$ rpki-client -vvf repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft File: D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft (raw, json) Hash identifier: ZQZAYYuysIRxggUwm+F0e7ClOfTeHwiLirasOOuJTOY= Subject key identifier: 4D:83:0E:DB:D5:38:9F:CE:23:AC:E3:38:8C:87:EC:5B:9B:58:D0:39 Authority key identifier: D5:C9:29:9A:E0:0F:00:35:70:4B:10:A8:43:10:B3:C3:DA:D9:BE:19 Certificate issuer: /CN=D5C9299AE00F0035704B10A84310B3C3DAD9BE19 Certificate serial: 4F6914781F17FA0DBF587E28D9BC0CF82505AFE0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft Manifest number: 0132 Signing time: Tue 24 Mar 2026 23:02:37 +0000 Manifest this update: Tue 24 Mar 2026 22:57:37 +0000 Manifest next update: Sat 28 Mar 2026 00:51:37 +0000 Files and hashes: 1: 3130332e3136302e3230312e302f32342d3234203d3e20313431363030.roa (hash: VrbRBoxOLArpkrqv0CgqRXIbC24YLbBmO0Yj8Vtecy4=) 2: D5C9299AE00F0035704B10A84310B3C3DAD9BE19.crl (hash: sD5eAwGPo+O3Luo9trXVLZx4yV9d98WOrwbpN5yboak=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.crl rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 00:51:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:69:14:78:1f:17:fa:0d:bf:58:7e:28:d9:bc:0c:f8:25:05:af:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5C9299AE00F0035704B10A84310B3C3DAD9BE19 Validity Not Before: Mar 24 22:57:37 2026 GMT Not After : Mar 28 00:51:37 2026 GMT Subject: CN=4D830EDBD5389FCE23ACE3388C87EC5B9B58D039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b3:9d:de:ed:61:bc:31:a1:4a:91:21:9a:51: 6f:dd:53:41:d9:3e:bd:83:32:a9:7e:63:52:48:10: 1b:02:9f:ee:48:d6:9c:45:d1:be:ad:ea:4f:1b:26: 24:a6:69:9a:48:18:54:7c:85:d2:a2:0f:c7:44:e9: 41:39:b5:92:f8:4e:68:4a:d8:10:3f:e0:a2:01:1e: bd:90:b9:79:cc:a7:f7:1d:28:e7:c9:e7:60:14:02: a2:b8:5a:cd:59:30:34:1c:96:a4:13:95:b4:eb:1b: 3b:9f:75:c9:0b:a8:25:8c:12:a1:9e:ff:32:04:8d: c3:fa:94:e8:15:f4:47:dd:4f:9e:b7:2b:d1:d2:87: 75:22:25:87:3b:c2:22:55:3e:34:ea:9b:1b:c9:16: 1d:76:d8:ef:9c:c2:5c:66:c0:65:11:dc:f6:2f:c5: cb:f9:8e:eb:df:19:7c:63:75:85:36:c2:86:f2:27: 14:1a:ee:00:62:f1:ff:56:aa:53:43:97:2d:7d:f3: 0a:48:dd:2b:09:8c:a1:e5:6e:f9:22:c7:58:ed:07: b1:cd:57:ee:91:e9:30:a9:c9:8c:65:7f:0a:cd:fd: b1:4f:46:65:dd:93:6d:84:d5:a1:7e:7d:32:91:a9: f8:3b:6f:d4:81:a2:a9:71:67:a1:75:8e:b9:be:43: 13:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:83:0E:DB:D5:38:9F:CE:23:AC:E3:38:8C:87:EC:5B:9B:58:D0:39 X509v3 Authority Key Identifier: keyid:D5:C9:29:9A:E0:0F:00:35:70:4B:10:A8:43:10:B3:C3:DA:D9:BE:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:a9:45:e6:90:47:64:53:6d:e7:f7:08:da:e0:18:58:5a:74: 5d:68:a9:80:59:38:ac:97:73:7c:87:8b:99:02:26:1a:51:20: d5:b1:b8:ec:f8:dd:2e:38:9c:69:a9:52:41:0e:0d:05:7c:06: 47:e1:89:64:f3:39:10:14:c7:09:4e:d1:ae:d6:c9:33:f6:6d: 88:dd:97:f6:c8:00:d0:4b:e8:14:a9:88:7c:7c:cf:d6:78:1b: a3:78:70:f9:5d:15:db:7a:4d:df:77:03:02:a5:62:d5:dc:4c: 2f:72:ae:e6:7e:fe:74:5d:72:c9:56:4b:a1:41:9c:dc:e3:c9: e1:7e:5d:8d:54:3a:05:b1:3c:9f:93:c8:d0:70:06:04:9a:15: 22:6c:36:23:21:7a:94:1f:18:41:4b:78:9a:6a:ac:8e:fb:f9: 55:df:83:b6:d5:91:1f:58:ad:cb:5c:1b:32:0b:56:8c:49:7f: af:89:da:6b:b4:28:bc:ad:5b:97:d2:e3:c8:21:3b:96:18:6e: 53:b3:53:2d:26:67:0a:47:67:ee:12:cc:49:93:44:aa:88:bb: 39:7f:c2:e6:65:ec:73:bd:1a:66:ad:b6:84:9f:41:7a:10:5c: 65:08:6c:e4:c7:5a:bb:be:43:ea:cd:91:f6:13:28:67:9e:97: 94:29:17:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT2kUeB8X+g2/WH4o2bwM+CUFr+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVDOTI5OUFFMDBGMDAzNTcwNEIxMEE4NDMxMEIzQzNE QUQ5QkUxOTAeFw0yNjAzMjQyMjU3MzdaFw0yNjAzMjgwMDUxMzdaMDMxMTAvBgNV BAMTKDREODMwRURCRDUzODlGQ0UyM0FDRTMzODhDODdFQzVCOUI1OEQwMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3s53e7WG8MaFKkSGaUW/dU0HZ Pr2DMql+Y1JIEBsCn+5I1pxF0b6t6k8bJiSmaZpIGFR8hdKiD8dE6UE5tZL4TmhK 2BA/4KIBHr2QuXnMp/cdKOfJ52AUAqK4Ws1ZMDQclqQTlbTrGzufdckLqCWMEqGe /zIEjcP6lOgV9EfdT563K9HSh3UiJYc7wiJVPjTqmxvJFh122O+cwlxmwGUR3PYv xcv5juvfGXxjdYU2wobyJxQa7gBi8f9WqlNDly198wpI3SsJjKHlbvkix1jtB7HN V+6R6TCpyYxlfwrN/bFPRmXdk22E1aF+fTKRqfg7b9SBoqlxZ6F1jrm+QxPtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTYMO29U4n84jrOM4jIfsW5tY0DkwHwYDVR0j BBgwFoAU1ckpmuAPADVwSxCoQxCzw9rZvhkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTQ0ZDk3YS1lM2ZiLTRmZmMtYjdmNy1mN2I4YjY2NTlhYzQvMS9ENUM5Mjk5QUUw MEYwMDM1NzA0QjEwQTg0MzEwQjNDM0RBRDlCRTE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDVDOTI5OUFFMDBGMDAzNTcwNEIxMEE4NDMxMEIzQzNEQUQ5 QkUxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE0NGQ5N2EtZTNmYi00ZmZjLWI3 ZjctZjdiOGI2NjU5YWM0LzEvRDVDOTI5OUFFMDBGMDAzNTcwNEIxMEE4NDMxMEIz QzNEQUQ5QkUxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADKpReaQR2RTbef3CNrgGFhadF1oqYBZOKyX c3yHi5kCJhpRINWxuOz43S44nGmpUkEODQV8BkfhiWTzORAUxwlO0a7WyTP2bYjd l/bIANBL6BSpiHx8z9Z4G6N4cPldFdt6Td93AwKlYtXcTC9yruZ+/nRdcslWS6FB nNzjyeF+XY1UOgWxPJ+TyNBwBgSaFSJsNiMhepQfGEFLeJpqrI77+VXfg7bVkR9Y rctcGzILVoxJf6+J2mu0KLytW5fS48ghO5YYblOzUy0mZwpHZ+4SzEmTRKqIuzl/ wuZl7HO9GmattoSfQXoQXGUIbOTHWru+Q+rNkfYTKGeel5QpF5Q= -----END CERTIFICATE-----Generated at Thu Mar 26 05:56:10 2026 by rpki-client