$ rpki-client -vvf repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.mft File: DEB4279F0D4CD8368462787573162FB753A9B04B.mft (raw, json) Hash identifier: NBcLxWClaz5vXQ05ym1FBd790gyDUBlRPQPkXk+lwNI= Subject key identifier: B2:E8:13:55:10:82:89:D7:99:B6:27:63:41:2D:4C:61:CB:16:F7:0A Authority key identifier: DE:B4:27:9F:0D:4C:D8:36:84:62:78:75:73:16:2F:B7:53:A9:B0:4B Certificate issuer: /CN=DEB4279F0D4CD8368462787573162FB753A9B04B Certificate serial: 5673790F0930B78CB6B1E704AC45B2E48C803AE3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEB4279F0D4CD8368462787573162FB753A9B04B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.mft Manifest number: 0227 Signing time: Wed 25 Mar 2026 05:41:07 +0000 Manifest this update: Wed 25 Mar 2026 05:36:07 +0000 Manifest next update: Sat 28 Mar 2026 08:39:07 +0000 Files and hashes: 1: 3130332e33312e3234302e302f32342d3234203d3e20313339393532.roa (hash: SnMbgMOxWF6U2uyaAr5mP0bLC0JpKov3uB08AyMeVTY=) 2: 3130332e33312e3234312e302f32342d3234203d3e20313339393532.roa (hash: /kG2XKRMgpHFqcmwADFIzCUj6H/leetgA+b7DMmSYLk=) 3: DEB4279F0D4CD8368462787573162FB753A9B04B.crl (hash: M+p3kXyoVe6OH3YBI+eCquQsP7MiTyTw1JGUKeWPK8E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.crl rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEB4279F0D4CD8368462787573162FB753A9B04B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 08:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:73:79:0f:09:30:b7:8c:b6:b1:e7:04:ac:45:b2:e4:8c:80:3a:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEB4279F0D4CD8368462787573162FB753A9B04B Validity Not Before: Mar 25 05:36:07 2026 GMT Not After : Mar 28 08:39:07 2026 GMT Subject: CN=B2E81355108289D799B62763412D4C61CB16F70A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:18:11:a5:fd:22:26:36:4b:b1:f8:15:87:ae: 58:4d:17:f6:0c:0d:3c:3d:07:24:3e:c5:53:c3:99: 1c:dd:ba:bf:45:fe:58:9e:5f:c8:7e:53:05:ab:19: af:1a:f2:bf:13:e4:15:33:9b:6f:5d:9e:8d:68:9c: 9b:0f:42:3e:28:e1:c8:2a:7e:68:5a:39:49:53:14: 81:3a:bc:da:95:5f:05:92:5a:fb:5c:12:18:d8:57: 43:ec:33:9b:e3:69:94:c2:b0:8f:3d:08:67:12:1e: b8:77:30:42:0e:f5:b7:05:de:2e:90:81:d3:c4:a2: 68:f8:db:f4:96:33:82:09:f8:1e:43:47:ae:f7:09: 08:5e:c0:c7:7f:85:7d:b4:68:ad:11:d4:4f:82:1f: f3:67:43:da:b1:fc:7c:41:ee:42:37:04:e5:6d:cd: d3:e3:ac:b6:fe:e3:ff:f7:50:2e:71:5e:31:67:e1: 2d:2e:2d:ae:83:73:fe:0d:94:18:0c:09:af:66:d5: 79:7c:b3:06:ac:e6:65:b7:83:6b:56:80:5d:44:c8: a8:a0:f6:8b:a7:ff:2f:6e:3a:34:55:7a:0c:03:5a: c9:4b:f5:4e:e8:b2:90:ab:37:3d:39:9f:2f:6e:64: bb:e9:60:7e:a4:ca:13:19:f6:4e:b4:d6:76:8d:af: ed:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E8:13:55:10:82:89:D7:99:B6:27:63:41:2D:4C:61:CB:16:F7:0A X509v3 Authority Key Identifier: keyid:DE:B4:27:9F:0D:4C:D8:36:84:62:78:75:73:16:2F:B7:53:A9:B0:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEB4279F0D4CD8368462787573162FB753A9B04B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:de:95:fc:20:92:eb:84:98:2c:97:4d:13:35:c8:44:5e:9e: 1f:7d:c6:13:2c:25:b9:b3:a3:30:71:99:fb:52:be:84:51:ab: 58:f2:d2:53:26:b1:eb:cd:42:49:f0:08:a0:86:ee:8c:44:fe: c2:a8:ff:93:ad:53:74:e5:51:aa:db:17:13:28:49:d6:66:11: 15:1a:9d:74:45:32:cf:cb:0b:31:e4:bc:62:0e:73:c5:40:d1: 4b:88:83:1f:91:44:fd:44:9b:35:09:43:12:50:60:d5:03:b2: d2:09:9a:b2:b6:f0:12:f8:a5:ee:33:4e:f8:a2:43:d7:e7:02: 59:be:99:1f:4f:46:92:ab:b4:bf:46:1f:04:f7:34:42:fb:a9: 12:fc:fb:95:15:7e:dc:5e:e5:f8:28:92:a2:8c:3e:8d:bb:46: 30:14:6c:73:cd:19:00:f9:2f:47:a8:31:91:3b:38:ff:8d:08: 72:d2:d1:ab:af:ba:47:6f:ec:94:e5:81:1a:ae:55:19:01:7c: 63:57:03:72:0e:34:0d:cf:b3:cf:c5:27:90:c2:3d:81:c9:9c: e5:7d:04:9f:f7:a9:0d:9e:ff:96:32:64:f6:8c:b2:88:66:b6: 8c:17:77:50:fc:bf:1f:d3:ab:69:31:eb:29:7b:f5:24:a7:6e: 7c:4a:f4:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVnN5Dwkwt4y2secErEWy5IyAOuMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVCNDI3OUYwRDRDRDgzNjg0NjI3ODc1NzMxNjJGQjc1 M0E5QjA0QjAeFw0yNjAzMjUwNTM2MDdaFw0yNjAzMjgwODM5MDdaMDMxMTAvBgNV BAMTKEIyRTgxMzU1MTA4Mjg5RDc5OUI2Mjc2MzQxMkQ0QzYxQ0IxNkY3MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/GBGl/SImNkux+BWHrlhNF/YM DTw9ByQ+xVPDmRzdur9F/lieX8h+UwWrGa8a8r8T5BUzm29dno1onJsPQj4o4cgq fmhaOUlTFIE6vNqVXwWSWvtcEhjYV0PsM5vjaZTCsI89CGcSHrh3MEIO9bcF3i6Q gdPEomj42/SWM4IJ+B5DR673CQhewMd/hX20aK0R1E+CH/NnQ9qx/HxB7kI3BOVt zdPjrLb+4//3UC5xXjFn4S0uLa6Dc/4NlBgMCa9m1Xl8swas5mW3g2tWgF1EyKig 9oun/y9uOjRVegwDWslL9U7ospCrNz05ny9uZLvpYH6kyhMZ9k601naNr+3xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsugTVRCCideZtidjQS1MYcsW9wowHwYDVR0j BBgwFoAU3rQnnw1M2DaEYnh1cxYvt1OpsEswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDMwMzRhYS1mMzljLTQ4ZjUtODUyZS1kMWJkN2YxN2FhNDIvMC9ERUI0Mjc5RjBE NENEODM2ODQ2Mjc4NzU3MzE2MkZCNzUzQTlCMDRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREVCNDI3OUYwRDRDRDgzNjg0NjI3ODc1NzMxNjJGQjc1M0E5 QjA0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQzMDM0YWEtZjM5Yy00OGY1LTg1 MmUtZDFiZDdmMTdhYTQyLzAvREVCNDI3OUYwRDRDRDgzNjg0NjI3ODc1NzMxNjJG Qjc1M0E5QjA0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJXelfwgkuuEmCyXTRM1yERenh99xhMsJbmz ozBxmftSvoRRq1jy0lMmsevNQknwCKCG7oxE/sKo/5OtU3TlUarbFxMoSdZmERUa nXRFMs/LCzHkvGIOc8VA0UuIgx+RRP1EmzUJQxJQYNUDstIJmrK28BL4pe4zTvii Q9fnAlm+mR9PRpKrtL9GHwT3NEL7qRL8+5UVftxe5fgokqKMPo27RjAUbHPNGQD5 L0eoMZE7OP+NCHLS0auvukdv7JTlgRquVRkBfGNXA3IONA3Ps8/FJ5DCPYHJnOV9 BJ/3qQ2e/5YyZPaMsohmtowXd1D8vx/Tq2kx6yl79SSnbnxK9C4= -----END CERTIFICATE-----Generated at Thu Mar 26 20:00:54 2026 by rpki-client