$ rpki-client -vvf repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft File: C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft (raw, json) Hash identifier: Z5IgMMBOeQVs83hlNTy2Xat0QkHPne7CO5Hq62OCW88= Subject key identifier: 10:F8:45:F3:69:24:BA:76:88:BC:A0:3E:8E:01:CE:C8:0D:38:F4:CF Authority key identifier: C7:84:C8:EE:6F:7C:E3:C8:47:FC:BD:1C:CD:F2:32:72:00:EF:5C:70 Certificate issuer: /CN=C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70 Certificate serial: 5B69C21953E0BED78492F7F809A4F6F27B65053E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft Manifest number: 01FB Signing time: Wed 25 Mar 2026 07:31:09 +0000 Manifest this update: Wed 25 Mar 2026 07:26:09 +0000 Manifest next update: Sat 28 Mar 2026 18:53:09 +0000 Files and hashes: 1: C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.crl (hash: 3L+ALyqXp2Cksg4ea6i/S2Z0JMZgAO4+3n1g1oukkV4=) 2: 3130332e3137342e31332e302f32342d3234203d3e20313437313730.roa (hash: EANS/BbBSV3D2lqyFzIlb0gYJ6M3G6ZH8tGtZE5xhF4=) 3: 3130332e3137382e38332e302f32342d3234203d3e20313437313730.roa (hash: SPILoD0YuDgHkCG/UcROiBKV6NuzifUgiPor6w8kdtI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.crl rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 18:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:69:c2:19:53:e0:be:d7:84:92:f7:f8:09:a4:f6:f2:7b:65:05:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70 Validity Not Before: Mar 25 07:26:09 2026 GMT Not After : Mar 28 18:53:09 2026 GMT Subject: CN=10F845F36924BA7688BCA03E8E01CEC80D38F4CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b4:60:5a:92:47:85:b9:27:08:0b:c0:ca:89: a6:a6:47:e9:bd:3c:9a:74:41:a1:72:33:a5:a4:54: e4:dd:67:a2:3b:b0:62:62:67:18:e5:60:5f:67:16: 30:0f:ea:d2:e2:e9:61:ec:73:d1:2e:d4:c2:0e:f8: ff:fa:ea:e5:e3:62:f3:94:7f:dc:5c:e1:e2:2c:c3: 34:52:3a:c2:6c:85:c9:dc:cf:78:18:9b:77:b7:b9: 16:d2:4b:ba:4a:04:ac:c5:6a:1c:ba:ec:13:88:ca: 47:e0:64:91:39:0f:45:2b:dc:5f:69:84:59:a1:17: 7c:55:32:8d:bb:d3:1e:6e:4f:c7:97:73:fe:21:54: d6:1a:3d:b1:6e:cc:55:78:b7:79:93:64:a3:dd:d3: 46:20:d5:a2:33:d5:af:4c:fc:3a:0a:97:c9:9b:a2: d2:89:2d:c7:30:68:79:aa:f4:1b:8c:45:c8:3f:12: de:2d:5e:7e:6b:51:d3:8f:8c:99:54:76:6e:93:61: 70:dc:dc:41:03:ce:59:bd:5c:05:cb:ed:eb:26:84: 20:f2:45:3b:a8:f2:fc:15:ed:03:11:bb:11:12:b4: 5b:d1:02:c2:34:ec:85:6a:b5:b4:a0:12:2b:bf:f6: a1:92:2e:b7:dc:e3:02:c0:c5:ae:79:b4:b6:f5:f8: bd:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:F8:45:F3:69:24:BA:76:88:BC:A0:3E:8E:01:CE:C8:0D:38:F4:CF X509v3 Authority Key Identifier: keyid:C7:84:C8:EE:6F:7C:E3:C8:47:FC:BD:1C:CD:F2:32:72:00:EF:5C:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:2d:7d:6b:40:cb:55:bd:0b:27:1c:f7:3a:98:04:2d:1b:0e: 02:b2:be:b0:2d:ff:5f:85:25:1a:86:a6:8f:d7:0f:46:7c:a1: 62:f5:cb:47:7b:4d:4f:3c:38:c2:07:50:e9:42:12:74:cf:8b: 2a:60:dc:f5:30:34:ba:1c:a1:a8:4b:1e:e7:0f:f4:24:30:29: 93:c8:d5:ec:91:2d:17:74:ad:10:7a:11:c6:87:46:14:50:25: 55:10:07:b6:9e:b1:f6:48:71:b0:b8:66:5f:4d:db:5a:ff:fe: 99:29:b2:2e:03:85:09:85:21:18:42:73:00:42:e6:7d:06:cc: a1:72:29:ba:0e:d3:55:de:68:d8:2d:8f:bc:8e:b8:57:84:f8: f0:3e:5b:7c:a0:59:2b:3d:62:01:22:a9:97:87:59:96:ae:6e: 91:ed:a5:38:51:96:0e:fc:16:8f:16:9f:04:4e:68:a6:e0:b7: fa:8f:96:38:97:08:83:d5:ff:3e:0a:51:af:d6:e1:29:74:f5: d1:7d:81:d1:b6:b9:5a:18:c3:a1:66:98:32:8b:fa:77:e6:8b: 7f:a0:82:b9:c4:c1:79:63:47:22:09:90:c7:c7:23:93:ad:a2: 0d:50:9e:b1:6d:39:f5:7b:f3:03:85:16:f2:ed:90:54:25:0f: 5e:f8:fd:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW2nCGVPgvteEkvf4CaT28ntlBT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc4NEM4RUU2RjdDRTNDODQ3RkNCRDFDQ0RGMjMyNzIw MEVGNUM3MDAeFw0yNjAzMjUwNzI2MDlaFw0yNjAzMjgxODUzMDlaMDMxMTAvBgNV BAMTKDEwRjg0NUYzNjkyNEJBNzY4OEJDQTAzRThFMDFDRUM4MEQzOEY0Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKtGBakkeFuScIC8DKiaamR+m9 PJp0QaFyM6WkVOTdZ6I7sGJiZxjlYF9nFjAP6tLi6WHsc9Eu1MIO+P/66uXjYvOU f9xc4eIswzRSOsJshcncz3gYm3e3uRbSS7pKBKzFahy67BOIykfgZJE5D0Ur3F9p hFmhF3xVMo270x5uT8eXc/4hVNYaPbFuzFV4t3mTZKPd00Yg1aIz1a9M/DoKl8mb otKJLccwaHmq9BuMRcg/Et4tXn5rUdOPjJlUdm6TYXDc3EEDzlm9XAXL7esmhCDy RTuo8vwV7QMRuxEStFvRAsI07IVqtbSgEiu/9qGSLrfc4wLAxa55tLb1+L2PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEPhF82kkunaIvKA+jgHOyA049M8wHwYDVR0j BBgwFoAUx4TI7m9848hH/L0czfIycgDvXHAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZmRlMWYwZS0yMzFmLTQ0Y2UtOTBjMy0zMmFjZGY5ZDI2YzAvMC9DNzg0QzhFRTZG N0NFM0M4NDdGQ0JEMUNDREYyMzI3MjAwRUY1QzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzc4NEM4RUU2RjdDRTNDODQ3RkNCRDFDQ0RGMjMyNzIwMEVG NUM3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWZkZTFmMGUtMjMxZi00NGNlLTkw YzMtMzJhY2RmOWQyNmMwLzAvQzc4NEM4RUU2RjdDRTNDODQ3RkNCRDFDQ0RGMjMy NzIwMEVGNUM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADEtfWtAy1W9Cycc9zqYBC0bDgKyvrAt/1+F JRqGpo/XD0Z8oWL1y0d7TU88OMIHUOlCEnTPiypg3PUwNLocoahLHucP9CQwKZPI 1eyRLRd0rRB6EcaHRhRQJVUQB7aesfZIcbC4Zl9N21r//pkpsi4DhQmFIRhCcwBC 5n0GzKFyKboO01XeaNgtj7yOuFeE+PA+W3ygWSs9YgEiqZeHWZaubpHtpThRlg78 Fo8WnwROaKbgt/qPljiXCIPV/z4KUa/W4Sl09dF9gdG2uVoYw6FmmDKL+nfmi3+g grnEwXljRyIJkMfHI5Otog1QnrFtOfV78wOFFvLtkFQlD174/a0= -----END CERTIFICATE-----Generated at Thu Mar 26 11:31:32 2026 by rpki-client