$ rpki-client -vvf repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft File: D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft (raw, json) Hash identifier: /UzJNjh7SajMi7Ws2r0Sbc4FWtnCYNFZq1Hx4KoJY6s= Subject key identifier: E3:4B:B9:ED:7B:E1:B7:F7:97:6E:BF:D0:10:82:EB:DC:EB:E6:BE:00 Authority key identifier: D7:28:6D:5F:5B:9A:DD:4C:C1:66:AD:32:51:96:92:F0:C8:90:2B:29 Certificate issuer: /CN=D7286D5F5B9ADD4CC166AD32519692F0C8902B29 Certificate serial: 170A08B1FF3DAE36DC9B42DB9C8A391487D07F0B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.cer Subject info access: rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft Manifest number: 03D1 Signing time: Thu 26 Mar 2026 10:12:35 +0000 Manifest this update: Thu 26 Mar 2026 10:07:35 +0000 Manifest next update: Sun 29 Mar 2026 20:14:35 +0000 Files and hashes: 1: 3130332e3136392e3139382e302f32342d3234203d3e20313432333531.roa (hash: rmXEqbAIBdqZ1QZkCeZrtaGpb9Ot072xdIfEgSdR3Yo=) 2: D7286D5F5B9ADD4CC166AD32519692F0C8902B29.crl (hash: krmq14pja7mgrw0RnJiNT5tel9/3atTRnGFsCrdL59M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.crl rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:0a:08:b1:ff:3d:ae:36:dc:9b:42:db:9c:8a:39:14:87:d0:7f:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7286D5F5B9ADD4CC166AD32519692F0C8902B29 Validity Not Before: Mar 26 10:07:35 2026 GMT Not After : Mar 29 20:14:35 2026 GMT Subject: CN=E34BB9ED7BE1B7F7976EBFD01082EBDCEBE6BE00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d2:32:c3:00:a5:d4:bf:25:03:6e:ed:22:68: 9b:b4:57:a2:cd:ec:77:40:17:1e:db:33:ad:aa:a0: 47:e4:84:8b:a7:e8:af:28:ce:f3:07:c8:41:ab:ef: 98:4a:58:3b:1a:32:c2:a7:ec:59:0f:6e:c2:21:a9: 1f:66:11:f2:c0:a1:55:a6:3b:f6:bd:d5:92:ce:a1: 3b:80:a6:b0:75:41:dd:9a:8b:3f:13:28:53:9c:54: d9:f9:68:3e:81:c8:4a:b6:b4:44:a3:cd:3a:02:88: 91:4a:dc:34:0e:84:6d:5a:93:ff:18:28:40:88:21: bc:8e:68:da:12:ff:4d:71:a5:90:e8:e1:0b:80:0c: 2d:a2:98:4d:9e:4d:5a:fd:82:23:ca:5e:3b:04:75: 55:12:12:0f:b1:18:cf:81:44:0f:e0:a8:3e:14:09: fd:c1:da:55:e8:07:24:de:fe:cb:8a:34:b3:76:96: f7:75:03:ef:3f:e2:28:88:05:a0:df:79:6c:2e:46: dd:09:c8:43:89:59:46:c6:93:16:92:08:47:9a:63: 28:d6:4d:46:1d:2f:8c:2d:b4:80:48:63:92:4a:01: c8:21:11:da:89:9f:ee:41:9d:a9:98:b5:a5:70:4f: b4:6b:c9:1a:f4:e0:ce:11:1c:0e:45:fc:a7:ef:e5: ce:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:4B:B9:ED:7B:E1:B7:F7:97:6E:BF:D0:10:82:EB:DC:EB:E6:BE:00 X509v3 Authority Key Identifier: keyid:D7:28:6D:5F:5B:9A:DD:4C:C1:66:AD:32:51:96:92:F0:C8:90:2B:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:bb:84:0d:ab:f8:2a:d1:3c:fe:90:43:b8:88:04:21:54:2f: 33:7c:96:18:1e:bd:ac:bd:a2:af:a1:4e:f9:12:18:a3:ec:15: 25:a0:77:b3:0e:93:8b:d6:08:1a:ce:0c:a6:41:3d:dc:c4:c9: ea:d6:9b:f8:2f:26:3e:aa:b0:e8:79:c2:70:dd:ce:36:cb:b0: 28:be:d6:aa:b3:d1:1d:11:f0:15:f6:73:27:3e:44:21:3a:aa: 36:1c:bf:e7:41:4c:ea:22:f4:92:67:c7:30:f1:ec:83:0a:1e: 85:ce:50:c8:b4:34:0c:b0:de:06:6e:65:59:62:cc:69:c5:5f: 41:a2:bc:a5:89:bb:34:69:49:2e:74:4c:c1:58:84:90:39:29: eb:ec:21:68:22:69:96:e1:50:b3:a3:fd:ce:cd:cc:13:71:a3: 41:e1:0e:f6:43:78:af:55:1d:0d:59:e9:53:de:70:0c:27:56: e9:b5:e9:ef:37:f7:30:21:96:fb:49:a3:4d:0b:a5:c3:37:8f: 04:f3:09:ea:43:4b:76:3e:59:5b:ed:a8:23:c2:bf:ed:5e:c9: 5a:d6:22:ea:f9:e2:06:c0:f3:44:1c:20:6f:05:c8:b9:f0:9d: 02:7f:07:df:87:45:cc:c1:79:3f:5e:aa:cd:84:2a:14:7a:7a: 00:72:f0:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFwoIsf89rjbcm0LbnIo5FIfQfwswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDcyODZENUY1QjlBREQ0Q0MxNjZBRDMyNTE5NjkyRjBD ODkwMkIyOTAeFw0yNjAzMjYxMDA3MzVaFw0yNjAzMjkyMDE0MzVaMDMxMTAvBgNV BAMTKEUzNEJCOUVEN0JFMUI3Rjc5NzZFQkZEMDEwODJFQkRDRUJFNkJFMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC00jLDAKXUvyUDbu0iaJu0V6LN 7HdAFx7bM62qoEfkhIun6K8ozvMHyEGr75hKWDsaMsKn7FkPbsIhqR9mEfLAoVWm O/a91ZLOoTuAprB1Qd2aiz8TKFOcVNn5aD6ByEq2tESjzToCiJFK3DQOhG1ak/8Y KECIIbyOaNoS/01xpZDo4QuADC2imE2eTVr9giPKXjsEdVUSEg+xGM+BRA/gqD4U Cf3B2lXoByTe/suKNLN2lvd1A+8/4iiIBaDfeWwuRt0JyEOJWUbGkxaSCEeaYyjW TUYdL4wttIBIY5JKAcghEdqJn+5BnamYtaVwT7RryRr04M4RHA5F/Kfv5c6HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU40u57Xvht/eXbr/QEILr3OvmvgAwHwYDVR0j BBgwFoAU1yhtX1ua3UzBZq0yUZaS8MiQKykwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NTI2MDY0MS1iY2UyLTQ0NWMtOWRlNS0zNzBhNzg3Zjk1MzAvMC9ENzI4NkQ1RjVC OUFERDRDQzE2NkFEMzI1MTk2OTJGMEM4OTAyQjI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDcyODZENUY1QjlBREQ0Q0MxNjZBRDMyNTE5NjkyRjBDODkw MkIyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDUyNjA2NDEtYmNlMi00NDVjLTlk ZTUtMzcwYTc4N2Y5NTMwLzAvRDcyODZENUY1QjlBREQ0Q0MxNjZBRDMyNTE5Njky RjBDODkwMkIyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABC7hA2r+CrRPP6QQ7iIBCFULzN8lhgevay9 oq+hTvkSGKPsFSWgd7MOk4vWCBrODKZBPdzEyerWm/gvJj6qsOh5wnDdzjbLsCi+ 1qqz0R0R8BX2cyc+RCE6qjYcv+dBTOoi9JJnxzDx7IMKHoXOUMi0NAyw3gZuZVli zGnFX0GivKWJuzRpSS50TMFYhJA5KevsIWgiaZbhULOj/c7NzBNxo0HhDvZDeK9V HQ1Z6VPecAwnVum16e839zAhlvtJo00LpcM3jwTzCepDS3Y+WVvtqCPCv+1eyVrW Iur54gbA80QcIG8FyLnwnQJ/B9+HRczBeT9eqs2EKhR6egBy8HI= -----END CERTIFICATE-----Generated at Thu Mar 26 16:57:05 2026 by rpki-client