$ rpki-client -vvf repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.mft File: D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.mft (raw, json) Hash identifier: ib5Dtbx/suqRmJlMmy1FgcnAz9u9FbSbEu8Yscm8Bng= Subject key identifier: 53:06:42:94:E0:23:05:E5:5C:86:D6:50:72:22:A3:1B:AE:AE:A3:4D Authority key identifier: D1:75:BD:C5:A6:41:4C:EB:AB:47:2D:F9:15:9C:BD:32:BC:CF:91:EA Certificate issuer: /CN=D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA Certificate serial: 41EB216F0474A54BCDAAFFB91BE4638DB8BC1548 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.mft Manifest number: 0205 Signing time: Tue 24 Mar 2026 04:20:00 +0000 Manifest this update: Tue 24 Mar 2026 04:15:00 +0000 Manifest next update: Fri 27 Mar 2026 09:18:00 +0000 Files and hashes: 1: 3130332e3132362e3233382e302f32342d3234203d3e20313530353033.roa (hash: N0/JO0oaR76f4qC9rQwj7j3uUoZjxf567pjSkSVvNG0=) 2: D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.crl (hash: ZmSIqDtsQbowIX3U8eyXDuoTw/sJrshXHSIZP8fhaSE=) 3: 323030313a6466313a646534303a3a2f34382d3438203d3e20313530353033.roa (hash: 7LSMPL8vBB3tryB4W9V+LqRs1lcp8JLOw5O4E5oOPZ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.crl rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 09:18:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:eb:21:6f:04:74:a5:4b:cd:aa:ff:b9:1b:e4:63:8d:b8:bc:15:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA Validity Not Before: Mar 24 04:15:00 2026 GMT Not After : Mar 27 09:18:00 2026 GMT Subject: CN=53064294E02305E55C86D6507222A31BAEAEA34D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:38:ef:e7:e2:7c:3c:2d:81:32:b7:66:11:ae: a0:cc:c3:dd:fd:88:91:ec:71:e2:55:cb:b1:05:46: b3:b3:fd:92:c5:55:0a:c4:8c:b8:cf:43:00:1d:ad: 9b:a3:7c:e3:e9:c9:2a:cc:88:1a:2e:48:1c:6e:03: 5e:12:53:fe:d9:1e:c8:7d:c0:d1:69:69:2a:d1:8f: 37:35:f4:74:d9:a6:bb:85:c9:19:44:26:34:ec:26: f2:fe:a3:98:8c:29:6a:ee:8a:7f:15:bc:0d:89:21: a6:7f:f9:e8:a2:2c:b9:b7:c7:af:55:f1:7e:e7:03: d9:5e:3c:9c:bb:1b:84:04:12:36:7c:cd:88:19:5f: 2c:de:e7:5d:9a:0a:08:f9:50:f3:c0:9c:47:7d:d7: 3e:fe:97:fd:97:fe:25:9e:10:3d:a1:88:3e:20:a3: 5a:14:c9:ee:c1:aa:f1:5f:80:34:b6:f0:47:59:fc: 44:1b:a9:2f:44:04:9e:26:67:1f:2d:e0:a8:eb:75: e0:83:be:ef:80:38:c3:30:b2:32:b3:d4:a4:02:b8: 6a:c6:32:61:63:22:2e:32:ec:70:a5:b9:c1:36:1f: a3:58:fc:60:bc:00:c1:b8:3c:00:fc:8a:5a:83:26: 4b:bb:60:2c:8e:8d:0e:c8:dc:7f:74:de:9d:88:92: 60:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:06:42:94:E0:23:05:E5:5C:86:D6:50:72:22:A3:1B:AE:AE:A3:4D X509v3 Authority Key Identifier: keyid:D1:75:BD:C5:A6:41:4C:EB:AB:47:2D:F9:15:9C:BD:32:BC:CF:91:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:22:24:f9:3b:5c:c2:d5:cb:99:ed:25:69:86:e1:fa:61:48: d8:45:2e:59:36:9f:77:39:a2:73:7c:10:4b:f0:3f:7a:61:70: e3:32:7c:11:31:7d:b5:22:77:1c:ef:0b:5a:ba:a2:c0:5d:d2: 60:30:9f:91:93:73:57:3e:9b:21:21:e6:d6:8d:b7:61:65:e8: b4:7f:d5:9c:2e:c0:03:ff:79:09:78:02:da:7e:1d:1f:f0:f4: 62:f9:34:27:c0:93:1e:af:68:96:ac:44:16:93:50:ff:6d:57: a0:3b:e0:dd:ab:2e:da:2e:d2:c3:94:cc:50:17:54:63:c9:f4: e2:55:cb:1d:29:ae:c5:bf:b2:f3:aa:e0:23:05:fd:28:c4:fb: ea:81:5b:f0:f7:ef:57:2e:df:9a:88:1a:d1:a3:4d:71:d8:f4: a1:91:94:d7:cc:cc:39:89:56:7b:44:7c:cf:d0:d4:2b:02:29: ab:39:67:e7:47:5b:09:7a:38:3f:67:cc:0c:7d:f5:a2:2a:97: 0b:3b:c2:6e:31:47:20:cf:d4:7e:90:e3:c2:bc:3d:e1:87:2a: 4a:55:1f:84:82:80:be:92:02:d7:6f:e0:2b:2a:48:aa:77:fa: 3f:a3:52:46:64:44:1b:a8:96:46:fc:ce:5a:ce:31:62:d8:95: c1:57:d7:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQeshbwR0pUvNqv+5G+Rjjbi8FUgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDE3NUJEQzVBNjQxNENFQkFCNDcyREY5MTU5Q0JEMzJC Q0NGOTFFQTAeFw0yNjAzMjQwNDE1MDBaFw0yNjAzMjcwOTE4MDBaMDMxMTAvBgNV BAMTKDUzMDY0Mjk0RTAyMzA1RTU1Qzg2RDY1MDcyMjJBMzFCQUVBRUEzNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/OO/n4nw8LYEyt2YRrqDMw939 iJHsceJVy7EFRrOz/ZLFVQrEjLjPQwAdrZujfOPpySrMiBouSBxuA14SU/7ZHsh9 wNFpaSrRjzc19HTZpruFyRlEJjTsJvL+o5iMKWruin8VvA2JIaZ/+eiiLLm3x69V 8X7nA9lePJy7G4QEEjZ8zYgZXyze512aCgj5UPPAnEd91z7+l/2X/iWeED2hiD4g o1oUye7BqvFfgDS28EdZ/EQbqS9EBJ4mZx8t4KjrdeCDvu+AOMMwsjKz1KQCuGrG MmFjIi4y7HClucE2H6NY/GC8AMG4PAD8ilqDJku7YCyOjQ7I3H903p2IkmAdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUwZClOAjBeVchtZQciKjG66uo00wHwYDVR0j BBgwFoAU0XW9xaZBTOurRy35FZy9MrzPkeowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NjJkNGQ3NC02Mjk1LTQ0OTYtODIzYS0xZThhM2Q1YmJiNmMvMC9EMTc1QkRDNUE2 NDE0Q0VCQUI0NzJERjkxNTlDQkQzMkJDQ0Y5MUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDE3NUJEQzVBNjQxNENFQkFCNDcyREY5MTU5Q0JEMzJCQ0NG OTFFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODYyZDRkNzQtNjI5NS00NDk2LTgy M2EtMWU4YTNkNWJiYjZjLzAvRDE3NUJEQzVBNjQxNENFQkFCNDcyREY5MTU5Q0JE MzJCQ0NGOTFFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE8iJPk7XMLVy5ntJWmG4fphSNhFLlk2n3c5 onN8EEvwP3phcOMyfBExfbUidxzvC1q6osBd0mAwn5GTc1c+myEh5taNt2Fl6LR/ 1ZwuwAP/eQl4Atp+HR/w9GL5NCfAkx6vaJasRBaTUP9tV6A74N2rLtou0sOUzFAX VGPJ9OJVyx0prsW/svOq4CMF/SjE++qBW/D371cu35qIGtGjTXHY9KGRlNfMzDmJ VntEfM/Q1CsCKas5Z+dHWwl6OD9nzAx99aIqlws7wm4xRyDP1H6Q48K8PeGHKkpV H4SCgL6SAtdv4CsqSKp3+j+jUkZkRBuolkb8zlrOMWLYlcFX18w= -----END CERTIFICATE-----Generated at Thu Mar 26 07:25:49 2026 by rpki-client