$ rpki-client -vvf repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.mft File: D2EA420344F486935839E03DF1B3C237F295C2DE.mft (raw, json) Hash identifier: peuFqihkSqt5XKOg6xTXCLRMSqFo7PBxX9HQ1ceK0F4= Subject key identifier: 2F:8B:05:2B:A5:09:AC:8F:02:0C:9B:D6:CD:B7:C1:F3:05:DC:18:C3 Authority key identifier: D2:EA:42:03:44:F4:86:93:58:39:E0:3D:F1:B3:C2:37:F2:95:C2:DE Certificate issuer: /CN=D2EA420344F486935839E03DF1B3C237F295C2DE Certificate serial: 4810858B217A7BDACC39FDD200AB7BF21374EBB2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EA420344F486935839E03DF1B3C237F295C2DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.mft Manifest number: 052D Signing time: Tue 24 Mar 2026 20:22:01 +0000 Manifest this update: Tue 24 Mar 2026 20:17:01 +0000 Manifest next update: Sat 28 Mar 2026 02:06:01 +0000 Files and hashes: 1: 323430323a386163303a3a2f33322d3438203d3e20313337333230.roa (hash: oHAd0vkxRqWyozAmCufOZ+4unG6aZz/EmEBi8K1zkKg=) 2: D2EA420344F486935839E03DF1B3C237F295C2DE.crl (hash: sGVjzRi5eQmT53vxAwjq7h3fOqdabrgpbsIdxPkfrbQ=) 3: 3130332e3131302e3132302e302f32322d3234203d3e20313337333230.roa (hash: Z1/0hxtcuucuwACdWQq+JfghAHLR9fBRu9+nQ76ie1Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.crl rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EA420344F486935839E03DF1B3C237F295C2DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 02:06:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:10:85:8b:21:7a:7b:da:cc:39:fd:d2:00:ab:7b:f2:13:74:eb:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2EA420344F486935839E03DF1B3C237F295C2DE Validity Not Before: Mar 24 20:17:01 2026 GMT Not After : Mar 28 02:06:01 2026 GMT Subject: CN=2F8B052BA509AC8F020C9BD6CDB7C1F305DC18C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6f:43:41:9a:7c:b6:e2:8b:7a:15:01:fa:b7: 05:6e:f6:27:8f:52:c3:de:43:e0:46:dc:7d:8c:98: 9c:73:34:bb:ff:08:79:3d:5e:97:c4:59:7d:79:0c: bc:72:13:be:dc:e2:71:3d:74:46:7c:17:b3:aa:25: 0c:86:1c:00:ea:b9:8c:75:fa:56:cf:3d:78:9d:08: 14:aa:37:15:4d:46:bf:3c:35:44:b0:66:b6:b7:ff: d7:e2:45:b7:f7:39:76:fb:34:e2:20:20:95:b9:37: 5c:6e:ca:31:e9:41:f2:bc:f6:3b:fa:90:e9:36:72: f0:4f:42:a2:9e:d3:42:35:67:9a:16:09:5a:d9:d4: cd:65:90:3b:f8:c7:e5:67:8d:16:97:ca:9a:4a:8d: 75:ec:33:41:3d:a6:5a:16:cf:a0:d3:27:55:fb:2f: 3b:24:c4:07:00:f8:fe:7f:db:17:de:86:06:44:8a: 1a:eb:4f:06:29:1f:97:40:1a:a0:0c:6d:a4:7c:46: a2:9d:30:1f:79:99:e9:59:5c:5b:5d:e2:c9:28:2e: fd:bc:53:67:23:9c:91:52:13:32:c6:cc:78:3c:d0: 8e:b3:ec:97:58:ce:14:ea:02:cc:c9:cf:58:a0:f5: fa:f3:42:45:e5:3c:ba:0e:85:8b:dc:64:05:c7:4e: ec:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:8B:05:2B:A5:09:AC:8F:02:0C:9B:D6:CD:B7:C1:F3:05:DC:18:C3 X509v3 Authority Key Identifier: keyid:D2:EA:42:03:44:F4:86:93:58:39:E0:3D:F1:B3:C2:37:F2:95:C2:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EA420344F486935839E03DF1B3C237F295C2DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:13:3c:08:42:d5:1a:ce:97:cc:ae:ab:21:ad:32:06:30:f0: 99:8c:a6:bc:ea:b1:bc:0c:70:26:57:a6:b5:7a:24:83:47:3a: 63:93:4c:66:e2:b7:88:50:ca:18:9a:20:83:13:bd:59:2e:8d: 4a:6f:93:4a:f6:f7:fa:b0:6a:fb:8f:d0:45:03:82:6a:40:d2: 8b:5f:84:a3:be:4e:64:4c:f6:e1:49:c5:2b:4c:cb:fe:3f:7e: 57:dd:1a:ec:8c:7c:fd:98:ed:77:25:c0:0c:5b:37:60:90:b1: f3:b5:bd:ac:69:1f:cd:4b:d6:8b:54:3d:fc:b8:c2:26:ce:80: c6:c3:a4:49:27:a5:0c:a1:fb:b4:5f:66:04:f3:98:40:41:4d: 71:2d:f7:50:d4:c4:14:78:97:06:98:cd:9b:e0:ae:1d:41:24: 8d:a3:c5:9b:6d:c4:54:bc:32:90:d2:2d:f8:2c:18:f7:d0:02: 19:9f:e5:77:7b:e8:12:53:fb:11:fb:22:56:52:70:24:47:14: 31:77:23:7a:85:5e:dc:72:f1:7a:cb:ce:db:6b:30:80:c1:fe: c3:89:11:25:cf:35:ac:1a:2a:ef:76:4f:64:57:b7:62:52:a8: ac:1d:cc:a8:38:4d:da:c2:df:7c:33:e7:de:37:27:67:f8:0c: ae:e5:2e:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSBCFiyF6e9rMOf3SAKt78hN067IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJFQTQyMDM0NEY0ODY5MzU4MzlFMDNERjFCM0MyMzdG Mjk1QzJERTAeFw0yNjAzMjQyMDE3MDFaFw0yNjAzMjgwMjA2MDFaMDMxMTAvBgNV BAMTKDJGOEIwNTJCQTUwOUFDOEYwMjBDOUJENkNEQjdDMUYzMDVEQzE4QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFb0NBmny24ot6FQH6twVu9ieP UsPeQ+BG3H2MmJxzNLv/CHk9XpfEWX15DLxyE77c4nE9dEZ8F7OqJQyGHADquYx1 +lbPPXidCBSqNxVNRr88NUSwZra3/9fiRbf3OXb7NOIgIJW5N1xuyjHpQfK89jv6 kOk2cvBPQqKe00I1Z5oWCVrZ1M1lkDv4x+VnjRaXyppKjXXsM0E9ploWz6DTJ1X7 LzskxAcA+P5/2xfehgZEihrrTwYpH5dAGqAMbaR8RqKdMB95melZXFtd4skoLv28 U2cjnJFSEzLGzHg80I6z7JdYzhTqAszJz1ig9frzQkXlPLoOhYvcZAXHTuz5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL4sFK6UJrI8CDJvWzbfB8wXcGMMwHwYDVR0j BBgwFoAU0upCA0T0hpNYOeA98bPCN/KVwt4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDA4ODNmMy00NTdhLTRjMTQtOTU3Ny02N2UxNTBhMmIxMmEvMC9EMkVBNDIwMzQ0 RjQ4NjkzNTgzOUUwM0RGMUIzQzIzN0YyOTVDMkRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDJFQTQyMDM0NEY0ODY5MzU4MzlFMDNERjFCM0MyMzdGMjk1 QzJERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQwODgzZjMtNDU3YS00YzE0LTk1 NzctNjdlMTUwYTJiMTJhLzAvRDJFQTQyMDM0NEY0ODY5MzU4MzlFMDNERjFCM0My MzdGMjk1QzJERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIMTPAhC1RrOl8yuqyGtMgYw8JmMprzqsbwM cCZXprV6JINHOmOTTGbit4hQyhiaIIMTvVkujUpvk0r29/qwavuP0EUDgmpA0otf hKO+TmRM9uFJxStMy/4/flfdGuyMfP2Y7XclwAxbN2CQsfO1vaxpH81L1otUPfy4 wibOgMbDpEknpQyh+7RfZgTzmEBBTXEt91DUxBR4lwaYzZvgrh1BJI2jxZttxFS8 MpDSLfgsGPfQAhmf5Xd76BJT+xH7IlZScCRHFDF3I3qFXtxy8XrLzttrMIDB/sOJ ESXPNawaKu92T2RXt2JSqKwdzKg4TdrC33wz5943J2f4DK7lLvc= -----END CERTIFICATE-----Generated at Thu Mar 26 05:54:47 2026 by rpki-client