$ rpki-client -vvf repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft File: 9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft (raw, json) Hash identifier: oXYgWY/4kJ1BnO5o8LNF7Jum7gimueUY8aOJCH0c86w= Subject key identifier: 31:DA:F8:38:00:93:A9:23:BB:B1:98:CD:AB:67:26:75:C4:05:4F:D1 Authority key identifier: 93:88:69:5C:CB:2D:CC:37:F2:AB:8A:3D:10:E4:FD:E0:C3:A9:75:A1 Certificate issuer: /CN=9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1 Certificate serial: 43AE886A5C55179F5E012E7D06F301E42C94B24F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft Manifest number: 011D Signing time: Tue 24 Mar 2026 16:30:59 +0000 Manifest this update: Tue 24 Mar 2026 16:25:59 +0000 Manifest next update: Fri 27 Mar 2026 21:26:59 +0000 Files and hashes: 1: 3136302e32322e39362e302f32342d3234203d3e20313532383238.roa (hash: n7MsU+NqSEfM83vem4uRyZBilJV0EOOi2kf/za1AxU8=) 2: 3136302e32322e39372e302f32342d3234203d3e20313532383238.roa (hash: kwAZ838D0ERhtGt/Ke2PpJnDihw3zY8GMQxxC8oDZ/k=) 3: 9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.crl (hash: nx8aE2sdoWU0jrKNTmprss2askl0gG3Wk8xUK8A2+tY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.crl rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 21:26:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:ae:88:6a:5c:55:17:9f:5e:01:2e:7d:06:f3:01:e4:2c:94:b2:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1 Validity Not Before: Mar 24 16:25:59 2026 GMT Not After : Mar 27 21:26:59 2026 GMT Subject: CN=31DAF8380093A923BBB198CDAB672675C4054FD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d5:10:c7:36:76:7f:b7:30:d5:df:15:f9:5c: bb:d1:f6:34:a5:1d:48:9f:db:1e:22:82:fb:7e:b8: e5:e7:63:1c:8c:09:36:4b:71:b1:bd:c6:d3:be:5c: c3:44:fc:f7:33:41:77:a9:e7:84:d9:6d:59:96:35: 75:05:04:43:c2:26:94:7c:98:fb:a4:37:13:f7:a0: 7e:59:d2:93:cb:fd:0e:0d:a6:aa:c5:bd:9a:bb:f5: 39:63:8a:e0:1d:54:57:ac:08:53:43:48:ce:7e:da: ca:bf:8e:dc:e0:9a:52:95:92:ad:78:14:34:b9:4b: dd:59:b5:68:2b:1c:63:c1:41:cc:66:4e:b8:6f:c3: 3b:2b:d8:d4:e0:e4:ab:62:bf:0c:af:28:35:11:f5: 90:f4:66:d4:8c:93:ca:4e:3b:f6:da:55:17:d9:ec: 1b:9a:22:5a:10:d7:3c:54:39:79:5b:85:ba:a0:ab: 13:e5:c0:69:03:e5:ed:84:e0:f7:d5:e0:e8:f6:ae: a4:47:6e:a0:de:c7:e5:5d:e7:81:26:d1:fc:6f:87: 40:a3:76:4c:da:34:d6:ce:5a:65:d7:1e:ea:48:84: 55:77:11:45:d3:6d:8a:c7:a2:3a:70:f3:f0:55:75: 4b:53:68:1b:47:c0:2e:53:0e:54:d7:36:d8:52:7a: 7b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:DA:F8:38:00:93:A9:23:BB:B1:98:CD:AB:67:26:75:C4:05:4F:D1 X509v3 Authority Key Identifier: keyid:93:88:69:5C:CB:2D:CC:37:F2:AB:8A:3D:10:E4:FD:E0:C3:A9:75:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:1c:15:61:59:39:30:d6:c4:98:0b:7b:79:84:bc:84:fd:3f: e3:02:62:4f:8a:a4:b2:32:b7:23:a7:1a:43:c7:ab:e7:ff:fb: 04:d7:38:7d:91:2c:1f:40:ba:8b:f2:01:5e:91:98:e8:c0:c8: 27:94:7f:4e:95:21:74:6d:d8:45:f8:fa:ba:b5:8b:a5:a9:77: c7:a2:a4:95:6f:91:25:19:d0:a3:7f:48:7b:8d:4f:66:3e:48: f8:0b:67:03:ea:a3:d5:80:f6:45:1d:9a:40:39:44:4a:3b:a0: 54:52:14:ff:c7:87:03:de:57:1a:92:8c:b1:21:64:9a:0f:6b: bd:39:a8:27:18:9f:ed:3e:76:85:f5:db:ad:9d:10:63:97:5e: 3c:9d:2e:e1:0a:b3:bc:10:a9:af:e2:ac:09:1b:bd:27:06:c5: 62:e5:10:6b:e1:10:a6:da:cf:3e:ab:54:4d:a1:bd:0f:6d:9a: fd:af:55:fb:2a:d8:23:2a:7f:bc:72:d5:53:4c:c4:1f:97:58: d2:ba:90:db:a5:e2:57:ba:6d:f6:3a:a7:ef:15:3b:3c:ce:57: 49:22:7d:69:1d:f5:f1:74:81:b6:d0:c4:24:87:38:24:94:3e: 37:93:93:d9:46:6f:b7:77:0a:ad:10:5d:e3:22:ed:ab:7b:51: 8c:48:3d:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ66IalxVF59eAS59BvMB5CyUsk8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM4ODY5NUNDQjJEQ0MzN0YyQUI4QTNEMTBFNEZERTBD M0E5NzVBMTAeFw0yNjAzMjQxNjI1NTlaFw0yNjAzMjcyMTI2NTlaMDMxMTAvBgNV BAMTKDMxREFGODM4MDA5M0E5MjNCQkIxOThDREFCNjcyNjc1QzQwNTRGRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL1RDHNnZ/tzDV3xX5XLvR9jSl HUif2x4igvt+uOXnYxyMCTZLcbG9xtO+XMNE/PczQXep54TZbVmWNXUFBEPCJpR8 mPukNxP3oH5Z0pPL/Q4NpqrFvZq79TljiuAdVFesCFNDSM5+2sq/jtzgmlKVkq14 FDS5S91ZtWgrHGPBQcxmTrhvwzsr2NTg5KtivwyvKDUR9ZD0ZtSMk8pOO/baVRfZ 7BuaIloQ1zxUOXlbhbqgqxPlwGkD5e2E4PfV4Oj2rqRHbqDex+Vd54Em0fxvh0Cj dkzaNNbOWmXXHupIhFV3EUXTbYrHojpw8/BVdUtTaBtHwC5TDlTXNthSensnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMdr4OACTqSO7sZjNq2cmdcQFT9EwHwYDVR0j BBgwFoAUk4hpXMstzDfyq4o9EOT94MOpdaEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 M2NiZDY3Yi1kMTkwLTRhNGMtODNiNi0xMTg4N2Q3YzJlOTkvMC85Mzg4Njk1Q0NC MkRDQzM3RjJBQjhBM0QxMEU0RkRFMEMzQTk3NUExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTM4ODY5NUNDQjJEQ0MzN0YyQUI4QTNEMTBFNEZERTBDM0E5 NzVBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODNjYmQ2N2ItZDE5MC00YTRjLTgz YjYtMTE4ODdkN2MyZTk5LzAvOTM4ODY5NUNDQjJEQ0MzN0YyQUI4QTNEMTBFNEZE RTBDM0E5NzVBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGkcFWFZOTDWxJgLe3mEvIT9P+MCYk+KpLIy tyOnGkPHq+f/+wTXOH2RLB9AuovyAV6RmOjAyCeUf06VIXRt2EX4+rq1i6Wpd8ei pJVvkSUZ0KN/SHuNT2Y+SPgLZwPqo9WA9kUdmkA5REo7oFRSFP/HhwPeVxqSjLEh ZJoPa705qCcYn+0+doX1262dEGOXXjydLuEKs7wQqa/irAkbvScGxWLlEGvhEKba zz6rVE2hvQ9tmv2vVfsq2CMqf7xy1VNMxB+XWNK6kNul4le6bfY6p+8VOzzOV0ki fWkd9fF0gbbQxCSHOCSUPjeTk9lGb7d3Cq0QXeMi7at7UYxIPTQ= -----END CERTIFICATE-----Generated at Thu Mar 26 15:27:48 2026 by rpki-client