$ rpki-client -vvf repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft File: 71876CD3DD087E9543A347F614A4D24A87A40F95.mft (raw, json) Hash identifier: 3LGpMEtgafhZ29x/JWHe+IBHklLtC35wgo5SkcA2i5k= Subject key identifier: EA:0D:22:B5:9E:38:24:7B:0C:7C:89:E8:9F:EE:F7:E8:EA:BF:EF:43 Authority key identifier: 71:87:6C:D3:DD:08:7E:95:43:A3:47:F6:14:A4:D2:4A:87:A4:0F:95 Certificate issuer: /CN=71876CD3DD087E9543A347F614A4D24A87A40F95 Certificate serial: 74A6F004955A2D76B8B8F5F6F79617C1904A08A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71876CD3DD087E9543A347F614A4D24A87A40F95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft Manifest number: 0208 Signing time: Tue 24 Mar 2026 11:10:52 +0000 Manifest this update: Tue 24 Mar 2026 11:05:52 +0000 Manifest next update: Fri 27 Mar 2026 15:10:52 +0000 Files and hashes: 1: 3130332e3130372e3230362e302f32342d3234203d3e20313431313238.roa (hash: o+ObFNPOeoy9QHMr9JkuLi0Oplv3Nwb5WNwb7QDMg90=) 2: 71876CD3DD087E9543A347F614A4D24A87A40F95.crl (hash: +KUqqe4E3rv6snmZiOCNcOQrMQ/C1EyYm3pVg7jEZKY=) 3: 3130332e3135382e3133302e302f32342d3234203d3e20313431313238.roa (hash: InJPaa/K/Tdw95KsetWVBO6eC2FHgWnfV4A1F9baTg0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.crl rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71876CD3DD087E9543A347F614A4D24A87A40F95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 15:10:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:a6:f0:04:95:5a:2d:76:b8:b8:f5:f6:f7:96:17:c1:90:4a:08:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71876CD3DD087E9543A347F614A4D24A87A40F95 Validity Not Before: Mar 24 11:05:52 2026 GMT Not After : Mar 27 15:10:52 2026 GMT Subject: CN=EA0D22B59E38247B0C7C89E89FEEF7E8EABFEF43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c6:36:17:48:10:b3:3e:cc:89:cb:88:fc:f5: 6b:67:e6:cc:51:c7:a4:b4:07:bf:ca:dc:48:53:87: 46:94:ef:58:20:ec:2d:4f:37:c6:81:69:7a:93:40: f9:d4:cb:22:6f:ac:95:1e:85:fb:fd:e3:e5:6e:77: eb:d0:6c:fd:31:df:c2:41:b3:b0:1d:bf:bb:f4:c9: 36:4e:73:1e:79:e8:e9:2b:db:c0:ad:7e:f7:93:2f: d1:68:b9:4a:0a:49:f6:14:19:10:e0:f9:d7:3b:42: 6b:fe:0d:71:15:b5:5b:28:d2:6d:d3:62:32:55:29: 06:68:6f:a6:d9:8b:d3:52:f0:ec:81:39:f5:c2:70: 4e:67:e9:df:b0:1e:ed:c6:b0:89:a9:0a:87:dc:0a: b6:48:a2:df:b9:ae:7d:b2:b1:cd:11:f1:fb:43:17: 9c:32:c0:a1:6e:df:b5:de:3b:4c:62:71:06:ff:2d: ad:27:7f:98:1a:66:a6:78:90:16:46:9f:9a:b6:94: 57:e6:f5:6f:f3:d9:eb:7c:36:2f:ed:82:b7:b9:c4: ea:42:25:9a:b3:62:99:9b:ce:98:67:bc:85:2f:39: 85:92:f2:e0:35:25:72:61:aa:4f:d6:69:2a:69:82: c5:63:c5:b8:92:d5:52:ee:73:1c:48:be:14:bf:2b: 20:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:0D:22:B5:9E:38:24:7B:0C:7C:89:E8:9F:EE:F7:E8:EA:BF:EF:43 X509v3 Authority Key Identifier: keyid:71:87:6C:D3:DD:08:7E:95:43:A3:47:F6:14:A4:D2:4A:87:A4:0F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71876CD3DD087E9543A347F614A4D24A87A40F95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:54:f4:88:8f:62:56:0a:3e:ca:12:19:14:50:21:d5:ef:3b: 19:b5:2a:f5:1c:b4:37:9b:38:13:33:92:29:5a:6d:6e:1d:44: 84:83:0e:c8:ae:32:3b:d7:67:62:52:a7:88:db:b0:f9:a6:5a: ef:80:4b:1a:05:c2:d0:95:05:30:d8:a7:be:be:20:5a:82:61: a5:5b:8f:2d:ae:fa:34:b1:ce:26:41:5c:dc:56:6a:19:31:73: 0f:8a:35:b8:a2:24:5c:88:70:31:e1:f6:df:6e:8a:31:42:5e: ab:f3:d7:b6:28:80:c6:58:f2:df:ed:c6:ee:8b:d2:f2:14:3a: e6:74:b5:62:28:41:dc:ee:33:f5:9f:23:6b:cb:0d:e7:ab:0e: 8c:1a:41:21:6c:b9:e5:f2:ca:74:18:11:da:44:3e:58:81:48: 60:6e:75:f5:b1:8d:03:17:a9:78:b2:71:fe:6b:ad:26:a7:e9: 93:22:4f:6b:4d:44:0d:1e:4d:28:d4:d0:77:8f:38:76:15:d4: f8:77:b1:0f:ec:16:a7:e9:a0:ac:ea:d6:88:25:9b:c6:7e:9d: 8b:b9:3f:c3:a1:39:f2:a5:a0:f5:e7:c9:b5:44:a5:d2:4f:27: 9b:a9:ff:fa:70:b9:a0:b7:4b:e6:05:32:68:f6:75:fc:c8:89: d0:8f:07:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdKbwBJVaLXa4uPX295YXwZBKCKcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE4NzZDRDNERDA4N0U5NTQzQTM0N0Y2MTRBNEQyNEE4 N0E0MEY5NTAeFw0yNjAzMjQxMTA1NTJaFw0yNjAzMjcxNTEwNTJaMDMxMTAvBgNV BAMTKEVBMEQyMkI1OUUzODI0N0IwQzdDODlFODlGRUVGN0U4RUFCRkVGNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqxjYXSBCzPsyJy4j89Wtn5sxR x6S0B7/K3EhTh0aU71gg7C1PN8aBaXqTQPnUyyJvrJUehfv94+Vud+vQbP0x38JB s7Adv7v0yTZOcx556Okr28CtfveTL9FouUoKSfYUGRDg+dc7Qmv+DXEVtVso0m3T YjJVKQZob6bZi9NS8OyBOfXCcE5n6d+wHu3GsImpCofcCrZIot+5rn2ysc0R8ftD F5wywKFu37XeO0xicQb/La0nf5gaZqZ4kBZGn5q2lFfm9W/z2et8Ni/tgre5xOpC JZqzYpmbzphnvIUvOYWS8uA1JXJhqk/WaSppgsVjxbiS1VLucxxIvhS/KyB/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6g0itZ44JHsMfInon+736Oq/70MwHwYDVR0j BBgwFoAUcYds090IfpVDo0f2FKTSSoekD5UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NWRlY2E4Mi04OWFiLTQ1ODItOGU4Mi04ZWM4YTUxZmVjNDIvMC83MTg3NkNEM0RE MDg3RTk1NDNBMzQ3RjYxNEE0RDI0QTg3QTQwRjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzE4NzZDRDNERDA4N0U5NTQzQTM0N0Y2MTRBNEQyNEE4N0E0 MEY5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTVkZWNhODItODlhYi00NTgyLThl ODItOGVjOGE1MWZlYzQyLzAvNzE4NzZDRDNERDA4N0U5NTQzQTM0N0Y2MTRBNEQy NEE4N0E0MEY5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKNU9IiPYlYKPsoSGRRQIdXvOxm1KvUctDeb OBMzkilabW4dRISDDsiuMjvXZ2JSp4jbsPmmWu+ASxoFwtCVBTDYp76+IFqCYaVb jy2u+jSxziZBXNxWahkxcw+KNbiiJFyIcDHh9t9uijFCXqvz17YogMZY8t/txu6L 0vIUOuZ0tWIoQdzuM/WfI2vLDeerDowaQSFsueXyynQYEdpEPliBSGBudfWxjQMX qXiycf5rrSan6ZMiT2tNRA0eTSjU0HePOHYV1Ph3sQ/sFqfpoKzq1oglm8Z+nYu5 P8OhOfKloPXnybVEpdJPJ5up//pwuaC3S+YFMmj2dfzIidCPB8o= -----END CERTIFICATE-----Generated at Thu Mar 26 05:36:55 2026 by rpki-client