$ rpki-client -vvf repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft File: D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft (raw, json) Hash identifier: 8HfNtKAa20GAY0VbjDkCLrAPbe49whqQPH/9lbW6zeM= Subject key identifier: 56:12:E8:49:B3:2B:1D:FC:F0:3F:97:A8:86:29:D4:C2:4D:51:AA:E0 Authority key identifier: D3:91:7D:15:F8:73:32:C5:0B:FC:11:65:A8:82:EF:EA:7D:8B:61:62 Certificate issuer: /CN=D3917D15F87332C50BFC1165A882EFEA7D8B6162 Certificate serial: 6708087A06D7458A184321A7EA4044005925FAD8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3917D15F87332C50BFC1165A882EFEA7D8B6162.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft Manifest number: 0152 Signing time: Thu 26 Mar 2026 08:02:37 +0000 Manifest this update: Thu 26 Mar 2026 07:57:37 +0000 Manifest next update: Sun 29 Mar 2026 09:55:37 +0000 Files and hashes: 1: D3917D15F87332C50BFC1165A882EFEA7D8B6162.crl (hash: MRKTvXKIQJLath4duC+YY1KYwOwVLU1Vriy2H2vIpWY=) 2: 3130332e31352e3235312e302f32342d3234203d3e20313331373337.roa (hash: 7Oi5j12RVi3qx9bBfzHfHE0vUABfTWWODw/d5Ig7GBE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.crl rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3917D15F87332C50BFC1165A882EFEA7D8B6162.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 09:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:08:08:7a:06:d7:45:8a:18:43:21:a7:ea:40:44:00:59:25:fa:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3917D15F87332C50BFC1165A882EFEA7D8B6162 Validity Not Before: Mar 26 07:57:37 2026 GMT Not After : Mar 29 09:55:37 2026 GMT Subject: CN=5612E849B32B1DFCF03F97A88629D4C24D51AAE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:32:ec:40:ed:b3:7d:15:03:f5:68:aa:b3:56: d5:a0:ad:91:08:a2:6b:86:19:3c:eb:d9:b5:c6:9e: f4:5e:2b:8c:3e:c8:62:f0:33:c1:e2:5f:c6:1f:c3: 67:28:96:f5:bc:7f:35:d0:0c:02:01:93:e1:58:c7: 0d:0c:f5:0d:52:66:ca:fc:b0:e3:42:fc:c1:e6:cc: 2f:ec:e5:75:80:ce:c2:cf:90:45:1c:79:98:92:24: 30:29:f5:80:54:4d:6e:af:6b:ad:d8:61:19:85:ad: de:c2:e1:8a:c4:31:77:88:d2:14:36:3d:97:b0:56: 57:0a:f1:2e:45:e9:2d:16:a9:56:9d:73:b9:ca:02: 30:6f:5f:1d:a3:a3:8a:c3:9e:e6:c5:47:c0:5f:74: e8:9d:8f:d7:69:b8:e0:41:3c:7f:f6:33:7e:81:03: 2a:ca:39:a1:14:e9:33:b7:c8:00:9f:32:7f:0b:83: d1:0f:b9:bb:7f:6e:69:52:19:88:45:c9:a3:a7:38: 68:8b:11:d0:60:25:8b:49:d4:d3:68:ff:a1:d5:58: 4a:35:ab:11:56:c2:3f:63:72:4a:24:09:04:81:39: 6e:cb:72:49:dd:36:ff:1b:63:1c:cb:11:49:23:a8: 0e:80:ce:47:12:78:80:a9:16:1f:58:2e:bf:a8:94: 92:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:12:E8:49:B3:2B:1D:FC:F0:3F:97:A8:86:29:D4:C2:4D:51:AA:E0 X509v3 Authority Key Identifier: keyid:D3:91:7D:15:F8:73:32:C5:0B:FC:11:65:A8:82:EF:EA:7D:8B:61:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3917D15F87332C50BFC1165A882EFEA7D8B6162.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:8c:da:82:ce:93:58:d6:b2:37:cb:06:ee:bb:80:53:ca:a6: f5:b4:bb:20:39:fb:28:5a:08:08:9a:01:a4:02:0a:0d:0b:dc: 3d:41:16:9c:ce:1f:9e:45:33:8b:85:65:83:b1:42:76:1a:14: 9f:a2:44:0a:90:b9:c2:04:f3:48:21:1f:d9:5f:53:e6:df:99: 05:a0:65:4b:b6:1a:4b:0b:7b:21:03:7f:41:8f:87:21:9c:52: 35:12:e0:84:37:98:cd:19:58:fa:d8:59:6e:83:82:44:d3:39: 57:fc:1b:ab:2d:9f:73:7d:3f:4a:be:30:ef:9f:51:7a:3c:67: e0:34:99:8f:76:8a:06:a6:96:e3:94:b7:2f:b1:d0:b9:37:b9: 98:72:80:bd:58:e9:8d:ff:aa:3f:ff:6a:82:1e:8d:f7:89:ca: 7f:2d:c9:ef:b6:a7:88:e0:66:cc:f9:80:b7:33:d0:d9:cd:fc: 5d:18:81:81:4a:17:af:eb:20:e2:c7:1c:7a:78:26:ba:d3:42: 22:7f:b9:6e:b3:4c:d5:3e:dc:de:98:18:da:8d:1d:90:69:18: 12:1d:d4:d5:a1:83:78:12:c9:cd:eb:70:cd:eb:c1:bb:08:ff: 8c:d7:f5:aa:fb:e4:e0:02:5f:ee:a3:73:e7:70:34:df:4c:45: 0e:f8:0e:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZwgIegbXRYoYQyGn6kBEAFkl+tgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM5MTdEMTVGODczMzJDNTBCRkMxMTY1QTg4MkVGRUE3 RDhCNjE2MjAeFw0yNjAzMjYwNzU3MzdaFw0yNjAzMjkwOTU1MzdaMDMxMTAvBgNV BAMTKDU2MTJFODQ5QjMyQjFERkNGMDNGOTdBODg2MjlENEMyNEQ1MUFBRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGMuxA7bN9FQP1aKqzVtWgrZEI omuGGTzr2bXGnvReK4w+yGLwM8HiX8Yfw2colvW8fzXQDAIBk+FYxw0M9Q1SZsr8 sONC/MHmzC/s5XWAzsLPkEUceZiSJDAp9YBUTW6va63YYRmFrd7C4YrEMXeI0hQ2 PZewVlcK8S5F6S0WqVadc7nKAjBvXx2jo4rDnubFR8BfdOidj9dpuOBBPH/2M36B AyrKOaEU6TO3yACfMn8Lg9EPubt/bmlSGYhFyaOnOGiLEdBgJYtJ1NNo/6HVWEo1 qxFWwj9jckokCQSBOW7LckndNv8bYxzLEUkjqA6AzkcSeICpFh9YLr+olJIbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVhLoSbMrHfzwP5eohinUwk1RquAwHwYDVR0j BBgwFoAU05F9FfhzMsUL/BFlqILv6n2LYWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 Y2RmZDhlYi04YTQwLTRlOGItYTllMC05Mjc4Y2QwNGZhNDMvMC9EMzkxN0QxNUY4 NzMzMkM1MEJGQzExNjVBODgyRUZFQTdEOEI2MTYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDM5MTdEMTVGODczMzJDNTBCRkMxMTY1QTg4MkVGRUE3RDhC NjE2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmNkZmQ4ZWItOGE0MC00ZThiLWE5 ZTAtOTI3OGNkMDRmYTQzLzAvRDM5MTdEMTVGODczMzJDNTBCRkMxMTY1QTg4MkVG RUE3RDhCNjE2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACWM2oLOk1jWsjfLBu67gFPKpvW0uyA5+yha CAiaAaQCCg0L3D1BFpzOH55FM4uFZYOxQnYaFJ+iRAqQucIE80ghH9lfU+bfmQWg ZUu2GksLeyEDf0GPhyGcUjUS4IQ3mM0ZWPrYWW6DgkTTOVf8G6stn3N9P0q+MO+f UXo8Z+A0mY92igamluOUty+x0Lk3uZhygL1Y6Y3/qj//aoIejfeJyn8tye+2p4jg Zsz5gLcz0NnN/F0YgYFKF6/rIOLHHHp4JrrTQiJ/uW6zTNU+3N6YGNqNHZBpGBId 1NWhg3gSyc3rcM3rwbsI/4zX9ar75OACX+6jc+dwNN9MRQ74Dt0= -----END CERTIFICATE-----Generated at Thu Mar 26 14:22:55 2026 by rpki-client