$ rpki-client -vvf repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft File: CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft (raw, json) Hash identifier: oN85LQjzEeqRNayARhzKAmET71+gw0wudLvmLXKrqXs= Subject key identifier: 79:42:1C:F1:29:AF:94:C1:97:5B:A1:0A:32:77:3B:E3:6E:15:FC:B3 Authority key identifier: CD:32:81:FC:87:5A:8D:D9:67:E7:E8:3C:D4:0F:10:6A:D5:B2:3A:74 Certificate issuer: /CN=CD3281FC875A8DD967E7E83CD40F106AD5B23A74 Certificate serial: 2690F006B1CA30654F45BA1981231FA4BDDA2151 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer Subject info access: rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft Manifest number: 0252 Signing time: Wed 25 Mar 2026 16:22:33 +0000 Manifest this update: Wed 25 Mar 2026 16:17:33 +0000 Manifest next update: Sun 29 Mar 2026 02:19:33 +0000 Files and hashes: 1: 3130332e3134372e3131342e302f32342d3234203d3e20313439393732.roa (hash: 84o3UV8IHhQFDzzDC1t2/AoF+j9eW/9zsv1UkTq0r2k=) 2: 3130332e3134372e3131352e302f32342d3234203d3e20313439393732.roa (hash: AoisIKjFDgxSpQWcGSc9vDGFrlv1QcVF2IqB6ymlo5I=) 3: 3130332e3134372e3131342e302f32332d3234203d3e20313439393732.roa (hash: /z6uwsbM6qW8nVOnWF5tbv45b3fyByXJR19t2rKAAvM=) 4: CD3281FC875A8DD967E7E83CD40F106AD5B23A74.crl (hash: 1ZOcUGl8wB25JH01c/7Clser8nrUC9q3l1gcfpvneAY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.crl rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 02:19:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:90:f0:06:b1:ca:30:65:4f:45:ba:19:81:23:1f:a4:bd:da:21:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD3281FC875A8DD967E7E83CD40F106AD5B23A74 Validity Not Before: Mar 25 16:17:33 2026 GMT Not After : Mar 29 02:19:33 2026 GMT Subject: CN=79421CF129AF94C1975BA10A32773BE36E15FCB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:42:ae:cd:dd:20:62:07:f2:8b:f7:93:eb:9e: 66:24:c9:a3:1a:f4:68:5b:a3:0c:fb:d4:81:da:a1: 95:8a:48:18:a3:c2:1b:b8:49:da:2b:76:76:d9:32: 82:83:bf:83:b1:5f:24:4e:36:dd:0f:9d:45:b2:43: 6d:a6:17:54:29:c6:58:46:a2:49:62:83:44:f5:4e: 18:62:a9:66:03:31:d4:4a:b7:44:86:61:f8:1a:ec: 3c:8d:da:e2:1a:86:81:5a:5c:08:11:44:e3:63:61: 78:1b:61:6e:f2:0e:82:b2:67:f4:db:ca:7e:6f:6f: 16:dd:7a:41:b1:a0:1d:b3:46:a7:71:92:1a:ec:94: 3f:14:ad:cc:ac:66:c5:b0:fd:12:45:7e:34:cd:35: 61:8e:e0:44:dd:a5:2c:00:95:e5:8c:1b:b0:ad:0f: 02:44:83:d5:57:9b:9e:93:8f:51:02:6e:a1:00:48: 43:c0:15:dd:4e:1b:fb:c7:8b:75:0a:bb:1e:a1:6d: 5b:e7:a8:97:eb:7f:d9:45:a9:95:d4:0b:6a:da:a3: 28:a8:eb:20:29:1e:d4:1f:66:bd:0d:fe:8e:1d:88: 03:a4:05:86:54:70:a3:0d:48:a4:25:b8:40:b2:ea: 65:81:e8:38:d7:37:e2:4d:ef:4d:99:12:df:08:73: 90:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:42:1C:F1:29:AF:94:C1:97:5B:A1:0A:32:77:3B:E3:6E:15:FC:B3 X509v3 Authority Key Identifier: keyid:CD:32:81:FC:87:5A:8D:D9:67:E7:E8:3C:D4:0F:10:6A:D5:B2:3A:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:30:84:e0:f7:19:86:84:ea:31:77:5b:25:d4:de:54:58:2c: c8:3a:36:ad:8f:89:5b:27:eb:d9:31:c8:d9:7f:dd:6f:84:fe: bd:3f:24:be:c7:60:2b:fd:a5:45:4d:ba:65:9c:88:11:23:c2: 6a:3e:c5:fe:2c:44:04:9f:1a:10:20:1b:b1:16:e4:8a:a8:99: 73:bf:b6:07:e1:aa:23:ec:6e:38:9f:54:b9:e1:d1:6a:b6:1a: 81:1b:70:b1:8a:0d:eb:dd:e5:57:1a:fd:bb:2c:96:04:80:30: 03:10:91:d6:7a:ce:76:d6:fb:4f:09:ab:9d:d1:e2:7e:d7:a2: d8:34:3e:d4:b7:4b:af:02:dd:60:ce:7c:22:69:70:1d:50:0b: e5:a8:9b:c7:99:86:0a:38:77:e1:41:80:85:2f:d5:de:17:f5: 64:ec:4d:9e:98:c7:8d:9e:28:a9:f8:3f:f9:63:9b:da:e7:c4: 50:36:aa:38:80:9b:67:5b:e2:fa:9f:0c:e6:8e:98:37:0b:85: ee:d9:da:26:16:a4:9f:2d:6a:0d:d4:8d:d9:79:16:70:a0:a1: eb:d5:97:9c:32:35:38:17:c9:18:2b:b6:7c:29:5a:59:64:4f: 9e:53:e3:00:15:6d:5d:34:4f:02:7b:ff:04:79:49:5d:09:f6: 44:2d:05:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJpDwBrHKMGVPRboZgSMfpL3aIVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QzMjgxRkM4NzVBOEREOTY3RTdFODNDRDQwRjEwNkFE NUIyM0E3NDAeFw0yNjAzMjUxNjE3MzNaFw0yNjAzMjkwMjE5MzNaMDMxMTAvBgNV BAMTKDc5NDIxQ0YxMjlBRjk0QzE5NzVCQTEwQTMyNzczQkUzNkUxNUZDQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXQq7N3SBiB/KL95PrnmYkyaMa 9Ghbowz71IHaoZWKSBijwhu4SdordnbZMoKDv4OxXyRONt0PnUWyQ22mF1QpxlhG oklig0T1ThhiqWYDMdRKt0SGYfga7DyN2uIahoFaXAgRRONjYXgbYW7yDoKyZ/Tb yn5vbxbdekGxoB2zRqdxkhrslD8UrcysZsWw/RJFfjTNNWGO4ETdpSwAleWMG7Ct DwJEg9VXm56Tj1ECbqEASEPAFd1OG/vHi3UKux6hbVvnqJfrf9lFqZXUC2raoyio 6yApHtQfZr0N/o4diAOkBYZUcKMNSKQluECy6mWB6DjXN+JN702ZEt8Ic5AFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeUIc8SmvlMGXW6EKMnc7424V/LMwHwYDVR0j BBgwFoAUzTKB/Idajdln5+g81A8QatWyOnQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjhjYzA1OS01ZTZjLTQ1MDEtYjg5NC0xNGE4MmQxOGQyMWUvMC9DRDMyODFGQzg3 NUE4REQ5NjdFN0U4M0NENDBGMTA2QUQ1QjIzQTc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0QzMjgxRkM4NzVBOEREOTY3RTdFODNDRDQwRjEwNkFENUIy M0E3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTY4Y2MwNTktNWU2Yy00NTAxLWI4 OTQtMTRhODJkMThkMjFlLzAvQ0QzMjgxRkM4NzVBOEREOTY3RTdFODNDRDQwRjEw NkFENUIyM0E3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMQwhOD3GYaE6jF3WyXU3lRYLMg6Nq2PiVsn 69kxyNl/3W+E/r0/JL7HYCv9pUVNumWciBEjwmo+xf4sRASfGhAgG7EW5IqomXO/ tgfhqiPsbjifVLnh0Wq2GoEbcLGKDevd5Vca/bsslgSAMAMQkdZ6znbW+08Jq53R 4n7Xotg0PtS3S68C3WDOfCJpcB1QC+Wom8eZhgo4d+FBgIUv1d4X9WTsTZ6Yx42e KKn4P/ljm9rnxFA2qjiAm2db4vqfDOaOmDcLhe7Z2iYWpJ8tag3Ujdl5FnCgoevV l5wyNTgXyRgrtnwpWllkT55T4wAVbV00TwJ7/wR5SV0J9kQtBX8= -----END CERTIFICATE-----Generated at Thu Mar 26 10:06:40 2026 by rpki-client