9E:FE:96:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:4f:76:d7:37:d7:ea:25:f8:38:c3:70:02:51:a2:3a:09:28: db:83:b5:81:ef:fb:a1:ee:1b:ad:0c:f7:eb:7b:d0:68:2a:12: 93:8d:1a:96:cc:c2:96:aa:34:e9:92:a7:a3:42:55:84:17:44: c7:a6:94:d7:9e:56:bb:04:66:29:99:c2:24:20:4d:17:45:07: 04:09:2f:18:da:88:b6:4a:ae:c8:be:cb:09:26:bb:c2:4a:7f: 07:8f:a8:15:eb:f4:6f:f2:41:94:ff:cb:6b:ee:0a:61:b8:1f: fa:2f:53:bb:dd:e7:e6:0b:59:bf:69:a4:3c:78:3e:64:a3:99: bf:66:49:e0:91:68:fa:4f:ed:b7:0f:5a:0d:33:b4:34:d7:1f: a3:08:2a:34:38:89:80:05:d2:cc:19:f8:47:47:ad:1b:49:fa: a4:79:1d:20:44:43:59:35:d2:f0:74:b0:09:8f:bf:cb:eb:21: 00:90:e8:f2:e5:d5:4f:d4:18:53:0e:d5:9a:8e:ac:da:3c:e7: 8a:9e:d1:24:49:89:c3:58:f6:0d:cd:6c:d5:e3:aa:02:ec:62: 77:33:e4:d5:d1:2d:dc:7c:02:62:4e:a5:1f:f1:78:3f:bd:8a: 54:6c:b9:68:9f:87:fb:51:62:39:97:24:20:5f:8d:46:d6:34: f9:dd:55:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEa8XGP8xDmaAKWxrPkxBPnm1uKowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzMyRjQ2RDc0QzdBOEM1RDg4OEE3MDkxQTcwNkYzQTA5 RUZFOTZBMzAeFw0yNjAzMjYwNDU2MTRaFw0yNjAzMjkxMDQ1MTRaMDMxMTAvBgNV BAMTKDEyODVERDBBRThFMkZFOUVGNTkwQUFFQTM1RDFDMURBNUQwNTJGMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTMUSCEXdHHTRiCyzEV+5qnaoV HSJR5cCr1+wAteVT4PaLS+pp7nOQFTtcP/qaHq57+DXhdKJPQuqAnEXip7KXAH8+ vvF9gtIwYkAtf5wKF8FS4JM6NYxcg45Dv+amhFbp40xk5WMnTCICh4yPJkSwK19x MC1u3D0N77gInMv+f8NNbXJTDHEn94pmGM0f8QIWaPoCL2LHmWAdOk9JYl7b2JVi uAu69dtZCXCNbxC2HvzKdUhnL8QtY/ElKf25cV0o0uEAl+OB2K/0F8oI5nBXdleA 4STICh9B+4iG0KPRQy54kKtahoiTDe/nucAChPmMJa4f0AeCVHuAxT7xa5KLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEoXdCuji/p71kKrqNdHB2l0FLw8wHwYDVR0j BBgwFoAUcy9G10x6jF2IinCRpwbzoJ7+lqMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTBkMWFhMS00YzdmLTQ0OGItYjJiYi0wMmM1NzE1MWYyMTAvMC83MzJGNDZENzRD N0E4QzVEODg4QTcwOTFBNzA2RjNBMDlFRkU5NkEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzMyRjQ2RDc0QzdBOEM1RDg4OEE3MDkxQTcwNkYzQTA5RUZF OTZBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTUwZDFhYTEtNGM3Zi00NDhiLWIy YmItMDJjNTcxNTFmMjEwLzAvNzMyRjQ2RDc0QzdBOEM1RDg4OEE3MDkxQTcwNkYz QTA5RUZFOTZBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD9Pdtc31+ol+DjDcAJRojoJKNuDtYHv+6Hu G60M9+t70GgqEpONGpbMwpaqNOmSp6NCVYQXRMemlNeeVrsEZimZwiQgTRdFBwQJ LxjaiLZKrsi+ywkmu8JKfwePqBXr9G/yQZT/y2vuCmG4H/ovU7vd5+YLWb9ppDx4 PmSjmb9mSeCRaPpP7bcPWg0ztDTXH6MIKjQ4iYAF0swZ+EdHrRtJ+qR5HSBEQ1k1 0vB0sAmPv8vrIQCQ6PLl1U/UGFMO1ZqOrNo854qe0SRJicNY9g3NbNXjqgLsYncz 5NXRLdx8AmJOpR/xeD+9ilRsuWifh/tRYjmXJCBfjUbWNPndVcE= -----END CERTIFICATE-----Generated at Thu Mar 26 12:06:29 2026 by rpki-client