$ rpki-client -vvf repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft File: 5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft (raw, json) Hash identifier: 0ycEkWUSlttvcJOkDHjuktk/JV44pqiqnBs/F1At54o= Subject key identifier: 33:46:7A:3A:D0:38:01:09:70:F3:1B:91:CB:B1:D0:92:02:20:57:89 Authority key identifier: 51:31:74:3F:5E:95:BB:0A:D5:AE:61:B0:BD:C1:88:4C:10:21:B4:76 Certificate issuer: /CN=5131743F5E95BB0AD5AE61B0BDC1884C1021B476 Certificate serial: 3E0ECCE01442F27A680184CD3675C14F07C4F83D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft Manifest number: 012B Signing time: Wed 25 Mar 2026 05:02:16 +0000 Manifest this update: Wed 25 Mar 2026 04:57:16 +0000 Manifest next update: Sat 28 Mar 2026 08:38:16 +0000 Files and hashes: 1: 5131743F5E95BB0AD5AE61B0BDC1884C1021B476.crl (hash: leiPv3eZ/NtFaAmH0V1WOMvuaBLVriDppin0bwS0RkM=) 2: 3135372e36362e35362e302f32342d3234203d3e203538343737.roa (hash: bRm34Kjf+sNcSdy5iGqBX+Tp5Wv6W94v5DYv7HCdcv4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.crl rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 08:38:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:0e:cc:e0:14:42:f2:7a:68:01:84:cd:36:75:c1:4f:07:c4:f8:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5131743F5E95BB0AD5AE61B0BDC1884C1021B476 Validity Not Before: Mar 25 04:57:16 2026 GMT Not After : Mar 28 08:38:16 2026 GMT Subject: CN=33467A3AD038010970F31B91CBB1D09202205789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d8:c0:5d:b4:44:2f:25:2a:99:9b:bd:ff:d8: c7:23:ee:d4:dc:ab:d0:9e:69:5e:5a:7f:77:ed:51: ec:4e:90:22:b9:dc:66:75:2a:eb:fb:ab:a6:f9:ce: 6c:6b:d5:0d:aa:18:e9:c8:62:4f:ad:ec:89:32:29: fb:38:7a:35:80:e6:29:b2:78:84:d3:15:c1:12:bd: 4d:c5:06:3f:3f:97:a5:e6:17:0a:d4:66:64:e9:7f: ef:6a:89:23:82:39:79:1e:b5:06:a0:e4:af:56:70: 31:36:53:13:2a:b9:2d:f7:6f:fe:bb:80:f7:61:78: 44:fc:6e:04:1f:3d:52:bb:97:58:99:ca:79:80:ff: 47:ae:3d:d6:b1:0e:d2:ce:10:3a:fa:89:45:f2:03: 57:65:7d:6c:d4:81:bc:a8:23:d8:68:8d:45:cf:80: eb:c4:b1:34:de:52:8c:86:89:b0:ce:13:43:f5:22: de:26:90:3c:44:64:c4:13:18:c6:9e:a4:9c:7a:37: 49:22:ed:74:18:4f:9e:0c:77:e7:df:af:cf:bc:a4: 6a:68:ce:63:ca:38:68:bd:0b:d1:52:22:15:34:7e: 32:5e:6c:d3:d6:3c:9d:61:13:a1:85:95:bc:f9:4a: 53:fb:55:a7:35:ca:35:3c:8c:3d:79:8b:a1:88:b7: 51:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:46:7A:3A:D0:38:01:09:70:F3:1B:91:CB:B1:D0:92:02:20:57:89 X509v3 Authority Key Identifier: keyid:51:31:74:3F:5E:95:BB:0A:D5:AE:61:B0:BD:C1:88:4C:10:21:B4:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:b1:75:1f:4b:91:87:d0:0b:68:d8:b7:3f:e9:f7:f4:9a:01: bb:f2:3d:8b:c5:d2:67:a3:99:9d:04:5b:a1:e0:d0:53:85:44: 1a:ad:f1:d7:95:a0:7b:c9:a3:ee:36:5a:13:a1:23:27:0b:aa: 3c:38:cf:7f:27:31:ac:ce:07:76:c7:5c:11:16:19:8b:b3:90: 10:79:33:fc:1d:11:de:9a:c2:89:c4:81:36:37:b6:56:d4:a4: c3:24:e5:93:d2:ab:a1:9b:aa:9e:d5:15:ab:2c:49:b5:9e:96: aa:66:2c:8e:ff:03:11:ba:18:97:be:be:2f:72:8e:1e:29:62: 21:33:5b:46:19:3c:cf:e2:93:e3:07:05:c2:f9:e7:8c:ef:7c: 81:34:52:f5:42:45:e4:b8:94:5e:f3:d7:d5:ed:9d:1d:d5:6c: 78:13:22:b3:47:62:cd:d6:ac:46:34:5d:82:ac:8a:d3:bb:d4: de:a5:0e:df:bc:67:ba:ce:7a:27:98:52:96:04:a7:c9:a5:09: 28:bc:9a:f6:d6:23:21:c4:7a:70:75:a5:06:5a:4e:80:c5:1a: 8e:62:e5:5e:4d:d6:92:fb:51:b3:f6:12:25:4c:54:f0:33:9f: 09:aa:1e:40:5f:53:f0:d1:6c:69:85:d4:a0:df:8a:e8:a0:d0: 38:9e:87:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPg7M4BRC8npoAYTNNnXBTwfE+D0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2MUIwQkRDMTg4NEMx MDIxQjQ3NjAeFw0yNjAzMjUwNDU3MTZaFw0yNjAzMjgwODM4MTZaMDMxMTAvBgNV BAMTKDMzNDY3QTNBRDAzODAxMDk3MEYzMUI5MUNCQjFEMDkyMDIyMDU3ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC82MBdtEQvJSqZm73/2Mcj7tTc q9CeaV5af3ftUexOkCK53GZ1Kuv7q6b5zmxr1Q2qGOnIYk+t7IkyKfs4ejWA5imy eITTFcESvU3FBj8/l6XmFwrUZmTpf+9qiSOCOXketQag5K9WcDE2UxMquS33b/67 gPdheET8bgQfPVK7l1iZynmA/0euPdaxDtLOEDr6iUXyA1dlfWzUgbyoI9hojUXP gOvEsTTeUoyGibDOE0P1It4mkDxEZMQTGMaepJx6N0ki7XQYT54Md+ffr8+8pGpo zmPKOGi9C9FSIhU0fjJebNPWPJ1hE6GFlbz5SlP7Vac1yjU8jD15i6GIt1HDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM0Z6OtA4AQlw8xuRy7HQkgIgV4kwHwYDVR0j BBgwFoAUUTF0P16VuwrVrmGwvcGITBAhtHYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZDc1NTM0Ny02YjFjLTQyYzEtOWY1NC1kN2VhYjIyZTE4MmMvMC81MTMxNzQzRjVF OTVCQjBBRDVBRTYxQjBCREMxODg0QzEwMjFCNDc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2MUIwQkRDMTg4NEMxMDIx QjQ3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWQ3NTUzNDctNmIxYy00MmMxLTlm NTQtZDdlYWIyMmUxODJjLzAvNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2MUIwQkRDMTg4 NEMxMDIxQjQ3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ+xdR9LkYfQC2jYtz/p9/SaAbvyPYvF0mej mZ0EW6Hg0FOFRBqt8deVoHvJo+42WhOhIycLqjw4z38nMazOB3bHXBEWGYuzkBB5 M/wdEd6awonEgTY3tlbUpMMk5ZPSq6Gbqp7VFassSbWelqpmLI7/AxG6GJe+vi9y jh4pYiEzW0YZPM/ik+MHBcL554zvfIE0UvVCReS4lF7z19XtnR3VbHgTIrNHYs3W rEY0XYKsitO71N6lDt+8Z7rOeieYUpYEp8mlCSi8mvbWIyHEenB1pQZaToDFGo5i 5V5N1pL7UbP2EiVMVPAznwmqHkBfU/DRbGmF1KDfiuig0Dieh+U= -----END CERTIFICATE-----Generated at Thu Mar 26 23:48:46 2026 by rpki-client