$ rpki-client -vvf repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft File: 3128E543B078826F9B4F23328CA84782DE7AAE6D.mft (raw, json) Hash identifier: 94J7+8Flm86pw3aSwXnt8KTiI6hfzk1MZtgvi6FP7z4= Subject key identifier: 81:32:B5:81:11:4F:41:E0:C3:71:22:D3:D5:41:84:C7:6F:74:70:18 Authority key identifier: 31:28:E5:43:B0:78:82:6F:9B:4F:23:32:8C:A8:47:82:DE:7A:AE:6D Certificate issuer: /CN=3128E543B078826F9B4F23328CA84782DE7AAE6D Certificate serial: 5FC6FCEF0BCC495335488BE8789DA35D32063970 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3128E543B078826F9B4F23328CA84782DE7AAE6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft Manifest number: 055F Signing time: Wed 25 Mar 2026 04:20:03 +0000 Manifest this update: Wed 25 Mar 2026 04:15:03 +0000 Manifest next update: Sat 28 Mar 2026 10:26:03 +0000 Files and hashes: 1: 3130332e3132342e3131322e302f32342d3234203d3e20313331313131.roa (hash: xMhopN6RhUrQr0UoQBGVj4pnpruAcIyICHzqvwrwDho=) 2: 3128E543B078826F9B4F23328CA84782DE7AAE6D.crl (hash: ubr0nC8tUAoEVO+h1uUdAhjNX6QCqWiBBrlaRJdB21E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.crl rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3128E543B078826F9B4F23328CA84782DE7AAE6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 10:26:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:c6:fc:ef:0b:cc:49:53:35:48:8b:e8:78:9d:a3:5d:32:06:39:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3128E543B078826F9B4F23328CA84782DE7AAE6D Validity Not Before: Mar 25 04:15:03 2026 GMT Not After : Mar 28 10:26:03 2026 GMT Subject: CN=8132B581114F41E0C37122D3D54184C76F747018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d7:60:68:d6:43:33:4e:57:de:89:c9:c4:32: d0:aa:38:52:d8:43:11:8c:5b:79:ce:11:03:59:3a: 34:06:81:de:ea:5e:db:4f:f4:5c:44:a3:07:e5:60: 59:c4:89:c6:79:c6:a6:52:d6:aa:c2:84:cf:ca:53: 73:3b:af:ce:58:91:c2:ba:1a:b0:5b:ca:a0:29:de: 94:04:cf:3d:47:8f:dd:0a:b5:55:17:ca:6c:0b:54: 88:2c:d3:1a:f5:d3:24:59:29:31:dd:1a:ce:0e:3d: 1a:7f:0d:03:b7:a1:72:56:a6:67:84:9e:7e:1c:14: 79:b5:0f:7c:de:5d:19:20:28:60:bd:58:57:a2:6b: 57:f3:c9:4d:35:2a:5f:67:be:52:bf:e4:4a:52:8b: e8:72:f4:ba:85:98:26:d8:9f:50:d0:da:a3:ac:f2: 07:35:26:2b:21:e1:de:00:af:eb:74:05:5d:4c:9b: bc:4b:14:d8:de:e2:51:61:c0:9f:30:01:0a:e4:b9: 02:61:5f:80:58:6a:91:c6:97:66:20:2d:48:3e:b8: 7d:7b:45:c0:6c:89:1f:85:ef:0e:bb:84:85:e8:74: 0b:32:1c:51:bd:6e:5e:d1:a2:8c:18:a3:16:cb:95: c6:5a:df:59:d7:ff:96:ad:a1:17:50:b7:fd:c8:e2: 36:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:32:B5:81:11:4F:41:E0:C3:71:22:D3:D5:41:84:C7:6F:74:70:18 X509v3 Authority Key Identifier: keyid:31:28:E5:43:B0:78:82:6F:9B:4F:23:32:8C:A8:47:82:DE:7A:AE:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3128E543B078826F9B4F23328CA84782DE7AAE6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:8e:49:74:99:bd:00:43:cb:68:55:63:62:e0:4c:5d:46:85: 36:22:7c:3d:98:0e:f3:23:1d:e9:d3:02:af:8e:c1:76:5a:a3: 2b:22:b1:0e:ef:3f:7f:ca:e1:ed:44:c3:50:cd:49:c3:b1:48: 55:87:9c:71:72:22:ac:2a:9b:93:6b:53:6d:ef:85:4e:f1:98: 4b:ac:ca:27:19:43:eb:a8:12:b5:d1:08:8e:ae:e1:29:cc:6d: 7c:b3:a2:32:17:30:47:1e:e4:13:f8:18:60:25:c2:00:ae:9a: 01:78:1d:a8:48:a6:6f:87:c6:01:71:b7:1a:b8:e4:5f:c0:66: 1d:a4:0f:f9:e5:57:5d:27:e8:33:92:4a:a2:cb:a6:c0:1a:d6: 4d:45:17:9e:b0:61:33:16:3d:cc:de:aa:6b:26:03:53:31:59: 27:c1:38:a0:37:e3:fb:6f:8c:20:93:f2:9e:a3:80:92:9a:ca: 15:40:79:87:a4:ba:15:b7:cf:43:ec:de:f5:a2:b3:6f:5e:e4: b2:20:f4:42:a0:cc:cf:dc:8f:6b:0e:6d:69:d9:d5:37:20:c3: a7:06:29:71:b3:51:ae:24:93:11:71:58:d1:d3:fb:50:f7:87: 9e:5e:8d:6c:53:12:5b:9e:55:5b:a1:ca:43:27:9a:fb:cc:86: 6d:5b:f6:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX8b87wvMSVM1SIvoeJ2jXTIGOXAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzEyOEU1NDNCMDc4ODI2RjlCNEYyMzMyOENBODQ3ODJE RTdBQUU2RDAeFw0yNjAzMjUwNDE1MDNaFw0yNjAzMjgxMDI2MDNaMDMxMTAvBgNV BAMTKDgxMzJCNTgxMTE0RjQxRTBDMzcxMjJEM0Q1NDE4NEM3NkY3NDcwMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs12Bo1kMzTlfeicnEMtCqOFLY QxGMW3nOEQNZOjQGgd7qXttP9FxEowflYFnEicZ5xqZS1qrChM/KU3M7r85YkcK6 GrBbyqAp3pQEzz1Hj90KtVUXymwLVIgs0xr10yRZKTHdGs4OPRp/DQO3oXJWpmeE nn4cFHm1D3zeXRkgKGC9WFeia1fzyU01Kl9nvlK/5EpSi+hy9LqFmCbYn1DQ2qOs 8gc1Jish4d4Ar+t0BV1Mm7xLFNje4lFhwJ8wAQrkuQJhX4BYapHGl2YgLUg+uH17 RcBsiR+F7w67hIXodAsyHFG9bl7RoowYoxbLlcZa31nX/5atoRdQt/3I4jYVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgTK1gRFPQeDDcSLT1UGEx290cBgwHwYDVR0j BBgwFoAUMSjlQ7B4gm+bTyMyjKhHgt56rm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDdmOGY0NC0yNzdkLTQ1ZTEtYjIxMy0wNTExN2ZkZTNjYjAvMC8zMTI4RTU0M0Iw Nzg4MjZGOUI0RjIzMzI4Q0E4NDc4MkRFN0FBRTZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzEyOEU1NDNCMDc4ODI2RjlCNEYyMzMyOENBODQ3ODJERTdB QUU2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ3ZjhmNDQtMjc3ZC00NWUxLWIy MTMtMDUxMTdmZGUzY2IwLzAvMzEyOEU1NDNCMDc4ODI2RjlCNEYyMzMyOENBODQ3 ODJERTdBQUU2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE+OSXSZvQBDy2hVY2LgTF1GhTYifD2YDvMj HenTAq+OwXZaoysisQ7vP3/K4e1Ew1DNScOxSFWHnHFyIqwqm5NrU23vhU7xmEus yicZQ+uoErXRCI6u4SnMbXyzojIXMEce5BP4GGAlwgCumgF4HahIpm+HxgFxtxq4 5F/AZh2kD/nlV10n6DOSSqLLpsAa1k1FF56wYTMWPczeqmsmA1MxWSfBOKA34/tv jCCT8p6jgJKayhVAeYekuhW3z0Ps3vWis29e5LIg9EKgzM/cj2sObWnZ1Tcgw6cG KXGzUa4kkxFxWNHT+1D3h55ejWxTElueVVuhykMnmvvMhm1b9ms= -----END CERTIFICATE-----Generated at Thu Mar 26 18:30:23 2026 by rpki-client