$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft File: 11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft (raw, json) Hash identifier: 0B6/suUhvpPgM9H3pDARnOHlpYAG7ZWVwzTFH8zCgmI= Subject key identifier: 35:D0:B7:7F:21:62:0A:30:00:B4:94:70:6E:20:E9:56:8D:37:F3:4A Authority key identifier: 11:A8:39:F5:FB:6B:34:5F:B1:58:6C:56:F1:46:C0:D8:00:26:AB:7E Certificate issuer: /CN=11A839F5FB6B345FB1586C56F146C0D80026AB7E Certificate serial: 37EB53429DAC1999363121A9A133E2EE68DBFFE3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11A839F5FB6B345FB1586C56F146C0D80026AB7E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft Manifest number: 0127 Signing time: Thu 26 Mar 2026 01:50:58 +0000 Manifest this update: Thu 26 Mar 2026 01:45:58 +0000 Manifest next update: Sun 29 Mar 2026 11:30:58 +0000 Files and hashes: 1: 11A839F5FB6B345FB1586C56F146C0D80026AB7E.crl (hash: vuqk+lNKQJna3nA5ndr8S0CjuszHsu7KtW4K0hbfxxU=) 2: 323030313a6466333a633234303a3a2f34382d3438203d3e20313532343430.roa (hash: 2T9LVqRaEUG/PyNEPNkJKeM+yCzpYg+aQeXewlr7el8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.crl rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11A839F5FB6B345FB1586C56F146C0D80026AB7E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 11:30:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:eb:53:42:9d:ac:19:99:36:31:21:a9:a1:33:e2:ee:68:db:ff:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11A839F5FB6B345FB1586C56F146C0D80026AB7E Validity Not Before: Mar 26 01:45:58 2026 GMT Not After : Mar 29 11:30:58 2026 GMT Subject: CN=35D0B77F21620A3000B494706E20E9568D37F34A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ec:c1:7a:4e:ff:ba:d1:d9:f9:bb:39:e9:47: d1:ff:9e:b6:66:38:55:f6:6d:93:e0:c3:6d:9b:d0: 79:59:b6:76:45:28:34:43:2f:13:fa:9e:a9:b7:e7: 20:23:ca:55:63:f7:85:3b:ab:19:4e:b4:37:70:a2: 05:ea:66:a6:9b:5c:55:6b:ac:f0:f9:a4:3d:99:27: d4:2b:c4:4e:ce:6a:5a:90:c6:98:36:c0:9c:8d:d2: 2d:c3:a9:36:63:dd:0b:e3:da:14:26:d5:5f:bf:af: 8a:03:43:05:f1:b7:a8:33:88:89:81:8e:18:6e:25: 4c:97:6f:ab:98:9a:4f:14:e7:ce:e7:97:c1:d2:60: b0:5b:c3:a8:5a:ad:05:03:06:2e:27:7a:c2:5e:a2: a1:b6:f7:d8:99:1b:1f:27:ee:d3:96:3c:5d:28:b7: e6:0f:d0:0f:89:57:d0:ab:51:1c:58:94:53:b5:76: 7c:36:98:34:ff:db:39:ff:42:32:a2:ea:78:69:4f: d9:48:b0:54:93:5e:bd:fa:3a:61:ab:fe:dc:9b:c0: 67:fe:7d:15:2c:ac:f4:c5:d9:d3:9f:ea:54:d0:a9: 12:8f:47:61:88:19:74:9d:2b:cf:69:ea:e8:44:4b: 1b:f8:80:fc:87:fa:14:c3:34:b5:37:c3:15:88:44: 29:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D0:B7:7F:21:62:0A:30:00:B4:94:70:6E:20:E9:56:8D:37:F3:4A X509v3 Authority Key Identifier: keyid:11:A8:39:F5:FB:6B:34:5F:B1:58:6C:56:F1:46:C0:D8:00:26:AB:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11A839F5FB6B345FB1586C56F146C0D80026AB7E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption db:8f:73:c1:43:c4:3d:cd:87:5d:84:c9:e9:8c:1a:eb:c8:54: 34:27:73:bb:98:6f:8b:0c:5d:87:a2:40:11:5f:d6:e4:83:16: be:79:88:f1:d9:67:35:05:b8:1a:28:1b:45:5a:29:1a:dd:ff: 97:22:82:ea:27:d0:3d:f6:d8:dc:eb:9c:a9:f4:83:0a:48:31: ed:2f:8e:67:5d:3b:f7:23:b2:b7:3c:16:66:89:2a:c4:89:4c: 5d:be:0a:4e:4e:6e:cc:a7:0b:ed:07:20:95:58:79:66:0c:2d: 9b:a5:57:d1:79:5a:a3:51:e9:2e:84:f6:19:92:d3:a0:2f:8e: c1:77:41:6f:8a:66:4d:25:04:c1:43:33:e3:5e:70:b6:fb:fc: e0:0a:fe:1d:0f:bf:42:4a:07:df:68:df:f3:bd:a8:37:de:c5: eb:84:5e:e1:99:20:b1:3a:50:fa:c2:32:2e:8d:b0:d0:f5:58: 1c:8d:a5:61:2c:5a:34:4e:be:1a:81:b6:03:60:e6:b3:e5:52: 77:97:3c:65:5b:16:3e:c9:16:c4:8b:0f:4f:fd:3c:7c:9e:16: f0:73:b6:2d:8d:03:58:1a:ed:dd:e4:8f:8c:b3:c5:67:a6:60: 2a:79:cd:53:1e:49:81:0b:77:5f:a0:38:f2:4c:16:f7:11:0d: 62:a8:f9:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN+tTQp2sGZk2MSGpoTPi7mjb/+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFBODM5RjVGQjZCMzQ1RkIxNTg2QzU2RjE0NkMwRDgw MDI2QUI3RTAeFw0yNjAzMjYwMTQ1NThaFw0yNjAzMjkxMTMwNThaMDMxMTAvBgNV BAMTKDM1RDBCNzdGMjE2MjBBMzAwMEI0OTQ3MDZFMjBFOTU2OEQzN0YzNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm7MF6Tv+60dn5uznpR9H/nrZm OFX2bZPgw22b0HlZtnZFKDRDLxP6nqm35yAjylVj94U7qxlOtDdwogXqZqabXFVr rPD5pD2ZJ9QrxE7OalqQxpg2wJyN0i3DqTZj3Qvj2hQm1V+/r4oDQwXxt6gziImB jhhuJUyXb6uYmk8U587nl8HSYLBbw6harQUDBi4nesJeoqG299iZGx8n7tOWPF0o t+YP0A+JV9CrURxYlFO1dnw2mDT/2zn/QjKi6nhpT9lIsFSTXr36OmGr/tybwGf+ fRUsrPTF2dOf6lTQqRKPR2GIGXSdK89p6uhESxv4gPyH+hTDNLU3wxWIRCkTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNdC3fyFiCjAAtJRwbiDpVo0380owHwYDVR0j BBgwFoAUEag59ftrNF+xWGxW8UbA2AAmq34wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZmI4MDhlYi1jOThlLTQwMzYtYmU5YS0xOTNiYmNjNjQ4OTIvMS8xMUE4MzlGNUZC NkIzNDVGQjE1ODZDNTZGMTQ2QzBEODAwMjZBQjdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTFBODM5RjVGQjZCMzQ1RkIxNTg2QzU2RjE0NkMwRDgwMDI2 QUI3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWZiODA4ZWItYzk4ZS00MDM2LWJl OWEtMTkzYmJjYzY0ODkyLzEvMTFBODM5RjVGQjZCMzQ1RkIxNTg2QzU2RjE0NkMw RDgwMDI2QUI3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANuPc8FDxD3Nh12EyemMGuvIVDQnc7uYb4sM XYeiQBFf1uSDFr55iPHZZzUFuBooG0VaKRrd/5ciguon0D322NzrnKn0gwpIMe0v jmddO/cjsrc8FmaJKsSJTF2+Ck5ObsynC+0HIJVYeWYMLZulV9F5WqNR6S6E9hmS 06AvjsF3QW+KZk0lBMFDM+NecLb7/OAK/h0Pv0JKB99o3/O9qDfexeuEXuGZILE6 UPrCMi6NsND1WByNpWEsWjROvhqBtgNg5rPlUneXPGVbFj7JFsSLD0/9PHyeFvBz ti2NA1ga7d3kj4yzxWemYCp5zVMeSYELd1+gOPJMFvcRDWKo+b8= -----END CERTIFICATE-----Generated at Thu Mar 26 22:27:07 2026 by rpki-client