$ rpki-client -vvf repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft File: 394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft (raw, json) Hash identifier: MYLQZMFCkGjAE3+4QZQOYRsuhBMczdAUuqF6XEd8bqU= Subject key identifier: 91:C6:5E:D3:07:B4:21:E4:51:82:5D:AE:9F:9A:E6:D3:40:9E:42:8B Authority key identifier: 39:4B:CC:5C:03:10:DB:01:17:DD:C1:DC:1A:17:60:26:DB:42:1D:88 Certificate issuer: /CN=394BCC5C0310DB0117DDC1DC1A176026DB421D88 Certificate serial: 7013DA5602002C63F16A852B049EECBB607246A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/394BCC5C0310DB0117DDC1DC1A176026DB421D88.cer Subject info access: rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft Manifest number: 012A Signing time: Thu 26 Mar 2026 01:50:55 +0000 Manifest this update: Thu 26 Mar 2026 01:45:55 +0000 Manifest next update: Sun 29 Mar 2026 08:58:55 +0000 Files and hashes: 1: 394BCC5C0310DB0117DDC1DC1A176026DB421D88.crl (hash: XBssh2aD3KOwC+QNjH0tecLn5fzwEmy199S2aDyqlyU=) 2: 3135372e36362e3139302e302f32342d3234203d3e20313532373533.roa (hash: 5Tt3RRAons/MpLAKdI+nVYdG1EV4O6aC9q3gMfZTySg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.crl rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/394BCC5C0310DB0117DDC1DC1A176026DB421D88.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 08:58:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:13:da:56:02:00:2c:63:f1:6a:85:2b:04:9e:ec:bb:60:72:46:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=394BCC5C0310DB0117DDC1DC1A176026DB421D88 Validity Not Before: Mar 26 01:45:55 2026 GMT Not After : Mar 29 08:58:55 2026 GMT Subject: CN=91C65ED307B421E451825DAE9F9AE6D3409E428B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:34:c0:05:43:0b:7e:f2:1f:26:28:07:07:ad: 60:32:52:c4:39:94:15:a5:69:12:ce:9e:9b:07:60: bc:5b:3d:14:99:da:bf:59:b4:72:4f:06:42:9d:7e: 8b:89:03:dc:3e:00:27:92:ab:02:3d:a4:27:07:90: 72:cf:91:64:f5:00:57:15:c5:1d:2d:c1:af:92:9e: 86:7f:03:c3:74:08:b4:e9:64:2a:ee:d5:f4:74:61: 1d:79:1c:7e:f4:78:bb:20:1a:e4:26:e7:7c:e2:63: 6f:e9:7f:d4:88:bd:cc:70:92:40:56:a4:52:d7:a4: 4c:ac:20:47:de:3d:15:3b:b2:32:1f:0d:13:18:1c: f6:9a:cb:57:8c:a1:63:d6:e5:49:bb:f1:cd:62:d4: df:a0:d2:64:e4:1d:5a:92:84:6f:67:7d:bd:58:ea: ae:f8:8b:6c:c5:0b:76:9b:03:fb:05:9e:2d:f9:e7: 28:9b:43:eb:67:cc:58:ca:1b:fb:c6:51:f6:63:5c: a3:52:43:3b:43:0d:3b:ea:4c:f9:3d:7e:f1:3f:94: 82:5e:6b:9b:94:0b:c0:6b:24:ef:e1:0c:fd:99:67: b8:3e:16:93:a0:0c:aa:8a:ee:fc:eb:0a:16:34:47: 96:bf:c0:ac:18:53:4a:89:39:be:38:0a:81:9c:71: d2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:C6:5E:D3:07:B4:21:E4:51:82:5D:AE:9F:9A:E6:D3:40:9E:42:8B X509v3 Authority Key Identifier: keyid:39:4B:CC:5C:03:10:DB:01:17:DD:C1:DC:1A:17:60:26:DB:42:1D:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/394BCC5C0310DB0117DDC1DC1A176026DB421D88.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:50:b3:14:5d:db:34:9e:64:30:95:47:18:97:3b:2f:00:83: cf:26:db:c1:b5:46:a8:82:d9:ba:10:21:c4:43:50:4b:c4:ac: 34:42:ab:70:25:dd:98:f8:68:0c:75:1f:18:f9:ae:5c:eb:95: 0d:85:d2:a7:36:47:3f:d9:58:c8:d4:3a:00:89:bf:f7:47:94: 00:d0:94:4b:27:7c:14:ec:8c:57:23:95:95:82:51:e2:45:3d: 00:86:e4:03:ce:f1:3b:ad:46:0c:f1:ee:d0:56:6a:e3:7c:8d: e4:f4:0f:97:c5:ac:e7:69:73:7f:76:ce:c8:00:41:62:c0:7c: 74:e8:6d:fc:c2:5d:87:98:ba:a3:be:36:39:97:7c:1e:6b:f7: e2:26:6a:ef:ce:b2:37:6c:15:de:83:84:87:35:7c:21:fa:b4: b4:ef:dc:32:e1:63:a1:ff:25:46:f9:e1:0d:06:4e:89:03:66: 98:a7:65:78:02:73:63:91:6f:f0:c8:a7:ef:10:7e:57:e8:41: b0:b0:23:a4:a6:9f:3a:f1:94:52:a8:87:67:55:d6:1e:c1:9d: 27:b7:54:63:f2:c6:e1:55:c0:2d:3f:d1:2f:67:9e:c7:e1:ed: 68:7d:a4:2b:47:05:ab:29:75:81:b8:05:b1:21:c1:fa:a9:51: 18:72:e0:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcBPaVgIALGPxaoUrBJ7su2ByRqIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk0QkNDNUMwMzEwREIwMTE3RERDMURDMUExNzYwMjZE QjQyMUQ4ODAeFw0yNjAzMjYwMTQ1NTVaFw0yNjAzMjkwODU4NTVaMDMxMTAvBgNV BAMTKDkxQzY1RUQzMDdCNDIxRTQ1MTgyNURBRTlGOUFFNkQzNDA5RTQyOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDANMAFQwt+8h8mKAcHrWAyUsQ5 lBWlaRLOnpsHYLxbPRSZ2r9ZtHJPBkKdfouJA9w+ACeSqwI9pCcHkHLPkWT1AFcV xR0twa+SnoZ/A8N0CLTpZCru1fR0YR15HH70eLsgGuQm53ziY2/pf9SIvcxwkkBW pFLXpEysIEfePRU7sjIfDRMYHPaay1eMoWPW5Um78c1i1N+g0mTkHVqShG9nfb1Y 6q74i2zFC3abA/sFni355yibQ+tnzFjKG/vGUfZjXKNSQztDDTvqTPk9fvE/lIJe a5uUC8BrJO/hDP2ZZ7g+FpOgDKqK7vzrChY0R5a/wKwYU0qJOb44CoGccdJ1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkcZe0we0IeRRgl2un5rm00CeQoswHwYDVR0j BBgwFoAUOUvMXAMQ2wEX3cHcGhdgJttCHYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NzEzNGYxOC0xMWUxLTQxYWUtYmIwNS05ZmJmNDgyMTJiN2QvMC8zOTRCQ0M1QzAz MTBEQjAxMTdEREMxREMxQTE3NjAyNkRCNDIxRDg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzk0QkNDNUMwMzEwREIwMTE3RERDMURDMUExNzYwMjZEQjQy MUQ4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTcxMzRmMTgtMTFlMS00MWFlLWJi MDUtOWZiZjQ4MjEyYjdkLzAvMzk0QkNDNUMwMzEwREIwMTE3RERDMURDMUExNzYw MjZEQjQyMUQ4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJQsxRd2zSeZDCVRxiXOy8Ag88m28G1RqiC 2boQIcRDUEvErDRCq3Al3Zj4aAx1Hxj5rlzrlQ2F0qc2Rz/ZWMjUOgCJv/dHlADQ lEsnfBTsjFcjlZWCUeJFPQCG5APO8TutRgzx7tBWauN8jeT0D5fFrOdpc392zsgA QWLAfHTobfzCXYeYuqO+NjmXfB5r9+Imau/OsjdsFd6DhIc1fCH6tLTv3DLhY6H/ JUb54Q0GTokDZpinZXgCc2ORb/DIp+8QflfoQbCwI6SmnzrxlFKoh2dV1h7BnSe3 VGPyxuFVwC0/0S9nnsfh7Wh9pCtHBaspdYG4BbEhwfqpURhy4DE= -----END CERTIFICATE-----Generated at Thu Mar 26 15:26:23 2026 by rpki-client