$ rpki-client -vvf repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft File: C710954C7B301C60B82BA6372CACEB81DA08F190.mft (raw, json) Hash identifier: Q352IrSNm3YJxBlN2X1/HT3KWNWLl+9D6VWUCyQ80ok= Subject key identifier: F5:CF:5F:56:CE:75:56:9C:0F:82:E8:F3:DD:5D:A3:ED:1E:7B:C3:D6 Authority key identifier: C7:10:95:4C:7B:30:1C:60:B8:2B:A6:37:2C:AC:EB:81:DA:08:F1:90 Certificate issuer: /CN=C710954C7B301C60B82BA6372CACEB81DA08F190 Certificate serial: 1333EC50C01677E6E067DF7830F01FF1EAFFA0D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer Subject info access: rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft Manifest number: 0525 Signing time: Wed 25 Mar 2026 23:50:04 +0000 Manifest this update: Wed 25 Mar 2026 23:45:04 +0000 Manifest next update: Sun 29 Mar 2026 06:58:04 +0000 Files and hashes: 1: 323030313a6466343a343430303a3a2f34382d3438203d3e20313333383332.roa (hash: DYGPu1R9knVMTB6Ioiy1/sQp83HBRZI1WQg4Zdy3cp0=) 2: 3130332e35382e3131312e302f32342d3234203d3e20313333383332.roa (hash: KQUN/mjgI9NAwHO1H2+jS+2KNmkSKgxnmq0NRk0bNGg=) 3: C710954C7B301C60B82BA6372CACEB81DA08F190.crl (hash: CCtCz/yrleMmAgvEodBXTFvgbxiEaj4A6Rhmm7t4hGc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.crl rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 06:58:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:33:ec:50:c0:16:77:e6:e0:67:df:78:30:f0:1f:f1:ea:ff:a0:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C710954C7B301C60B82BA6372CACEB81DA08F190 Validity Not Before: Mar 25 23:45:04 2026 GMT Not After : Mar 29 06:58:04 2026 GMT Subject: CN=F5CF5F56CE75569C0F82E8F3DD5DA3ED1E7BC3D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:38:5a:93:e8:77:51:9f:dc:4c:3a:56:73:e2: 44:ec:aa:52:ae:41:01:11:01:2d:bf:fb:bb:5d:d1: b4:d4:1b:4e:a2:f9:71:52:48:b9:ad:c6:43:30:71: cb:01:2a:28:e6:09:20:e7:ac:4e:71:ac:6e:f2:1d: 78:a8:5f:04:3e:1e:46:70:da:19:f8:42:7b:02:18: 7a:a1:46:99:f6:d9:3d:fe:b5:a0:23:64:fb:15:2d: 93:59:c9:b8:4c:71:cc:c6:ac:13:f4:c7:ae:96:f0: bc:be:fb:64:7d:bc:67:b7:57:ab:7a:7d:03:39:92: da:ec:2e:09:da:15:ac:18:20:fd:b3:e2:a8:cc:1c: fb:69:98:f7:89:f6:df:bc:62:73:be:f6:4b:f5:87: 85:29:da:23:f9:24:90:cf:37:1f:7d:3c:11:41:82: 04:5b:57:31:67:c0:53:9f:c9:d6:04:31:6b:dd:ba: ff:8c:64:4a:8d:22:b3:bc:8e:f6:0f:ec:28:9e:8c: 58:30:2f:52:e3:0c:bd:b6:00:00:8c:41:b5:29:39: ab:9e:3a:37:00:12:a5:1d:85:43:e7:ba:40:39:66: 52:e7:87:59:17:08:d0:f7:89:27:18:78:5f:27:74: 63:de:3a:a4:7a:fa:62:f0:1b:7c:dc:d1:e7:7c:5d: 6a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:CF:5F:56:CE:75:56:9C:0F:82:E8:F3:DD:5D:A3:ED:1E:7B:C3:D6 X509v3 Authority Key Identifier: keyid:C7:10:95:4C:7B:30:1C:60:B8:2B:A6:37:2C:AC:EB:81:DA:08:F1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:84:0a:bc:67:86:51:13:b1:48:f9:4f:8a:aa:d6:6f:7f:ae: a1:e3:6f:ac:f5:80:17:fc:3d:56:91:d1:fc:63:5a:7b:b8:f2: 67:8c:bd:9a:00:9d:ab:e7:a4:b7:08:6a:c2:3c:b9:b7:7f:75: b0:8e:db:87:1c:1e:8f:42:da:82:85:78:5a:fd:f5:b8:a2:00: 5a:64:21:da:e2:2b:c2:e9:2e:dc:c6:d0:ee:94:eb:30:e7:02: 76:0a:93:d9:e6:16:e9:ad:d0:b5:0f:9d:f4:2f:aa:56:28:a6: 33:b5:e4:90:b7:30:ba:35:9a:f2:09:17:cd:af:82:06:05:79: bf:05:fa:88:c3:01:41:38:19:4b:1b:65:d6:90:ef:90:b4:25: ef:7d:dd:e1:c9:c4:0a:9f:9b:9e:0b:85:c8:05:55:02:c5:ee: 3c:00:37:93:99:ac:24:53:c0:a0:81:3e:6a:ac:e7:68:12:3b: 52:6e:3f:67:c9:d8:04:78:98:2d:de:1f:94:21:ef:02:de:04: 92:b4:c4:5d:0c:e5:86:22:1f:ef:7b:cf:59:3c:2e:79:9c:37: b5:4f:d4:c6:e0:24:7b:c0:ea:a8:65:7a:86:f6:12:c1:ea:20: 95:d6:07:7e:1d:32:0e:26:f8:bc:be:c8:53:ac:71:14:b2:9e: c7:e7:98:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEzPsUMAWd+bgZ994MPAf8er/oNAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzcxMDk1NEM3QjMwMUM2MEI4MkJBNjM3MkNBQ0VCODFE QTA4RjE5MDAeFw0yNjAzMjUyMzQ1MDRaFw0yNjAzMjkwNjU4MDRaMDMxMTAvBgNV BAMTKEY1Q0Y1RjU2Q0U3NTU2OUMwRjgyRThGM0RENURBM0VEMUU3QkMzRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1OFqT6HdRn9xMOlZz4kTsqlKu QQERAS2/+7td0bTUG06i+XFSSLmtxkMwccsBKijmCSDnrE5xrG7yHXioXwQ+HkZw 2hn4QnsCGHqhRpn22T3+taAjZPsVLZNZybhMcczGrBP0x66W8Ly++2R9vGe3V6t6 fQM5ktrsLgnaFawYIP2z4qjMHPtpmPeJ9t+8YnO+9kv1h4Up2iP5JJDPNx99PBFB ggRbVzFnwFOfydYEMWvduv+MZEqNIrO8jvYP7CiejFgwL1LjDL22AACMQbUpOaue OjcAEqUdhUPnukA5ZlLnh1kXCND3iScYeF8ndGPeOqR6+mLwG3zc0ed8XWq5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9c9fVs51VpwPgujz3V2j7R57w9YwHwYDVR0j BBgwFoAUxxCVTHswHGC4K6Y3LKzrgdoI8ZAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 M2U0MTc3ZC04MDkzLTQ0N2MtODdiNS1jNzljOGNiNGM3MzMvMC9DNzEwOTU0QzdC MzAxQzYwQjgyQkE2MzcyQ0FDRUI4MURBMDhGMTkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzcxMDk1NEM3QjMwMUM2MEI4MkJBNjM3MkNBQ0VCODFEQTA4 RjE5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDNlNDE3N2QtODA5My00NDdjLTg3 YjUtYzc5YzhjYjRjNzMzLzAvQzcxMDk1NEM3QjMwMUM2MEI4MkJBNjM3MkNBQ0VC ODFEQTA4RjE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABqECrxnhlETsUj5T4qq1m9/rqHjb6z1gBf8 PVaR0fxjWnu48meMvZoAnavnpLcIasI8ubd/dbCO24ccHo9C2oKFeFr99biiAFpk IdriK8LpLtzG0O6U6zDnAnYKk9nmFumt0LUPnfQvqlYopjO15JC3MLo1mvIJF82v ggYFeb8F+ojDAUE4GUsbZdaQ75C0Je993eHJxAqfm54LhcgFVQLF7jwAN5OZrCRT wKCBPmqs52gSO1JuP2fJ2AR4mC3eH5Qh7wLeBJK0xF0M5YYiH+97z1k8LnmcN7VP 1MbgJHvA6qhleob2EsHqIJXWB34dMg4m+Ly+yFOscRSynsfnmJQ= -----END CERTIFICATE-----Generated at Thu Mar 26 07:16:33 2026 by rpki-client