$ rpki-client -vvf repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft File: 6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft (raw, json) Hash identifier: DxHB0z63KduxL+vnTFEiAEEBZWpAz3mAxU5fjcDvPL8= Subject key identifier: 48:6A:1D:02:BC:17:78:09:CA:A4:EA:81:18:0E:B3:C5:4E:A0:F6:A5 Authority key identifier: 64:28:36:15:22:97:7E:C7:4F:A3:D4:EC:B6:00:9C:CF:78:C9:BC:28 Certificate issuer: /CN=6428361522977EC74FA3D4ECB6009CCF78C9BC28 Certificate serial: 12DFEE16CA4FDAFBACF33C4C0E3C31912675FC55 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6428361522977EC74FA3D4ECB6009CCF78C9BC28.cer Subject info access: rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft Manifest number: 011A Signing time: Thu 26 Mar 2026 01:12:24 +0000 Manifest this update: Thu 26 Mar 2026 01:07:24 +0000 Manifest next update: Sun 29 Mar 2026 06:23:24 +0000 Files and hashes: 1: 3135372e36362e31382e302f32332d3233203d3e20313532343431.roa (hash: RZavabWdjUisE5dZEMsjEGsR8uhGqkdjSJ50UHfdWw8=) 2: 6428361522977EC74FA3D4ECB6009CCF78C9BC28.crl (hash: mXferqIJbNov0MfU+BJFLbw9l1gAZ5F9Gmz8gOzgb9Y=) 3: 3135372e36362e31382e302f32342d3234203d3e20313532343431.roa (hash: HY612DFm89Ly6o4e92rrpvg8mrv7ex72DLbVFNfFY0s=) 4: 3135372e36362e31392e302f32342d3234203d3e20313532343431.roa (hash: S3VXhgYtvhONpM//oPKshJPEJR4sGwHoBTyv1ewhA6c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.crl rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6428361522977EC74FA3D4ECB6009CCF78C9BC28.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 06:23:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:df:ee:16:ca:4f:da:fb:ac:f3:3c:4c:0e:3c:31:91:26:75:fc:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6428361522977EC74FA3D4ECB6009CCF78C9BC28 Validity Not Before: Mar 26 01:07:24 2026 GMT Not After : Mar 29 06:23:24 2026 GMT Subject: CN=486A1D02BC177809CAA4EA81180EB3C54EA0F6A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:89:d9:c5:3b:16:4b:83:d4:ad:eb:96:18:91: 3c:4a:e0:cb:e7:4b:8b:73:6b:fa:07:fa:9d:b2:83: b3:af:19:22:b4:c5:49:3a:bc:b4:9a:87:a1:6c:42: a1:a6:51:f3:d6:77:28:13:1f:80:54:66:01:2f:28: de:ca:58:a0:88:50:50:0a:c2:b5:2f:84:65:26:4e: 5d:47:a4:6f:8c:77:06:57:c1:b0:5d:a9:ce:9d:a1: af:90:5d:a2:21:c6:b7:07:cf:86:c3:47:4a:b8:6d: c1:63:1e:19:cf:d4:35:bb:62:ae:0a:8e:99:6e:6a: 64:38:fd:b2:e3:47:2c:a3:11:52:70:3f:7e:4f:9c: f6:19:c9:78:3f:37:5d:89:84:7d:3e:08:24:ab:d5: 54:cf:24:37:f4:f9:e8:f3:6d:ed:37:2d:57:82:04: b2:ad:0e:8c:95:fb:7b:c4:cb:66:5a:e6:0a:1c:eb: 5e:31:b5:f5:0e:ea:11:e1:2b:43:f1:40:3c:78:0b: d2:a5:73:75:ac:98:19:73:17:a6:91:09:4d:d2:d4: e5:e4:73:1a:f5:65:fe:32:ce:d0:30:83:5a:48:a3: 2c:d4:4c:bf:be:51:e4:56:16:3f:3d:cb:ff:ff:ab: 22:0c:d2:84:b1:7c:47:cd:b1:2f:dd:0b:a9:73:72: 08:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:6A:1D:02:BC:17:78:09:CA:A4:EA:81:18:0E:B3:C5:4E:A0:F6:A5 X509v3 Authority Key Identifier: keyid:64:28:36:15:22:97:7E:C7:4F:A3:D4:EC:B6:00:9C:CF:78:C9:BC:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6428361522977EC74FA3D4ECB6009CCF78C9BC28.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:de:4a:83:61:ec:3a:15:4f:c3:43:dc:ce:fc:7d:38:2c:c5: d1:13:b2:3b:b3:3e:c6:47:07:51:ae:12:e1:00:59:96:f0:e7: 46:af:7f:33:9a:c7:36:f6:88:3a:06:27:fc:a3:1b:d9:aa:56: 59:e3:e1:5f:75:8f:8d:70:a6:61:fb:0f:88:00:dd:2b:db:ac: 48:5d:20:ee:64:75:f8:50:5e:04:bd:8b:43:4e:60:78:de:1a: 32:f8:65:52:6d:d1:3d:4a:df:2a:ea:83:86:c9:56:a5:0d:39: 52:d8:ff:93:2f:11:8b:a6:ee:48:e4:e7:cf:b9:f1:66:a2:d7: 18:56:a3:18:58:f6:a9:2f:c0:5c:3e:e8:dd:72:2a:51:f5:8a: 81:5c:66:87:af:21:0c:e6:c8:c2:af:cc:1e:eb:8f:a8:c5:49: ba:95:d0:a2:f5:6f:9e:3e:d6:fc:58:e9:23:2e:88:d9:06:c2: 4c:d2:5f:fe:3e:9d:8d:a3:89:62:91:f0:f5:c7:39:cc:80:04: d8:ad:64:cd:85:ea:14:c7:06:63:98:bf:7c:73:1c:62:95:57: 2a:d5:eb:f0:f1:cb:b0:d8:f9:ca:53:26:23:91:e7:3f:8e:70: 3c:7c:b1:f6:27:bb:15:d7:a9:73:3c:fb:a6:33:b3:7e:fd:62: a8:d3:f1:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEt/uFspP2vus8zxMDjwxkSZ1/FUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQyODM2MTUyMjk3N0VDNzRGQTNENEVDQjYwMDlDQ0Y3 OEM5QkMyODAeFw0yNjAzMjYwMTA3MjRaFw0yNjAzMjkwNjIzMjRaMDMxMTAvBgNV BAMTKDQ4NkExRDAyQkMxNzc4MDlDQUE0RUE4MTE4MEVCM0M1NEVBMEY2QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVidnFOxZLg9St65YYkTxK4Mvn S4tza/oH+p2yg7OvGSK0xUk6vLSah6FsQqGmUfPWdygTH4BUZgEvKN7KWKCIUFAK wrUvhGUmTl1HpG+MdwZXwbBdqc6doa+QXaIhxrcHz4bDR0q4bcFjHhnP1DW7Yq4K jpluamQ4/bLjRyyjEVJwP35PnPYZyXg/N12JhH0+CCSr1VTPJDf0+ejzbe03LVeC BLKtDoyV+3vEy2Za5goc614xtfUO6hHhK0PxQDx4C9Klc3WsmBlzF6aRCU3S1OXk cxr1Zf4yztAwg1pIoyzUTL++UeRWFj89y///qyIM0oSxfEfNsS/dC6lzcgifAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSGodArwXeAnKpOqBGA6zxU6g9qUwHwYDVR0j BBgwFoAUZCg2FSKXfsdPo9TstgCcz3jJvCgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzQ0NjU2My0wOWJjLTQ5MWItOGZiOS1mZDM5ZjA5MTY2OWQvMC82NDI4MzYxNTIy OTc3RUM3NEZBM0Q0RUNCNjAwOUNDRjc4QzlCQzI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjQyODM2MTUyMjk3N0VDNzRGQTNENEVDQjYwMDlDQ0Y3OEM5 QkMyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzc0NDY1NjMtMDliYy00OTFiLThm YjktZmQzOWYwOTE2NjlkLzAvNjQyODM2MTUyMjk3N0VDNzRGQTNENEVDQjYwMDlD Q0Y3OEM5QkMyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAneSoNh7DoVT8ND3M78fTgsxdETsjuzPsZH B1GuEuEAWZbw50avfzOaxzb2iDoGJ/yjG9mqVlnj4V91j41wpmH7D4gA3SvbrEhd IO5kdfhQXgS9i0NOYHjeGjL4ZVJt0T1K3yrqg4bJVqUNOVLY/5MvEYum7kjk58+5 8Wai1xhWoxhY9qkvwFw+6N1yKlH1ioFcZoevIQzmyMKvzB7rj6jFSbqV0KL1b54+ 1vxY6SMuiNkGwkzSX/4+nY2jiWKR8PXHOcyABNitZM2F6hTHBmOYv3xzHGKVVyrV 6/Dxy7DY+cpTJiOR5z+OcDx8sfYnuxXXqXM8+6Yzs379YqjT8ao= -----END CERTIFICATE-----Generated at Thu Mar 26 13:55:19 2026 by rpki-client