$ rpki-client -vvf repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft File: D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft (raw, json) Hash identifier: sqxBMnRn6vz29cSPZYiMlSfkGTVJds8MhZWJ4oIn9tg= Subject key identifier: 57:B3:9D:C0:FA:EC:8D:45:DD:77:EA:A2:D2:2F:63:64:FE:11:96:D1 Authority key identifier: D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28 Certificate issuer: /CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428 Certificate serial: 196F24873C540EF08B0F32933FFCC795D74CFEC7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft Manifest number: 039D Signing time: Thu 26 Mar 2026 06:21:06 +0000 Manifest this update: Thu 26 Mar 2026 06:16:06 +0000 Manifest next update: Sun 29 Mar 2026 16:23:06 +0000 Files and hashes: 1: 3130332e38322e3138302e302f32332d3233203d3e203535303032.roa (hash: +FTF4nfRYC5wsN7EuNxSdS7IKhjhi49gS7F0z0AapdE=) 2: 3130332e38322e3138312e302f32342d3234203d3e20313336303631.roa (hash: JBTT95tgZh/X/QugtDrHY7+xX4nEcgcpicxDVZKVxRA=) 3: 3130332e38322e3138332e302f32342d3234203d3e203535303032.roa (hash: fgpsoyfDzLyMcnx59ChelAzY0mutvwsLTeGKdYegbvA=) 4: 3130332e38322e3138332e302f32342d3234203d3e20313336303631.roa (hash: jcnGTwMxragJZygMI7x8GrOzTkyTrpwEdMq5rorWZ5w=) 5: 3130332e38322e3138322e302f32342d3234203d3e20313336303631.roa (hash: WjIjT3NjVVlR5hMapPhqI5pb0J0MFGcIoHXnqSGNGKM=) 6: 3130332e38322e3138302e302f32342d3234203d3e20313336303631.roa (hash: J0EZhqosWRvlsFynFqUSuIzOBFwrUDGcW8i8aa6gdz0=) 7: D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl (hash: pBmOVsBcJ1DK+2uIKKH/mBzZz2Ivp4ZKXH0/HfyVkkU=) 8: 3130332e38322e3138302e302f32332d3233203d3e20313336303631.roa (hash: aFm1cy3NmwA8t2HY8uThbjC+zS/PKRo7I8s9/bpxDts=) 9: 3130332e38322e3138322e302f32342d3234203d3e203535303032.roa (hash: TOlmToT6ArG31254ugnepFlJm7GRal9sFalZQtBB9ZU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:23:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:6f:24:87:3c:54:0e:f0:8b:0f:32:93:3f:fc:c7:95:d7:4c:fe:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428 Validity Not Before: Mar 26 06:16:06 2026 GMT Not After : Mar 29 16:23:06 2026 GMT Subject: CN=57B39DC0FAEC8D45DD77EAA2D22F6364FE1196D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:68:b1:98:58:6b:7b:33:68:4e:b0:b9:28:a3: 2f:9c:13:07:03:06:8f:30:4e:47:5e:9f:6f:a2:ee: 5e:b3:50:1d:a0:bf:8b:f7:1e:dc:f8:55:ab:d6:21: c3:12:61:29:6d:4c:e5:91:49:a5:af:69:c4:bb:44: 13:29:c5:38:ee:fb:07:58:93:ec:06:6e:c7:ce:f7: e2:d3:16:d5:f5:69:18:fb:c5:c4:5f:52:53:e7:93: f0:eb:b3:b9:37:88:3a:9a:d0:d2:01:63:1e:58:ff: fc:d7:95:d5:d2:f7:11:f9:f9:96:37:9f:50:e5:03: fa:d9:25:a9:0d:3b:b5:c1:c7:2d:ba:cb:5d:6c:d4: 38:55:3e:d3:00:3c:a3:1c:ad:e4:c9:fa:aa:b6:9f: 50:cd:1f:ee:10:e1:24:61:a3:81:92:2a:d2:ae:bb: d7:84:6d:4a:91:da:82:1b:34:35:9a:73:40:7d:de: 4d:65:c0:e7:c5:d1:7c:cf:4c:f6:1d:35:0e:a0:d6: 27:53:ae:e0:05:b0:fd:cb:a1:62:c5:92:b2:c0:d5: cd:71:a2:3d:10:05:c4:47:85:c2:0a:2e:92:30:1a: 92:a6:60:dc:41:0a:49:a4:33:c2:68:77:c1:bc:fa: f5:ba:2a:c7:8f:c3:1d:a6:be:87:79:34:fd:50:cc: c8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B3:9D:C0:FA:EC:8D:45:DD:77:EA:A2:D2:2F:63:64:FE:11:96:D1 X509v3 Authority Key Identifier: keyid:D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:ba:d2:1f:75:b1:c1:9c:14:ff:04:37:d8:b3:2f:08:aa:ea: a1:0a:b8:78:48:88:4f:fd:04:58:50:d7:31:56:66:5e:74:6e: bd:39:0a:e3:d3:c0:fb:30:e4:1d:5b:9a:e5:d2:aa:0b:2d:0f: 8d:79:99:de:d4:9b:32:2d:01:6e:62:e7:28:4e:f9:20:48:b9: e1:92:cd:b9:24:72:1c:f5:6c:e6:12:a5:8f:fb:d9:37:90:5e: c4:7e:ef:0a:be:43:9f:62:8b:1a:b9:ae:26:18:b7:55:f7:96: ab:69:d3:ea:ab:bf:7c:0c:76:f0:a3:da:c1:22:77:d8:3b:b1: 7d:ff:a6:29:d8:53:94:d6:a2:ba:36:90:ec:75:2b:b0:45:f4: 19:fa:7c:74:82:44:11:73:94:60:b9:d3:1b:58:49:96:68:93: 35:18:00:e4:c0:43:7b:27:df:50:f1:c4:49:07:1f:9a:da:90: d6:99:be:3d:75:16:b5:2c:26:08:3b:23:5f:16:4c:1c:ee:ac: 04:ee:f5:ac:ad:0b:61:50:9a:5f:f4:64:4e:82:25:ad:29:96: 83:cf:78:17:c3:b4:99:1f:f0:88:76:a6:15:76:ea:5e:26:58: 8e:92:56:69:aa:1d:53:68:d5:b9:4a:9c:0e:dc:7b:98:58:42: a4:80:20:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGW8khzxUDvCLDzKTP/zHlddM/scwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5MkZD QjNBMzQyODAeFw0yNjAzMjYwNjE2MDZaFw0yNjAzMjkxNjIzMDZaMDMxMTAvBgNV BAMTKDU3QjM5REMwRkFFQzhENDVERDc3RUFBMkQyMkY2MzY0RkUxMTk2RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmaLGYWGt7M2hOsLkooy+cEwcD Bo8wTkden2+i7l6zUB2gv4v3Htz4VavWIcMSYSltTOWRSaWvacS7RBMpxTju+wdY k+wGbsfO9+LTFtX1aRj7xcRfUlPnk/Drs7k3iDqa0NIBYx5Y//zXldXS9xH5+ZY3 n1DlA/rZJakNO7XBxy26y11s1DhVPtMAPKMcreTJ+qq2n1DNH+4Q4SRho4GSKtKu u9eEbUqR2oIbNDWac0B93k1lwOfF0XzPTPYdNQ6g1idTruAFsP3LoWLFkrLA1c1x oj0QBcRHhcIKLpIwGpKmYNxBCkmkM8Jod8G8+vW6KsePwx2mvod5NP1QzMh5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV7OdwPrsjUXdd+qi0i9jZP4RltEwHwYDVR0j BBgwFoAU0c5O+RDKt4TvKT0m2YOpL8s6NCgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDc1OGYxNS01ZGU4LTQ4N2QtOTk0NS1jM2VhMjA3ZTQ0YWQvMC9EMUNFNEVGOTEw Q0FCNzg0RUYyOTNEMjZEOTgzQTkyRkNCM0EzNDI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5MkZDQjNB MzQyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODA3NThmMTUtNWRlOC00ODdkLTk5 NDUtYzNlYTIwN2U0NGFkLzAvRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5 MkZDQjNBMzQyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFO60h91scGcFP8EN9izLwiq6qEKuHhIiE/9 BFhQ1zFWZl50br05CuPTwPsw5B1bmuXSqgstD415md7UmzItAW5i5yhO+SBIueGS zbkkchz1bOYSpY/72TeQXsR+7wq+Q59iixq5riYYt1X3lqtp0+qrv3wMdvCj2sEi d9g7sX3/pinYU5TWoro2kOx1K7BF9Bn6fHSCRBFzlGC50xtYSZZokzUYAOTAQ3sn 31DxxEkHH5rakNaZvj11FrUsJgg7I18WTBzurATu9aytC2FQml/0ZE6CJa0ploPP eBfDtJkf8Ih2phV26l4mWI6SVmmqHVNo1blKnA7ce5hYQqSAIOQ= -----END CERTIFICATE-----Generated at Thu Mar 26 15:43:19 2026 by rpki-client