$ rpki-client -vvf repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft File: 1073C0AF2447C17B85643987B72701D1AE52823D.mft (raw, json) Hash identifier: 29BeH/TZDDfyhZZjOofukHtUdED7gM1dh0lisw68UlY= Subject key identifier: 86:D0:41:19:18:75:42:41:44:1F:D8:29:F0:09:D6:2C:29:E0:35:91 Authority key identifier: 10:73:C0:AF:24:47:C1:7B:85:64:39:87:B7:27:01:D1:AE:52:82:3D Certificate issuer: /CN=1073C0AF2447C17B85643987B72701D1AE52823D Certificate serial: 7A6648AF929ADADF7E92E7AAFB64ECC9861788 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1073C0AF2447C17B85643987B72701D1AE52823D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft Manifest number: 0121 Signing time: Wed 25 Mar 2026 11:30:45 +0000 Manifest this update: Wed 25 Mar 2026 11:25:45 +0000 Manifest next update: Sat 28 Mar 2026 13:29:45 +0000 Files and hashes: 1: 3135372e31352e3132332e302f32342d3234203d3e20313532333937.roa (hash: eGRPg+0FqPezAL7Sp3nM4zvLQO8rtFSR4EykoCf7Z54=) 2: 1073C0AF2447C17B85643987B72701D1AE52823D.crl (hash: ZlIYkaipjvKoi8aQGrkRtFbJrJ7KMwa7/5MW/45A6kY=) 3: 3135372e31352e3132322e302f32342d3234203d3e20313532333937.roa (hash: 31fCRfNUFIYAvmAMKXAqFxsON/60EF/0rmnL9f/SdJI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.crl rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1073C0AF2447C17B85643987B72701D1AE52823D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 13:29:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:66:48:af:92:9a:da:df:7e:92:e7:aa:fb:64:ec:c9:86:17:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1073C0AF2447C17B85643987B72701D1AE52823D Validity Not Before: Mar 25 11:25:45 2026 GMT Not After : Mar 28 13:29:45 2026 GMT Subject: CN=86D0411918754241441FD829F009D62C29E03591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:dc:38:5d:b9:fb:a5:14:81:7d:c5:1a:92:cc: c0:b2:89:27:c9:13:48:2c:85:e9:47:96:4b:2c:a4: 97:1e:88:cb:cc:38:99:2f:d2:dc:a9:de:52:12:5c: ca:5b:23:bc:13:28:45:32:0e:05:94:cd:13:42:2d: bc:3f:78:98:97:31:f3:f0:7c:bf:75:14:5a:6b:f0: 0f:b4:36:79:06:8f:ac:8c:ba:75:fc:d3:e9:16:6f: 2b:60:ad:66:65:4a:8e:d6:70:12:e1:bd:d3:1c:16: 02:0d:6b:af:b4:41:81:52:0d:f5:e0:0e:e2:0c:f0: 66:9d:a7:49:b4:95:c9:61:7c:8f:aa:b6:f0:89:64: 20:ba:43:c9:e7:4f:da:52:52:49:d3:9b:28:d4:6c: fd:c5:22:d2:96:6a:48:84:06:15:51:8e:7a:0d:e6: b7:f6:2c:06:f9:3b:e0:eb:ef:e6:51:4a:34:0e:4f: 07:5b:4f:af:cb:34:7e:76:66:69:f1:89:81:98:62: 2b:cf:65:83:8f:8f:a5:01:55:3a:84:c5:b6:9c:7b: e5:56:ef:fc:25:80:45:89:70:13:1f:ad:c7:40:9f: 98:e5:25:4b:2c:71:15:b3:77:2e:c1:66:1d:0d:e4: fa:13:87:41:77:f9:a8:0f:9d:22:05:25:5a:98:c4: fa:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D0:41:19:18:75:42:41:44:1F:D8:29:F0:09:D6:2C:29:E0:35:91 X509v3 Authority Key Identifier: keyid:10:73:C0:AF:24:47:C1:7B:85:64:39:87:B7:27:01:D1:AE:52:82:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1073C0AF2447C17B85643987B72701D1AE52823D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:19:75:9e:23:51:eb:1e:76:18:8a:57:cf:02:98:89:25:18: 5a:97:2d:d2:87:e9:5e:e7:a7:88:e4:3f:7a:09:1c:24:fd:64: ac:9e:e5:76:7f:91:4b:a1:77:d1:13:6f:c2:2d:72:33:80:86: 59:ab:8e:49:5d:af:a6:b3:56:4b:93:ce:2c:70:49:27:73:56: 71:cb:2f:13:9b:35:8d:0b:12:23:fa:f5:e6:71:6f:6e:59:ec: f2:c8:a5:c6:a8:9f:b5:c3:59:fb:48:8d:b8:e4:e3:4e:20:80: 92:a7:5a:14:b5:9a:ec:11:05:e6:b9:c6:17:0f:50:2e:4f:33: 79:d3:c4:c6:93:b5:15:01:97:dc:99:18:62:10:ce:d4:7f:db: 04:41:68:33:08:eb:73:1f:17:99:8b:22:1a:d5:ca:69:3b:a9: cd:e3:80:30:0a:e3:75:f3:cb:6c:77:4d:aa:a3:ba:a0:df:b0: a6:4a:a3:19:7a:c0:49:3f:fe:6b:85:c1:eb:dc:d7:b1:06:c0: 67:87:7b:44:f3:81:39:31:05:14:d1:43:65:f9:5d:3c:e5:62: 84:99:8f:6f:a5:41:8b:31:fc:fe:90:28:8f:ee:dc:ce:8b:53: 48:02:36:9f:5f:80:16:97:6f:b7:2a:ee:26:f6:e3:18:db:9a: f0:ef:07:a9 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITemZIr5Ka2t9+kueq+2TsyYYXiDANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygxMDczQzBBRjI0NDdDMTdCODU2NDM5ODdCNzI3MDFEMUFF NTI4MjNEMB4XDTI2MDMyNTExMjU0NVoXDTI2MDMyODEzMjk0NVowMzExMC8GA1UE AxMoODZEMDQxMTkxODc1NDI0MTQ0MUZEODI5RjAwOUQ2MkMyOUUwMzU5MTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN7cOF25+6UUgX3FGpLMwLKJJ8kT SCyF6UeWSyyklx6Iy8w4mS/S3KneUhJcylsjvBMoRTIOBZTNE0ItvD94mJcx8/B8 v3UUWmvwD7Q2eQaPrIy6dfzT6RZvK2CtZmVKjtZwEuG90xwWAg1rr7RBgVIN9eAO 4gzwZp2nSbSVyWF8j6q28IlkILpDyedP2lJSSdObKNRs/cUi0pZqSIQGFVGOeg3m t/YsBvk74Ovv5lFKNA5PB1tPr8s0fnZmafGJgZhiK89lg4+PpQFVOoTFtpx75Vbv /CWARYlwEx+tx0CfmOUlSyxxFbN3LsFmHQ3k+hOHQXf5qA+dIgUlWpjE+k8CAwEA AaOCAjwwggI4MB0GA1UdDgQWBBSG0EEZGHVCQUQf2CnwCdYsKeA1kTAfBgNVHSME GDAWgBQQc8CvJEfBe4VkOYe3JwHRrlKCPTAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM2 ZGQxNWUzLTllZTUtNGQ1Mi05ZWVlLTcxMmJiM2I3YmZmYi8wLzEwNzNDMEFGMjQ0 N0MxN0I4NTY0Mzk4N0I3MjcwMUQxQUU1MjgyM0QuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMS8xMDczQzBBRjI0NDdDMTdCODU2NDM5ODdCNzI3MDFEMUFFNTI4 MjNELmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8zNmRkMTVlMy05ZWU1LTRkNTItOWVl ZS03MTJiYjNiN2JmZmIvMC8xMDczQzBBRjI0NDdDMTdCODU2NDM5ODdCNzI3MDFE MUFFNTI4MjNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAmhl1niNR6x52GIpXzwKYiSUYWpct0ofpXuen iOQ/egkcJP1krJ7ldn+RS6F30RNvwi1yM4CGWauOSV2vprNWS5POLHBJJ3NWccsv E5s1jQsSI/r15nFvblns8silxqiftcNZ+0iNuOTjTiCAkqdaFLWa7BEF5rnGFw9Q Lk8zedPExpO1FQGX3JkYYhDO1H/bBEFoMwjrcx8XmYsiGtXKaTupzeOAMArjdfPL bHdNqqO6oN+wpkqjGXrAST/+a4XB69zXsQbAZ4d7RPOBOTEFFNFDZfldPOVihJmP b6VBizH8/pAoj+7czotTSAI2n1+AFpdvtyruJvbjGNua8O8HqQ== -----END CERTIFICATE-----Generated at Thu Mar 26 21:15:02 2026 by rpki-client