$ rpki-client -vvf repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.mft File: 7376922C93BF667FFBBDAF0735AE73D1451B08C2.mft (raw, json) Hash identifier: tc5tMJRoZ3dBXakGWU9c8Jkt22Lfr4AC7YRvJ51FeXY= Subject key identifier: 2D:21:39:3B:EA:6A:0F:AC:14:10:60:14:AC:96:28:94:CA:92:90:0E Authority key identifier: 73:76:92:2C:93:BF:66:7F:FB:BD:AF:07:35:AE:73:D1:45:1B:08:C2 Certificate issuer: /CN=7376922C93BF667FFBBDAF0735AE73D1451B08C2 Certificate serial: 25AB90511A6A6D162EC96E754B355E83F8F86659 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7376922C93BF667FFBBDAF0735AE73D1451B08C2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.mft Manifest number: 0551 Signing time: Thu 26 Mar 2026 15:21:04 +0000 Manifest this update: Thu 26 Mar 2026 15:16:04 +0000 Manifest next update: Mon 30 Mar 2026 00:18:04 +0000 Files and hashes: 1: 3130332e372e3137362e302f32342d3234203d3e20313336303830.roa (hash: pULFJZ+nbfV5jOVZtN4jB+N6TsIyKwD9xJ39aFL57ak=) 2: 3130332e38392e3136352e302f32342d3234203d3e20313333383030.roa (hash: 0V79HEBuKR1jbK8PkSQwyA4BziEgKvO+/ItR4BkRmQg=) 3: 3130332e38392e3136342e302f32342d3234203d3e20313333383030.roa (hash: +2SP7VdADvevew0k00TuxJ1WZ3WZFkGqu4JZIMGxgpw=) 4: 7376922C93BF667FFBBDAF0735AE73D1451B08C2.crl (hash: QFBQJxGWcY7vV9YmU7uTO1ViViKpdrc5Lc6/9k+XSuY=) 5: 3130332e38392e3135342e302f32342d3234203d3e20313333383030.roa (hash: 21L4D1hu21+7UR3Mn3cvc8Jhs/U+RaE8nhEhhkQ5YEA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.crl rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7376922C93BF667FFBBDAF0735AE73D1451B08C2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Mar 2026 00:18:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:ab:90:51:1a:6a:6d:16:2e:c9:6e:75:4b:35:5e:83:f8:f8:66:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7376922C93BF667FFBBDAF0735AE73D1451B08C2 Validity Not Before: Mar 26 15:16:04 2026 GMT Not After : Mar 30 00:18:04 2026 GMT Subject: CN=2D21393BEA6A0FAC14106014AC962894CA92900E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4a:c1:31:e5:57:01:80:0f:79:fd:ca:dd:1c: 4c:56:78:6e:27:c8:62:ed:3a:4f:b9:c5:b6:73:ba: 2d:5f:24:8f:a7:7a:8d:61:54:d3:3b:fb:ac:6b:6c: ea:a6:f7:a3:5e:4d:ac:2a:13:a2:3f:95:3a:f6:d8: 73:6d:e0:79:ac:d1:6c:bd:e0:93:d6:7b:6e:55:c4: a4:2b:1a:30:46:bf:80:9e:a3:60:49:be:f7:ba:1a: 81:a6:30:60:ea:14:82:8e:9a:f6:86:7d:cb:68:1a: 20:d6:ee:c9:91:28:48:75:c8:a2:06:01:81:4f:74: 7d:a8:f3:af:06:27:0d:48:b0:30:76:d7:9f:00:e4: ad:90:a3:07:2e:36:ef:e9:19:58:6c:9d:ab:06:85: 9f:d8:13:94:7a:8a:f9:61:0e:5d:13:bb:7e:75:3b: c9:f9:e1:98:39:67:bb:10:38:ca:0f:37:64:3e:67: 2f:13:42:13:f9:1d:63:ca:7c:93:54:81:7c:be:0c: f1:b1:1d:38:e1:d6:39:1e:1e:e3:ba:f1:2e:73:e3: 44:4d:11:2f:6f:de:02:cd:0c:4c:aa:cc:cd:b4:c0: 99:2a:2e:e8:d2:88:9f:2a:7d:17:a9:93:fd:c0:db: 61:5d:24:a9:1c:6f:41:94:5b:60:59:d1:38:d8:eb: 43:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:21:39:3B:EA:6A:0F:AC:14:10:60:14:AC:96:28:94:CA:92:90:0E X509v3 Authority Key Identifier: keyid:73:76:92:2C:93:BF:66:7F:FB:BD:AF:07:35:AE:73:D1:45:1B:08:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7376922C93BF667FFBBDAF0735AE73D1451B08C2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:0b:1e:c8:22:be:1a:4c:f7:d7:85:43:ec:bd:cc:7e:59:27: ba:17:ee:ed:04:cb:19:d1:d5:fa:84:d3:e6:19:c2:a8:cd:fe: f0:19:e8:b2:86:74:21:bd:58:c1:54:15:c1:41:fb:19:db:83: d6:26:64:a1:23:15:09:bb:7e:9b:e9:80:a4:1f:f5:5a:d7:b4: 5c:1a:82:fc:da:38:57:b0:29:bb:e2:44:4d:1c:a8:1c:08:6b: 92:27:ce:76:3b:08:71:60:08:f2:97:a4:52:46:c8:98:f5:d8: 3d:ad:ea:3f:2e:b1:7e:e6:55:97:20:77:8a:a5:ee:de:55:67: 25:3e:01:66:f0:ea:04:54:6c:df:ce:e6:58:9c:33:76:e8:5c: 00:93:5d:b4:09:36:eb:37:86:d4:55:4f:5a:1e:5e:fa:c6:ba: 61:a0:be:d3:17:2e:67:70:35:21:87:3a:6b:8f:68:18:4b:58: e6:33:45:e7:65:a8:24:bb:86:db:90:f5:2f:23:d2:6b:fd:2b: 8c:85:02:33:8b:cc:63:db:4b:59:15:a9:c8:bd:81:c3:cd:35: f3:ab:e0:89:94:8f:e6:e2:74:51:89:73:0e:57:82:7d:5b:77: 24:62:42:b4:be:54:33:2f:74:c1:28:10:6a:3d:9f:e9:46:9d: c4:bb:2e:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJauQURpqbRYuyW51SzVeg/j4ZlkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzM3NjkyMkM5M0JGNjY3RkZCQkRBRjA3MzVBRTczRDE0 NTFCMDhDMjAeFw0yNjAzMjYxNTE2MDRaFw0yNjAzMzAwMDE4MDRaMDMxMTAvBgNV BAMTKDJEMjEzOTNCRUE2QTBGQUMxNDEwNjAxNEFDOTYyODk0Q0E5MjkwMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGSsEx5VcBgA95/crdHExWeG4n yGLtOk+5xbZzui1fJI+neo1hVNM7+6xrbOqm96NeTawqE6I/lTr22HNt4Hms0Wy9 4JPWe25VxKQrGjBGv4Ceo2BJvve6GoGmMGDqFIKOmvaGfctoGiDW7smRKEh1yKIG AYFPdH2o868GJw1IsDB2158A5K2QowcuNu/pGVhsnasGhZ/YE5R6ivlhDl0Tu351 O8n54Zg5Z7sQOMoPN2Q+Zy8TQhP5HWPKfJNUgXy+DPGxHTjh1jkeHuO68S5z40RN ES9v3gLNDEyqzM20wJkqLujSiJ8qfRepk/3A22FdJKkcb0GUW2BZ0TjY60OBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULSE5O+pqD6wUEGAUrJYolMqSkA4wHwYDVR0j BBgwFoAUc3aSLJO/Zn/7va8HNa5z0UUbCMIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDE3NmRkZC1hOTgwLTQzZDYtOTRhNy05NWVlZGE1Mzk2NjUvMC83Mzc2OTIyQzkz QkY2NjdGRkJCREFGMDczNUFFNzNEMTQ1MUIwOEMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzM3NjkyMkM5M0JGNjY3RkZCQkRBRjA3MzVBRTczRDE0NTFC MDhDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQxNzZkZGQtYTk4MC00M2Q2LTk0 YTctOTVlZWRhNTM5NjY1LzAvNzM3NjkyMkM5M0JGNjY3RkZCQkRBRjA3MzVBRTcz RDE0NTFCMDhDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHALHsgivhpM99eFQ+y9zH5ZJ7oX7u0EyxnR 1fqE0+YZwqjN/vAZ6LKGdCG9WMFUFcFB+xnbg9YmZKEjFQm7fpvpgKQf9VrXtFwa gvzaOFewKbviRE0cqBwIa5InznY7CHFgCPKXpFJGyJj12D2t6j8usX7mVZcgd4ql 7t5VZyU+AWbw6gRUbN/O5licM3boXACTXbQJNus3htRVT1oeXvrGumGgvtMXLmdw NSGHOmuPaBhLWOYzRedlqCS7htuQ9S8j0mv9K4yFAjOLzGPbS1kVqci9gcPNNfOr 4ImUj+bidFGJcw5Xgn1bdyRiQrS+VDMvdMEoEGo9n+lGncS7LgU= -----END CERTIFICATE-----Generated at Thu Mar 26 19:44:51 2026 by rpki-client