$ rpki-client -vvf repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft File: 0433DC81885AA9736198E4B13311013B6539B05D.mft (raw, json) Hash identifier: fmUei+n8fAUHWQ51oq3PurFDiMJtsi0Eexjz9OLgG+Y= Subject key identifier: 68:9B:2F:D0:6E:34:56:71:BC:1D:A6:53:25:10:25:83:5D:FF:9B:F4 Authority key identifier: 04:33:DC:81:88:5A:A9:73:61:98:E4:B1:33:11:01:3B:65:39:B0:5D Certificate issuer: /CN=0433DC81885AA9736198E4B13311013B6539B05D Certificate serial: 7B91F4F364A02E9F2137BC2A295AF3E21178CC56 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft Manifest number: 01DF Signing time: Wed 25 Mar 2026 13:31:45 +0000 Manifest this update: Wed 25 Mar 2026 13:26:45 +0000 Manifest next update: Sat 28 Mar 2026 19:33:45 +0000 Files and hashes: 1: 0433DC81885AA9736198E4B13311013B6539B05D.crl (hash: idlWhT+Zfamz8TFzSrZ2ZjhPuahjeJkhNN9lD7HR4Vo=) 2: 3130332e3138372e38372e302f32342d3234203d3e20313439373138.roa (hash: thtf3QdtQWO4Jp41Gq1rhKlrwJiL9JV02YjBNx9ONMU=) 3: 3130332e3138372e38362e302f32332d3234203d3e20313439373138.roa (hash: S+hQR8ube7o6csT9Rv22n/U07yHPrGgGLfGsncAQhYA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.crl rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 19:33:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:91:f4:f3:64:a0:2e:9f:21:37:bc:2a:29:5a:f3:e2:11:78:cc:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0433DC81885AA9736198E4B13311013B6539B05D Validity Not Before: Mar 25 13:26:45 2026 GMT Not After : Mar 28 19:33:45 2026 GMT Subject: CN=689B2FD06E345671BC1DA653251025835DFF9BF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:be:4a:c2:7f:90:47:23:4e:14:1b:3e:8a:cd: 90:dc:95:32:01:49:54:a0:4a:60:c2:7e:68:cb:26: d0:05:b2:f7:81:76:da:eb:5b:5d:7c:f4:57:ae:55: 74:6b:f3:11:f6:1c:f0:64:7d:ea:6d:13:07:25:58: c5:02:2c:1e:5d:0a:69:58:d4:99:75:a8:75:ff:90: da:e5:7a:09:e7:08:b1:9e:68:57:25:bc:6d:ee:30: ec:12:d9:6f:1c:8a:1b:8c:0e:f8:52:03:c0:20:6a: aa:01:f6:ec:72:af:91:f0:a4:ec:50:35:03:85:02: 90:1a:da:da:da:a7:1d:33:ea:fd:5f:90:28:c4:cf: 01:59:84:dd:25:fb:a2:29:73:5f:fe:da:e9:ef:d8: 1c:47:b1:e5:8f:dd:1d:09:a4:9d:0d:18:a7:4d:c6: 5f:76:8d:75:97:34:52:36:0e:d9:1c:15:aa:02:80: ac:53:b7:5f:05:7f:d3:4f:54:96:f1:47:75:93:e0: 89:53:b0:e5:91:6e:41:ad:f3:3a:dd:e1:4f:9e:63: 31:75:8b:d7:11:6f:f9:42:86:f3:92:97:98:88:f9: 06:fa:bf:42:44:8e:a7:5e:c0:cb:1b:88:bf:80:93: 16:c8:e8:9b:2e:12:89:cd:8a:df:25:6f:64:a6:15: a0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:9B:2F:D0:6E:34:56:71:BC:1D:A6:53:25:10:25:83:5D:FF:9B:F4 X509v3 Authority Key Identifier: keyid:04:33:DC:81:88:5A:A9:73:61:98:E4:B1:33:11:01:3B:65:39:B0:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:8b:9e:c8:00:a8:35:ec:6d:62:f3:46:4a:ff:19:a5:1f:5a: ec:13:56:be:80:84:45:77:94:42:26:79:04:76:a4:0b:e5:29: d6:fa:b9:a6:ad:81:bf:39:18:c5:cb:3a:08:ba:d5:05:f3:ce: e6:87:c6:96:29:24:fb:96:a9:5d:99:c9:01:d0:be:d3:e9:32: dc:20:f5:ab:d8:b2:71:72:c0:e9:68:48:4d:82:a2:77:d5:8d: 44:1f:fb:b4:c0:df:f7:95:c1:59:79:83:39:98:74:47:b4:64: 2a:04:3f:f2:08:b3:f1:aa:ca:7b:ea:a1:6b:e3:2d:d8:f1:fd: 4d:e8:d7:9e:fc:ce:29:3e:b2:9a:2c:70:54:00:3f:3f:8c:56: 58:d5:40:45:59:02:8c:0d:32:92:0b:ef:9b:27:04:67:01:66: 6d:9c:39:09:53:7c:40:6a:3f:c0:cd:5d:18:fd:02:62:42:91: 6b:5a:17:d7:c6:91:9d:5f:a8:ef:a5:90:93:d2:70:22:52:69: 00:4a:d4:d6:26:88:88:bd:b5:5d:68:03:c1:93:e1:f4:7d:0e: 28:e7:1c:91:10:ab:9b:fc:7b:95:f8:67:0d:11:9e:04:d2:38: 1a:68:74:d9:05:1c:7a:79:bf:cc:ed:8f:46:9a:6b:96:a4:cc: d4:e8:23:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe5H082SgLp8hN7wqKVrz4hF4zFYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQzM0RDODE4ODVBQTk3MzYxOThFNEIxMzMxMTAxM0I2 NTM5QjA1RDAeFw0yNjAzMjUxMzI2NDVaFw0yNjAzMjgxOTMzNDVaMDMxMTAvBgNV BAMTKDY4OUIyRkQwNkUzNDU2NzFCQzFEQTY1MzI1MTAyNTgzNURGRjlCRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrvkrCf5BHI04UGz6KzZDclTIB SVSgSmDCfmjLJtAFsveBdtrrW1189FeuVXRr8xH2HPBkfeptEwclWMUCLB5dCmlY 1Jl1qHX/kNrlegnnCLGeaFclvG3uMOwS2W8cihuMDvhSA8AgaqoB9uxyr5HwpOxQ NQOFApAa2trapx0z6v1fkCjEzwFZhN0l+6Ipc1/+2unv2BxHseWP3R0JpJ0NGKdN xl92jXWXNFI2DtkcFaoCgKxTt18Ff9NPVJbxR3WT4IlTsOWRbkGt8zrd4U+eYzF1 i9cRb/lChvOSl5iI+Qb6v0JEjqdewMsbiL+AkxbI6JsuEonNit8lb2SmFaD7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaJsv0G40VnG8HaZTJRAlg13/m/QwHwYDVR0j BBgwFoAUBDPcgYhaqXNhmOSxMxEBO2U5sF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjdlZjUxNS04NTY0LTQxZTgtOWQyMC0yZDMzZDQ1Y2NiZDYvMC8wNDMzREM4MTg4 NUFBOTczNjE5OEU0QjEzMzExMDEzQjY1MzlCMDVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDQzM0RDODE4ODVBQTk3MzYxOThFNEIxMzMxMTAxM0I2NTM5 QjA1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I3ZWY1MTUtODU2NC00MWU4LTlk MjAtMmQzM2Q0NWNjYmQ2LzAvMDQzM0RDODE4ODVBQTk3MzYxOThFNEIxMzMxMTAx M0I2NTM5QjA1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGeLnsgAqDXsbWLzRkr/GaUfWuwTVr6AhEV3 lEImeQR2pAvlKdb6uaatgb85GMXLOgi61QXzzuaHxpYpJPuWqV2ZyQHQvtPpMtwg 9avYsnFywOloSE2ConfVjUQf+7TA3/eVwVl5gzmYdEe0ZCoEP/IIs/GqynvqoWvj Ldjx/U3o1578zik+sposcFQAPz+MVljVQEVZAowNMpIL75snBGcBZm2cOQlTfEBq P8DNXRj9AmJCkWtaF9fGkZ1fqO+lkJPScCJSaQBK1NYmiIi9tV1oA8GT4fR9Dijn HJEQq5v8e5X4Zw0RngTSOBpodNkFHHp5v8ztj0aaa5akzNToI3g= -----END CERTIFICATE-----Generated at Thu Mar 26 10:05:42 2026 by rpki-client