$ rpki-client -vvf repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.mft File: C8175E7E9E15E565FE697292A37E14BFE067CAF7.mft (raw, json) Hash identifier: xGKRRLynZi7oL/BlmX/BNM88+gDjFpIzqhe75T9UFfk= Subject key identifier: 6C:09:EF:8D:47:B2:29:7C:04:7F:A0:DF:B6:86:11:18:09:9C:A4:9C Authority key identifier: C8:17:5E:7E:9E:15:E5:65:FE:69:72:92:A3:7E:14:BF:E0:67:CA:F7 Certificate issuer: /CN=C8175E7E9E15E565FE697292A37E14BFE067CAF7 Certificate serial: 7E6E4D938BDFFD63422F1A8430700D6BD7BA8648 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8175E7E9E15E565FE697292A37E14BFE067CAF7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.mft Manifest number: 01D7 Signing time: Thu 26 Mar 2026 11:40:02 +0000 Manifest this update: Thu 26 Mar 2026 11:35:02 +0000 Manifest next update: Sun 29 Mar 2026 13:31:02 +0000 Files and hashes: 1: 3130332e3135382e31332e302f32342d3234203d3e20313338303839.roa (hash: M+WZc7qSf2CmAB/JGuGAm2J24ap4dhEUP+j6m1qwiAs=) 2: C8175E7E9E15E565FE697292A37E14BFE067CAF7.crl (hash: yA+BRyXYxT662YHt60dkn/K3vdpQWUdmDs01L7k5pdE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.crl rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8175E7E9E15E565FE697292A37E14BFE067CAF7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 13:31:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:6e:4d:93:8b:df:fd:63:42:2f:1a:84:30:70:0d:6b:d7:ba:86:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8175E7E9E15E565FE697292A37E14BFE067CAF7 Validity Not Before: Mar 26 11:35:02 2026 GMT Not After : Mar 29 13:31:02 2026 GMT Subject: CN=6C09EF8D47B2297C047FA0DFB6861118099CA49C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c8:4c:e4:c0:5c:dd:a3:89:4b:74:b6:23:a3: 98:c1:f5:37:cf:b4:53:aa:33:5c:2f:da:ca:24:c1: 08:7d:c2:92:44:a9:0c:07:78:b3:2e:13:de:f1:33: d8:dc:56:11:cd:6e:4c:b8:66:d9:70:5b:62:c2:db: 8a:fc:be:33:de:43:66:7a:45:3f:fa:f9:4a:4a:77: fe:a0:20:87:0f:0d:45:1f:81:03:5c:4b:85:8d:05: c0:40:82:e4:18:33:fb:3f:a2:af:42:8d:3c:6c:b4: 37:f0:89:00:8c:7c:8c:22:4d:ed:21:2f:36:c6:da: ce:5a:8d:db:75:e6:94:19:26:40:b6:44:d3:c2:a7: bb:c9:ed:36:fa:f7:cb:8b:96:e6:ae:38:e5:aa:82: 23:fa:4d:06:18:71:c2:e7:fe:78:96:a8:94:d9:97: a0:50:5d:a4:cc:69:e2:05:13:e4:9c:02:78:02:ff: a3:34:84:37:86:eb:f8:a0:8d:bf:3c:c1:12:04:8d: fa:d1:ed:97:67:d5:88:fc:8a:8c:c1:e3:fa:59:55: 4e:86:27:f7:91:7d:81:7c:68:63:3e:e2:2a:c7:0a: 41:b0:99:2e:e1:07:02:13:1c:e5:78:bd:f1:4c:0d: 32:df:17:3f:b6:ec:b0:d2:0b:5e:a3:f0:3e:21:18: 9b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:09:EF:8D:47:B2:29:7C:04:7F:A0:DF:B6:86:11:18:09:9C:A4:9C X509v3 Authority Key Identifier: keyid:C8:17:5E:7E:9E:15:E5:65:FE:69:72:92:A3:7E:14:BF:E0:67:CA:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8175E7E9E15E565FE697292A37E14BFE067CAF7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:4b:ea:76:91:ff:3a:70:e5:f1:c4:c1:06:07:a5:9a:17:6c: c5:f6:47:b3:5b:1a:ca:6a:54:df:76:5b:c0:ef:e3:05:a0:d7: e6:78:93:74:1e:5c:70:44:65:15:72:e6:2d:f5:a2:c4:1f:c3: c1:ff:3c:f1:7d:9a:8d:40:c8:c5:71:fe:ba:30:2c:57:37:e6: 19:74:9e:be:89:06:f4:69:73:5d:89:c3:b2:0f:27:ca:72:b2: cc:9c:c8:bf:4d:4f:a6:19:07:4a:c0:65:a6:76:f5:e7:a6:f7: c4:f5:d5:a0:0b:88:a5:63:49:23:d3:e4:d6:f7:d6:9b:a7:4b: fa:1a:b6:0a:46:3f:50:37:29:b2:b8:8b:f5:b9:d6:c7:51:13: e4:d9:75:b8:cb:ef:f7:d8:1f:9a:07:7d:1b:da:92:06:f3:d4: f6:f4:a1:8d:b2:be:b4:19:b8:85:99:e5:08:f6:df:56:32:83: 21:08:a4:09:28:b8:e7:35:a9:48:2b:b1:ca:66:4b:61:32:56: 37:63:2a:8e:79:1f:9c:42:13:b0:ef:7a:57:93:aa:57:8b:0e: 0b:31:05:b9:38:13:35:d5:c3:f3:47:6c:32:6a:9b:d0:c3:8b: 9f:07:ac:14:a2:f9:2d:bb:f0:4d:2d:a7:c1:fd:e5:bb:a0:9f: 6d:83:09:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfm5Nk4vf/WNCLxqEMHANa9e6hkgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzgxNzVFN0U5RTE1RTU2NUZFNjk3MjkyQTM3RTE0QkZF MDY3Q0FGNzAeFw0yNjAzMjYxMTM1MDJaFw0yNjAzMjkxMzMxMDJaMDMxMTAvBgNV BAMTKDZDMDlFRjhENDdCMjI5N0MwNDdGQTBERkI2ODYxMTE4MDk5Q0E0OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEyEzkwFzdo4lLdLYjo5jB9TfP tFOqM1wv2sokwQh9wpJEqQwHeLMuE97xM9jcVhHNbky4ZtlwW2LC24r8vjPeQ2Z6 RT/6+UpKd/6gIIcPDUUfgQNcS4WNBcBAguQYM/s/oq9CjTxstDfwiQCMfIwiTe0h LzbG2s5ajdt15pQZJkC2RNPCp7vJ7Tb698uLluauOOWqgiP6TQYYccLn/niWqJTZ l6BQXaTMaeIFE+ScAngC/6M0hDeG6/igjb88wRIEjfrR7Zdn1Yj8iozB4/pZVU6G J/eRfYF8aGM+4irHCkGwmS7hBwITHOV4vfFMDTLfFz+27LDSC16j8D4hGJtvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbAnvjUeyKXwEf6DftoYRGAmcpJwwHwYDVR0j BBgwFoAUyBdefp4V5WX+aXKSo34Uv+BnyvcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MzZmZDU1MS02YWJhLTQyMjItOGEyNi05ODYzNDY4MjViMzgvMC9DODE3NUU3RTlF MTVFNTY1RkU2OTcyOTJBMzdFMTRCRkUwNjdDQUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzgxNzVFN0U5RTE1RTU2NUZFNjk3MjkyQTM3RTE0QkZFMDY3 Q0FGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODM2ZmQ1NTEtNmFiYS00MjIyLThh MjYtOTg2MzQ2ODI1YjM4LzAvQzgxNzVFN0U5RTE1RTU2NUZFNjk3MjkyQTM3RTE0 QkZFMDY3Q0FGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADZL6naR/zpw5fHEwQYHpZoXbMX2R7NbGspq VN92W8Dv4wWg1+Z4k3QeXHBEZRVy5i31osQfw8H/PPF9mo1AyMVx/rowLFc35hl0 nr6JBvRpc12Jw7IPJ8pyssycyL9NT6YZB0rAZaZ29eem98T11aALiKVjSSPT5Nb3 1punS/oatgpGP1A3KbK4i/W51sdRE+TZdbjL7/fYH5oHfRvakgbz1Pb0oY2yvrQZ uIWZ5Qj231YygyEIpAkouOc1qUgrscpmS2EyVjdjKo55H5xCE7DveleTqleLDgsx Bbk4EzXVw/NHbDJqm9DDi58HrBSi+S278E0tp8H95bugn22DCbE= -----END CERTIFICATE-----Generated at Thu Mar 26 19:48:02 2026 by rpki-client