$ rpki-client -vvf repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/75890247E178C40DD3F9A5968202F684AEB89D9A.mft File: 75890247E178C40DD3F9A5968202F684AEB89D9A.mft (raw, json) Hash identifier: Gv8K2jdZsrCykv7NX87ULsw/xVJoF0R53M4c5kgehwM= Subject key identifier: D1:AA:9B:20:D8:8A:44:6C:CF:5C:11:37:BE:14:DB:36:83:7D:5F:52 Authority key identifier: 75:89:02:47:E1:78:C4:0D:D3:F9:A5:96:82:02:F6:84:AE:B8:9D:9A Certificate issuer: /CN=75890247E178C40DD3F9A5968202F684AEB89D9A Certificate serial: 28637A211D5D8F2F8E761440236074C63E994A42 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75890247E178C40DD3F9A5968202F684AEB89D9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/75890247E178C40DD3F9A5968202F684AEB89D9A.mft Manifest number: 0227 Signing time: Tue 24 Mar 2026 08:11:14 +0000 Manifest this update: Tue 24 Mar 2026 08:06:14 +0000 Manifest next update: Fri 27 Mar 2026 12:27:14 +0000 Files and hashes: 1: 3130332e33392e36392e302f32342d3234203d3e20313530323730.roa (hash: ABOgyOC/6WBI7TsB52quJVoJIzB223bKwujKqyNGano=) 2: 3130332e33392e36382e302f32342d3234203d3e20313530323730.roa (hash: g6PqLS5mE+1W2ojOPy8XOSM+C1KCNHjLUWlTp/BiYKA=) 3: 3130332e33392e36382e302f32332d3233203d3e20313530323730.roa (hash: fXiiGXJRCPKNViYWqCFLLjVfmQD8H4I+YjRRxMPnTUk=) 4: 75890247E178C40DD3F9A5968202F684AEB89D9A.crl (hash: F5y42s/y1MkhcZSjNExpQC7QuNKgYS72xycG26ytGAg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/75890247E178C40DD3F9A5968202F684AEB89D9A.crl rsync://repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/75890247E178C40DD3F9A5968202F684AEB89D9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75890247E178C40DD3F9A5968202F684AEB89D9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 12:27:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:63:7a:21:1d:5d:8f:2f:8e:76:14:40:23:60:74:c6:3e:99:4a:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75890247E178C40DD3F9A5968202F684AEB89D9A Validity Not Before: Mar 24 08:06:14 2026 GMT Not After : Mar 27 12:27:14 2026 GMT Subject: CN=D1AA9B20D88A446CCF5C1137BE14DB36837D5F52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6b:ef:52:c4:18:7d:8d:cf:e5:ed:cc:1a:5f: 5e:de:2b:6b:c2:e8:1e:aa:dd:3f:11:e7:52:d3:81: 23:11:ff:a9:d4:01:e7:b0:7c:9f:e2:00:8b:c2:0a: 24:8b:d0:c8:18:7f:b0:6d:c9:b1:b5:d8:be:0f:40: 6b:c6:6f:fe:99:2d:b0:f3:f5:71:9d:ba:d5:0f:e8: 32:f4:19:38:06:c0:69:b4:5b:43:e7:45:b1:9f:f5: c0:21:0c:29:18:a1:c0:57:c4:34:8b:dc:05:fa:87: 42:1a:d9:c5:c2:86:5f:2a:00:f6:df:5c:62:34:eb: cd:64:c0:c4:34:2b:38:b3:0b:a7:83:ac:9c:69:98: dd:75:44:1e:7c:21:a7:ed:f6:0e:63:5f:66:f4:a3: 8a:16:9a:61:22:a4:bd:07:00:ec:6b:21:79:3c:03: 96:c1:a9:46:8f:7e:f9:9e:ec:7c:ed:55:55:46:93: e6:79:b8:b9:2c:bc:3d:66:35:6f:38:59:16:76:fa: 92:32:e3:8c:1c:ed:b3:68:86:bd:df:27:aa:7d:ad: 83:5d:68:de:78:87:e3:da:29:f6:ea:da:77:1f:ee: 5f:fa:51:07:d8:54:41:4e:12:ac:53:29:b6:40:51: 02:10:3b:3e:c8:e1:e3:3b:75:5d:6b:ef:c5:e3:8b: 3c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:AA:9B:20:D8:8A:44:6C:CF:5C:11:37:BE:14:DB:36:83:7D:5F:52 X509v3 Authority Key Identifier: keyid:75:89:02:47:E1:78:C4:0D:D3:F9:A5:96:82:02:F6:84:AE:B8:9D:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/75890247E178C40DD3F9A5968202F684AEB89D9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75890247E178C40DD3F9A5968202F684AEB89D9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/75890247E178C40DD3F9A5968202F684AEB89D9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:18:25:7f:59:24:23:01:15:ea:5a:b8:e8:9d:72:4b:b1:9f: 8e:74:e9:bd:11:dd:0c:68:82:98:2e:4c:30:9b:17:6b:e7:88: 5e:94:6e:b6:31:e7:52:37:ec:3a:40:53:d7:d0:13:01:10:ac: e8:92:0a:06:86:3d:b8:0b:58:3f:57:cd:af:7b:e9:d1:d3:03: 86:68:c6:a5:87:98:6e:82:5a:38:68:07:9b:44:eb:37:0e:ad: 83:c5:e0:c8:4f:09:99:ad:ea:07:39:53:7d:f4:59:f6:b1:e6: 2f:4c:8b:b2:02:e8:76:eb:b2:13:b4:d8:d0:7e:6e:6e:ba:2b: 57:bc:1e:1a:92:6e:16:e7:8c:86:e1:7f:42:c4:f5:4a:a3:a0: 45:0b:46:86:ea:72:00:3c:1c:f2:fe:6e:34:da:e2:6e:2b:65: e6:81:9b:c9:d8:8a:e2:35:c0:80:85:f4:86:5d:8f:6f:49:e4: 79:c9:49:26:04:04:85:32:f1:1c:e0:fa:c7:8c:37:1d:af:e6: fd:e6:4c:3a:1b:44:ff:f0:85:b4:43:85:c5:3c:f8:01:b8:fa: 2c:da:27:77:06:7c:3c:80:fb:35:db:f1:24:bb:e8:2b:9b:80: 38:c7:e3:e5:02:9d:05:82:1e:f6:d8:8e:79:ce:32:79:37:f0: 46:4d:a0:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKGN6IR1djy+OdhRAI2B0xj6ZSkIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzU4OTAyNDdFMTc4QzQwREQzRjlBNTk2ODIwMkY2ODRB RUI4OUQ5QTAeFw0yNjAzMjQwODA2MTRaFw0yNjAzMjcxMjI3MTRaMDMxMTAvBgNV BAMTKEQxQUE5QjIwRDg4QTQ0NkNDRjVDMTEzN0JFMTREQjM2ODM3RDVGNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpa+9SxBh9jc/l7cwaX17eK2vC 6B6q3T8R51LTgSMR/6nUAeewfJ/iAIvCCiSL0MgYf7BtybG12L4PQGvGb/6ZLbDz 9XGdutUP6DL0GTgGwGm0W0PnRbGf9cAhDCkYocBXxDSL3AX6h0Ia2cXChl8qAPbf XGI0681kwMQ0KzizC6eDrJxpmN11RB58Iaft9g5jX2b0o4oWmmEipL0HAOxrIXk8 A5bBqUaPfvme7HztVVVGk+Z5uLksvD1mNW84WRZ2+pIy44wc7bNohr3fJ6p9rYNd aN54h+PaKfbq2ncf7l/6UQfYVEFOEqxTKbZAUQIQOz7I4eM7dV1r78XjizyPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0aqbINiKRGzPXBE3vhTbNoN9X1IwHwYDVR0j BBgwFoAUdYkCR+F4xA3T+aWWggL2hK64nZowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjI2YmU3Yi0yZTI4LTQ5NTAtYWE0Yy0yMTg1ZTY0N2RiM2YvMC83NTg5MDI0N0Ux NzhDNDBERDNGOUE1OTY4MjAyRjY4NEFFQjg5RDlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzU4OTAyNDdFMTc4QzQwREQzRjlBNTk2ODIwMkY2ODRBRUI4 OUQ5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjIyNmJlN2ItMmUyOC00OTUwLWFh NGMtMjE4NWU2NDdkYjNmLzAvNzU4OTAyNDdFMTc4QzQwREQzRjlBNTk2ODIwMkY2 ODRBRUI4OUQ5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACsYJX9ZJCMBFepauOidckuxn4506b0R3Qxo gpguTDCbF2vniF6UbrYx51I37DpAU9fQEwEQrOiSCgaGPbgLWD9Xza976dHTA4Zo xqWHmG6CWjhoB5tE6zcOrYPF4MhPCZmt6gc5U330Wfax5i9Mi7IC6HbrshO02NB+ bm66K1e8HhqSbhbnjIbhf0LE9UqjoEULRobqcgA8HPL+bjTa4m4rZeaBm8nYiuI1 wICF9IZdj29J5HnJSSYEBIUy8Rzg+seMNx2v5v3mTDobRP/whbRDhcU8+AG4+iza J3cGfDyA+zXb8SS76CubgDjH4+UCnQWCHvbYjnnOMnk38EZNoOs= -----END CERTIFICATE-----Generated at Thu Mar 26 15:20:30 2026 by rpki-client