$ rpki-client -vvf repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft File: D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft (raw, json) Hash identifier: o4cjCu21XBBfhxnNXTnt+jZyQ6o5iDpE/r3bzchY2e8= Subject key identifier: 10:AD:1E:9A:B3:A5:49:CA:2A:F3:82:64:F9:79:2C:EC:BE:17:E7:97 Authority key identifier: D2:8B:A9:D5:E3:21:93:DE:E2:9E:B4:C1:94:4F:35:FC:32:D8:B1:9B Certificate issuer: /CN=D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B Certificate serial: 44C413C0370940E018E26173450C1BCBB191DB0A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft Manifest number: 0116 Signing time: Thu 26 Mar 2026 14:02:21 +0000 Manifest this update: Thu 26 Mar 2026 13:57:21 +0000 Manifest next update: Sun 29 Mar 2026 23:37:21 +0000 Files and hashes: 1: 3130332e38342e3230312e302f32342d3234203d3e20313336303935.roa (hash: 6UTk6qTE+l33r+zdpJdYayRwLX5BpaOtu0Am/wxoORw=) 2: 3130332e38342e3230302e302f32342d3234203d3e20313336303935.roa (hash: ajCQWCbIuLR2rdyLkSz/8WmAOj/J1v9eHfGi8P7WLFg=) 3: D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.crl (hash: iyoaw0G/Qd+SES40HfR5mYPyK3iqarHdgFAw2btG6r8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.crl rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 23:37:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:c4:13:c0:37:09:40:e0:18:e2:61:73:45:0c:1b:cb:b1:91:db:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B Validity Not Before: Mar 26 13:57:21 2026 GMT Not After : Mar 29 23:37:21 2026 GMT Subject: CN=10AD1E9AB3A549CA2AF38264F9792CECBE17E797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f3:e5:d5:dc:11:f0:01:db:b3:5a:25:9b:c8: 68:cd:eb:cc:09:31:e2:66:1f:fe:75:ea:dc:50:a6: 5f:10:7c:59:5c:73:c0:d0:fd:b3:ea:df:b9:3c:0e: c9:7f:25:3a:bc:5d:b6:c8:f6:61:45:91:52:ea:5b: 2e:bf:16:6e:b9:63:38:5d:e4:9f:04:0c:91:fc:6f: 5d:df:ed:3c:4e:3a:db:2c:19:a5:1e:6f:c0:5c:a0: c0:a2:8e:11:a1:f9:3e:a0:72:88:99:27:22:0b:82: 53:be:a7:59:d9:90:e2:51:cd:bd:a8:44:da:a6:f3: 73:bb:92:e6:1f:e3:ef:4f:b2:39:92:b2:3c:f2:1c: ff:f6:2e:42:26:03:61:9d:bd:48:78:88:ed:44:2a: ea:d1:45:05:e4:50:11:2c:3b:da:58:c5:f2:af:b1: 1c:b5:4d:91:43:8e:4b:05:33:b3:4b:5a:e2:ec:80: 02:95:f9:54:b6:eb:93:fc:70:c6:50:d3:ff:42:e6: 0e:8b:3b:ad:23:e8:79:8b:c3:6c:e3:01:9c:3a:50: 6e:ab:64:32:02:82:de:04:bd:f3:43:55:bb:54:73: 9e:fe:4c:8f:e7:a1:9c:b8:68:98:9f:5c:99:f6:b8: 79:85:ff:28:08:fc:92:bf:4c:9e:a4:be:7b:36:c6: f3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:AD:1E:9A:B3:A5:49:CA:2A:F3:82:64:F9:79:2C:EC:BE:17:E7:97 X509v3 Authority Key Identifier: keyid:D2:8B:A9:D5:E3:21:93:DE:E2:9E:B4:C1:94:4F:35:FC:32:D8:B1:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:39:31:89:e0:7a:83:e2:1f:c5:dd:e1:33:21:36:66:d3:85: 1c:0b:5f:6d:46:af:a0:a8:da:6e:5a:2f:33:1c:59:fe:bc:5e: e3:38:ab:75:85:1d:d1:57:1e:2e:24:57:81:8d:64:05:11:f6: 4a:99:e4:af:ed:5a:d9:71:13:d2:14:54:6b:69:92:18:27:ac: 86:95:d1:9d:08:d9:8c:32:f9:71:95:19:b4:2b:61:86:70:ce: 9f:a5:bf:1c:3e:cb:b6:69:ca:06:61:ce:d8:37:11:ee:43:b6: da:3a:b8:0e:72:48:01:63:35:d0:44:71:f8:88:91:03:4b:9a: b0:b1:7c:26:d8:13:6a:ef:ea:e6:4e:8d:1a:ec:30:a7:6c:82: 74:de:2d:2a:61:2f:d9:11:be:44:90:f6:e5:b6:29:86:ae:ec: e4:75:2e:50:ed:72:78:51:90:bc:e8:d8:23:e5:31:60:3b:73: 51:98:f8:0d:32:e0:4d:6f:ce:67:8b:49:2c:7e:61:ef:3d:8d: a0:b4:98:7f:f4:b4:a1:8c:e9:e4:da:a3:38:58:61:85:7f:3e: 45:16:83:27:55:99:88:97:a7:95:e1:a0:d8:35:ff:40:38:24: 01:fe:06:e7:d4:e6:35:1f:3f:2c:96:1d:a8:de:b9:84:e8:ad: 5b:b0:c1:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURMQTwDcJQOAY4mFzRQwby7GR2wowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI4QkE5RDVFMzIxOTNERUUyOUVCNEMxOTQ0RjM1RkMz MkQ4QjE5QjAeFw0yNjAzMjYxMzU3MjFaFw0yNjAzMjkyMzM3MjFaMDMxMTAvBgNV BAMTKDEwQUQxRTlBQjNBNTQ5Q0EyQUYzODI2NEY5NzkyQ0VDQkUxN0U3OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF8+XV3BHwAduzWiWbyGjN68wJ MeJmH/516txQpl8QfFlcc8DQ/bPq37k8Dsl/JTq8XbbI9mFFkVLqWy6/Fm65Yzhd 5J8EDJH8b13f7TxOOtssGaUeb8BcoMCijhGh+T6gcoiZJyILglO+p1nZkOJRzb2o RNqm83O7kuYf4+9PsjmSsjzyHP/2LkImA2GdvUh4iO1EKurRRQXkUBEsO9pYxfKv sRy1TZFDjksFM7NLWuLsgAKV+VS265P8cMZQ0/9C5g6LO60j6HmLw2zjAZw6UG6r ZDICgt4EvfNDVbtUc57+TI/noZy4aJifXJn2uHmF/ygI/JK/TJ6kvns2xvOtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEK0emrOlScoq84Jk+Xks7L4X55cwHwYDVR0j BBgwFoAU0oup1eMhk97inrTBlE81/DLYsZswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NWUyNDE1Yy03ZDRmLTQ0MjctODMyZC01OWI0Yzc5YWFlNWEvMC9EMjhCQTlENUUz MjE5M0RFRTI5RUI0QzE5NDRGMzVGQzMyRDhCMTlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI4QkE5RDVFMzIxOTNERUUyOUVCNEMxOTQ0RjM1RkMzMkQ4 QjE5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjVlMjQxNWMtN2Q0Zi00NDI3LTgz MmQtNTliNGM3OWFhZTVhLzAvRDI4QkE5RDVFMzIxOTNERUUyOUVCNEMxOTQ0RjM1 RkMzMkQ4QjE5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJk5MYngeoPiH8Xd4TMhNmbThRwLX21Gr6Co 2m5aLzMcWf68XuM4q3WFHdFXHi4kV4GNZAUR9kqZ5K/tWtlxE9IUVGtpkhgnrIaV 0Z0I2Ywy+XGVGbQrYYZwzp+lvxw+y7ZpygZhztg3Ee5Dtto6uA5ySAFjNdBEcfiI kQNLmrCxfCbYE2rv6uZOjRrsMKdsgnTeLSphL9kRvkSQ9uW2KYau7OR1LlDtcnhR kLzo2CPlMWA7c1GY+A0y4E1vzmeLSSx+Ye89jaC0mH/0tKGM6eTaozhYYYV/PkUW gydVmYiXp5XhoNg1/0A4JAH+BufU5jUfPyyWHajeuYTorVuwwT0= -----END CERTIFICATE-----Generated at Thu Mar 26 19:26:27 2026 by rpki-client