$ rpki-client -vvf repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft File: D681DB990E904642A480AE9546646329FF5D0162.mft (raw, json) Hash identifier: pgAd9Vz1LLFH9RDoCYTB9ijBzKvzY0lW0CH55Djy2Dk= Subject key identifier: 48:8F:0B:FF:6D:7C:95:12:CC:04:6A:E6:76:66:58:4C:2C:B0:6E:07 Authority key identifier: D6:81:DB:99:0E:90:46:42:A4:80:AE:95:46:64:63:29:FF:5D:01:62 Certificate issuer: /CN=D681DB990E904642A480AE9546646329FF5D0162 Certificate serial: 7280BD31BB22281D9A25D2870548AEC14FA7837A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D681DB990E904642A480AE9546646329FF5D0162.cer Subject info access: rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft Manifest number: 0299 Signing time: Thu 26 Mar 2026 12:11:58 +0000 Manifest this update: Thu 26 Mar 2026 12:06:58 +0000 Manifest next update: Sun 29 Mar 2026 21:39:58 +0000 Files and hashes: 1: 323430353a373763303a313030303a3a2f34382d3438203d3e20313339343439.roa (hash: XofjNzw1yGxwAcIlCRr0IcxzWXlCmMFb8avZjS5oKkg=) 2: 323430353a373763303a3a2f33322d3438203d3e20313339343439.roa (hash: tgk3NoI7Yl9Wh8OuLguFYhMn+bQWgfMhzVajW1+V2GA=) 3: D681DB990E904642A480AE9546646329FF5D0162.crl (hash: Gro8peOaF8mqxGhMMkZtbWPBiNZRxRCIFhNRoHd36ZY=) 4: 3130332e3134352e33342e302f32342d3234203d3e20313339343439.roa (hash: DosOLQ5CphwuAVjKNWs/TAbY57B9SEJF3bUwLYNSPv8=) 5: 3130332e3134352e33342e302f32332d3234203d3e20313339343439.roa (hash: 0zeOMcJLti5PO9rOACuwXhf403LkxSHV9NKFjogohdU=) 6: 3130332e3134352e33352e302f32342d3234203d3e20313339343439.roa (hash: LGFyuwFKevfReVHS/7A/KXwX6tZA3SLgHPvvyNbAtnI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.crl rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D681DB990E904642A480AE9546646329FF5D0162.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:80:bd:31:bb:22:28:1d:9a:25:d2:87:05:48:ae:c1:4f:a7:83:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D681DB990E904642A480AE9546646329FF5D0162 Validity Not Before: Mar 26 12:06:58 2026 GMT Not After : Mar 29 21:39:58 2026 GMT Subject: CN=488F0BFF6D7C9512CC046AE67666584C2CB06E07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fc:7a:48:8f:47:48:b7:70:8a:35:76:0f:01: cc:8e:f2:18:04:b2:f5:26:5f:7d:24:b0:af:36:0b: b4:90:a5:e7:62:6c:f7:94:c8:70:47:fd:e3:33:f0: 86:28:3b:73:c7:20:c4:22:b3:dd:cd:04:ff:72:71: a4:6a:9c:b1:d6:59:5e:2e:39:40:bc:cf:5b:9b:12: d0:ff:54:9e:a9:ac:eb:17:12:c9:c1:55:0e:55:88: 9a:30:b0:fc:e8:24:a7:79:64:d3:84:f4:7c:1b:72: b3:cb:5f:a5:5d:a6:37:bd:fd:16:f0:d7:cd:a1:60: ca:13:9a:4a:45:cc:b1:d8:4d:21:cf:6e:2d:0c:6f: 47:d8:90:1b:a6:b5:c3:69:ba:5d:11:31:a1:44:d8: 85:81:59:71:e1:c7:f0:2c:ac:ae:76:08:44:b5:69: cf:6e:cd:d6:ba:ef:14:1a:2f:e5:44:18:7d:77:0a: bc:76:ed:ca:99:18:cb:9e:29:1a:a0:94:4e:d3:25: 09:1a:b2:32:ab:05:1a:53:0e:8b:06:38:f5:63:58: 3e:66:13:1a:a2:be:74:e7:99:50:17:25:fd:03:24: 3d:52:04:e9:7b:45:df:81:6f:f2:ab:b3:81:4e:34: a9:23:48:f6:f2:46:aa:52:b0:b7:1a:8a:63:7b:2e: f7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:8F:0B:FF:6D:7C:95:12:CC:04:6A:E6:76:66:58:4C:2C:B0:6E:07 X509v3 Authority Key Identifier: keyid:D6:81:DB:99:0E:90:46:42:A4:80:AE:95:46:64:63:29:FF:5D:01:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D681DB990E904642A480AE9546646329FF5D0162.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:11:eb:ef:e0:ac:52:d8:70:8f:da:47:d4:c9:e5:3d:41:80: d0:40:e7:78:3a:b7:2f:1f:0c:e9:c0:ad:84:55:ac:32:f6:f6: f3:b6:96:d8:66:30:38:c2:43:32:f4:1b:5f:22:9d:e5:d3:bf: 05:22:5a:ba:d8:fa:51:25:32:f4:00:39:dc:95:fb:fa:58:6d: 9d:83:3c:d3:19:32:06:00:e4:3c:fe:aa:fb:7f:39:60:a8:10: f4:09:e3:d3:fd:f4:ed:5e:27:a6:6f:7d:33:f6:90:43:60:71: e9:03:e7:80:73:93:c4:61:9c:d2:08:72:ba:75:36:13:08:44: 86:5e:f0:ae:a5:0e:5e:41:cf:74:ed:fa:55:1c:60:b3:bb:a7: 1e:39:f8:2c:28:95:7b:6f:72:ea:d2:9a:02:35:5e:07:eb:fd: f5:c4:63:a4:5e:26:59:3d:22:63:d7:c1:6f:76:dd:df:2f:d5: f5:d2:9e:fe:6a:0b:41:92:ed:27:d6:b5:79:58:03:14:6f:c9: 07:2e:c9:df:d4:bc:c3:d9:d8:8e:c8:90:b6:a8:65:cc:3c:d9: 58:9f:a2:9f:62:fc:cb:81:70:6b:32:c7:f7:75:81:ab:be:ab: 94:1a:db:1b:b2:1a:54:c2:64:9d:cd:77:51:6a:18:9e:1b:77: d2:fe:0d:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcoC9MbsiKB2aJdKHBUiuwU+ng3owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4MURCOTkwRTkwNDY0MkE0ODBBRTk1NDY2NDYzMjlG RjVEMDE2MjAeFw0yNjAzMjYxMjA2NThaFw0yNjAzMjkyMTM5NThaMDMxMTAvBgNV BAMTKDQ4OEYwQkZGNkQ3Qzk1MTJDQzA0NkFFNjc2NjY1ODRDMkNCMDZFMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK/HpIj0dIt3CKNXYPAcyO8hgE svUmX30ksK82C7SQpedibPeUyHBH/eMz8IYoO3PHIMQis93NBP9ycaRqnLHWWV4u OUC8z1ubEtD/VJ6prOsXEsnBVQ5ViJowsPzoJKd5ZNOE9HwbcrPLX6Vdpje9/Rbw 182hYMoTmkpFzLHYTSHPbi0Mb0fYkBumtcNpul0RMaFE2IWBWXHhx/AsrK52CES1 ac9uzda67xQaL+VEGH13Crx27cqZGMueKRqglE7TJQkasjKrBRpTDosGOPVjWD5m ExqivnTnmVAXJf0DJD1SBOl7Rd+Bb/Krs4FONKkjSPbyRqpSsLcaimN7LvfpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSI8L/218lRLMBGrmdmZYTCywbgcwHwYDVR0j BBgwFoAU1oHbmQ6QRkKkgK6VRmRjKf9dAWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OWZiZTA4OC0wZDg0LTQ3ODktYjQwNS0yNWMyZTc2OTM3ZjYvMC9ENjgxREI5OTBF OTA0NjQyQTQ4MEFFOTU0NjY0NjMyOUZGNUQwMTYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDY4MURCOTkwRTkwNDY0MkE0ODBBRTk1NDY2NDYzMjlGRjVE MDE2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzlmYmUwODgtMGQ4NC00Nzg5LWI0 MDUtMjVjMmU3NjkzN2Y2LzAvRDY4MURCOTkwRTkwNDY0MkE0ODBBRTk1NDY2NDYz MjlGRjVEMDE2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABMR6+/grFLYcI/aR9TJ5T1BgNBA53g6ty8f DOnArYRVrDL29vO2lthmMDjCQzL0G18ineXTvwUiWrrY+lElMvQAOdyV+/pYbZ2D PNMZMgYA5Dz+qvt/OWCoEPQJ49P99O1eJ6ZvfTP2kENgcekD54Bzk8RhnNIIcrp1 NhMIRIZe8K6lDl5Bz3Tt+lUcYLO7px45+CwolXtvcurSmgI1Xgfr/fXEY6ReJlk9 ImPXwW923d8v1fXSnv5qC0GS7SfWtXlYAxRvyQcuyd/UvMPZ2I7IkLaoZcw82Vif op9i/MuBcGsyx/d1gau+q5Qa2xuyGlTCZJ3Nd1FqGJ4bd9L+DW0= -----END CERTIFICATE-----Generated at Thu Mar 26 17:36:31 2026 by rpki-client