$ rpki-client -vvf repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.mft File: 986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.mft (raw, json) Hash identifier: sIw3/FEF+WL3cs1dO+esne71s0PAmRG0ZCJhVKwjb5U= Subject key identifier: E4:1D:B9:61:BA:51:8E:CB:7A:19:A9:8F:E0:6D:A9:DF:99:CD:E3:B0 Authority key identifier: 98:6E:FE:1C:2B:B8:B0:E4:E1:47:2E:9D:AA:5B:77:5A:A4:F6:68:9F Certificate issuer: /CN=986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F Certificate serial: 73BB599405F16C4BA13708217310AF4476D51618 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.mft Manifest number: 055C Signing time: Thu 26 Mar 2026 09:11:50 +0000 Manifest this update: Thu 26 Mar 2026 09:06:50 +0000 Manifest next update: Sun 29 Mar 2026 17:10:50 +0000 Files and hashes: 1: 323030313a6466373a336230303a3a2f34382d3438203d3e20313338313037.roa (hash: 5ZMFCFB2Z2k1wsOQD3WlLnfBqmNmCDqFjaN+cKeJCYg=) 2: 3130332e3132362e35362e302f32322d3234203d3e20313338313037.roa (hash: PNy2Ky9qBufKbv/f4p4dFdjvMCRYXe8YTpQCXZbAHQM=) 3: 986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.crl (hash: Cr7bzmLUAWdM8NDLuVoE7kQGJavMDFl4phhi4bU5RRY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.crl rsync://repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 17:10:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:bb:59:94:05:f1:6c:4b:a1:37:08:21:73:10:af:44:76:d5:16:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F Validity Not Before: Mar 26 09:06:50 2026 GMT Not After : Mar 29 17:10:50 2026 GMT Subject: CN=E41DB961BA518ECB7A19A98FE06DA9DF99CDE3B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:30:d4:d1:b2:5d:4e:cf:b9:30:a3:d4:b4:f7: 73:57:65:fb:e3:dc:39:59:2a:61:93:5a:cb:b4:92: 60:d6:a0:cf:1f:ec:c2:fa:b9:ce:6d:3e:74:d6:f4: 12:ef:23:59:12:3c:bd:3d:f8:e7:42:a1:7e:09:e4: 06:01:b1:67:cc:f0:b5:5d:a4:c7:48:ce:39:52:40: f1:a2:b6:79:93:9b:12:a7:4c:79:15:73:03:92:78: cf:72:b6:a7:4b:c5:c9:bc:ef:5b:18:01:98:30:a7: e2:93:e3:a9:2e:a6:c7:76:5c:04:13:90:0b:13:e5: 7a:50:f1:ba:27:34:ae:37:77:96:c1:77:65:ae:3c: f9:3a:3e:3e:a4:a3:3c:b8:b8:bf:0a:f1:5e:67:67: b7:1a:43:35:b9:96:ca:fa:9e:ea:57:c9:74:08:eb: 3c:f9:d3:0b:17:86:d2:a1:c6:45:95:8a:da:a9:6f: c3:d2:19:bf:ea:49:d7:93:fe:92:96:9b:cd:11:46: 70:14:a7:cc:39:53:3a:88:25:c0:64:40:fe:19:dd: b1:8d:ac:c4:f2:8e:fd:84:9f:2b:bf:07:50:ac:fc: 22:6c:b9:7e:b1:2b:f4:9a:9f:08:e3:58:6b:c3:4d: 00:c0:51:25:49:72:65:47:9c:0a:1e:48:24:7d:6d: b5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:1D:B9:61:BA:51:8E:CB:7A:19:A9:8F:E0:6D:A9:DF:99:CD:E3:B0 X509v3 Authority Key Identifier: keyid:98:6E:FE:1C:2B:B8:B0:E4:E1:47:2E:9D:AA:5B:77:5A:A4:F6:68:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:bc:91:64:85:5f:40:a2:ec:56:e4:d9:2f:9c:bc:6e:c9:14: 60:77:47:cc:c8:69:3c:a5:47:01:cc:d8:74:3b:55:dd:28:dc: d7:ec:48:ab:74:ce:8d:bc:7e:b1:2d:97:05:1e:8f:33:f2:32: 79:4b:25:ee:46:07:85:18:80:89:0e:0d:2b:30:0c:46:09:c0: 37:1b:62:67:04:a4:f5:fc:81:ad:1c:7a:f4:11:92:50:c7:16: ff:1e:3d:c8:eb:43:99:ac:e6:0f:c3:1f:5f:ff:71:8a:e1:22: eb:e0:27:80:94:d6:1a:3d:3a:4a:63:da:31:dd:f3:71:79:a4: 02:61:64:ca:f5:16:37:76:49:cd:a5:25:f8:c8:6a:a6:2d:84: 52:63:8e:e1:6b:45:6e:b0:2b:20:04:20:ed:88:1b:7a:12:6f: 7c:fb:4f:e5:1e:b2:9d:97:3d:43:6e:71:c4:27:31:ba:66:18: 1c:bc:f2:8b:c7:f6:ec:ff:3e:90:95:48:5e:e4:73:12:28:18: 8c:c2:b7:40:02:1d:cf:ea:83:0e:6a:dc:17:b5:4d:5e:5c:7c: cb:a4:ff:b6:b0:a2:94:8e:7f:d1:87:cb:f5:b5:82:ba:7b:d9: e2:8f:40:31:e3:ad:f2:78:f2:a4:6d:dd:d2:e6:1d:69:a8:11: 63:be:45:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc7tZlAXxbEuhNwghcxCvRHbVFhgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg2RUZFMUMyQkI4QjBFNEUxNDcyRTlEQUE1Qjc3NUFB NEY2Njg5RjAeFw0yNjAzMjYwOTA2NTBaFw0yNjAzMjkxNzEwNTBaMDMxMTAvBgNV BAMTKEU0MURCOTYxQkE1MThFQ0I3QTE5QTk4RkUwNkRBOURGOTlDREUzQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOMNTRsl1Oz7kwo9S093NXZfvj 3DlZKmGTWsu0kmDWoM8f7ML6uc5tPnTW9BLvI1kSPL09+OdCoX4J5AYBsWfM8LVd pMdIzjlSQPGitnmTmxKnTHkVcwOSeM9ytqdLxcm871sYAZgwp+KT46kupsd2XAQT kAsT5XpQ8bonNK43d5bBd2WuPPk6Pj6kozy4uL8K8V5nZ7caQzW5lsr6nupXyXQI 6zz50wsXhtKhxkWVitqpb8PSGb/qSdeT/pKWm80RRnAUp8w5UzqIJcBkQP4Z3bGN rMTyjv2Enyu/B1Cs/CJsuX6xK/SanwjjWGvDTQDAUSVJcmVHnAoeSCR9bbVtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5B25YbpRjst6GamP4G2p35nN47AwHwYDVR0j BBgwFoAUmG7+HCu4sOThRy6dqlt3WqT2aJ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTYyZDE1Yi0xMDJiLTQzMWYtYTUzOS0wYTkzMmIzMTM2NmMvMC85ODZFRkUxQzJC QjhCMEU0RTE0NzJFOURBQTVCNzc1QUE0RjY2ODlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg2RUZFMUMyQkI4QjBFNEUxNDcyRTlEQUE1Qjc3NUFBNEY2 Njg5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE2MmQxNWItMTAyYi00MzFmLWE1 MzktMGE5MzJiMzEzNjZjLzAvOTg2RUZFMUMyQkI4QjBFNEUxNDcyRTlEQUE1Qjc3 NUFBNEY2Njg5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC68kWSFX0Ci7Fbk2S+cvG7JFGB3R8zIaTyl RwHM2HQ7Vd0o3NfsSKt0zo28frEtlwUejzPyMnlLJe5GB4UYgIkODSswDEYJwDcb YmcEpPX8ga0cevQRklDHFv8ePcjrQ5ms5g/DH1//cYrhIuvgJ4CU1ho9Okpj2jHd 83F5pAJhZMr1Fjd2Sc2lJfjIaqYthFJjjuFrRW6wKyAEIO2IG3oSb3z7T+Uesp2X PUNuccQnMbpmGBy88ovH9uz/PpCVSF7kcxIoGIzCt0ACHc/qgw5q3Be1TV5cfMuk /7awopSOf9GHy/W1grp72eKPQDHjrfJ48qRt3dLmHWmoEWO+RVk= -----END CERTIFICATE-----Generated at Thu Mar 26 18:58:58 2026 by rpki-client