$ rpki-client -vvf repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft File: D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft (raw, json) Hash identifier: oMX9r2avqS8AfBD6DV79GjNMPjyQ/O0SI5E3bfEJEmA= Subject key identifier: 27:B2:29:2F:EB:68:87:A2:25:6F:2E:0D:27:71:5B:BE:02:E8:CD:24 Authority key identifier: D4:69:93:7B:D0:30:57:5A:63:89:B1:FF:4C:DB:18:5E:FB:C4:B1:FA Certificate issuer: /CN=D469937BD030575A6389B1FF4CDB185EFBC4B1FA Certificate serial: 78C58F109ED569A4ACF29629D312560F63E62D92 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft Manifest number: 0243 Signing time: Wed 25 Mar 2026 03:10:52 +0000 Manifest this update: Wed 25 Mar 2026 03:05:52 +0000 Manifest next update: Sat 28 Mar 2026 05:16:52 +0000 Files and hashes: 1: 3130332e34312e3234382e302f32332d3233203d3e20313336383431.roa (hash: Q9gcXsnmhgdIFiAoT+4PlNJP+vGRpaSMes16ABWpf6E=) 2: 3130332e34312e3234382e302f32342d3234203d3e20313336383431.roa (hash: V3NQepAED/G4v92/Kw8wwvusDJ/oK/3dp6EJLA6gw0s=) 3: D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl (hash: ADUVRQLXXYPcF7ae+OPVqLXZA+FZi2Op+4pOdlVGpbo=) 4: 3130332e34312e3234392e302f32342d3234203d3e20313336383431.roa (hash: 7IiFMO+HhVDLxjHT2X4iJ4FHi1Re2KahShbn05EtlK4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 05:16:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:c5:8f:10:9e:d5:69:a4:ac:f2:96:29:d3:12:56:0f:63:e6:2d:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D469937BD030575A6389B1FF4CDB185EFBC4B1FA Validity Not Before: Mar 25 03:05:52 2026 GMT Not After : Mar 28 05:16:52 2026 GMT Subject: CN=27B2292FEB6887A2256F2E0D27715BBE02E8CD24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:58:db:27:7b:c7:3a:cf:f4:1c:3b:27:d5:d5: 13:d4:8b:20:3c:8c:dc:4b:02:b9:61:e2:35:ba:5b: ff:b4:7c:e6:58:83:18:84:2e:a3:0f:ba:17:2c:81: c0:6d:b0:3d:24:5f:ab:3c:a8:34:f2:f0:11:e7:9d: c3:03:f1:85:3d:25:71:45:1e:da:6f:99:68:ba:85: 70:50:6a:0d:e4:bf:c1:b1:f7:39:a5:54:ba:5a:74: 25:ed:2a:5b:82:01:91:bb:c1:92:55:df:99:55:35: c7:96:0a:21:30:5a:41:e5:df:64:26:34:0b:11:4d: a8:b7:29:b9:c8:45:8d:d5:5a:41:45:c0:c3:8f:2d: d5:7f:77:4b:be:0d:2f:84:57:4f:6c:17:50:5a:86: 0c:5c:30:35:88:eb:46:55:4e:dc:07:07:db:0d:15: 2e:a9:12:a5:f4:7e:e4:22:e0:2a:e9:8f:cb:39:51: 2b:b7:92:5f:0f:50:70:67:77:4a:f9:ad:06:cb:f8: 7d:63:18:70:1a:fe:c5:aa:ef:6b:93:17:af:c1:8f: 60:37:08:9c:f9:09:a8:31:7e:88:8b:b0:29:72:0d: 1f:28:8c:9d:f5:9f:a3:3b:ab:b9:84:68:8a:4f:76: f6:43:ed:ff:44:dd:1f:6c:d1:f0:44:ab:fc:4d:3e: 64:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:B2:29:2F:EB:68:87:A2:25:6F:2E:0D:27:71:5B:BE:02:E8:CD:24 X509v3 Authority Key Identifier: keyid:D4:69:93:7B:D0:30:57:5A:63:89:B1:FF:4C:DB:18:5E:FB:C4:B1:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:63:66:dc:bc:af:38:15:f9:45:d7:11:d9:88:8d:86:e5:cf: 49:46:54:b5:b9:2a:c0:5c:a9:4c:15:ef:57:b0:07:2e:47:8a: d3:70:b1:04:2b:b5:a7:9e:11:bb:0c:e8:1e:35:8e:66:d1:ce: b1:4a:55:ce:32:37:78:94:6f:ae:22:6f:f7:ca:54:db:29:df: bc:1e:99:86:ad:a4:0a:47:e6:46:f9:88:2f:31:e6:c9:dd:ab: 7d:d0:89:ad:76:af:cc:58:69:4b:6f:51:aa:4a:38:fb:91:3c: 65:34:39:0d:b1:a1:1f:2c:e0:05:b2:58:71:4a:bc:6a:31:a4: b4:85:12:cd:f3:9b:a5:6d:2f:8a:ad:cf:26:d0:a1:89:bc:db: c2:2e:c2:0b:68:aa:71:be:cb:c4:18:78:1b:08:7a:8d:72:9b: 97:34:46:e9:67:54:17:52:ac:06:36:07:5e:6e:70:17:85:a6: 4a:41:61:1c:e1:24:57:48:03:87:7c:95:4a:74:41:28:5c:c6: 3e:2a:c7:06:91:8f:2b:05:6e:b2:81:5e:ba:46:98:8f:0d:3d: e1:11:c5:e3:b0:09:00:88:fe:29:d1:6c:45:fd:1b:1c:85:db: 32:65:d2:b5:c8:d0:f9:21:8e:56:5b:64:5e:49:70:9d:3e:b8: 61:30:a5:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeMWPEJ7VaaSs8pYp0xJWD2PmLZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ2OTkzN0JEMDMwNTc1QTYzODlCMUZGNENEQjE4NUVG QkM0QjFGQTAeFw0yNjAzMjUwMzA1NTJaFw0yNjAzMjgwNTE2NTJaMDMxMTAvBgNV BAMTKDI3QjIyOTJGRUI2ODg3QTIyNTZGMkUwRDI3NzE1QkJFMDJFOENEMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBWNsne8c6z/QcOyfV1RPUiyA8 jNxLArlh4jW6W/+0fOZYgxiELqMPuhcsgcBtsD0kX6s8qDTy8BHnncMD8YU9JXFF HtpvmWi6hXBQag3kv8Gx9zmlVLpadCXtKluCAZG7wZJV35lVNceWCiEwWkHl32Qm NAsRTai3KbnIRY3VWkFFwMOPLdV/d0u+DS+EV09sF1BahgxcMDWI60ZVTtwHB9sN FS6pEqX0fuQi4Crpj8s5USu3kl8PUHBnd0r5rQbL+H1jGHAa/sWq72uTF6/Bj2A3 CJz5CagxfoiLsClyDR8ojJ31n6M7q7mEaIpPdvZD7f9E3R9s0fBEq/xNPmRdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ7IpL+toh6Ilby4NJ3FbvgLozSQwHwYDVR0j BBgwFoAU1GmTe9AwV1pjibH/TNsYXvvEsfowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NzUyNzdlOC03ZDBmLTQxODQtOWMyOC1hNjYzNWVmZWYyOWMvMC9ENDY5OTM3QkQw MzA1NzVBNjM4OUIxRkY0Q0RCMTg1RUZCQzRCMUZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDQ2OTkzN0JEMDMwNTc1QTYzODlCMUZGNENEQjE4NUVGQkM0 QjFGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzc1Mjc3ZTgtN2QwZi00MTg0LTlj MjgtYTY2MzVlZmVmMjljLzAvRDQ2OTkzN0JEMDMwNTc1QTYzODlCMUZGNENEQjE4 NUVGQkM0QjFGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJjZty8rzgV+UXXEdmIjYblz0lGVLW5KsBc qUwV71ewBy5HitNwsQQrtaeeEbsM6B41jmbRzrFKVc4yN3iUb64ib/fKVNsp37we mYatpApH5kb5iC8x5sndq33Qia12r8xYaUtvUapKOPuRPGU0OQ2xoR8s4AWyWHFK vGoxpLSFEs3zm6VtL4qtzybQoYm828IuwgtoqnG+y8QYeBsIeo1ym5c0RulnVBdS rAY2B15ucBeFpkpBYRzhJFdIA4d8lUp0QShcxj4qxwaRjysFbrKBXrpGmI8NPeER xeOwCQCI/inRbEX9GxyF2zJl0rXI0PkhjlZbZF5JcJ0+uGEwpWU= -----END CERTIFICATE-----Generated at Thu Mar 26 21:59:07 2026 by rpki-client