$ rpki-client -vvf repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft File: 532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft (raw, json) Hash identifier: WbSPG+XUZou+cXFqAFKnzZav14osBB/gJnjIYzTYN5I= Subject key identifier: 8D:04:C2:60:A0:50:0A:6E:62:62:4C:BB:62:55:7C:CB:DD:45:A1:EA Authority key identifier: 53:2A:4A:6E:A2:52:E9:D1:CF:F5:74:81:A5:A8:6B:35:CE:0D:D2:1F Certificate issuer: /CN=532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F Certificate serial: 790D37290761CC458419424A4B615D99A3309F07 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft Manifest number: 0202 Signing time: Wed 25 Mar 2026 21:01:17 +0000 Manifest this update: Wed 25 Mar 2026 20:56:17 +0000 Manifest next update: Sun 29 Mar 2026 07:27:17 +0000 Files and hashes: 1: 532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.crl (hash: U4bPdqwbcDonG+/0yIWHl5DJCuhqKGNKdldlRssBmNU=) 2: 3130332e3132392e32342e302f32332d3234203d3e20313335343738.roa (hash: acHkQDc68Jj27op6u+60Ox/pAf3ZpE5ZeAF+XMaxR0M=) 3: 3130332e3132392e32362e302f32332d3234203d3e20313335343738.roa (hash: Sbm29pNNDtrirUa5TWrnPomraWgx9d4wS4uCAUKgspQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.crl rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 07:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:0d:37:29:07:61:cc:45:84:19:42:4a:4b:61:5d:99:a3:30:9f:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F Validity Not Before: Mar 25 20:56:17 2026 GMT Not After : Mar 29 07:27:17 2026 GMT Subject: CN=8D04C260A0500A6E62624CBB62557CCBDD45A1EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c8:39:e3:3d:da:a7:ca:c8:bf:c7:5c:fc:f3: 63:be:ae:30:ea:e0:02:b4:99:b8:66:b5:b3:14:af: ed:47:22:e1:e4:e9:e1:9e:ee:03:78:a1:14:e5:fe: 55:25:0e:26:2d:44:58:09:fe:7d:e9:db:1d:a7:cf: 31:93:d8:f2:ce:cb:74:24:4e:93:8c:0e:f8:9a:40: 1e:b6:ce:74:fd:c7:b6:70:bf:b4:58:d3:5a:ae:98: 60:53:00:52:fe:79:ef:1d:b5:52:89:39:4c:7a:81: e5:24:cc:83:ba:00:72:ff:bf:73:50:26:70:0c:48: 4f:79:04:39:8c:46:4d:fe:46:2a:1b:cf:c7:48:53: 3a:b4:22:00:27:fc:f8:c2:17:9b:81:f6:19:98:ca: 71:b4:bf:c6:5b:09:11:9b:1f:16:29:15:db:bb:45: 09:17:6d:97:3a:7e:97:2e:65:cd:e5:d9:87:cf:f4: 14:aa:e8:aa:f7:de:58:31:69:31:1b:ca:8a:2a:11: bc:c0:df:d3:53:e5:4b:c3:f8:46:13:b2:23:e4:50: 46:eb:b7:23:15:00:33:d4:88:7f:93:43:52:36:ad: 10:ce:af:ec:34:62:82:be:24:ed:cf:46:71:f4:8d: 9a:e1:3e:81:45:04:51:3a:bc:51:ea:c0:c8:c1:0c: 3c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:04:C2:60:A0:50:0A:6E:62:62:4C:BB:62:55:7C:CB:DD:45:A1:EA X509v3 Authority Key Identifier: keyid:53:2A:4A:6E:A2:52:E9:D1:CF:F5:74:81:A5:A8:6B:35:CE:0D:D2:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:37:8b:54:9e:03:29:de:fd:5d:5d:41:0b:db:75:d5:04:97: 67:93:4b:ba:ce:fc:92:af:62:f4:10:f1:12:be:6e:a1:5b:09: bd:83:07:f6:9c:5b:32:48:b5:af:9a:7c:9c:ae:e3:b4:bc:fc: 6a:7d:94:12:93:c6:90:aa:f6:39:d5:66:ff:fb:10:e1:69:e7: ce:49:03:1f:62:f2:ef:65:e1:41:9b:e0:58:87:b9:b7:4c:e3: bd:ed:17:68:29:6f:5d:41:ca:a3:4f:8d:69:20:a0:e3:9e:3b: 08:4e:30:e9:92:14:6d:dd:08:62:2f:5e:0d:27:ca:00:6a:6f: d6:59:94:e1:6f:84:40:43:2d:d0:64:9e:d6:ef:a3:58:98:ab: 8a:7d:a8:79:05:bb:c1:b6:ba:a3:49:48:3c:46:f4:36:62:ac: cd:88:ac:72:f7:c1:1a:f7:aa:9b:5a:0d:2f:28:08:ba:6a:fb: 93:d9:88:56:f0:0f:c7:56:c3:83:a6:7e:90:a9:aa:d2:f5:ed: 98:16:8b:5d:ca:74:fd:df:c9:91:d8:fb:2a:99:da:0c:47:29: 9e:1c:7d:23:6c:5d:70:28:27:c0:37:cc:73:73:76:05:64:73: ff:32:9f:2f:69:aa:26:da:e7:87:8b:ff:96:59:41:20:18:5f: 28:d1:d4:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeQ03KQdhzEWEGUJKS2FdmaMwnwcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMyQTRBNkVBMjUyRTlEMUNGRjU3NDgxQTVBODZCMzVD RTBERDIxRjAeFw0yNjAzMjUyMDU2MTdaFw0yNjAzMjkwNzI3MTdaMDMxMTAvBgNV BAMTKDhEMDRDMjYwQTA1MDBBNkU2MjYyNENCQjYyNTU3Q0NCREQ0NUExRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfyDnjPdqnysi/x1z882O+rjDq 4AK0mbhmtbMUr+1HIuHk6eGe7gN4oRTl/lUlDiYtRFgJ/n3p2x2nzzGT2PLOy3Qk TpOMDviaQB62znT9x7Zwv7RY01qumGBTAFL+ee8dtVKJOUx6geUkzIO6AHL/v3NQ JnAMSE95BDmMRk3+Riobz8dIUzq0IgAn/PjCF5uB9hmYynG0v8ZbCRGbHxYpFdu7 RQkXbZc6fpcuZc3l2YfP9BSq6Kr33lgxaTEbyooqEbzA39NT5UvD+EYTsiPkUEbr tyMVADPUiH+TQ1I2rRDOr+w0YoK+JO3PRnH0jZrhPoFFBFE6vFHqwMjBDDyJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjQTCYKBQCm5iYky7YlV8y91FoeowHwYDVR0j BBgwFoAUUypKbqJS6dHP9XSBpahrNc4N0h8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 N2RmMmFkMC02ZTk5LTQ0YTctYTA2OC01MDA2NTZmZmIwMGYvMC81MzJBNEE2RUEy NTJFOUQxQ0ZGNTc0ODFBNUE4NkIzNUNFMEREMjFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTMyQTRBNkVBMjUyRTlEMUNGRjU3NDgxQTVBODZCMzVDRTBE RDIxRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDdkZjJhZDAtNmU5OS00NGE3LWEw NjgtNTAwNjU2ZmZiMDBmLzAvNTMyQTRBNkVBMjUyRTlEMUNGRjU3NDgxQTVBODZC MzVDRTBERDIxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMs3i1SeAyne/V1dQQvbddUEl2eTS7rO/JKv YvQQ8RK+bqFbCb2DB/acWzJIta+afJyu47S8/Gp9lBKTxpCq9jnVZv/7EOFp585J Ax9i8u9l4UGb4FiHubdM473tF2gpb11ByqNPjWkgoOOeOwhOMOmSFG3dCGIvXg0n ygBqb9ZZlOFvhEBDLdBkntbvo1iYq4p9qHkFu8G2uqNJSDxG9DZirM2IrHL3wRr3 qptaDS8oCLpq+5PZiFbwD8dWw4OmfpCpqtL17ZgWi13KdP3fyZHY+yqZ2gxHKZ4c fSNsXXAoJ8A3zHNzdgVkc/8yny9pqiba54eL/5ZZQSAYXyjR1EA= -----END CERTIFICATE-----Generated at Thu Mar 26 17:04:43 2026 by rpki-client