$ rpki-client -vvf repo-rpki.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/7300283D3A4EDE4059186CC16600EDDCCBAC0E02.mft File: 7300283D3A4EDE4059186CC16600EDDCCBAC0E02.mft (raw, json) Hash identifier: MT+0EIaFxnwFlm2q/C1t5VU5H+rTpz8YBZPHa6zIWFk= Subject key identifier: DB:A2:3F:10:EB:B7:B3:1D:05:35:C2:5B:79:39:EE:10:19:F6:45:67 Authority key identifier: 73:00:28:3D:3A:4E:DE:40:59:18:6C:C1:66:00:ED:DC:CB:AC:0E:02 Certificate issuer: /CN=7300283D3A4EDE4059186CC16600EDDCCBAC0E02 Certificate serial: 3B43AE85D14DB2DE414FF4C80B6DB48B90EBA8D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7300283D3A4EDE4059186CC16600EDDCCBAC0E02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/7300283D3A4EDE4059186CC16600EDDCCBAC0E02.mft Manifest number: 026D Signing time: Wed 25 Mar 2026 09:01:34 +0000 Manifest this update: Wed 25 Mar 2026 08:56:34 +0000 Manifest next update: Sat 28 Mar 2026 19:58:34 +0000 Files and hashes: 1: 7300283D3A4EDE4059186CC16600EDDCCBAC0E02.crl (hash: +euCTBHDSAHxoG4npiDti62Dqlt+syCKNPzfzzAktus=) 2: 3130332e3135332e36322e302f32332d3234203d3e20313430343537.roa (hash: +EA3Batk2+cDoDt3B8DKBPC6sg0gsW93JOANQkOsCAI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/7300283D3A4EDE4059186CC16600EDDCCBAC0E02.crl rsync://repo-rpki.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/7300283D3A4EDE4059186CC16600EDDCCBAC0E02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7300283D3A4EDE4059186CC16600EDDCCBAC0E02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 19:58:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:43:ae:85:d1:4d:b2:de:41:4f:f4:c8:0b:6d:b4:8b:90:eb:a8:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7300283D3A4EDE4059186CC16600EDDCCBAC0E02 Validity Not Before: Mar 25 08:56:34 2026 GMT Not After : Mar 28 19:58:34 2026 GMT Subject: CN=DBA23F10EBB7B31D0535C25B7939EE1019F64567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:65:0e:6e:df:c3:b5:a7:f3:27:d5:2e:e2:41: 4c:65:6f:e4:07:54:c8:10:94:0b:54:96:bc:3f:8c: 70:a4:96:61:99:8a:11:04:40:e2:ef:42:e8:3f:c2: cf:d7:94:21:e6:9f:b1:f8:9b:b6:3c:c8:2f:9d:e4: 5a:2c:6c:58:d7:ac:70:b3:a9:0a:36:71:55:f0:68: 3e:c6:8b:98:b4:cd:d9:f2:32:43:a3:db:ff:9d:de: e5:91:c6:55:8e:cc:51:08:db:21:92:de:fa:e8:80: 32:8f:9c:f7:b8:a6:88:ef:c0:9e:cc:99:a0:f2:b8: 3a:b7:2a:56:ae:0e:c2:3a:b5:79:67:5e:56:5e:91: 9a:a1:2c:1b:7e:22:69:22:f8:1e:c8:ce:22:8f:98: 9c:e9:6d:c7:7e:0d:ec:6b:5c:78:2e:49:2c:68:3a: 24:80:cf:bd:26:af:3c:35:2d:82:7e:7f:12:b9:ac: 13:fd:4c:88:aa:ba:7d:ab:41:46:57:c8:85:98:e6: 19:2b:d7:b0:98:81:61:7f:c1:f8:92:25:c0:b8:8e: ac:4f:9a:5c:51:d8:f5:28:a8:35:0a:f7:ec:c0:92: 41:b8:d2:fb:7a:46:20:7f:89:0b:70:bb:03:43:d9: 52:ca:fc:cb:51:fb:c6:4e:92:a4:5b:99:8f:28:32: e2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:A2:3F:10:EB:B7:B3:1D:05:35:C2:5B:79:39:EE:10:19:F6:45:67 X509v3 Authority Key Identifier: keyid:73:00:28:3D:3A:4E:DE:40:59:18:6C:C1:66:00:ED:DC:CB:AC:0E:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/7300283D3A4EDE4059186CC16600EDDCCBAC0E02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7300283D3A4EDE4059186CC16600EDDCCBAC0E02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/7300283D3A4EDE4059186CC16600EDDCCBAC0E02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:65:2b:eb:61:d6:04:8b:3f:73:e2:e7:15:1e:9a:77:a7:4e: 34:e6:52:7f:68:fd:31:e9:30:27:20:26:9c:f9:9a:c0:6d:2b: d7:1e:55:76:06:88:0a:92:5a:81:a9:95:6e:dd:81:74:4e:cb: 95:bc:9c:f9:c7:67:50:2d:f5:56:11:c8:b6:6b:34:b4:8c:3b: f3:a8:fd:97:87:4d:72:a6:54:ae:13:a3:28:c0:86:d9:17:db: 8b:e4:cd:3d:ad:2a:df:96:3f:f1:11:75:6f:99:57:41:fc:e1: c0:dc:1e:a9:de:7e:9a:b1:48:40:58:58:2f:89:2d:25:c3:72: 77:1b:37:77:03:8f:08:9b:d8:e8:c8:cb:42:9e:c6:97:88:b7: 42:f7:16:50:e2:80:62:76:f1:d1:6f:01:08:37:c9:94:ce:31: 7c:f3:ac:ab:70:f5:f9:87:d9:16:c1:6e:f3:58:5c:57:1b:92: 0d:70:8d:f6:4f:fc:d9:09:a0:28:93:ba:b0:e7:93:40:66:e2: 5b:c3:90:3e:bb:16:52:b2:01:61:9c:95:bd:15:5c:aa:9e:28: 94:cc:e5:d8:41:01:d5:eb:15:a4:c0:0d:5a:b4:ef:79:6b:32: 8a:14:14:77:e8:13:a9:2b:54:1d:66:67:7f:6b:36:da:36:bc: 00:92:00:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO0OuhdFNst5BT/TIC220i5DrqNgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzMwMDI4M0QzQTRFREU0MDU5MTg2Q0MxNjYwMEVEREND QkFDMEUwMjAeFw0yNjAzMjUwODU2MzRaFw0yNjAzMjgxOTU4MzRaMDMxMTAvBgNV BAMTKERCQTIzRjEwRUJCN0IzMUQwNTM1QzI1Qjc5MzlFRTEwMTlGNjQ1NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWZQ5u38O1p/Mn1S7iQUxlb+QH VMgQlAtUlrw/jHCklmGZihEEQOLvQug/ws/XlCHmn7H4m7Y8yC+d5FosbFjXrHCz qQo2cVXwaD7Gi5i0zdnyMkOj2/+d3uWRxlWOzFEI2yGS3vrogDKPnPe4pojvwJ7M maDyuDq3KlauDsI6tXlnXlZekZqhLBt+Imki+B7IziKPmJzpbcd+DexrXHguSSxo OiSAz70mrzw1LYJ+fxK5rBP9TIiqun2rQUZXyIWY5hkr17CYgWF/wfiSJcC4jqxP mlxR2PUoqDUK9+zAkkG40vt6RiB/iQtwuwND2VLK/MtR+8ZOkqRbmY8oMuLXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU26I/EOu3sx0FNcJbeTnuEBn2RWcwHwYDVR0j BBgwFoAUcwAoPTpO3kBZGGzBZgDt3MusDgIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZjY0NDBmNi02ZjVhLTRmNGItYTU5Ny1lNzRiNTQzZTc4NWIvMC83MzAwMjgzRDNB NEVERTQwNTkxODZDQzE2NjAwRUREQ0NCQUMwRTAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzMwMDI4M0QzQTRFREU0MDU5MTg2Q0MxNjYwMEVERENDQkFD MEUwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmY2NDQwZjYtNmY1YS00ZjRiLWE1 OTctZTc0YjU0M2U3ODViLzAvNzMwMDI4M0QzQTRFREU0MDU5MTg2Q0MxNjYwMEVE RENDQkFDMEUwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIdlK+th1gSLP3Pi5xUemnenTjTmUn9o/THp MCcgJpz5msBtK9ceVXYGiAqSWoGplW7dgXROy5W8nPnHZ1At9VYRyLZrNLSMO/Oo /ZeHTXKmVK4ToyjAhtkX24vkzT2tKt+WP/ERdW+ZV0H84cDcHqnefpqxSEBYWC+J LSXDcncbN3cDjwib2OjIy0KexpeIt0L3FlDigGJ28dFvAQg3yZTOMXzzrKtw9fmH 2RbBbvNYXFcbkg1wjfZP/NkJoCiTurDnk0Bm4lvDkD67FlKyAWGclb0VXKqeKJTM 5dhBAdXrFaTADVq073lrMooUFHfoE6krVB1mZ39rNto2vACSAOA= -----END CERTIFICATE-----Generated at Thu Mar 26 12:07:19 2026 by rpki-client