$ rpki-client -vvf repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft File: CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft (raw, json) Hash identifier: EWz2XfAViUnWzF4Nk74tC2w0UX9IofWYKFjhLe783KE= Subject key identifier: 68:27:4A:4C:5C:82:C3:DA:E1:BE:32:99:B1:33:BA:12:78:B2:E7:D0 Authority key identifier: CD:7C:26:7C:58:AE:2F:51:81:7F:AA:52:02:B0:BF:91:C8:4E:CE:D4 Certificate issuer: /CN=CD7C267C58AE2F51817FAA5202B0BF91C84ECED4 Certificate serial: 48B4221B688796DEEF19247EBFEE87AFF9AEFA87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft Manifest number: 03CB Signing time: Tue 24 Mar 2026 09:31:38 +0000 Manifest this update: Tue 24 Mar 2026 09:26:38 +0000 Manifest next update: Fri 27 Mar 2026 21:15:38 +0000 Files and hashes: 1: CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl (hash: 3DKLxn8bCbBhFY8+EW1WK+6gIb+k65jkXMoumu8D8rY=) 2: 3130332e3137302e3233342e302f32332d3234203d3e20313338383535.roa (hash: IxN9svLI+xbQZepLoYvevJgYJZXm9f4dHwY2r7LPXIw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 21:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:b4:22:1b:68:87:96:de:ef:19:24:7e:bf:ee:87:af:f9:ae:fa:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD7C267C58AE2F51817FAA5202B0BF91C84ECED4 Validity Not Before: Mar 24 09:26:38 2026 GMT Not After : Mar 27 21:15:38 2026 GMT Subject: CN=68274A4C5C82C3DAE1BE3299B133BA1278B2E7D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:dd:be:62:ac:ce:1a:d1:d8:12:ac:f2:82:f7: 86:05:bf:b3:bd:d4:12:96:df:0a:cb:8f:a3:02:70: f3:bd:cb:4d:32:0a:5c:5a:ec:0c:2b:8f:ee:e0:cc: 4f:23:30:f1:25:8c:20:89:32:d3:8e:ae:49:dc:44: 1e:8e:5e:30:17:88:9a:96:3b:5c:3a:e6:99:ea:92: 13:9b:92:6f:63:11:ab:74:68:f1:40:d3:44:46:ff: 26:fb:86:3d:39:6d:99:ae:b0:43:c7:56:3e:6b:ab: fd:e6:ed:67:2e:30:cc:4e:9b:a3:81:73:2c:af:62: 40:f3:ca:09:b7:ea:38:a4:8c:69:1a:0b:62:cc:bb: 9e:55:b0:de:ba:2d:b9:22:34:75:16:a9:93:c2:fe: 09:fe:7e:7b:35:6f:ee:62:4f:c4:8f:77:5e:0c:c0: 59:b5:16:0b:b1:43:86:8d:c1:a2:46:82:b1:4a:c5: 97:40:84:b1:6a:55:31:7b:6d:8e:31:ec:9a:15:a7: ae:ea:d8:3c:d1:96:20:f8:73:e0:67:f7:3d:f4:df: 14:bb:d9:a3:92:76:f4:3d:37:ec:c5:42:d1:ab:db: 1f:cd:ed:bb:57:99:60:72:ab:1e:23:62:d0:7f:81: 39:19:af:75:5f:ff:00:59:8f:33:95:0a:5b:d2:17: 6f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:27:4A:4C:5C:82:C3:DA:E1:BE:32:99:B1:33:BA:12:78:B2:E7:D0 X509v3 Authority Key Identifier: keyid:CD:7C:26:7C:58:AE:2F:51:81:7F:AA:52:02:B0:BF:91:C8:4E:CE:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:2b:70:4a:95:e8:59:2d:f8:4f:b9:1e:c1:95:54:07:79:30: 98:4c:fd:9c:4e:f6:d6:f3:90:e5:58:c3:df:4a:0c:78:60:81: 4c:82:22:30:57:58:0b:f0:fd:3c:aa:a4:90:b3:7a:fc:ad:12: d4:0d:a9:3f:f7:ed:aa:b8:77:c7:99:c6:dc:af:8f:9f:3f:10: 6d:3d:da:8f:1e:2b:f9:32:78:6a:84:c0:41:70:8b:13:3b:07: 45:69:62:9d:4e:92:a7:c5:17:2b:c2:1d:78:93:3b:51:6f:b1: 05:2f:0e:6d:50:4a:b2:96:13:71:29:83:54:0b:fe:a4:65:c6: 8f:39:f7:76:94:da:34:c4:17:b9:e7:36:0c:7f:66:19:8e:9e: 2d:ca:c7:20:45:4c:94:a0:4b:be:56:05:51:68:68:fe:8a:45: 4a:fd:e8:9e:86:f5:9c:5d:bb:e6:02:45:66:4f:71:3b:db:10: 67:b5:40:03:8d:15:1c:60:55:3b:76:79:29:26:15:10:7b:40: bf:87:d9:f5:9e:63:16:af:48:f2:bd:86:82:df:59:73:49:8c: be:f9:b2:d6:6c:eb:ea:26:48:74:df:c8:27:60:61:a4:0c:2c: 60:74:bf:87:20:9d:6f:e8:83:74:22:27:d8:ba:ca:6a:cf:c1: e1:6f:27:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSLQiG2iHlt7vGSR+v+6Hr/mu+ocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q3QzI2N0M1OEFFMkY1MTgxN0ZBQTUyMDJCMEJGOTFD ODRFQ0VENDAeFw0yNjAzMjQwOTI2MzhaFw0yNjAzMjcyMTE1MzhaMDMxMTAvBgNV BAMTKDY4Mjc0QTRDNUM4MkMzREFFMUJFMzI5OUIxMzNCQTEyNzhCMkU3RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN3b5irM4a0dgSrPKC94YFv7O9 1BKW3wrLj6MCcPO9y00yClxa7Awrj+7gzE8jMPEljCCJMtOOrkncRB6OXjAXiJqW O1w65pnqkhObkm9jEat0aPFA00RG/yb7hj05bZmusEPHVj5rq/3m7WcuMMxOm6OB cyyvYkDzygm36jikjGkaC2LMu55VsN66LbkiNHUWqZPC/gn+fns1b+5iT8SPd14M wFm1FguxQ4aNwaJGgrFKxZdAhLFqVTF7bY4x7JoVp67q2DzRliD4c+Bn9z303xS7 2aOSdvQ9N+zFQtGr2x/N7btXmWByqx4jYtB/gTkZr3Vf/wBZjzOVClvSF2/VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaCdKTFyCw9rhvjKZsTO6Eniy59AwHwYDVR0j BBgwFoAUzXwmfFiuL1GBf6pSArC/kchOztQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTQ0ZDU3Ni0zODE4LTQ5ZDYtODY2Mi1mOGRmODlhYjI4NjMvMC9DRDdDMjY3QzU4 QUUyRjUxODE3RkFBNTIwMkIwQkY5MUM4NEVDRUQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q3QzI2N0M1OEFFMkY1MTgxN0ZBQTUyMDJCMEJGOTFDODRF Q0VENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODE0NGQ1NzYtMzgxOC00OWQ2LTg2 NjItZjhkZjg5YWIyODYzLzAvQ0Q3QzI2N0M1OEFFMkY1MTgxN0ZBQTUyMDJCMEJG OTFDODRFQ0VENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEYrcEqV6Fkt+E+5HsGVVAd5MJhM/ZxO9tbz kOVYw99KDHhggUyCIjBXWAvw/TyqpJCzevytEtQNqT/37aq4d8eZxtyvj58/EG09 2o8eK/kyeGqEwEFwixM7B0VpYp1OkqfFFyvCHXiTO1FvsQUvDm1QSrKWE3Epg1QL /qRlxo8593aU2jTEF7nnNgx/ZhmOni3KxyBFTJSgS75WBVFoaP6KRUr96J6G9Zxd u+YCRWZPcTvbEGe1QAONFRxgVTt2eSkmFRB7QL+H2fWeYxavSPK9hoLfWXNJjL75 stZs6+omSHTfyCdgYaQMLGB0v4cgnW/og3QiJ9i6ymrPweFvJzc= -----END CERTIFICATE-----Generated at Thu Mar 26 22:11:23 2026 by rpki-client