$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft File: 917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft (raw, json) Hash identifier: tjjheDjk6bVnqOwHAni72DPkF9iLgQKSIsJx1pGctP4= Subject key identifier: CC:47:47:7F:88:63:E0:DA:27:AC:13:69:AF:9E:83:32:DF:23:AD:33 Authority key identifier: 91:7A:9D:24:BF:1E:AD:6F:A4:A1:F8:FD:81:D5:31:37:EF:52:E7:84 Certificate issuer: /CN=917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784 Certificate serial: 6C57AF072AD64F5A16F749CB79D524204275D546 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft Manifest number: 02A0 Signing time: Tue 24 Mar 2026 18:10:45 +0000 Manifest this update: Tue 24 Mar 2026 18:05:45 +0000 Manifest next update: Sat 28 Mar 2026 00:24:45 +0000 Files and hashes: 1: 3130332e3136342e31322e302f32332d3234203d3e20313431383938.roa (hash: +et6XAZaJYtUR6Dc2zidlhc9nlrgtLBlWzalZZGRqM4=) 2: 917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl (hash: VB5rAsO7YV/qPB5Py70hYQmSXHbl9NNwrfMh89fdESo=) 3: 323430303a346265303a3a2f33322d3438203d3e20313431383938.roa (hash: cViD++tff+X7xq1z33jmPNpr3W6MqEIUFSVqOeIQ0V4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 00:24:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:57:af:07:2a:d6:4f:5a:16:f7:49:cb:79:d5:24:20:42:75:d5:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784 Validity Not Before: Mar 24 18:05:45 2026 GMT Not After : Mar 28 00:24:45 2026 GMT Subject: CN=CC47477F8863E0DA27AC1369AF9E8332DF23AD33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ec:1d:ab:a3:fb:3b:01:1f:30:81:63:e3:ee: 3f:bb:15:23:2c:b0:38:e4:e4:2b:70:b4:5f:b9:d6: 56:2e:f8:4a:75:8b:c4:f7:25:ab:52:fc:4f:c7:30: fd:2a:f4:cc:32:22:b6:d0:a4:4f:45:54:22:a3:98: a1:27:d7:0d:a2:24:6f:55:2f:37:13:d8:c1:a6:ee: fe:33:68:c7:0d:e3:2f:60:78:13:02:59:b0:c6:18: ec:91:2e:e0:81:11:da:1e:bf:6b:ab:e9:61:99:88: 40:de:22:f5:35:b4:45:0b:c2:65:20:cb:d5:c0:4a: f0:78:ff:18:79:4f:fb:3e:68:d0:78:b7:07:a1:20: c4:c6:05:7d:f1:0f:c8:23:97:c0:52:d3:00:a4:ca: a4:0c:8e:75:6a:3a:8b:75:33:a8:6c:96:54:d7:c8: 0e:e4:65:fa:90:ed:77:a4:37:16:7b:a4:0c:78:18: 24:07:cf:a2:91:8c:e4:91:6a:06:68:6e:2e:56:59: 6c:3b:3d:9c:c7:78:62:cf:f5:dd:51:13:86:d2:a7: 2b:84:a1:d0:1b:42:a0:ad:10:63:45:5e:b2:67:2e: 4e:cb:7c:01:c5:db:3e:49:b9:db:72:45:04:a3:7e: 8b:0d:63:c2:fe:eb:1d:f0:6f:a6:b3:8b:10:05:17: f0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:47:47:7F:88:63:E0:DA:27:AC:13:69:AF:9E:83:32:DF:23:AD:33 X509v3 Authority Key Identifier: keyid:91:7A:9D:24:BF:1E:AD:6F:A4:A1:F8:FD:81:D5:31:37:EF:52:E7:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:97:1d:cf:47:7f:4d:dd:c8:48:64:44:94:d9:ac:aa:1d:ed: 18:8a:12:58:9b:0c:f8:ff:e4:0a:0c:93:d7:c7:80:64:cd:33: 49:c2:b5:b4:57:f3:36:e7:03:22:28:b2:96:f4:d3:cc:60:b0: 8e:8a:22:e5:b7:92:09:bf:2b:91:75:76:72:01:eb:fa:05:4a: e6:96:f6:d5:9e:95:8f:22:53:95:93:93:bc:c4:df:4c:fb:9e: d6:9e:f1:17:74:7a:39:06:11:06:6e:c2:f1:d1:b9:42:42:65: 77:be:43:31:fe:78:a9:5a:5d:05:26:d8:2d:5e:fc:24:ea:c6: f0:96:2d:c0:82:2a:16:a1:17:8d:36:b7:f0:6e:87:0e:a8:46: dd:4d:e1:b1:a2:8c:46:cf:cd:a9:f2:f4:ad:32:a8:e0:69:79: e0:23:34:0d:04:b0:b4:73:bc:53:1a:c1:a1:b8:c9:73:f9:e7: 2c:c6:53:15:b8:d0:dc:d3:40:a5:bd:b2:98:22:f5:08:be:52: 7e:6e:94:bc:af:aa:2f:f6:e3:9f:e6:66:52:0a:0b:c1:dc:26: 06:4b:e7:47:1b:32:f7:5e:d1:c9:18:21:d3:73:21:2a:cd:77: 07:5c:66:bd:0e:dc:a6:65:ef:1e:01:5d:1a:57:e3:00:41:f2: bd:9d:ea:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbFevByrWT1oW90nLedUkIEJ11UYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMxMzdF RjUyRTc4NDAeFw0yNjAzMjQxODA1NDVaFw0yNjAzMjgwMDI0NDVaMDMxMTAvBgNV BAMTKENDNDc0NzdGODg2M0UwREEyN0FDMTM2OUFGOUU4MzMyREYyM0FEMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa7B2ro/s7AR8wgWPj7j+7FSMs sDjk5CtwtF+51lYu+Ep1i8T3JatS/E/HMP0q9MwyIrbQpE9FVCKjmKEn1w2iJG9V LzcT2MGm7v4zaMcN4y9geBMCWbDGGOyRLuCBEdoev2ur6WGZiEDeIvU1tEULwmUg y9XASvB4/xh5T/s+aNB4twehIMTGBX3xD8gjl8BS0wCkyqQMjnVqOot1M6hsllTX yA7kZfqQ7XekNxZ7pAx4GCQHz6KRjOSRagZobi5WWWw7PZzHeGLP9d1RE4bSpyuE odAbQqCtEGNFXrJnLk7LfAHF2z5JudtyRQSjfosNY8L+6x3wb6azixAFF/A/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzEdHf4hj4NonrBNpr56DMt8jrTMwHwYDVR0j BBgwFoAUkXqdJL8erW+kofj9gdUxN+9S54QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRmZjgxOS0yYmFkLTQ4M2QtOWZhOC1iNmViYzQ4NDAzMWEvMC85MTdBOUQyNEJG MUVBRDZGQTRBMUY4RkQ4MUQ1MzEzN0VGNTJFNzg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMxMzdFRjUy RTc4NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkZmY4MTktMmJhZC00ODNkLTlm YTgtYjZlYmM0ODQwMzFhLzAvOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMx MzdFRjUyRTc4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFSXHc9Hf03dyEhkRJTZrKod7RiKElibDPj/ 5AoMk9fHgGTNM0nCtbRX8zbnAyIospb008xgsI6KIuW3kgm/K5F1dnIB6/oFSuaW 9tWelY8iU5WTk7zE30z7ntae8Rd0ejkGEQZuwvHRuUJCZXe+QzH+eKlaXQUm2C1e /CTqxvCWLcCCKhahF402t/Buhw6oRt1N4bGijEbPzany9K0yqOBpeeAjNA0EsLRz vFMawaG4yXP55yzGUxW40NzTQKW9spgi9Qi+Un5ulLyvqi/245/mZlIKC8HcJgZL 50cbMvde0ckYIdNzISrNdwdcZr0O3KZl7x4BXRpX4wBB8r2d6sI= -----END CERTIFICATE-----Generated at Thu Mar 26 15:53:36 2026 by rpki-client