$ rpki-client -vvf repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.mft File: 1072AD17A8EDB1513AED95A258088F480ADA492B.mft (raw, json) Hash identifier: BqVU+n4rnofw2y4y/xKWvM4qsQ1KxNWxZ0csTRJ7ryc= Subject key identifier: 0B:AB:D1:D2:AF:8B:B1:82:0D:8D:AC:3E:B6:A9:AB:98:65:2F:37:6C Authority key identifier: 10:72:AD:17:A8:ED:B1:51:3A:ED:95:A2:58:08:8F:48:0A:DA:49:2B Certificate issuer: /CN=1072AD17A8EDB1513AED95A258088F480ADA492B Certificate serial: 36B1069AE50054C6939304876282950D6B1B0FD8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1072AD17A8EDB1513AED95A258088F480ADA492B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.mft Manifest number: 01F6 Signing time: Thu 26 Mar 2026 07:30:47 +0000 Manifest this update: Thu 26 Mar 2026 07:25:47 +0000 Manifest next update: Sun 29 Mar 2026 11:14:47 +0000 Files and hashes: 1: 3130332e3232302e3131342e302f32332d3234203d3e20313335343436.roa (hash: iOecriuLYOaY71DNd88M3kxYp9C78ZPc3k0drPavCOg=) 2: 1072AD17A8EDB1513AED95A258088F480ADA492B.crl (hash: xxuCsBFoxo7PCFgWXfHzFgR7oaScpdZU7QLzlEUJtD0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.crl rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1072AD17A8EDB1513AED95A258088F480ADA492B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 11:14:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:b1:06:9a:e5:00:54:c6:93:93:04:87:62:82:95:0d:6b:1b:0f:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1072AD17A8EDB1513AED95A258088F480ADA492B Validity Not Before: Mar 26 07:25:47 2026 GMT Not After : Mar 29 11:14:47 2026 GMT Subject: CN=0BABD1D2AF8BB1820D8DAC3EB6A9AB98652F376C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:95:e6:a9:e6:af:3c:b1:c8:7d:f2:b7:cc:ab: 5b:ad:46:38:ba:be:8c:0e:7a:a7:41:45:55:10:5e: 67:4a:4e:d8:04:ee:47:50:89:65:91:e1:65:68:75: f1:32:53:93:49:e3:31:01:0e:76:e6:2d:b9:53:08: d0:61:4f:e7:b9:a1:23:e7:fc:43:79:d7:5a:dd:bd: 6c:a5:5d:ad:ff:5b:14:fe:60:45:15:b0:3a:51:04: 61:d3:3b:41:47:46:24:6a:f5:14:ae:a9:55:1c:b1: 5b:77:6d:ce:8c:8f:8d:3d:1b:47:f7:90:d5:d7:41: 29:4e:1b:01:5f:1e:ea:57:45:19:55:48:17:2b:17: 9d:1f:c5:45:53:b1:1a:26:33:79:ae:65:ad:08:b3: 81:20:71:27:8f:56:16:f5:a7:21:d1:be:c8:09:3b: 4e:ff:6c:6f:de:1a:7c:9f:08:63:af:95:c8:36:66: 02:d4:ec:8e:d0:7f:d3:06:d3:a4:97:d0:34:c3:2b: b3:98:04:a2:ae:c4:db:c6:36:4c:73:9b:cd:85:b7: be:b6:95:17:82:6d:c9:3e:74:58:8e:9f:70:77:43: 41:4c:89:92:37:91:ea:1c:33:4f:13:db:bb:bc:b6: 26:76:37:fc:c0:cf:a5:00:54:70:91:7d:9a:12:86: b5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:AB:D1:D2:AF:8B:B1:82:0D:8D:AC:3E:B6:A9:AB:98:65:2F:37:6C X509v3 Authority Key Identifier: keyid:10:72:AD:17:A8:ED:B1:51:3A:ED:95:A2:58:08:8F:48:0A:DA:49:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1072AD17A8EDB1513AED95A258088F480ADA492B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:f6:c8:1b:c1:98:3f:66:fb:cb:c1:dc:3f:23:d0:51:41:3e: 15:a3:6b:e1:63:d8:49:ad:28:10:d0:27:9a:79:fe:3d:ad:cd: 00:9a:cc:49:8b:f0:6c:81:29:ea:74:8c:38:da:4c:10:71:37: 12:3b:0a:68:1e:eb:a6:01:35:ab:e6:76:3c:d3:95:06:f5:dd: 00:0f:a0:7f:81:6d:83:aa:ba:0a:01:2e:df:bf:d7:77:66:58: c2:f0:71:d9:ca:74:71:ba:d0:5c:0e:1d:ac:73:86:c5:8c:e9: b3:9c:44:6e:3b:3a:56:d6:3e:25:81:fa:cb:aa:ac:f0:87:6a: b9:39:1d:9c:a4:eb:af:a0:1a:fb:f5:32:6a:62:e3:95:d4:e9: 0d:17:bb:78:9d:3d:d8:c3:59:74:6a:33:92:ba:70:a9:a8:82: 46:39:13:3c:90:a7:7c:a1:b7:7c:60:93:29:ad:e0:a6:9a:21: 94:a7:eb:1f:da:c1:6f:89:59:ec:4e:80:8c:06:ea:92:a9:5d: 7e:f8:3c:f6:8d:2b:a7:4d:28:87:0a:49:66:79:00:d5:ff:2f: 14:58:24:24:31:50:5b:85:39:df:89:3f:71:ef:01:b8:8a:2e: 3f:45:9d:3e:ae:7e:c7:88:da:c3:bb:5c:ab:5f:e5:ad:fc:7f: 00:6a:b4:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNrEGmuUAVMaTkwSHYoKVDWsbD9gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA3MkFEMTdBOEVEQjE1MTNBRUQ5NUEyNTgwODhGNDgw QURBNDkyQjAeFw0yNjAzMjYwNzI1NDdaFw0yNjAzMjkxMTE0NDdaMDMxMTAvBgNV BAMTKDBCQUJEMUQyQUY4QkIxODIwRDhEQUMzRUI2QTlBQjk4NjUyRjM3NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVleap5q88sch98rfMq1utRji6 vowOeqdBRVUQXmdKTtgE7kdQiWWR4WVodfEyU5NJ4zEBDnbmLblTCNBhT+e5oSPn /EN511rdvWylXa3/WxT+YEUVsDpRBGHTO0FHRiRq9RSuqVUcsVt3bc6Mj409G0f3 kNXXQSlOGwFfHupXRRlVSBcrF50fxUVTsRomM3muZa0Is4EgcSePVhb1pyHRvsgJ O07/bG/eGnyfCGOvlcg2ZgLU7I7Qf9MG06SX0DTDK7OYBKKuxNvGNkxzm82Ft762 lReCbck+dFiOn3B3Q0FMiZI3keocM08T27u8tiZ2N/zAz6UAVHCRfZoShrULAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC6vR0q+LsYINjaw+tqmrmGUvN2wwHwYDVR0j BBgwFoAUEHKtF6jtsVE67ZWiWAiPSAraSSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTRiOWQzMi0zYzVhLTQwZTItYjc4OC0wNjlkZTBjM2QyZGUvMC8xMDcyQUQxN0E4 RURCMTUxM0FFRDk1QTI1ODA4OEY0ODBBREE0OTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA3MkFEMTdBOEVEQjE1MTNBRUQ5NUEyNTgwODhGNDgwQURB NDkyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTU0YjlkMzItM2M1YS00MGUyLWI3 ODgtMDY5ZGUwYzNkMmRlLzAvMTA3MkFEMTdBOEVEQjE1MTNBRUQ5NUEyNTgwODhG NDgwQURBNDkyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADr2yBvBmD9m+8vB3D8j0FFBPhWja+Fj2Emt KBDQJ5p5/j2tzQCazEmL8GyBKep0jDjaTBBxNxI7Cmge66YBNavmdjzTlQb13QAP oH+BbYOqugoBLt+/13dmWMLwcdnKdHG60FwOHaxzhsWM6bOcRG47OlbWPiWB+suq rPCHark5HZyk66+gGvv1Mmpi45XU6Q0Xu3idPdjDWXRqM5K6cKmogkY5EzyQp3yh t3xgkymt4KaaIZSn6x/awW+JWexOgIwG6pKpXX74PPaNK6dNKIcKSWZ5ANX/LxRY JCQxUFuFOd+JP3HvAbiKLj9FnT6ufseI2sO7XKtf5a38fwBqtGI= -----END CERTIFICATE-----Generated at Thu Mar 26 11:57:25 2026 by rpki-client