$ rpki-client -vvf repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft File: 731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft (raw, json) Hash identifier: V3liEfXq9SXaEsO9o80XfSeWg0RByEsr0PUnMQ/SD0U= Subject key identifier: A7:09:59:D6:6E:F3:10:6E:AC:DA:81:C4:B5:87:2E:43:A0:88:33:03 Authority key identifier: 73:1D:B6:75:72:B4:8A:3A:86:F0:47:5A:0E:21:E1:A2:7D:FC:6A:8E Certificate issuer: /CN=731DB67572B48A3A86F0475A0E21E1A27DFC6A8E Certificate serial: 6D2F4C08E3E0357EF4A58772A1EC25A0E0559323 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft Manifest number: 0115 Signing time: Wed 25 Mar 2026 21:41:38 +0000 Manifest this update: Wed 25 Mar 2026 21:36:38 +0000 Manifest next update: Sun 29 Mar 2026 03:44:38 +0000 Files and hashes: 1: 3130332e3232392e31342e302f32332d3233203d3e20313530313936.roa (hash: urtgUYbcx2gytlBhM4p5dgZOXBrHzTqA0gycjFxEv78=) 2: 3130332e3232392e31342e302f32342d3234203d3e20313530313936.roa (hash: ky6kqewG2CLcXwQoFuB0Gbkz5WHCCY7RgpoJqEc0cVU=) 3: 3130332e3232392e31352e302f32342d3234203d3e20313530313936.roa (hash: 5d1MR7rKvEWqFJE9IZmsunjaxhaRl4wODAGB+LLjxEo=) 4: 323030313a6466333a323534303a3a2f34382d3438203d3e20313530313936.roa (hash: vIO6PhCd4cB1k0BQaAZQv7MW8qfuF2ReRTB65p41S5s=) 5: 731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.crl (hash: 4CCH3HXBTPGipAg8QV4UAPOUx11sXK5gg1LgkwKXDbo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.crl rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 03:44:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:2f:4c:08:e3:e0:35:7e:f4:a5:87:72:a1:ec:25:a0:e0:55:93:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=731DB67572B48A3A86F0475A0E21E1A27DFC6A8E Validity Not Before: Mar 25 21:36:38 2026 GMT Not After : Mar 29 03:44:38 2026 GMT Subject: CN=A70959D66EF3106EACDA81C4B5872E43A0883303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:43:75:62:37:ed:c9:85:33:be:d3:c5:4e:cb: 32:5f:12:06:ba:70:4e:00:1e:ed:e7:3f:67:06:e9: b2:1c:5d:db:3d:45:24:aa:d9:55:3d:67:10:67:0a: 48:7c:52:da:71:1b:34:43:84:b1:7d:01:ab:df:a9: 3d:e1:63:fe:e4:2a:64:d0:3f:50:b4:e1:ab:0f:32: 6c:19:ce:47:22:cb:f8:5f:eb:2a:3d:a7:6e:66:12: bc:75:d0:6a:e5:dd:51:4a:2e:35:7d:43:61:aa:7a: ce:ee:20:88:f9:dd:2c:83:18:f9:f3:01:61:db:8e: 7a:27:06:53:c7:5b:aa:5b:d3:09:92:5c:f9:73:cf: 86:af:dd:a3:b6:95:71:5b:75:d1:a4:4a:ba:e7:39: c7:7f:c1:14:55:c3:f1:51:8b:c3:7b:0c:77:a0:28: 64:25:29:ef:b3:b2:dc:18:e7:5b:d4:9d:83:f2:15: 57:8e:a5:59:51:a6:0d:87:3a:ed:33:01:a9:c7:5d: 3f:11:5a:0f:69:1e:ca:07:f7:90:36:fb:e0:38:c4: 54:ed:9a:4c:d3:e4:23:9d:9e:34:03:ee:7b:3e:6e: f3:cc:fe:26:e8:ff:63:7f:d6:3c:73:1f:12:59:6e: e7:7f:1a:51:c8:c8:30:0b:da:c8:db:f9:d2:fe:27: b4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:09:59:D6:6E:F3:10:6E:AC:DA:81:C4:B5:87:2E:43:A0:88:33:03 X509v3 Authority Key Identifier: keyid:73:1D:B6:75:72:B4:8A:3A:86:F0:47:5A:0E:21:E1:A2:7D:FC:6A:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:d2:6c:61:d9:57:91:4f:30:1d:c1:3e:5f:4b:65:1c:41:c1: a4:d9:00:e3:35:b7:cd:8b:71:01:68:68:e6:ce:c9:07:c4:ad: 0b:9f:2e:c3:a4:fd:d2:18:84:ee:78:da:aa:56:f1:d1:65:a1: dc:72:12:d9:4d:a1:40:d2:25:32:97:a9:8a:49:b0:2b:ad:02: ea:29:3a:27:a4:f5:9d:90:34:62:0d:b0:7b:6f:b3:d5:12:6e: 2b:c0:78:26:8f:8c:f1:52:0c:f6:db:78:d7:34:e5:a4:c8:a8: a1:fd:d3:e5:f1:1a:8e:cf:27:57:39:4b:1f:c7:2a:ff:0a:ca: 2b:57:21:5c:35:b8:26:3b:7b:10:c1:39:9e:00:a7:c3:7b:88: b9:29:05:ee:92:b2:9d:4c:c4:6c:66:81:40:e6:38:15:df:01: a8:ff:2d:ac:f3:1a:f9:b5:66:4f:b1:83:3e:83:2d:2d:54:0c: 27:c3:70:d9:b9:ef:6a:71:6c:43:d5:a3:89:a8:92:46:05:d8: c3:76:5b:c3:98:d2:f8:bd:48:30:59:73:e7:a8:e9:de:c1:e3: 0b:1d:be:50:7b:5f:98:97:2b:30:27:e4:b3:8a:59:ff:c8:2e: 22:03:d8:46:9f:80:f7:aa:9c:41:72:6e:8e:b9:f0:ff:a9:23: 43:cb:d7:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbS9MCOPgNX70pYdyoewloOBVkyMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzMxREI2NzU3MkI0OEEzQTg2RjA0NzVBMEUyMUUxQTI3 REZDNkE4RTAeFw0yNjAzMjUyMTM2MzhaFw0yNjAzMjkwMzQ0MzhaMDMxMTAvBgNV BAMTKEE3MDk1OUQ2NkVGMzEwNkVBQ0RBODFDNEI1ODcyRTQzQTA4ODMzMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Q3ViN+3JhTO+08VOyzJfEga6 cE4AHu3nP2cG6bIcXds9RSSq2VU9ZxBnCkh8UtpxGzRDhLF9AavfqT3hY/7kKmTQ P1C04asPMmwZzkciy/hf6yo9p25mErx10Grl3VFKLjV9Q2Gqes7uIIj53SyDGPnz AWHbjnonBlPHW6pb0wmSXPlzz4av3aO2lXFbddGkSrrnOcd/wRRVw/FRi8N7DHeg KGQlKe+zstwY51vUnYPyFVeOpVlRpg2HOu0zAanHXT8RWg9pHsoH95A2++A4xFTt mkzT5COdnjQD7ns+bvPM/ibo/2N/1jxzHxJZbud/GlHIyDAL2sjb+dL+J7TLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpwlZ1m7zEG6s2oHEtYcuQ6CIMwMwHwYDVR0j BBgwFoAUcx22dXK0ijqG8EdaDiHhon38ao4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Yjc1YmZkMC1hODZjLTRiZWItOWY5OS1hYWMzM2ZiNWU0OWYvMC83MzFEQjY3NTcy QjQ4QTNBODZGMDQ3NUEwRTIxRTFBMjdERkM2QThFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzMxREI2NzU3MkI0OEEzQTg2RjA0NzVBMEUyMUUxQTI3REZD NkE4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2I3NWJmZDAtYTg2Yy00YmViLTlm OTktYWFjMzNmYjVlNDlmLzAvNzMxREI2NzU3MkI0OEEzQTg2RjA0NzVBMEUyMUUx QTI3REZDNkE4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFjSbGHZV5FPMB3BPl9LZRxBwaTZAOM1t82L cQFoaObOyQfErQufLsOk/dIYhO542qpW8dFlodxyEtlNoUDSJTKXqYpJsCutAuop Oiek9Z2QNGINsHtvs9USbivAeCaPjPFSDPbbeNc05aTIqKH90+XxGo7PJ1c5Sx/H Kv8KyitXIVw1uCY7exDBOZ4Ap8N7iLkpBe6Ssp1MxGxmgUDmOBXfAaj/LazzGvm1 Zk+xgz6DLS1UDCfDcNm572pxbEPVo4mokkYF2MN2W8OY0vi9SDBZc+eo6d7B4wsd vlB7X5iXKzAn5LOKWf/ILiID2EafgPeqnEFybo658P+pI0PL11c= -----END CERTIFICATE-----Generated at Thu Mar 26 15:19:21 2026 by rpki-client