$ rpki-client -vvf repo-rpki.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/053084D88D32CFF591DBCBF3109B9137C3E74648.mft File: 053084D88D32CFF591DBCBF3109B9137C3E74648.mft (raw, json) Hash identifier: FayDTG01cYS3CBATzXz1+FI/r1O9cya2+gJKeR7r86M= Subject key identifier: 82:DE:35:9A:3E:2F:0D:89:DA:69:2C:F5:B1:62:1C:FF:A1:D6:9A:59 Authority key identifier: 05:30:84:D8:8D:32:CF:F5:91:DB:CB:F3:10:9B:91:37:C3:E7:46:48 Certificate issuer: /CN=053084D88D32CFF591DBCBF3109B9137C3E74648 Certificate serial: 62DEBDDBDFB1CF892AB94C8DD06157DD91E94138 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/053084D88D32CFF591DBCBF3109B9137C3E74648.cer Subject info access: rsync://repo-rpki.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/053084D88D32CFF591DBCBF3109B9137C3E74648.mft Manifest number: 01BE Signing time: Wed 25 Mar 2026 19:26:08 +0000 Manifest this update: Wed 25 Mar 2026 19:21:08 +0000 Manifest next update: Sun 29 Mar 2026 02:33:08 +0000 Files and hashes: 1: 3130332e3230352e36322e302f32332d3234203d3e20313530393932.roa (hash: x0rdzW+Z+6mUhvRC+qwoD+PtRMhNjhgY1WA5KetHwXU=) 2: 053084D88D32CFF591DBCBF3109B9137C3E74648.crl (hash: njB53p1cfXZRQKUTCghU1+wlDyQnxGaSljANzbkB1S8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/053084D88D32CFF591DBCBF3109B9137C3E74648.crl rsync://repo-rpki.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/053084D88D32CFF591DBCBF3109B9137C3E74648.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/053084D88D32CFF591DBCBF3109B9137C3E74648.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 02:33:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:de:bd:db:df:b1:cf:89:2a:b9:4c:8d:d0:61:57:dd:91:e9:41:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=053084D88D32CFF591DBCBF3109B9137C3E74648 Validity Not Before: Mar 25 19:21:08 2026 GMT Not After : Mar 29 02:33:08 2026 GMT Subject: CN=82DE359A3E2F0D89DA692CF5B1621CFFA1D69A59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8f:d1:26:46:00:3c:c8:f4:90:49:81:fd:35: 6a:d2:e8:26:bf:97:db:75:b5:da:37:a3:25:3b:fa: c6:e8:f0:6c:7d:20:d9:96:d7:a2:d3:a6:f0:6a:2a: b4:de:d1:3c:7a:69:2a:17:f5:77:d0:45:5c:5f:f6: ad:26:d0:1c:db:99:7e:8f:b0:2a:2d:c0:1c:c0:89: db:91:e9:08:f5:a2:1c:d1:3a:5c:2f:73:22:8a:89: 16:6a:f4:b0:31:66:ef:4b:30:ea:3f:da:30:1b:61: 47:c3:bb:30:9f:22:d3:f7:28:6d:e3:48:26:d2:8f: c4:ef:d7:32:18:33:a1:2a:03:fe:4b:1c:da:e3:8f: c2:6d:94:2e:02:ce:c2:59:86:1b:56:cb:a6:1d:f8: 54:be:4e:51:0f:81:b4:cc:a9:99:e9:e8:14:ce:93: d8:98:c4:2b:3e:14:17:3b:ee:c8:e4:15:ab:a4:50: 41:8c:f8:0d:69:b4:0f:54:23:0e:68:d2:cf:48:95: 63:5b:ce:47:bc:c1:a7:f7:fd:40:61:b5:c8:50:5c: d8:c5:dc:82:6d:58:56:bd:71:4f:ca:80:7e:8b:da: 30:90:70:53:bd:e8:4e:f8:6f:61:89:c5:e7:ea:56: d1:de:e1:d2:58:e0:46:11:55:0f:ea:7e:16:55:c6: 96:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:DE:35:9A:3E:2F:0D:89:DA:69:2C:F5:B1:62:1C:FF:A1:D6:9A:59 X509v3 Authority Key Identifier: keyid:05:30:84:D8:8D:32:CF:F5:91:DB:CB:F3:10:9B:91:37:C3:E7:46:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/053084D88D32CFF591DBCBF3109B9137C3E74648.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/053084D88D32CFF591DBCBF3109B9137C3E74648.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/053084D88D32CFF591DBCBF3109B9137C3E74648.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:ac:a7:a4:3f:3e:6c:fc:a0:e9:77:1a:0a:b8:fe:00:84:f0: 28:50:3e:cf:7f:88:62:7e:b0:3a:ae:db:78:f7:9a:2a:c3:52: fd:15:e2:72:07:e4:38:18:47:fb:54:9c:35:b2:ed:0b:3c:2b: 8c:a0:2d:2a:23:6b:e6:01:eb:c7:5f:93:66:e3:79:20:bc:58: 37:e3:e5:53:0e:a5:2f:b0:2a:1d:10:3e:44:4b:4d:02:6c:92: 71:c4:9d:18:2a:d4:74:30:93:f5:17:46:a0:4a:b2:2e:14:84: 9e:d6:e3:e2:ec:8c:68:42:90:bb:65:43:c1:2a:32:01:b6:17: 4f:d3:a2:76:a1:bd:53:ae:93:95:56:24:ba:5a:db:0b:1d:47: 4a:55:fc:60:0b:a6:66:ee:ec:9a:8c:fc:26:cd:f7:01:a8:27: b8:4e:af:53:14:8f:a2:b3:80:8b:b6:01:11:41:a5:ca:9e:77: cd:8c:d7:f6:ee:28:96:fa:84:66:18:d1:bf:c7:ed:89:fa:5d: f1:f2:52:2f:70:fc:55:97:61:b1:b6:0b:00:cc:44:81:6a:d6: e0:fa:01:63:07:0e:97:88:e5:43:cc:38:41:41:91:90:80:64: ee:47:b6:e6:4e:27:22:3a:11:b4:9f:87:e2:dd:43:c3:94:24: 94:7f:0f:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYt6929+xz4kquUyN0GFX3ZHpQTgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDUzMDg0RDg4RDMyQ0ZGNTkxREJDQkYzMTA5QjkxMzdD M0U3NDY0ODAeFw0yNjAzMjUxOTIxMDhaFw0yNjAzMjkwMjMzMDhaMDMxMTAvBgNV BAMTKDgyREUzNTlBM0UyRjBEODlEQTY5MkNGNUIxNjIxQ0ZGQTFENjlBNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCij9EmRgA8yPSQSYH9NWrS6Ca/ l9t1tdo3oyU7+sbo8Gx9INmW16LTpvBqKrTe0Tx6aSoX9XfQRVxf9q0m0BzbmX6P sCotwBzAiduR6Qj1ohzROlwvcyKKiRZq9LAxZu9LMOo/2jAbYUfDuzCfItP3KG3j SCbSj8Tv1zIYM6EqA/5LHNrjj8JtlC4CzsJZhhtWy6Yd+FS+TlEPgbTMqZnp6BTO k9iYxCs+FBc77sjkFaukUEGM+A1ptA9UIw5o0s9IlWNbzke8waf3/UBhtchQXNjF 3IJtWFa9cU/KgH6L2jCQcFO96E74b2GJxefqVtHe4dJY4EYRVQ/qfhZVxpY1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgt41mj4vDYnaaSz1sWIc/6HWmlkwHwYDVR0j BBgwFoAUBTCE2I0yz/WR28vzEJuRN8PnRkgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDA3OWJlZi03ZjdkLTQzY2QtOTI3Zi1kNWNmNTlhMGIwZmIvMC8wNTMwODREODhE MzJDRkY1OTFEQkNCRjMxMDlCOTEzN0MzRTc0NjQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDUzMDg0RDg4RDMyQ0ZGNTkxREJDQkYzMTA5QjkxMzdDM0U3 NDY0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQwNzliZWYtN2Y3ZC00M2NkLTky N2YtZDVjZjU5YTBiMGZiLzAvMDUzMDg0RDg4RDMyQ0ZGNTkxREJDQkYzMTA5Qjkx MzdDM0U3NDY0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFusp6Q/Pmz8oOl3Ggq4/gCE8ChQPs9/iGJ+ sDqu23j3mirDUv0V4nIH5DgYR/tUnDWy7Qs8K4ygLSoja+YB68dfk2bjeSC8WDfj 5VMOpS+wKh0QPkRLTQJsknHEnRgq1HQwk/UXRqBKsi4UhJ7W4+LsjGhCkLtlQ8Eq MgG2F0/TonahvVOuk5VWJLpa2wsdR0pV/GALpmbu7JqM/CbN9wGoJ7hOr1MUj6Kz gIu2ARFBpcqed82M1/buKJb6hGYY0b/H7Yn6XfHyUi9w/FWXYbG2CwDMRIFq1uD6 AWMHDpeI5UPMOEFBkZCAZO5HtuZOJyI6EbSfh+LdQ8OUJJR/D1g= -----END CERTIFICATE-----Generated at Thu Mar 26 18:48:38 2026 by rpki-client