$ rpki-client -vvf repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.mft File: 407919FF69A512DDAE7CCD48BE288F17073A5512.mft (raw, json) Hash identifier: dFe2Hg/ul8FjGg59+wCA9lpgkuOWPI5FaVT5FuJt3lc= Subject key identifier: 71:82:A2:36:E5:85:01:24:9A:73:06:A3:60:57:2D:EF:38:F3:75:09 Authority key identifier: 40:79:19:FF:69:A5:12:DD:AE:7C:CD:48:BE:28:8F:17:07:3A:55:12 Certificate issuer: /CN=407919FF69A512DDAE7CCD48BE288F17073A5512 Certificate serial: 3637957FCA34A663F667E7883BD7D1C69CA0936C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407919FF69A512DDAE7CCD48BE288F17073A5512.cer Subject info access: rsync://repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.mft Manifest number: 0107 Signing time: Tue 24 Mar 2026 20:22:00 +0000 Manifest this update: Tue 24 Mar 2026 20:17:00 +0000 Manifest next update: Fri 27 Mar 2026 23:24:00 +0000 Files and hashes: 1: 3130332e3132302e3233322e302f32342d3234203d3e20313337333834.roa (hash: rgW49bD9jOG05sHGGVXJ7K4U0Fs52fl5W3GSqo/JMxg=) 2: 407919FF69A512DDAE7CCD48BE288F17073A5512.crl (hash: QacbuiHB9OS5DvHM2Mtx4dgZN0R7quChj03Kdr2p7uM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.crl rsync://repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407919FF69A512DDAE7CCD48BE288F17073A5512.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 23:24:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:37:95:7f:ca:34:a6:63:f6:67:e7:88:3b:d7:d1:c6:9c:a0:93:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=407919FF69A512DDAE7CCD48BE288F17073A5512 Validity Not Before: Mar 24 20:17:00 2026 GMT Not After : Mar 27 23:24:00 2026 GMT Subject: CN=7182A236E58501249A7306A360572DEF38F37509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:60:0a:b1:05:f6:94:01:37:d6:6e:16:02:a5: 9a:eb:89:99:1e:5b:dd:d2:b6:69:ee:ba:97:27:32: 7f:61:36:c1:75:69:c5:90:c9:0a:27:98:c1:36:86: 38:0c:08:a3:d8:8d:bc:08:5e:bd:ef:46:22:cf:be: 29:eb:a8:73:10:7b:e4:5d:aa:f7:5a:2b:8a:c3:fb: 5a:05:7a:57:ef:c1:90:73:4b:b6:04:d7:0d:28:2d: 0e:ba:a3:01:ce:d9:54:e7:d7:a2:a2:88:1a:b4:ca: 54:49:f6:d8:04:6f:d8:b0:82:2e:e9:53:a6:c2:b5: bf:69:a5:78:97:84:e4:b1:11:7f:15:dd:88:25:d0: 5d:65:43:0c:75:52:a2:7b:b3:64:5d:10:10:e8:2a: c2:dd:c4:62:c8:4b:59:a0:d5:dc:d7:80:af:d4:2e: fc:38:df:f5:6c:76:0c:b9:ea:ca:86:10:7b:22:f2: c3:b6:3a:43:88:20:02:8c:6e:8e:9a:30:6b:76:5d: 77:20:ca:c3:61:ab:49:30:40:4b:5f:44:37:fa:98: b7:7a:a1:a2:08:88:b5:92:62:8b:de:0e:11:97:44: b6:58:70:e6:1d:76:5b:71:e9:7a:54:46:f5:b6:2d: a6:cb:9b:01:64:07:1c:fa:81:fa:0d:30:f6:b8:b1: 4f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:82:A2:36:E5:85:01:24:9A:73:06:A3:60:57:2D:EF:38:F3:75:09 X509v3 Authority Key Identifier: keyid:40:79:19:FF:69:A5:12:DD:AE:7C:CD:48:BE:28:8F:17:07:3A:55:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407919FF69A512DDAE7CCD48BE288F17073A5512.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:27:40:81:d2:ea:64:df:56:ab:59:76:f9:45:7d:02:38:64: dd:df:5f:0f:1c:21:6f:b3:75:a6:f7:95:13:84:3f:92:49:1a: 68:68:30:c6:88:75:62:a3:fa:21:1f:af:0d:78:fc:9b:9f:97: 35:fe:9b:69:3e:5a:15:3b:ae:65:39:fb:c3:cf:5e:57:e8:42: 13:40:c2:a6:50:df:a8:f0:a4:f9:bc:ae:01:c7:db:69:d2:4e: 0c:19:8c:da:bd:d8:d9:6d:41:10:b7:11:1d:b1:73:5b:f5:75: 24:12:c2:b3:93:82:f4:c3:00:e5:4f:ca:97:9c:4e:22:cf:d3: ed:e2:7f:b4:10:ed:89:36:8a:84:43:76:6b:5d:9a:6b:da:35: c9:ab:c3:b6:89:4c:37:39:30:eb:42:c2:b1:11:e4:28:47:a3: 0a:ad:c6:0b:6e:38:09:9e:a1:e1:2c:98:55:a8:94:e0:bf:e0: 0e:2c:bb:66:85:f7:50:77:f1:ce:17:9a:e5:fe:12:f0:6a:ae: 0a:79:ce:25:03:aa:dd:03:c8:9c:14:37:e8:3a:b5:a2:ed:1b: 71:a9:cc:84:2b:34:a0:1b:de:b4:1e:41:f6:1c:c9:c2:83:38: c5:e4:c5:e7:52:87:a7:f1:90:cd:78:dd:49:8a:18:8b:75:d8: 4e:b1:db:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNjeVf8o0pmP2Z+eIO9fRxpygk2wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA3OTE5RkY2OUE1MTJEREFFN0NDRDQ4QkUyODhGMTcw NzNBNTUxMjAeFw0yNjAzMjQyMDE3MDBaFw0yNjAzMjcyMzI0MDBaMDMxMTAvBgNV BAMTKDcxODJBMjM2RTU4NTAxMjQ5QTczMDZBMzYwNTcyREVGMzhGMzc1MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsYAqxBfaUATfWbhYCpZrriZke W93StmnuupcnMn9hNsF1acWQyQonmME2hjgMCKPYjbwIXr3vRiLPvinrqHMQe+Rd qvdaK4rD+1oFelfvwZBzS7YE1w0oLQ66owHO2VTn16KiiBq0ylRJ9tgEb9iwgi7p U6bCtb9ppXiXhOSxEX8V3Ygl0F1lQwx1UqJ7s2RdEBDoKsLdxGLIS1mg1dzXgK/U Lvw43/Vsdgy56sqGEHsi8sO2OkOIIAKMbo6aMGt2XXcgysNhq0kwQEtfRDf6mLd6 oaIIiLWSYoveDhGXRLZYcOYddltx6XpURvW2LabLmwFkBxz6gfoNMPa4sU+LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcYKiNuWFASSacwajYFct7zjzdQkwHwYDVR0j BBgwFoAUQHkZ/2mlEt2ufM1IviiPFwc6VRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MmMwMGY3OS00OWViLTQ1MjUtOTAyNi1hMjM4ZmY0NDgwNzAvMC80MDc5MTlGRjY5 QTUxMkREQUU3Q0NENDhCRTI4OEYxNzA3M0E1NTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA3OTE5RkY2OUE1MTJEREFFN0NDRDQ4QkUyODhGMTcwNzNB NTUxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzJjMDBmNzktNDllYi00NTI1LTkw MjYtYTIzOGZmNDQ4MDcwLzAvNDA3OTE5RkY2OUE1MTJEREFFN0NDRDQ4QkUyODhG MTcwNzNBNTUxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADMnQIHS6mTfVqtZdvlFfQI4ZN3fXw8cIW+z dab3lROEP5JJGmhoMMaIdWKj+iEfrw14/JuflzX+m2k+WhU7rmU5+8PPXlfoQhNA wqZQ36jwpPm8rgHH22nSTgwZjNq92NltQRC3ER2xc1v1dSQSwrOTgvTDAOVPypec TiLP0+3if7QQ7Yk2ioRDdmtdmmvaNcmrw7aJTDc5MOtCwrER5ChHowqtxgtuOAme oeEsmFWolOC/4A4su2aF91B38c4XmuX+EvBqrgp5ziUDqt0DyJwUN+g6taLtG3Gp zIQrNKAb3rQeQfYcycKDOMXkxedSh6fxkM143UmKGIt12E6x24w= -----END CERTIFICATE-----Generated at Thu Mar 26 15:24:52 2026 by rpki-client