$ rpki-client -vvf repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft File: 1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft (raw, json) Hash identifier: yXPQUsGllkdl7XfDQWs01HJgpzKifB1xGMkoUCSuA1o= Subject key identifier: B8:29:BF:18:DD:D0:07:09:67:C0:D2:4D:44:A0:C0:FF:DE:26:8B:73 Authority key identifier: 1D:21:38:5E:B5:B3:F8:2C:7D:1A:B5:C7:FD:3E:F2:7B:E8:E8:3A:7B Certificate issuer: /CN=1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B Certificate serial: 0D39C8A788FC8EEE67C48005D8DFBB8CFAA04AFD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft Manifest number: 0135 Signing time: Wed 25 Mar 2026 03:52:41 +0000 Manifest this update: Wed 25 Mar 2026 03:47:41 +0000 Manifest next update: Sat 28 Mar 2026 15:07:41 +0000 Files and hashes: 1: 3130332e3138362e3231302e302f32342d3234203d3e20313439373136.roa (hash: qdcFmE7b+q0LTLl9il6wSO52ud1F6bxcFwe5bz9+Mwo=) 2: 3130332e3138362e3231312e302f32342d3234203d3e20313439373136.roa (hash: yThEaj9cxtdok/5GUXj7+kkX5Xj5C+3r/fUIRdcZf5k=) 3: 1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl (hash: lrIZLv07pOmu8jGwQcO7a5v+lQ83P1HNmsWdnbkmQkc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 15:07:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:39:c8:a7:88:fc:8e:ee:67:c4:80:05:d8:df:bb:8c:fa:a0:4a:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B Validity Not Before: Mar 25 03:47:41 2026 GMT Not After : Mar 28 15:07:41 2026 GMT Subject: CN=B829BF18DDD0070967C0D24D44A0C0FFDE268B73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a9:08:06:dd:e6:31:72:ae:e6:68:e8:1e:26: 97:cd:a9:fe:a6:c2:74:a5:65:0d:34:95:5a:11:b0: c4:6f:63:b3:ba:34:fb:4e:96:fd:11:b8:a0:1a:c1: 47:e0:3d:02:85:17:b1:a3:5f:48:6e:8d:f8:47:d7: 69:94:70:5b:0e:4d:0c:d8:d9:98:59:18:f6:26:1b: 47:1f:66:7d:13:b6:3e:bb:d7:d5:57:fa:55:99:23: 93:e8:06:40:6b:67:34:b4:1d:88:03:03:2b:08:37: af:10:93:ae:12:45:8b:a2:a3:c1:e6:1f:05:a5:11: 92:f5:8e:3a:a7:99:52:24:8f:cc:fd:51:74:3b:b9: 3d:b3:df:2d:23:c8:42:ba:1c:9d:6f:e6:41:f5:81: 54:6d:8d:4e:ad:e7:9a:7e:20:ae:1c:09:5a:24:de: af:f7:b1:17:bc:7f:bb:e6:10:82:94:dc:14:d6:42: 1f:88:1d:8b:00:9e:2d:6c:da:a9:ce:27:0f:95:ad: 37:3f:6a:d7:0e:ce:a7:8f:fe:fd:f6:2e:23:de:3a: 96:ca:e1:de:cf:88:c0:8d:b9:7d:a7:17:13:95:ae: 81:83:c6:af:8e:a3:44:d5:6f:35:68:7f:b3:46:e9: ec:cf:b4:d1:45:f2:f1:1f:df:5e:1d:99:9e:a5:f4: 5f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:29:BF:18:DD:D0:07:09:67:C0:D2:4D:44:A0:C0:FF:DE:26:8B:73 X509v3 Authority Key Identifier: keyid:1D:21:38:5E:B5:B3:F8:2C:7D:1A:B5:C7:FD:3E:F2:7B:E8:E8:3A:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:d5:c4:1b:d6:98:02:ad:59:78:75:60:7b:07:38:53:73:30: 7a:63:4b:f5:c1:52:71:76:ea:ea:e0:bd:98:20:a7:38:ab:92: bd:aa:b3:6f:54:7c:d4:fb:1e:26:c3:00:27:ed:72:87:18:59: 90:b1:15:c5:8e:5a:40:8f:9a:07:62:26:80:17:66:e5:3e:f8: 7a:1e:4b:bb:86:96:99:99:73:97:7c:15:52:6f:c9:a4:ac:81: 81:7b:fd:93:5c:88:c5:c7:5b:a9:4a:e1:d3:d3:fe:31:49:46: 03:d4:e2:37:75:f6:37:ce:d3:9d:0f:f9:9c:fe:c9:21:8f:97: 77:0b:a2:26:b1:3d:72:3c:da:43:74:66:e3:0a:82:f3:16:ee: 1c:f2:59:6a:28:46:36:d5:bc:fd:be:67:18:ee:03:12:3e:0c: ce:de:0a:48:d0:13:aa:30:94:00:6a:d5:41:1e:f1:e1:f5:3d: 1e:22:34:7e:78:27:1b:a2:78:71:01:f8:e0:e4:62:c2:20:11: 0f:7d:fd:dd:72:43:fd:2a:06:04:59:bf:f5:f4:1e:7a:b4:26: ef:3d:a2:a6:29:c9:64:9c:f6:50:c7:13:6c:4f:cc:72:72:fd: 5c:c0:9c:a1:d0:1f:5b:3b:62:65:c4:fa:60:6e:91:99:de:1e: 60:45:b9:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDTnIp4j8ju5nxIAF2N+7jPqgSv0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQyMTM4NUVCNUIzRjgyQzdEMUFCNUM3RkQzRUYyN0JF OEU4M0E3QjAeFw0yNjAzMjUwMzQ3NDFaFw0yNjAzMjgxNTA3NDFaMDMxMTAvBgNV BAMTKEI4MjlCRjE4REREMDA3MDk2N0MwRDI0RDQ0QTBDMEZGREUyNjhCNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLqQgG3eYxcq7maOgeJpfNqf6m wnSlZQ00lVoRsMRvY7O6NPtOlv0RuKAawUfgPQKFF7GjX0hujfhH12mUcFsOTQzY 2ZhZGPYmG0cfZn0Ttj6719VX+lWZI5PoBkBrZzS0HYgDAysIN68Qk64SRYuio8Hm HwWlEZL1jjqnmVIkj8z9UXQ7uT2z3y0jyEK6HJ1v5kH1gVRtjU6t55p+IK4cCVok 3q/3sRe8f7vmEIKU3BTWQh+IHYsAni1s2qnOJw+VrTc/atcOzqeP/v32LiPeOpbK 4d7PiMCNuX2nFxOVroGDxq+Oo0TVbzVof7NG6ezPtNFF8vEf314dmZ6l9F+ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuCm/GN3QBwlnwNJNRKDA/94mi3MwHwYDVR0j BBgwFoAUHSE4XrWz+Cx9GrXH/T7ye+joOnswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NGRjZWY2NS01ZGUzLTQxMjktYWMyNy03NzA2ZDcyNjYwMDEvMC8xRDIxMzg1RUI1 QjNGODJDN0QxQUI1QzdGRDNFRjI3QkU4RTgzQTdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQyMTM4NUVCNUIzRjgyQzdEMUFCNUM3RkQzRUYyN0JFOEU4 M0E3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTRkY2VmNjUtNWRlMy00MTI5LWFj MjctNzcwNmQ3MjY2MDAxLzAvMUQyMTM4NUVCNUIzRjgyQzdEMUFCNUM3RkQzRUYy N0JFOEU4M0E3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEjVxBvWmAKtWXh1YHsHOFNzMHpjS/XBUnF2 6urgvZggpzirkr2qs29UfNT7HibDACftcocYWZCxFcWOWkCPmgdiJoAXZuU++Hoe S7uGlpmZc5d8FVJvyaSsgYF7/ZNciMXHW6lK4dPT/jFJRgPU4jd19jfO050P+Zz+ ySGPl3cLoiaxPXI82kN0ZuMKgvMW7hzyWWooRjbVvP2+ZxjuAxI+DM7eCkjQE6ow lABq1UEe8eH1PR4iNH54JxuieHEB+ODkYsIgEQ99/d1yQ/0qBgRZv/X0Hnq0Ju89 oqYpyWSc9lDHE2xPzHJy/VzAnKHQH1s7YmXE+mBukZneHmBFubc= -----END CERTIFICATE-----Generated at Thu Mar 26 05:57:33 2026 by rpki-client