$ rpki-client -vvf repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft File: 1472DDF3B8546A8B201733914AFB7036FC6742F3.mft (raw, json) Hash identifier: qHI7wdgFk5aRBrRLFeE4qhpuTCbsNpAxakAJOfq1gtM= Subject key identifier: 74:0B:B5:2B:60:CE:31:21:C1:A8:C8:62:C9:51:54:4F:AE:21:41:DA Authority key identifier: 14:72:DD:F3:B8:54:6A:8B:20:17:33:91:4A:FB:70:36:FC:67:42:F3 Certificate issuer: /CN=1472DDF3B8546A8B201733914AFB7036FC6742F3 Certificate serial: 6635A5CD831ADE450331B6C0DAC22C439B777719 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft Manifest number: 03CF Signing time: Tue 24 Mar 2026 02:52:01 +0000 Manifest this update: Tue 24 Mar 2026 02:47:01 +0000 Manifest next update: Fri 27 Mar 2026 12:17:01 +0000 Files and hashes: 1: 1472DDF3B8546A8B201733914AFB7036FC6742F3.crl (hash: nUajPmicnwKNK3lOkMxfDJq0hkyHCjsZ4WNfA65vIxg=) 2: 3130332e3137302e3139362e302f32332d3234203d3e203137393935.roa (hash: Kb0M/Ho3VT/nqDiJsvCx89Y+HDOUAdoV9jho+WllLB8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.crl rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 12:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:35:a5:cd:83:1a:de:45:03:31:b6:c0:da:c2:2c:43:9b:77:77:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1472DDF3B8546A8B201733914AFB7036FC6742F3 Validity Not Before: Mar 24 02:47:01 2026 GMT Not After : Mar 27 12:17:01 2026 GMT Subject: CN=740BB52B60CE3121C1A8C862C951544FAE2141DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e7:ce:3c:ce:2e:14:52:14:4f:6d:5e:4a:50: 82:da:6e:7d:86:15:8c:78:4c:54:c9:69:5a:7b:5c: 12:7d:c1:8f:69:31:d1:a2:c1:6c:c3:29:aa:75:e5: 66:e8:d8:58:c8:b8:c1:db:0d:93:b9:29:c9:41:0b: 92:bd:fe:39:52:3e:bf:60:83:35:60:45:20:bc:2a: 9f:20:ce:f1:95:35:87:da:f8:b5:11:8d:17:d9:07: d2:f4:f9:02:bf:89:07:07:ad:96:df:9f:da:31:5d: ca:a6:66:85:f3:b1:57:28:e4:ea:9b:a6:57:f5:65: e2:bb:b4:fe:de:91:a7:00:42:c0:30:8d:cf:c8:ad: 01:59:15:e9:bb:b6:2a:d7:5f:07:f8:44:66:e6:a4: 0f:55:49:22:68:72:03:08:ed:29:ae:97:7b:04:b4: 89:a0:fd:05:08:e7:fd:03:fb:a8:aa:4a:c6:b5:e7: c7:dd:ff:2b:d7:b9:e4:9a:9c:9b:f3:d1:71:c8:f7: aa:b7:1c:7f:1c:c4:02:5a:34:6a:f2:4a:67:b8:35: 27:d7:b4:f3:6c:a1:05:50:77:a3:98:e5:c5:c3:c7: c8:3f:36:42:1f:3b:fc:93:d9:10:30:53:83:16:f5: 84:fe:21:5d:83:c3:15:3e:0a:5c:75:24:92:be:a7: e2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:0B:B5:2B:60:CE:31:21:C1:A8:C8:62:C9:51:54:4F:AE:21:41:DA X509v3 Authority Key Identifier: keyid:14:72:DD:F3:B8:54:6A:8B:20:17:33:91:4A:FB:70:36:FC:67:42:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:93:62:aa:f7:44:1c:99:de:4d:6f:80:0f:40:a5:8a:64:aa: 1a:0b:72:70:21:9d:fd:c7:2b:5d:c8:dc:e6:81:fb:7f:da:5e: 38:81:a7:50:72:bb:4a:ae:aa:4a:f3:62:9b:ac:79:0a:2a:f1: b7:d8:3f:4e:15:54:3b:a5:2b:d7:84:da:8b:d5:5a:14:2a:ed: ee:22:4e:89:04:66:c0:b8:ec:a9:e7:b0:79:6a:2d:77:6d:fb: 98:d0:b0:51:7c:de:c1:0c:ca:0b:9f:9b:34:97:fc:79:52:57: d9:8f:fd:08:d3:1a:44:e7:1e:66:cd:45:c5:64:b5:6c:b8:a9: 70:73:1f:b2:96:1c:58:e3:3f:63:3c:7a:5d:83:35:1c:b9:4a: 59:c9:02:99:0f:2a:53:63:fa:5b:52:4a:a8:a3:97:0c:7a:8a: db:e5:f2:cf:59:5a:ad:31:7e:d8:80:a5:9d:d3:e1:96:1f:39: c9:ef:6f:2d:9f:86:de:f4:27:15:c9:a5:79:5b:b8:42:f4:ff: 5d:65:8b:c8:c3:b7:f7:6c:2b:af:5f:ae:d0:e9:f6:25:7d:75: f0:15:fd:18:70:19:5d:c5:57:cf:e6:44:e3:9f:ac:96:84:89: f3:e4:ff:68:b7:70:5e:70:8a:ca:ec:10:a6:ae:7a:07:c0:df: 24:c3:50:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZjWlzYMa3kUDMbbA2sIsQ5t3dxkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ3MkRERjNCODU0NkE4QjIwMTczMzkxNEFGQjcwMzZG QzY3NDJGMzAeFw0yNjAzMjQwMjQ3MDFaFw0yNjAzMjcxMjE3MDFaMDMxMTAvBgNV BAMTKDc0MEJCNTJCNjBDRTMxMjFDMUE4Qzg2MkM5NTE1NDRGQUUyMTQxREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA5848zi4UUhRPbV5KUILabn2G FYx4TFTJaVp7XBJ9wY9pMdGiwWzDKap15Wbo2FjIuMHbDZO5KclBC5K9/jlSPr9g gzVgRSC8Kp8gzvGVNYfa+LURjRfZB9L0+QK/iQcHrZbfn9oxXcqmZoXzsVco5Oqb plf1ZeK7tP7ekacAQsAwjc/IrQFZFem7tirXXwf4RGbmpA9VSSJocgMI7Smul3sE tImg/QUI5/0D+6iqSsa158fd/yvXueSanJvz0XHI96q3HH8cxAJaNGrySme4NSfX tPNsoQVQd6OY5cXDx8g/NkIfO/yT2RAwU4MW9YT+IV2DwxU+Clx1JJK+p+I3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdAu1K2DOMSHBqMhiyVFUT64hQdowHwYDVR0j BBgwFoAUFHLd87hUaosgFzORSvtwNvxnQvMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTFhNzQ2ZS01M2UzLTRjMjMtYjllNS1mNjRmM2VmM2QxMzYvMC8xNDcyRERGM0I4 NTQ2QThCMjAxNzMzOTE0QUZCNzAzNkZDNjc0MkYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQ3MkRERjNCODU0NkE4QjIwMTczMzkxNEFGQjcwMzZGQzY3 NDJGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTExYTc0NmUtNTNlMy00YzIzLWI5 ZTUtZjY0ZjNlZjNkMTM2LzAvMTQ3MkRERjNCODU0NkE4QjIwMTczMzkxNEFGQjcw MzZGQzY3NDJGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADaTYqr3RByZ3k1vgA9ApYpkqhoLcnAhnf3H K13I3OaB+3/aXjiBp1Byu0quqkrzYpuseQoq8bfYP04VVDulK9eE2ovVWhQq7e4i TokEZsC47KnnsHlqLXdt+5jQsFF83sEMygufmzSX/HlSV9mP/QjTGkTnHmbNRcVk tWy4qXBzH7KWHFjjP2M8el2DNRy5SlnJApkPKlNj+ltSSqijlwx6itvl8s9ZWq0x ftiApZ3T4ZYfOcnvby2fht70JxXJpXlbuEL0/11li8jDt/dsK69frtDp9iV9dfAV /RhwGV3FV8/mROOfrJaEifPk/2i3cF5wisrsEKauegfA3yTDUME= -----END CERTIFICATE-----Generated at Thu Mar 26 13:37:23 2026 by rpki-client