$ rpki-client -vvf repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft File: D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft (raw, json) Hash identifier: FM+YvKEH0hc6snErewqxGDQbqi9S9IrBlfAXjZBhIfg= Subject key identifier: 3F:C2:9A:27:81:2F:44:39:AF:BC:03:01:C8:AD:3A:BC:E4:44:9F:05 Authority key identifier: D0:D1:DD:92:25:32:1E:1D:4D:1D:2F:63:A7:E0:88:0B:35:F6:83:7E Certificate issuer: /CN=D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E Certificate serial: 09BF7609658BAB46B1E75ADFEEA5E10C003E981F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft Manifest number: 021F Signing time: Thu 26 Mar 2026 02:31:47 +0000 Manifest this update: Thu 26 Mar 2026 02:26:47 +0000 Manifest next update: Sun 29 Mar 2026 11:07:47 +0000 Files and hashes: 1: D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.crl (hash: zp1YSrR5N3cOTpN/nnwoodFxowdk8ZULLrvaXZBO4Qw=) 2: 3130332e33352e3135342e302f32342d3234203d3e20313430343635.roa (hash: XIO/+nSZhKej3jMnOjZbsCNK4K1ZrGVSBexuH2tpC2E=) 3: 3130332e33352e3135352e302f32342d3234203d3e20313430343635.roa (hash: oG6Z5n7PBLWQXwObHyq0fNY8hlk/dgSiks250RxETxo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.crl rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 11:07:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:bf:76:09:65:8b:ab:46:b1:e7:5a:df:ee:a5:e1:0c:00:3e:98:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E Validity Not Before: Mar 26 02:26:47 2026 GMT Not After : Mar 29 11:07:47 2026 GMT Subject: CN=3FC29A27812F4439AFBC0301C8AD3ABCE4449F05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:32:00:1b:05:c4:6d:73:c8:85:0a:c8:74:45: 72:40:5d:0f:bb:1c:3a:88:77:84:80:5b:8f:b6:fd: 07:1c:db:a9:4d:32:15:a2:7a:d8:5e:f5:f0:a3:4d: ab:fe:43:38:8d:b9:0e:ba:f1:8b:bf:c9:a1:8d:87: b1:24:b1:c3:9e:7d:85:8e:df:e4:9c:99:4b:58:23: 00:a3:70:c2:b9:e4:ba:65:b0:5b:71:8d:8a:52:2e: 5c:04:c1:4f:c1:7f:5d:6e:6a:ce:ea:24:e2:41:77: ac:cb:4a:13:14:9f:6f:a2:5f:b6:a6:12:7e:3c:3a: 10:5b:e5:f6:5c:8b:71:b6:15:b0:fb:d3:20:f0:63: b4:51:de:3c:c4:16:00:e7:64:ea:a8:9c:df:ee:39: b7:ef:35:9c:d8:7e:f8:b0:b7:c5:1e:44:fe:d6:81: cb:09:74:07:1c:1d:5f:65:05:39:b9:d9:4c:34:52: e5:48:48:58:0b:61:5b:40:8f:22:c6:ce:47:b8:60: 15:97:17:1b:c4:9e:1a:ef:dd:34:64:64:98:17:78: 99:94:f3:f6:1d:30:87:8a:84:23:98:44:28:29:d5: a1:9b:db:fe:90:24:bf:22:9c:1c:e6:e1:29:3b:58: 02:e5:aa:d3:32:9c:39:23:50:90:72:22:c5:22:a6: 60:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:C2:9A:27:81:2F:44:39:AF:BC:03:01:C8:AD:3A:BC:E4:44:9F:05 X509v3 Authority Key Identifier: keyid:D0:D1:DD:92:25:32:1E:1D:4D:1D:2F:63:A7:E0:88:0B:35:F6:83:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:7c:6e:b1:bc:31:81:e6:74:ee:5b:48:b6:3b:0c:4a:8a:42: 79:94:90:c2:69:71:29:11:39:1c:b5:e3:ae:85:19:82:47:03: a2:3f:82:e9:19:8a:3b:0d:af:44:72:25:71:ca:16:71:2d:fd: ef:2f:93:48:49:2c:fe:31:5e:24:62:1b:26:e9:90:28:8e:ce: 5d:da:41:e9:7f:78:fd:3b:a1:27:5f:56:05:61:ca:9d:5e:88: b7:6d:17:d4:fe:b6:54:14:af:61:e0:b9:07:7d:b6:d3:e4:54: 23:e8:be:35:0c:86:2d:2e:fc:50:8a:3d:02:e2:6a:df:ee:10: f6:38:48:95:97:c9:e2:8b:ae:c9:6f:b2:22:74:47:5e:58:4d: b4:b6:c6:c8:64:06:aa:5c:3d:8b:bf:52:cf:bc:48:86:0f:f5: b1:d1:2e:0f:10:92:c6:ad:c3:35:ad:f7:eb:ca:ad:d3:5b:15: 97:37:5a:47:61:5c:1c:3c:ad:15:c0:e3:b5:eb:11:89:6b:3f: 84:79:12:e1:d3:63:f8:66:d3:cd:9d:6a:fb:2b:f8:23:ca:3a: 06:7e:23:10:90:65:ce:92:0b:8c:12:f1:7a:0c:79:aa:f3:e4: 51:3d:11:20:74:d8:27:48:22:e8:01:a7:6d:8b:57:85:24:e2: 21:ac:38:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCb92CWWLq0ax51rf7qXhDAA+mB8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBEMUREOTIyNTMyMUUxRDREMUQyRjYzQTdFMDg4MEIz NUY2ODM3RTAeFw0yNjAzMjYwMjI2NDdaFw0yNjAzMjkxMTA3NDdaMDMxMTAvBgNV BAMTKDNGQzI5QTI3ODEyRjQ0MzlBRkJDMDMwMUM4QUQzQUJDRTQ0NDlGMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuMgAbBcRtc8iFCsh0RXJAXQ+7 HDqId4SAW4+2/Qcc26lNMhWiethe9fCjTav+QziNuQ668Yu/yaGNh7EkscOefYWO 3+ScmUtYIwCjcMK55LplsFtxjYpSLlwEwU/Bf11uas7qJOJBd6zLShMUn2+iX7am En48OhBb5fZci3G2FbD70yDwY7RR3jzEFgDnZOqonN/uObfvNZzYfviwt8UeRP7W gcsJdAccHV9lBTm52Uw0UuVISFgLYVtAjyLGzke4YBWXFxvEnhrv3TRkZJgXeJmU 8/YdMIeKhCOYRCgp1aGb2/6QJL8inBzm4Sk7WALlqtMynDkjUJByIsUipmBvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP8KaJ4EvRDmvvAMByK06vOREnwUwHwYDVR0j BBgwFoAU0NHdkiUyHh1NHS9jp+CICzX2g34wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjkzMjljZi0zMTIzLTRjZTAtYTY4Ny0wYTAzY2Q3NTg3MzgvMC9EMEQxREQ5MjI1 MzIxRTFENEQxRDJGNjNBN0UwODgwQjM1RjY4MzdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBEMUREOTIyNTMyMUUxRDREMUQyRjYzQTdFMDg4MEIzNUY2 ODM3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjI5MzI5Y2YtMzEyMy00Y2UwLWE2 ODctMGEwM2NkNzU4NzM4LzAvRDBEMUREOTIyNTMyMUUxRDREMUQyRjYzQTdFMDg4 MEIzNUY2ODM3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEN8brG8MYHmdO5bSLY7DEqKQnmUkMJpcSkR ORy1466FGYJHA6I/gukZijsNr0RyJXHKFnEt/e8vk0hJLP4xXiRiGybpkCiOzl3a Qel/eP07oSdfVgVhyp1eiLdtF9T+tlQUr2HguQd9ttPkVCPovjUMhi0u/FCKPQLi at/uEPY4SJWXyeKLrslvsiJ0R15YTbS2xshkBqpcPYu/Us+8SIYP9bHRLg8Qksat wzWt9+vKrdNbFZc3WkdhXBw8rRXA47XrEYlrP4R5EuHTY/hm082davsr+CPKOgZ+ IxCQZc6SC4wS8XoMearz5FE9ESB02CdIIugBp22LV4Uk4iGsOGQ= -----END CERTIFICATE-----Generated at Thu Mar 26 15:49:42 2026 by rpki-client