$ rpki-client -vvf repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft File: B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft (raw, json) Hash identifier: UQ9cQxRmIGLvje0KnVfDQ8XyO7i/qmpxENwbzXyLsSU= Subject key identifier: FE:5E:CF:73:D1:E2:51:33:47:74:0B:66:89:A1:FC:EE:F6:05:5F:6F Authority key identifier: B7:25:35:E4:EB:8B:31:C6:79:4C:4D:F3:1F:F5:3E:4E:64:91:4C:56 Certificate issuer: /CN=B72535E4EB8B31C6794C4DF31FF53E4E64914C56 Certificate serial: 1A5AC95B74A7C3A7B84952843D58CED1F7ABF18E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.cer Subject info access: rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft Manifest number: 0129 Signing time: Thu 26 Mar 2026 06:42:51 +0000 Manifest this update: Thu 26 Mar 2026 06:37:51 +0000 Manifest next update: Sun 29 Mar 2026 18:03:51 +0000 Files and hashes: 1: 3135372e36362e35302e302f32332d3234203d3e20313532343338.roa (hash: 0z+OlDe1hua3zv7OtVHMMPyi/MvPOJjdEV9nI71654g=) 2: B72535E4EB8B31C6794C4DF31FF53E4E64914C56.crl (hash: 7omiCDMxsWGaDgxd6NhDoTthV/YWR2hVOh6ofDDTF8Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.crl rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:5a:c9:5b:74:a7:c3:a7:b8:49:52:84:3d:58:ce:d1:f7:ab:f1:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B72535E4EB8B31C6794C4DF31FF53E4E64914C56 Validity Not Before: Mar 26 06:37:51 2026 GMT Not After : Mar 29 18:03:51 2026 GMT Subject: CN=FE5ECF73D1E2513347740B6689A1FCEEF6055F6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:69:f0:ae:b2:71:c8:5f:06:29:a6:8b:02:5a: 24:4d:f3:56:3b:4b:9e:ba:05:ee:8f:44:d8:f9:3f: 2d:39:7d:ce:ac:ce:84:fb:4f:a3:02:e3:86:2f:bd: 32:72:0b:d5:75:57:eb:b1:9a:85:fb:a3:58:b4:5a: d4:ed:76:d6:c7:ae:7b:b5:c7:b5:50:43:e6:c0:72: 4c:59:d6:98:0d:2d:f8:73:e9:da:25:e6:34:4c:06: 68:4b:19:d4:d9:29:e5:53:47:50:04:2c:8a:94:59: c9:10:48:0c:19:e6:14:58:8d:93:a4:ad:31:28:ad: 9e:39:4f:c7:97:a6:f6:3d:3c:92:5a:d5:43:2c:32: 68:2e:cd:9d:1a:dd:1a:20:e3:c4:d5:6d:83:7f:f7: 27:1d:78:5e:e0:bf:ad:b5:40:5f:b6:1d:00:e1:0e: e5:ee:06:31:f2:6e:cf:a0:b1:59:01:fc:11:fc:45: a5:dd:ec:be:6f:f7:de:84:e7:ca:ad:04:01:00:05: d9:f4:61:b8:a4:a1:a9:05:81:cd:d8:95:bc:b1:49: 86:25:8e:af:99:c1:ab:73:d3:ad:d8:be:90:1e:fc: c9:14:d5:28:7c:c0:28:b3:16:c0:ac:53:04:1d:af: 52:f6:84:40:06:4f:83:52:31:87:a4:40:e4:4a:9b: 40:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:5E:CF:73:D1:E2:51:33:47:74:0B:66:89:A1:FC:EE:F6:05:5F:6F X509v3 Authority Key Identifier: keyid:B7:25:35:E4:EB:8B:31:C6:79:4C:4D:F3:1F:F5:3E:4E:64:91:4C:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:14:37:4a:05:18:5c:52:ae:e9:29:5a:f5:f8:52:2a:3d:8f: 32:f6:60:47:0d:3b:41:39:33:cb:64:ca:b9:95:7b:d4:f9:30: 8e:04:e2:e2:a6:d3:8f:8f:d1:9d:20:37:32:20:3b:98:22:5f: c3:4d:bc:32:a5:d2:61:3f:d4:4b:61:ed:67:3a:d0:57:49:12: 2b:a6:8e:83:c1:95:27:e1:02:1e:dc:85:dc:d2:f2:38:ee:ec: 77:48:97:5b:ce:c2:7a:3c:71:ce:ba:93:a4:26:36:f4:b1:21: 7a:da:a9:0b:86:e2:d6:6f:74:93:dd:38:7f:33:e0:14:d7:ce: da:7f:f5:b4:34:f8:48:c2:4b:0c:0a:11:a5:23:da:8e:98:c5: d9:03:dd:ff:e1:1f:ef:de:f0:a4:30:16:29:7f:74:54:2a:dc: b9:05:d4:ef:2c:62:c4:21:55:f5:3c:97:ed:2d:c1:7d:9e:70: 66:5e:c9:d4:b7:63:0c:1d:37:23:64:17:25:db:25:e7:ef:45: 64:c2:e4:cf:ef:08:f0:af:ad:7d:60:8f:3b:9d:16:bb:7c:f8: d1:5e:34:8e:19:c5:94:0a:8f:fe:68:cd:a2:eb:cd:0f:2e:d2: 90:1c:69:74:0f:cb:f9:b3:51:db:e2:e2:56:52:cc:ef:be:2b: af:5e:2c:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGlrJW3Snw6e4SVKEPVjO0fer8Y4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcyNTM1RTRFQjhCMzFDNjc5NEM0REYzMUZGNTNFNEU2 NDkxNEM1NjAeFw0yNjAzMjYwNjM3NTFaFw0yNjAzMjkxODAzNTFaMDMxMTAvBgNV BAMTKEZFNUVDRjczRDFFMjUxMzM0Nzc0MEI2Njg5QTFGQ0VFRjYwNTVGNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWafCusnHIXwYpposCWiRN81Y7 S566Be6PRNj5Py05fc6szoT7T6MC44YvvTJyC9V1V+uxmoX7o1i0WtTtdtbHrnu1 x7VQQ+bAckxZ1pgNLfhz6dol5jRMBmhLGdTZKeVTR1AELIqUWckQSAwZ5hRYjZOk rTEorZ45T8eXpvY9PJJa1UMsMmguzZ0a3Rog48TVbYN/9ycdeF7gv621QF+2HQDh DuXuBjHybs+gsVkB/BH8RaXd7L5v996E58qtBAEABdn0YbikoakFgc3YlbyxSYYl jq+Zwatz063YvpAe/MkU1Sh8wCizFsCsUwQdr1L2hEAGT4NSMYekQORKm0BvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/l7Pc9HiUTNHdAtmiaH87vYFX28wHwYDVR0j BBgwFoAUtyU15OuLMcZ5TE3zH/U+TmSRTFYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NmZhOTU4NC02Zjk3LTQwNDEtOWM4ZC04YjM5NTllNGY5YjMvMC9CNzI1MzVFNEVC OEIzMUM2Nzk0QzRERjMxRkY1M0U0RTY0OTE0QzU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjcyNTM1RTRFQjhCMzFDNjc5NEM0REYzMUZGNTNFNEU2NDkx NEM1Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjZmYTk1ODQtNmY5Ny00MDQxLTlj OGQtOGIzOTU5ZTRmOWIzLzAvQjcyNTM1RTRFQjhCMzFDNjc5NEM0REYzMUZGNTNF NEU2NDkxNEM1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADkUN0oFGFxSrukpWvX4Uio9jzL2YEcNO0E5 M8tkyrmVe9T5MI4E4uKm04+P0Z0gNzIgO5giX8NNvDKl0mE/1Eth7Wc60FdJEium joPBlSfhAh7chdzS8jju7HdIl1vOwno8cc66k6QmNvSxIXraqQuG4tZvdJPdOH8z 4BTXztp/9bQ0+EjCSwwKEaUj2o6YxdkD3f/hH+/e8KQwFil/dFQq3LkF1O8sYsQh VfU8l+0twX2ecGZeydS3YwwdNyNkFyXbJefvRWTC5M/vCPCvrX1gjzudFrt8+NFe NI4ZxZQKj/5ozaLrzQ8u0pAcaXQPy/mzUdvi4lZSzO++K69eLHU= -----END CERTIFICATE-----Generated at Thu Mar 26 18:49:40 2026 by rpki-client