$ rpki-client -vvf repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.mft File: 871B4235DFC56C482416E7BBA192562092FFE055.mft (raw, json) Hash identifier: qMMX4E80SVZABPWWnrlmxfbeA9W6Fb0+5sITTIrrW6Y= Subject key identifier: 0D:8D:CC:64:AB:2A:02:97:3A:4D:29:7D:C7:9F:7B:7A:CD:BB:B3:D8 Authority key identifier: 87:1B:42:35:DF:C5:6C:48:24:16:E7:BB:A1:92:56:20:92:FF:E0:55 Certificate issuer: /CN=871B4235DFC56C482416E7BBA192562092FFE055 Certificate serial: 6A7675F725241AAB30BA84BD19B5BADB25C64226 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/871B4235DFC56C482416E7BBA192562092FFE055.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.mft Manifest number: 014D Signing time: Wed 25 Mar 2026 18:32:26 +0000 Manifest this update: Wed 25 Mar 2026 18:27:26 +0000 Manifest next update: Sat 28 Mar 2026 23:47:26 +0000 Files and hashes: 1: 3135372e32302e39322e302f32342d3234203d3e20313532343037.roa (hash: QrSBRaxGaWU8ZoD0zYmeD1ZaWtynoFSmr/bVUUg5r5E=) 2: 3135372e32302e39322e302f32332d3233203d3e20313532343037.roa (hash: P7Y8t8QlzVHnPDCRyEAdHrWqFac2Md1CGzVdP33gimk=) 3: 871B4235DFC56C482416E7BBA192562092FFE055.crl (hash: k06NOmiEn4mfXyQPMPryMApxsADyPSwrQ4ewG1Hu3uY=) 4: 3135372e32302e39332e302f32342d3234203d3e20313532343037.roa (hash: 7xhwBLoxBcZfSoTZvdUTvLkraKKygpQjYGPK+6LQ1oA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.crl rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/871B4235DFC56C482416E7BBA192562092FFE055.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 23:47:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:76:75:f7:25:24:1a:ab:30:ba:84:bd:19:b5:ba:db:25:c6:42:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871B4235DFC56C482416E7BBA192562092FFE055 Validity Not Before: Mar 25 18:27:26 2026 GMT Not After : Mar 28 23:47:26 2026 GMT Subject: CN=0D8DCC64AB2A02973A4D297DC79F7B7ACDBBB3D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:47:57:6f:e9:10:96:97:77:8b:0c:43:28:d6: 0b:19:c5:88:88:8e:e5:20:10:5c:46:cc:a1:3b:d5: a6:22:49:54:1d:0c:bf:42:a8:24:0b:73:ff:87:fd: 7a:36:ea:17:67:bf:76:1b:40:a7:e7:f4:8c:2f:12: 74:e4:19:51:6a:35:cb:c6:ad:36:93:05:81:a9:8d: 85:4b:45:a9:22:84:57:98:39:a2:23:de:27:fe:9d: 3c:2d:67:91:06:1f:24:49:f3:ac:67:05:aa:74:4d: aa:f4:d0:82:c1:c0:07:77:f2:45:3a:c6:b1:3e:c3: e8:4c:9b:d3:37:dd:c0:95:57:2a:9e:bc:a3:95:01: 0a:88:ed:f0:fc:5d:dd:a9:21:4f:cf:b6:2f:f2:41: b2:19:0e:ae:34:d3:b5:79:38:31:fa:72:31:d2:4e: 95:85:09:ad:99:f2:dd:91:23:90:59:aa:db:5a:72: 88:40:a8:6a:26:17:b9:30:e1:19:8f:7c:1f:a7:fc: 85:fa:48:24:80:44:57:ad:ea:6f:ba:76:1c:e5:54: 4d:9a:ad:94:12:b2:db:2b:69:97:e6:5b:26:85:c3: 4e:0b:c3:37:c1:59:a2:68:31:b9:8c:32:9a:6c:de: 23:1d:a6:4a:eb:ca:47:2c:95:eb:fc:79:53:e9:04: c4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:8D:CC:64:AB:2A:02:97:3A:4D:29:7D:C7:9F:7B:7A:CD:BB:B3:D8 X509v3 Authority Key Identifier: keyid:87:1B:42:35:DF:C5:6C:48:24:16:E7:BB:A1:92:56:20:92:FF:E0:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/871B4235DFC56C482416E7BBA192562092FFE055.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:01:81:1d:f7:84:9d:14:e6:ea:25:d9:e3:df:38:8b:d6:e4: 8b:6f:8f:a2:88:1f:bc:60:26:fb:19:f0:bf:26:c9:a0:74:17: 30:42:df:34:a2:47:c2:8b:1b:ff:5e:38:66:8e:f3:f5:19:76: c8:ed:f9:0b:bb:e2:14:88:19:fb:86:0b:00:19:df:ad:f4:47: d7:74:13:8b:67:cf:63:91:df:d4:ee:ee:5b:47:81:28:c8:6a: 1c:f0:db:1e:1c:3c:4f:73:03:3b:8b:09:52:a7:0f:b5:52:83: 8d:8a:8f:3c:0c:50:18:a5:1c:92:47:0a:c8:70:63:62:7a:82: 63:89:5f:85:90:da:1e:fe:c0:70:68:43:a9:99:2c:57:e9:ce: b9:0c:5c:84:ce:5b:08:71:38:a6:83:d1:78:f1:4e:cc:44:36: 82:d1:dd:6b:ed:fa:11:ff:5c:f1:27:ac:b6:e7:81:ea:78:65: e8:38:78:f3:3d:c9:62:a6:7e:3c:71:35:c3:55:44:62:c5:48: 4a:1d:7f:59:59:32:b4:d8:1f:6e:5a:98:61:93:4c:1d:f8:09: 76:57:e8:87:a9:ac:cf:6d:af:e7:9e:7d:9e:b3:05:89:e9:7a: 9c:b9:d4:70:c0:be:cf:64:52:18:93:d8:cb:18:38:0b:27:a2: 3c:79:93:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUanZ19yUkGqswuoS9GbW62yXGQiYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcxQjQyMzVERkM1NkM0ODI0MTZFN0JCQTE5MjU2MjA5 MkZGRTA1NTAeFw0yNjAzMjUxODI3MjZaFw0yNjAzMjgyMzQ3MjZaMDMxMTAvBgNV BAMTKDBEOERDQzY0QUIyQTAyOTczQTREMjk3REM3OUY3QjdBQ0RCQkIzRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzR1dv6RCWl3eLDEMo1gsZxYiI juUgEFxGzKE71aYiSVQdDL9CqCQLc/+H/Xo26hdnv3YbQKfn9IwvEnTkGVFqNcvG rTaTBYGpjYVLRakihFeYOaIj3if+nTwtZ5EGHyRJ86xnBap0Tar00ILBwAd38kU6 xrE+w+hMm9M33cCVVyqevKOVAQqI7fD8Xd2pIU/Pti/yQbIZDq4007V5ODH6cjHS TpWFCa2Z8t2RI5BZqttacohAqGomF7kw4RmPfB+n/IX6SCSARFet6m+6dhzlVE2a rZQSstsraZfmWyaFw04LwzfBWaJoMbmMMpps3iMdpkrrykcslev8eVPpBMQhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDY3MZKsqApc6TSl9x597es27s9gwHwYDVR0j BBgwFoAUhxtCNd/FbEgkFue7oZJWIJL/4FUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YTg5NmZkYy01NjM4LTQxZDItOGE5OS02OGNlODE2YmQzY2YvMC84NzFCNDIzNURG QzU2QzQ4MjQxNkU3QkJBMTkyNTYyMDkyRkZFMDU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODcxQjQyMzVERkM1NkM0ODI0MTZFN0JCQTE5MjU2MjA5MkZG RTA1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmE4OTZmZGMtNTYzOC00MWQyLThh OTktNjhjZTgxNmJkM2NmLzAvODcxQjQyMzVERkM1NkM0ODI0MTZFN0JCQTE5MjU2 MjA5MkZGRTA1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHcBgR33hJ0U5uol2ePfOIvW5Itvj6KIH7xg JvsZ8L8myaB0FzBC3zSiR8KLG/9eOGaO8/UZdsjt+Qu74hSIGfuGCwAZ3630R9d0 E4tnz2OR39Tu7ltHgSjIahzw2x4cPE9zAzuLCVKnD7VSg42KjzwMUBilHJJHCshw Y2J6gmOJX4WQ2h7+wHBoQ6mZLFfpzrkMXITOWwhxOKaD0XjxTsxENoLR3Wvt+hH/ XPEnrLbngep4Zeg4ePM9yWKmfjxxNcNVRGLFSEodf1lZMrTYH25amGGTTB34CXZX 6IeprM9tr+eefZ6zBYnpepy51HDAvs9kUhiT2MsYOAsnojx5k/Y= -----END CERTIFICATE-----Generated at Thu Mar 26 12:23:32 2026 by rpki-client