$ rpki-client -vvf repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.mft File: D714F468978E86AB39DC1CFD7B22A6CED936605D.mft (raw, json) Hash identifier: G/ObPyzTJ+rBO8qCR9DMr2zfoLSAzifQWPC7D2kvP+k= Subject key identifier: 9A:DB:1D:9C:D6:E8:66:18:DA:61:4E:38:74:F4:F6:B5:14:50:1D:9A Authority key identifier: D7:14:F4:68:97:8E:86:AB:39:DC:1C:FD:7B:22:A6:CE:D9:36:60:5D Certificate issuer: /CN=D714F468978E86AB39DC1CFD7B22A6CED936605D Certificate serial: 2EB422D793ED531CA19DA1077639C3EA724F0506 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D714F468978E86AB39DC1CFD7B22A6CED936605D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.mft Manifest number: 0203 Signing time: Thu 26 Mar 2026 17:12:38 +0000 Manifest this update: Thu 26 Mar 2026 17:07:38 +0000 Manifest next update: Sun 29 Mar 2026 23:30:38 +0000 Files and hashes: 1: 3130332e3132312e3134342e302f32332d3234203d3e20313335343738.roa (hash: +CdAlYM7nun1wI/1nBpguFrXp8lMNDu4i4cocPNWO9s=) 2: 3130332e3132312e3134362e302f32332d3234203d3e20313335343738.roa (hash: nWVhYRUUcfc8aYv1wy6ZUuBKnCS0BHar4Lt91zGFRLk=) 3: D714F468978E86AB39DC1CFD7B22A6CED936605D.crl (hash: zz6YwYgxUUprsaQn1hLzGqckbZLVFLRHzst/ntPd6+I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.crl rsync://repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D714F468978E86AB39DC1CFD7B22A6CED936605D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 20:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:b4:22:d7:93:ed:53:1c:a1:9d:a1:07:76:39:c3:ea:72:4f:05:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D714F468978E86AB39DC1CFD7B22A6CED936605D Validity Not Before: Mar 26 17:07:38 2026 GMT Not After : Mar 29 23:30:38 2026 GMT Subject: CN=9ADB1D9CD6E86618DA614E3874F4F6B514501D9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7a:73:fe:b1:66:d6:66:0f:c6:af:58:ca:c5: d6:12:03:2c:ac:2b:3e:8e:ff:06:38:f4:ff:27:be: 9e:0a:35:53:0d:34:dc:b3:ae:c7:eb:1b:0b:e3:81: 21:2e:e5:c9:30:30:8c:51:a1:42:7b:e4:c8:ce:61: 40:8d:22:14:b8:04:d5:e6:01:de:a3:e4:64:eb:5f: df:5b:b4:f9:72:ec:0b:09:ed:bf:4d:37:a4:1e:ee: 89:12:22:cf:61:f1:45:76:18:71:c2:99:3e:4b:71: 7a:c0:68:7a:48:08:84:7d:a1:a0:15:2d:29:12:29: 0b:bb:f4:dd:f0:4c:39:e5:10:50:e5:33:06:3b:8a: 4c:ff:2c:94:70:b5:c4:68:55:4c:59:1e:2c:f5:8b: 65:0f:a0:2c:79:1a:4e:d1:bb:9c:46:60:a1:47:30: 5d:9e:e3:df:a5:1c:92:b6:c1:f1:6b:97:4a:43:65: 67:e6:a5:44:8c:b5:dc:aa:b9:90:7e:64:f4:5a:c6: 3b:e4:16:a6:28:7f:d1:18:c9:bf:40:88:fe:ef:e7: 2b:42:7d:99:26:be:9e:01:9b:95:a2:30:b6:f7:5c: 69:e1:cd:ee:3e:82:a6:61:8a:3d:d6:34:26:30:1e: 60:b1:04:bc:7c:9c:89:7c:b4:e0:fe:17:b1:18:db: 9d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:DB:1D:9C:D6:E8:66:18:DA:61:4E:38:74:F4:F6:B5:14:50:1D:9A X509v3 Authority Key Identifier: keyid:D7:14:F4:68:97:8E:86:AB:39:DC:1C:FD:7B:22:A6:CE:D9:36:60:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D714F468978E86AB39DC1CFD7B22A6CED936605D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:21:1b:2d:2c:9a:e6:90:20:f2:fe:e8:13:1f:86:4d:a8:1e: 0b:24:95:c8:7c:f0:72:9b:f3:4c:80:a9:86:49:b4:da:69:59: dc:22:1e:94:e8:3f:84:a3:fd:f1:c5:49:9c:23:01:d9:2c:20: ef:3c:01:d0:6e:50:7b:af:31:06:88:19:11:02:32:5d:30:b8: ad:15:67:5a:03:53:7f:51:1d:31:d5:f7:01:0a:18:45:e5:db: 52:36:1a:65:d7:48:6d:30:9c:aa:9f:45:8a:ab:4d:48:7f:86: 2d:3e:d0:a8:0b:ac:fe:f4:46:d1:30:6f:4c:9c:e6:69:9b:72: b8:fd:cb:91:0d:aa:e2:d0:e8:9a:bd:7f:81:61:9a:11:33:e6: 14:0a:3b:49:e4:be:33:12:39:2e:9a:29:47:dd:da:ee:ef:38: 44:74:14:6b:56:c4:38:7f:a1:d1:50:82:64:70:bf:da:4a:4a: ab:4a:4c:90:59:1e:f7:fb:e5:b9:07:01:91:aa:43:78:c6:24: 6e:10:9f:1e:72:3c:91:2f:8f:c6:08:72:b2:91:12:12:65:a1: 20:ea:55:5d:c1:fe:11:20:da:a7:cc:d1:c4:8a:54:8d:30:b5: c7:23:e1:01:99:11:ec:58:a2:fb:44:1d:f4:9c:b6:ea:52:97: 7d:49:ba:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULrQi15PtUxyhnaEHdjnD6nJPBQYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDcxNEY0Njg5NzhFODZBQjM5REMxQ0ZEN0IyMkE2Q0VE OTM2NjA1RDAeFw0yNjAzMjYxNzA3MzhaFw0yNjAzMjkyMzMwMzhaMDMxMTAvBgNV BAMTKDlBREIxRDlDRDZFODY2MThEQTYxNEUzODc0RjRGNkI1MTQ1MDFEOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKenP+sWbWZg/Gr1jKxdYSAyys Kz6O/wY49P8nvp4KNVMNNNyzrsfrGwvjgSEu5ckwMIxRoUJ75MjOYUCNIhS4BNXm Ad6j5GTrX99btPly7AsJ7b9NN6Qe7okSIs9h8UV2GHHCmT5LcXrAaHpICIR9oaAV LSkSKQu79N3wTDnlEFDlMwY7ikz/LJRwtcRoVUxZHiz1i2UPoCx5Gk7Ru5xGYKFH MF2e49+lHJK2wfFrl0pDZWfmpUSMtdyquZB+ZPRaxjvkFqYof9EYyb9AiP7v5ytC fZkmvp4Bm5WiMLb3XGnhze4+gqZhij3WNCYwHmCxBLx8nIl8tOD+F7EY250rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmtsdnNboZhjaYU44dPT2tRRQHZowHwYDVR0j BBgwFoAU1xT0aJeOhqs53Bz9eyKmztk2YF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MWUwMDc3OS00YTM5LTQ3ZjAtODMzOC00NGY4OGMyOTE3MDYvMC9ENzE0RjQ2ODk3 OEU4NkFCMzlEQzFDRkQ3QjIyQTZDRUQ5MzY2MDVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDcxNEY0Njg5NzhFODZBQjM5REMxQ0ZEN0IyMkE2Q0VEOTM2 NjA1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTFlMDA3NzktNGEzOS00N2YwLTgz MzgtNDRmODhjMjkxNzA2LzAvRDcxNEY0Njg5NzhFODZBQjM5REMxQ0ZEN0IyMkE2 Q0VEOTM2NjA1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACQhGy0smuaQIPL+6BMfhk2oHgsklch88HKb 80yAqYZJtNppWdwiHpToP4Sj/fHFSZwjAdksIO88AdBuUHuvMQaIGRECMl0wuK0V Z1oDU39RHTHV9wEKGEXl21I2GmXXSG0wnKqfRYqrTUh/hi0+0KgLrP70RtEwb0yc 5mmbcrj9y5ENquLQ6Jq9f4FhmhEz5hQKO0nkvjMSOS6aKUfd2u7vOER0FGtWxDh/ odFQgmRwv9pKSqtKTJBZHvf75bkHAZGqQ3jGJG4Qnx5yPJEvj8YIcrKREhJloSDq VV3B/hEg2qfM0cSKVI0wtccj4QGZEexYovtEHfSctupSl31JutM= -----END CERTIFICATE-----Generated at Thu Mar 26 20:46:55 2026 by rpki-client