$ rpki-client -vvf repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft File: D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft (raw, json) Hash identifier: GnQ/Gtx30inkPmJO20WsJpiiGYdOBzU03zr1biw7HVE= Subject key identifier: 31:7F:75:A4:77:2F:13:AE:AC:E8:31:B3:DA:A3:2C:68:D4:31:EC:CE Authority key identifier: D6:9B:38:7E:6B:9C:AF:1B:D2:6B:28:6A:94:8D:5A:77:FB:85:F8:0A Certificate issuer: /CN=D69B387E6B9CAF1BD26B286A948D5A77FB85F80A Certificate serial: 555ED2DA861381A4E86B6BD4296D3D95ACE8EFEC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft Manifest number: EB Signing time: Tue 24 Mar 2026 23:02:30 +0000 Manifest this update: Tue 24 Mar 2026 22:57:30 +0000 Manifest next update: Sat 28 Mar 2026 05:12:30 +0000 Files and hashes: 1: D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.crl (hash: cXMM5KC4YljOKc0b1AmkBPy5omMeEfz1mynRoB3ALWQ=) 2: 3130332e36352e3134322e302f32332d3234203d3e20313432333333.roa (hash: Sg9u/AwZirmCvlw+W9NyMDOy14LKr1t7vCJz3dMVUog=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.crl rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 05:12:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:5e:d2:da:86:13:81:a4:e8:6b:6b:d4:29:6d:3d:95:ac:e8:ef:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D69B387E6B9CAF1BD26B286A948D5A77FB85F80A Validity Not Before: Mar 24 22:57:30 2026 GMT Not After : Mar 28 05:12:30 2026 GMT Subject: CN=317F75A4772F13AEACE831B3DAA32C68D431ECCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:80:8d:b0:6c:ea:a3:0c:6b:3a:15:4d:8d:1d: b9:e8:e6:ac:96:be:7e:68:34:57:24:38:09:1f:b6: 11:bc:6f:8e:28:6f:35:14:bb:55:a5:54:c0:51:4e: 76:bb:c6:6d:45:60:7d:2f:52:fe:8c:24:5f:11:43: 70:3b:e2:46:58:a2:eb:37:9e:73:01:b4:98:db:81: 8e:70:2d:fc:cd:c3:00:a9:23:e1:51:c1:7f:27:e1: f9:3f:c2:3b:14:56:3e:e0:88:a5:0f:2b:63:f7:a3: ca:fe:4e:4d:a7:a4:ef:d7:4d:af:c9:07:1e:a5:b3: 81:fd:d2:66:3e:0f:d0:76:50:af:b7:de:00:e5:54: c8:4a:be:56:0f:7b:73:02:c4:dc:1c:a9:a7:8d:7c: 2f:bb:16:c6:5b:52:30:40:55:7d:c3:3b:c9:a3:d7: ec:57:0d:2a:c5:5f:17:69:0e:f0:35:58:90:bb:7f: dc:0d:39:67:72:6f:a0:8e:5b:15:94:ba:a8:b2:75: 8e:f2:8c:22:4b:8b:95:ce:15:6c:e1:ac:f5:0f:d2: 1a:4f:1b:74:90:09:a8:70:8f:5b:8d:2a:b6:b5:19: 8e:40:8f:08:98:eb:4a:f3:78:4a:d4:59:75:46:3b: c6:14:b8:33:fe:0b:68:4e:4b:9d:d8:1b:9f:54:1f: ac:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:7F:75:A4:77:2F:13:AE:AC:E8:31:B3:DA:A3:2C:68:D4:31:EC:CE X509v3 Authority Key Identifier: keyid:D6:9B:38:7E:6B:9C:AF:1B:D2:6B:28:6A:94:8D:5A:77:FB:85:F8:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:5d:ad:5e:17:62:ee:36:78:9f:50:da:83:e5:15:e0:90:9c: 0b:2f:5f:ef:f5:f8:b6:fc:23:a0:4e:95:ee:2b:4b:31:05:33: 31:ad:bc:98:ba:7b:b4:67:cd:73:34:7e:94:85:65:b3:99:ff: 8b:25:c0:f1:a6:f6:37:c1:23:37:57:27:e2:da:6e:b6:ed:3a: ed:0d:15:44:e5:c8:2a:32:a0:0e:e3:fe:db:f3:05:5d:f5:2d: ff:bc:ca:14:63:f9:b5:d4:1b:7c:26:f8:7a:ae:7b:91:d9:f6: d6:bd:0f:5e:7d:a3:bf:13:55:15:e4:23:6d:83:ed:a6:27:67: 0e:9f:b4:a9:de:f6:f6:68:54:79:bc:a2:6e:15:16:a7:4a:cd: d9:54:98:4d:16:2f:4d:2b:95:fc:92:0b:74:60:bd:cb:bd:46: cd:ae:91:bf:69:3b:2f:6f:53:f0:de:c3:e3:b0:c9:73:60:1b: ce:9e:ee:92:8f:29:6a:94:c9:2b:b6:30:05:ab:b9:35:ef:b0: a1:c5:2f:83:42:e8:09:96:fd:da:0a:d1:97:33:0b:8e:2f:86: 9b:88:c3:f6:67:3d:db:f3:ab:35:0e:02:28:64:89:8d:05:54: e5:24:01:1f:ed:e7:af:db:af:3c:6d:92:c1:00:6e:d7:1d:d6: 77:1e:58:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVV7S2oYTgaToa2vUKW09lazo7+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY5QjM4N0U2QjlDQUYxQkQyNkIyODZBOTQ4RDVBNzdG Qjg1RjgwQTAeFw0yNjAzMjQyMjU3MzBaFw0yNjAzMjgwNTEyMzBaMDMxMTAvBgNV BAMTKDMxN0Y3NUE0NzcyRjEzQUVBQ0U4MzFCM0RBQTMyQzY4RDQzMUVDQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpgI2wbOqjDGs6FU2NHbno5qyW vn5oNFckOAkfthG8b44obzUUu1WlVMBRTna7xm1FYH0vUv6MJF8RQ3A74kZYous3 nnMBtJjbgY5wLfzNwwCpI+FRwX8n4fk/wjsUVj7giKUPK2P3o8r+Tk2npO/XTa/J Bx6ls4H90mY+D9B2UK+33gDlVMhKvlYPe3MCxNwcqaeNfC+7FsZbUjBAVX3DO8mj 1+xXDSrFXxdpDvA1WJC7f9wNOWdyb6COWxWUuqiydY7yjCJLi5XOFWzhrPUP0hpP G3SQCahwj1uNKra1GY5AjwiY60rzeErUWXVGO8YUuDP+C2hOS53YG59UH6wjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMX91pHcvE66s6DGz2qMsaNQx7M4wHwYDVR0j BBgwFoAU1ps4fmucrxvSayhqlI1ad/uF+AowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDM4ZjNhMS1hYzBmLTRmN2MtOWM2Yy02YjI3NTY2ZmU3MGMvMC9ENjlCMzg3RTZC OUNBRjFCRDI2QjI4NkE5NDhENUE3N0ZCODVGODBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDY5QjM4N0U2QjlDQUYxQkQyNkIyODZBOTQ4RDVBNzdGQjg1 RjgwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAzOGYzYTEtYWMwZi00ZjdjLTlj NmMtNmIyNzU2NmZlNzBjLzAvRDY5QjM4N0U2QjlDQUYxQkQyNkIyODZBOTQ4RDVB NzdGQjg1RjgwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEZdrV4XYu42eJ9Q2oPlFeCQnAsvX+/1+Lb8 I6BOle4rSzEFMzGtvJi6e7RnzXM0fpSFZbOZ/4slwPGm9jfBIzdXJ+LabrbtOu0N FUTlyCoyoA7j/tvzBV31Lf+8yhRj+bXUG3wm+Hque5HZ9ta9D159o78TVRXkI22D 7aYnZw6ftKne9vZoVHm8om4VFqdKzdlUmE0WL00rlfySC3Rgvcu9Rs2ukb9pOy9v U/Dew+OwyXNgG86e7pKPKWqUySu2MAWruTXvsKHFL4NC6AmW/doK0ZczC44vhpuI w/ZnPdvzqzUOAihkiY0FVOUkAR/t56/brzxtksEAbtcd1nceWKw= -----END CERTIFICATE-----Generated at Thu Mar 26 19:16:06 2026 by rpki-client