$ rpki-client -vvf repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft File: B392381083372148D0977D0066CFF38FD5A32CDB.mft (raw, json) Hash identifier: V/MSiX50T1JYfr0rWxmxNFkGOe1wKknSiaqqPQH+vOA= Subject key identifier: 82:DD:1E:F3:8C:A9:82:33:1B:48:11:0A:EC:A0:58:9F:46:03:B2:C1 Authority key identifier: B3:92:38:10:83:37:21:48:D0:97:7D:00:66:CF:F3:8F:D5:A3:2C:DB Certificate issuer: /CN=B392381083372148D0977D0066CFF38FD5A32CDB Certificate serial: 673E2F0C755437388FE6B68AA0A0BCF4F13C61C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B392381083372148D0977D0066CFF38FD5A32CDB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft Manifest number: 0288 Signing time: Tue 24 Mar 2026 23:42:14 +0000 Manifest this update: Tue 24 Mar 2026 23:37:14 +0000 Manifest next update: Sat 28 Mar 2026 11:21:14 +0000 Files and hashes: 1: B392381083372148D0977D0066CFF38FD5A32CDB.crl (hash: P89lyGOhe5WgG85A/0xxvyvaS7aX9UWr5dQr4AJTSdk=) 2: 3130332e3138352e38322e302f32332d3234203d3e203538383230.roa (hash: KYSy/nRpWJvgJOx3JwwIgJ7/nxfWqKSbFEYRVqxBqWw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.crl rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B392381083372148D0977D0066CFF38FD5A32CDB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 11:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:3e:2f:0c:75:54:37:38:8f:e6:b6:8a:a0:a0:bc:f4:f1:3c:61:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B392381083372148D0977D0066CFF38FD5A32CDB Validity Not Before: Mar 24 23:37:14 2026 GMT Not After : Mar 28 11:21:14 2026 GMT Subject: CN=82DD1EF38CA982331B48110AECA0589F4603B2C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6a:16:fb:c3:00:e2:50:be:7b:de:71:3b:b0: 63:d7:59:50:87:84:a2:fa:2c:27:f8:9b:13:58:de: 02:13:ae:82:c7:40:49:7d:2f:fc:a2:2a:2d:9d:cb: 05:2f:10:26:f4:e3:d6:76:fe:73:8e:6e:0a:dd:0b: d7:15:03:42:a0:9b:c6:28:e9:ab:93:47:7b:84:08: 54:31:66:1f:e6:4a:17:11:3e:70:ac:7e:79:0b:3f: 86:fe:1a:1a:41:6a:2e:6b:b0:46:ab:bf:f8:a6:32: 1c:e3:46:43:37:b0:b6:cd:c4:91:de:af:b1:b9:5c: b1:ae:5f:df:76:af:ec:3b:d3:11:7b:ab:d1:a2:5d: 64:42:be:77:1c:e0:f1:80:e5:f8:b3:a7:cd:ec:57: 35:6a:d3:29:44:d2:c5:74:f2:69:43:fb:1a:53:f8: 92:f2:6a:33:83:0f:ff:c1:b3:14:1f:d2:1f:0c:f7: ce:63:c1:aa:4e:03:33:cf:81:26:37:55:3f:10:1b: da:d2:1b:9e:e5:d2:4f:eb:f8:5d:78:cf:fa:3a:fa: f2:f8:5e:48:dd:e9:c9:ed:9d:d3:34:6f:55:1d:9c: db:9d:de:13:cb:de:5b:f3:79:a5:a4:b8:44:66:1f: 5a:c1:1d:fb:49:92:a7:24:b7:12:f1:3d:6c:16:5a: e9:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:DD:1E:F3:8C:A9:82:33:1B:48:11:0A:EC:A0:58:9F:46:03:B2:C1 X509v3 Authority Key Identifier: keyid:B3:92:38:10:83:37:21:48:D0:97:7D:00:66:CF:F3:8F:D5:A3:2C:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B392381083372148D0977D0066CFF38FD5A32CDB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:e0:d5:e2:05:49:50:1f:dc:69:70:f9:1b:63:ec:ef:3a:05: 1f:43:73:0b:3c:d9:95:2d:09:8f:a8:5c:74:21:61:fb:ca:d6: 74:24:46:4e:db:81:87:ef:c3:f6:a4:f6:f0:34:1f:da:5e:b6: 5a:b2:21:0b:36:0d:e6:17:79:de:fb:cc:c2:b2:86:cf:02:39: 86:71:15:cc:06:c4:e1:ca:c6:12:f5:36:f4:46:aa:36:e7:3a: a3:cd:43:7c:06:b8:20:df:d3:36:cf:e4:c3:69:3f:9f:d8:71: 07:48:50:96:df:e4:14:a6:9d:d9:74:56:d3:fe:f2:b5:ec:bd: 51:40:77:31:dd:d6:81:9f:75:3b:0b:b0:ce:70:90:fe:f5:ac: c4:71:7b:ce:09:9a:a4:15:2f:49:88:df:04:1f:c0:20:3d:ec: 5d:ac:8a:33:69:a5:72:27:8f:86:bc:5c:4b:97:99:a3:d7:ac: eb:a3:28:2a:43:96:03:03:45:a7:c6:98:10:38:04:4f:67:fb: 65:ea:46:2b:5d:a7:ed:6e:58:c8:2f:e8:11:b6:15:66:f3:cd: d5:2d:52:51:7a:08:83:a7:cd:ef:00:d7:99:25:2e:b1:20:15: 6d:26:99:49:bc:50:21:73:9f:ea:73:15:b4:36:d7:20:ed:0e: 92:08:c7:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZz4vDHVUNziP5raKoKC89PE8YcgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM5MjM4MTA4MzM3MjE0OEQwOTc3RDAwNjZDRkYzOEZE NUEzMkNEQjAeFw0yNjAzMjQyMzM3MTRaFw0yNjAzMjgxMTIxMTRaMDMxMTAvBgNV BAMTKDgyREQxRUYzOENBOTgyMzMxQjQ4MTEwQUVDQTA1ODlGNDYwM0IyQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ahb7wwDiUL573nE7sGPXWVCH hKL6LCf4mxNY3gITroLHQEl9L/yiKi2dywUvECb049Z2/nOObgrdC9cVA0Kgm8Yo 6auTR3uECFQxZh/mShcRPnCsfnkLP4b+GhpBai5rsEarv/imMhzjRkM3sLbNxJHe r7G5XLGuX992r+w70xF7q9GiXWRCvncc4PGA5fizp83sVzVq0ylE0sV08mlD+xpT +JLyajODD//BsxQf0h8M985jwapOAzPPgSY3VT8QG9rSG57l0k/r+F14z/o6+vL4 Xkjd6cntndM0b1UdnNud3hPL3lvzeaWkuERmH1rBHftJkqcktxLxPWwWWulRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgt0e84ypgjMbSBEK7KBYn0YDssEwHwYDVR0j BBgwFoAUs5I4EIM3IUjQl30AZs/zj9WjLNswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YmYyY2YwMy1mOWY5LTRiY2EtOGMyYy02MDczMjgwZGZlYTgvMC9CMzkyMzgxMDgz MzcyMTQ4RDA5NzdEMDA2NkNGRjM4RkQ1QTMyQ0RCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjM5MjM4MTA4MzM3MjE0OEQwOTc3RDAwNjZDRkYzOEZENUEz MkNEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWJmMmNmMDMtZjlmOS00YmNhLThj MmMtNjA3MzI4MGRmZWE4LzAvQjM5MjM4MTA4MzM3MjE0OEQwOTc3RDAwNjZDRkYz OEZENUEzMkNEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADbg1eIFSVAf3Glw+Rtj7O86BR9Dcws82ZUt CY+oXHQhYfvK1nQkRk7bgYfvw/ak9vA0H9petlqyIQs2DeYXed77zMKyhs8COYZx FcwGxOHKxhL1NvRGqjbnOqPNQ3wGuCDf0zbP5MNpP5/YcQdIUJbf5BSmndl0VtP+ 8rXsvVFAdzHd1oGfdTsLsM5wkP71rMRxe84JmqQVL0mI3wQfwCA97F2sijNppXIn j4a8XEuXmaPXrOujKCpDlgMDRafGmBA4BE9n+2XqRitdp+1uWMgv6BG2FWbzzdUt UlF6CIOnze8A15klLrEgFW0mmUm8UCFzn+pzFbQ21yDtDpIIxxo= -----END CERTIFICATE-----Generated at Thu Mar 26 08:57:16 2026 by rpki-client