$ rpki-client -vvf repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft File: D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft (raw, json) Hash identifier: 6GnhSRdEGYfuSIzru+IwM78DVzXgG9SOUGNV2QgigWM= Subject key identifier: E6:4C:33:34:4E:C4:95:71:20:0A:D0:82:D6:4F:98:F6:7F:5E:4D:02 Authority key identifier: D9:DF:DE:D2:F5:25:C1:E8:22:51:BA:90:ED:83:81:57:F0:B6:FB:19 Certificate issuer: /CN=D9DFDED2F525C1E82251BA90ED838157F0B6FB19 Certificate serial: 3E1CB46BE57D3DFDC28D73014777E04AA32BDFB2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft Manifest number: 0127 Signing time: Thu 26 Mar 2026 10:41:41 +0000 Manifest this update: Thu 26 Mar 2026 10:36:41 +0000 Manifest next update: Sun 29 Mar 2026 17:50:41 +0000 Files and hashes: 1: 3130332e39382e3132302e302f32342d3234203d3e20313336383238.roa (hash: otrTvPdXJ2c7XawCgl4uHz6MNarL+/Mepjzl/48ej8I=) 2: D9DFDED2F525C1E82251BA90ED838157F0B6FB19.crl (hash: Mt/eAknyszyds5tO74DECarrHYYgNGAtwy04wUOd50E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.crl rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:1c:b4:6b:e5:7d:3d:fd:c2:8d:73:01:47:77:e0:4a:a3:2b:df:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9DFDED2F525C1E82251BA90ED838157F0B6FB19 Validity Not Before: Mar 26 10:36:41 2026 GMT Not After : Mar 29 17:50:41 2026 GMT Subject: CN=E64C33344EC49571200AD082D64F98F67F5E4D02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:74:9b:8b:bd:94:8c:59:99:b7:e8:3b:c6:c9: 04:73:d7:eb:9f:63:b8:62:58:dc:bb:e6:31:b3:94: 16:40:82:e6:36:44:1a:3b:f5:8d:b6:de:d6:fe:87: c2:f9:03:85:54:ad:34:b8:7c:59:e6:b6:bb:7d:34: 91:8a:26:77:42:06:f4:b5:23:60:67:7a:55:8c:2d: 83:44:97:39:b6:04:6f:9d:4f:2f:30:be:d2:67:5c: 83:9b:03:53:4e:df:aa:d6:ca:5f:32:ea:b6:ed:dc: 1a:ed:9e:b7:ba:ee:eb:19:2f:47:11:a0:82:12:c0: cc:ea:76:5e:d4:e5:7e:48:f7:f0:c6:31:2b:b7:55: 60:30:0e:2d:c5:4b:d4:2b:45:2a:73:c3:37:cb:ea: c5:7f:4f:ac:88:d8:ab:f4:17:02:22:ff:82:61:9d: 50:1d:c9:65:95:51:56:67:3e:bb:c0:2b:f7:d1:68: ff:e7:2c:31:58:c8:55:dd:47:3e:ea:92:6d:07:47: ab:15:ff:d8:62:fa:79:7b:29:78:1c:d8:99:18:d7: 8e:a9:07:61:f1:68:2f:aa:f8:7e:37:14:8f:fc:b4: 60:dc:01:9d:e1:ad:f1:f8:06:7d:d6:5c:0e:03:dd: 96:12:8e:5f:7e:2f:26:75:99:26:ca:b7:da:f8:54: c1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:4C:33:34:4E:C4:95:71:20:0A:D0:82:D6:4F:98:F6:7F:5E:4D:02 X509v3 Authority Key Identifier: keyid:D9:DF:DE:D2:F5:25:C1:E8:22:51:BA:90:ED:83:81:57:F0:B6:FB:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:cd:8b:4a:1f:89:2b:06:8f:7c:1f:7e:fc:fa:4d:32:56:1e: 7a:64:a9:19:69:ff:b0:19:d9:c1:76:a1:a4:9d:2c:e7:34:20: a1:85:42:8f:cf:b4:45:ab:50:2a:67:08:92:1d:41:ca:ba:6d: 10:a7:f2:2c:81:df:da:51:74:8d:09:20:6f:de:d3:15:f3:8f: 00:a1:62:ce:65:1d:ea:05:8b:ba:e3:cd:4c:0a:7e:db:ec:12: df:f9:e5:f3:86:80:19:44:b7:7d:66:c7:5c:14:ea:0f:44:58: 68:a5:ed:fa:4c:68:16:1a:57:4a:9b:53:ec:43:5e:87:35:a9: cf:67:d2:86:e6:78:25:3c:fa:77:cd:de:af:d8:bf:e3:4f:99: b4:78:99:b0:a4:26:5f:a7:6d:a2:a7:0a:cd:29:38:18:2f:e7: 30:c4:ca:ff:6c:f1:61:03:3c:35:61:bc:25:25:c1:69:6b:80: a3:d2:7c:04:51:ca:d4:e6:4f:85:4e:9a:c9:e4:45:1a:4e:2f: f2:97:68:75:bd:77:23:aa:8b:8b:00:1e:b6:81:c5:84:37:44: a6:67:7c:f8:93:18:e3:89:88:a1:93:04:f8:97:23:25:3b:31: 8b:b2:6e:10:15:4a:8f:d8:3d:b8:a8:86:fe:32:f6:c6:d2:f4: 50:c3:44:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPhy0a+V9Pf3CjXMBR3fgSqMr37IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlERkRFRDJGNTI1QzFFODIyNTFCQTkwRUQ4MzgxNTdG MEI2RkIxOTAeFw0yNjAzMjYxMDM2NDFaFw0yNjAzMjkxNzUwNDFaMDMxMTAvBgNV BAMTKEU2NEMzMzM0NEVDNDk1NzEyMDBBRDA4MkQ2NEY5OEY2N0Y1RTREMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHdJuLvZSMWZm36DvGyQRz1+uf Y7hiWNy75jGzlBZAguY2RBo79Y223tb+h8L5A4VUrTS4fFnmtrt9NJGKJndCBvS1 I2BnelWMLYNElzm2BG+dTy8wvtJnXIObA1NO36rWyl8y6rbt3Brtnre67usZL0cR oIISwMzqdl7U5X5I9/DGMSu3VWAwDi3FS9QrRSpzwzfL6sV/T6yI2Kv0FwIi/4Jh nVAdyWWVUVZnPrvAK/fRaP/nLDFYyFXdRz7qkm0HR6sV/9hi+nl7KXgc2JkY146p B2HxaC+q+H43FI/8tGDcAZ3hrfH4Bn3WXA4D3ZYSjl9+LyZ1mSbKt9r4VMFnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5kwzNE7ElXEgCtCC1k+Y9n9eTQIwHwYDVR0j BBgwFoAU2d/e0vUlwegiUbqQ7YOBV/C2+xkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTBiZTM1My00YWI4LTRiNzctOTg4ZC03MzlmODJiOWY2NDEvMC9EOURGREVEMkY1 MjVDMUU4MjI1MUJBOTBFRDgzODE1N0YwQjZGQjE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDlERkRFRDJGNTI1QzFFODIyNTFCQTkwRUQ4MzgxNTdGMEI2 RkIxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEwYmUzNTMtNGFiOC00Yjc3LTk4 OGQtNzM5ZjgyYjlmNjQxLzAvRDlERkRFRDJGNTI1QzFFODIyNTFCQTkwRUQ4Mzgx NTdGMEI2RkIxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALnNi0ofiSsGj3wffvz6TTJWHnpkqRlp/7AZ 2cF2oaSdLOc0IKGFQo/PtEWrUCpnCJIdQcq6bRCn8iyB39pRdI0JIG/e0xXzjwCh Ys5lHeoFi7rjzUwKftvsEt/55fOGgBlEt31mx1wU6g9EWGil7fpMaBYaV0qbU+xD Xoc1qc9n0obmeCU8+nfN3q/Yv+NPmbR4mbCkJl+nbaKnCs0pOBgv5zDEyv9s8WED PDVhvCUlwWlrgKPSfARRytTmT4VOmsnkRRpOL/KXaHW9dyOqi4sAHraBxYQ3RKZn fPiTGOOJiKGTBPiXIyU7MYuybhAVSo/YPbiohv4y9sbS9FDDRHM= -----END CERTIFICATE-----Generated at Thu Mar 26 17:36:35 2026 by rpki-client