$ rpki-client -vvf repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.mft File: 7136382578BA0ACBDD5EEAC687FF3234D04614B1.mft (raw, json) Hash identifier: NPVER2qN1a/miZMAH4qsbXKpsQSflniL3J5YTvbbDus= Subject key identifier: 2B:0D:E5:7F:C7:F7:34:2E:A4:01:FA:5F:CA:25:70:16:1B:C3:62:02 Authority key identifier: 71:36:38:25:78:BA:0A:CB:DD:5E:EA:C6:87:FF:32:34:D0:46:14:B1 Certificate issuer: /CN=7136382578BA0ACBDD5EEAC687FF3234D04614B1 Certificate serial: 7A1C81B392864D5CAAC5D9B06075F0CD70CB7EEB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7136382578BA0ACBDD5EEAC687FF3234D04614B1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.mft Manifest number: 03DB Signing time: Tue 24 Mar 2026 23:22:11 +0000 Manifest this update: Tue 24 Mar 2026 23:17:11 +0000 Manifest next update: Sat 28 Mar 2026 02:16:11 +0000 Files and hashes: 1: 3130332e3136392e3230362e302f32342d3234203d3e203435333235.roa (hash: atE5KSrX4qCNxOqfUBA003QYsCNbJn6G5XKmt7zJQAw=) 2: 7136382578BA0ACBDD5EEAC687FF3234D04614B1.crl (hash: SBI0DYRp+bdyQlmqO5WkFVTOma+3r4pJGEuLakOAcrE=) 3: 3130332e3136392e3230372e302f32342d3234203d3e203435333235.roa (hash: Huk9VwXKZY5qRslqFA8wI/7KNHFWY9r3OLcCPFaU2PQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.crl rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7136382578BA0ACBDD5EEAC687FF3234D04614B1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 02:16:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:1c:81:b3:92:86:4d:5c:aa:c5:d9:b0:60:75:f0:cd:70:cb:7e:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7136382578BA0ACBDD5EEAC687FF3234D04614B1 Validity Not Before: Mar 24 23:17:11 2026 GMT Not After : Mar 28 02:16:11 2026 GMT Subject: CN=2B0DE57FC7F7342EA401FA5FCA2570161BC36202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6f:e3:df:00:a5:91:1d:9e:5f:58:9c:d4:a0: 6a:cf:dd:54:12:9f:2d:f0:6e:54:03:81:3e:41:29: e3:db:75:75:f1:aa:d4:f3:c5:e3:b9:d4:cf:b3:16: 17:4f:a6:86:3d:1a:e1:7c:11:40:25:c4:20:4c:2c: 6a:79:02:fd:80:a5:68:6c:c3:07:4c:b2:0e:fb:a5: 52:1e:21:a4:c0:aa:df:98:7f:c0:08:89:5b:3f:0e: ca:04:81:47:1b:4a:7e:97:41:6b:29:04:96:38:79: 72:b0:60:ef:e7:91:cf:af:97:df:5d:e9:16:ec:7d: 96:24:58:4d:26:3f:ef:f5:5f:f2:72:e1:ee:d4:e8: f7:54:b5:a6:32:37:21:18:f6:90:b7:3b:35:ea:ee: 3f:78:0a:fa:9e:dd:7b:51:d7:37:5f:c1:80:b0:28: e2:8e:11:10:ac:da:e6:fc:77:9e:9f:9f:92:93:40: 8d:ab:04:fa:92:f3:1a:f0:e8:8d:1c:fc:4d:29:49: 4a:50:aa:cd:f2:06:a6:96:43:d2:9c:c8:17:5b:de: 70:15:93:db:9e:9b:fc:73:7e:e2:6f:e3:7c:41:49: 60:db:47:85:73:89:5c:32:68:64:6b:9a:91:13:e4: 62:c6:2a:67:3b:5b:f9:27:d4:0b:a8:06:38:2c:2b: 70:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:0D:E5:7F:C7:F7:34:2E:A4:01:FA:5F:CA:25:70:16:1B:C3:62:02 X509v3 Authority Key Identifier: keyid:71:36:38:25:78:BA:0A:CB:DD:5E:EA:C6:87:FF:32:34:D0:46:14:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7136382578BA0ACBDD5EEAC687FF3234D04614B1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:53:e3:6b:72:26:f1:ed:dd:6f:96:08:4f:99:df:19:0c:bf: f6:d8:e7:f3:05:95:75:31:65:39:e0:99:5f:4b:bb:6f:a8:ce: 4b:41:fe:5f:76:55:62:de:13:8c:2c:00:ec:dd:eb:f5:f0:fb: 20:f2:50:7f:de:63:2d:e6:66:56:ab:c6:f1:03:13:21:19:71: 4b:fd:32:05:ed:ca:27:12:76:af:98:e3:8e:7b:15:d7:63:45: 82:f3:bf:f2:c9:49:89:f4:01:00:7b:a3:7b:5d:78:87:cc:67: d6:73:df:db:b7:b8:0d:53:18:cf:ba:04:49:10:2d:14:8a:43: 9a:f7:e2:81:f3:33:bf:aa:ae:67:74:4b:f0:41:9c:a7:4e:d3: 37:27:b6:65:e2:c3:c8:a3:54:29:e1:5e:c6:ea:b0:89:aa:2f: ee:72:c0:38:ab:d2:a6:5c:5c:95:f6:4f:80:de:fc:c7:89:a2: 65:c0:aa:a1:45:a4:76:8f:2e:46:20:cb:95:d1:45:37:b7:a0: 89:6d:99:67:24:f1:51:3d:14:fc:91:1c:10:7e:af:3d:f7:fa: 33:bc:dd:fc:f8:c3:28:92:bb:33:b1:fc:9c:9d:9b:fe:e8:75: 85:09:ee:1d:d0:40:52:04:83:bf:2e:d1:e2:f3:b0:e1:27:b8: ec:39:cd:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUehyBs5KGTVyqxdmwYHXwzXDLfuswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzEzNjM4MjU3OEJBMEFDQkRENUVFQUM2ODdGRjMyMzRE MDQ2MTRCMTAeFw0yNjAzMjQyMzE3MTFaFw0yNjAzMjgwMjE2MTFaMDMxMTAvBgNV BAMTKDJCMERFNTdGQzdGNzM0MkVBNDAxRkE1RkNBMjU3MDE2MUJDMzYyMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnb+PfAKWRHZ5fWJzUoGrP3VQS ny3wblQDgT5BKePbdXXxqtTzxeO51M+zFhdPpoY9GuF8EUAlxCBMLGp5Av2ApWhs wwdMsg77pVIeIaTAqt+Yf8AIiVs/DsoEgUcbSn6XQWspBJY4eXKwYO/nkc+vl99d 6RbsfZYkWE0mP+/1X/Jy4e7U6PdUtaYyNyEY9pC3OzXq7j94Cvqe3XtR1zdfwYCw KOKOERCs2ub8d56fn5KTQI2rBPqS8xrw6I0c/E0pSUpQqs3yBqaWQ9KcyBdb3nAV k9uem/xzfuJv43xBSWDbR4VziVwyaGRrmpET5GLGKmc7W/kn1AuoBjgsK3C1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKw3lf8f3NC6kAfpfyiVwFhvDYgIwHwYDVR0j BBgwFoAUcTY4JXi6CsvdXurGh/8yNNBGFLEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2Y3Mzc4MC0wOTI1LTRiNGEtYmNhNy1hMWU3ZWQzZmY0MmEvMC83MTM2MzgyNTc4 QkEwQUNCREQ1RUVBQzY4N0ZGMzIzNEQwNDYxNEIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzEzNjM4MjU3OEJBMEFDQkRENUVFQUM2ODdGRjMyMzREMDQ2 MTRCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTdmNzM3ODAtMDkyNS00YjRhLWJj YTctYTFlN2VkM2ZmNDJhLzAvNzEzNjM4MjU3OEJBMEFDQkRENUVFQUM2ODdGRjMy MzREMDQ2MTRCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFNT42tyJvHt3W+WCE+Z3xkMv/bY5/MFlXUx ZTngmV9Lu2+ozktB/l92VWLeE4wsAOzd6/Xw+yDyUH/eYy3mZlarxvEDEyEZcUv9 MgXtyicSdq+Y4457FddjRYLzv/LJSYn0AQB7o3tdeIfMZ9Zz39u3uA1TGM+6BEkQ LRSKQ5r34oHzM7+qrmd0S/BBnKdO0zcntmXiw8ijVCnhXsbqsImqL+5ywDir0qZc XJX2T4De/MeJomXAqqFFpHaPLkYgy5XRRTe3oIltmWck8VE9FPyRHBB+rz33+jO8 3fz4wyiSuzOx/Jydm/7odYUJ7h3QQFIEg78u0eLzsOEnuOw5zSQ= -----END CERTIFICATE-----Generated at Thu Mar 26 16:57:49 2026 by rpki-client