$ rpki-client -vvf repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft File: D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft (raw, json) Hash identifier: P5B9BU5cQdokzySF5tNZDWj1yZjPcNkj3F2AwANKXnw= Subject key identifier: A0:B3:B4:95:A6:F6:B1:BF:A4:B2:0C:AA:EC:5E:CB:CA:7D:89:8B:79 Authority key identifier: D0:0F:48:BC:87:79:10:FD:D0:B7:FF:22:9F:D7:DA:51:67:69:C9:0B Certificate issuer: /CN=D00F48BC877910FDD0B7FF229FD7DA516769C90B Certificate serial: 197B4E730E452E61292E5264013B2786817EF075 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D00F48BC877910FDD0B7FF229FD7DA516769C90B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft Manifest number: 012F Signing time: Tue 24 Mar 2026 15:31:19 +0000 Manifest this update: Tue 24 Mar 2026 15:26:19 +0000 Manifest next update: Sat 28 Mar 2026 01:17:19 +0000 Files and hashes: 1: 3135372e36362e3137362e302f32342d3234203d3e20313532373536.roa (hash: /s+DQzvA6xhmuW7v3g8lejSeio++18zSamEuf0+coIs=) 2: D00F48BC877910FDD0B7FF229FD7DA516769C90B.crl (hash: 7DStiBn4AkP5EsT1enRrHsN4AAlEfvjVLxRTeR3ablw=) 3: 3135372e36362e3137362e302f32332d3233203d3e20313532373536.roa (hash: ep04UBArCBQWkLiZKMcJT4iBnkYi8gyyZr2lPtSwbI8=) 4: 3135372e36362e3137372e302f32342d3234203d3e20313532373536.roa (hash: ihqP0wUIsQgvCUAc6MPq5r3ZCl+93CJYEtJ3kKzkDF0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.crl rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D00F48BC877910FDD0B7FF229FD7DA516769C90B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 01:17:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:7b:4e:73:0e:45:2e:61:29:2e:52:64:01:3b:27:86:81:7e:f0:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D00F48BC877910FDD0B7FF229FD7DA516769C90B Validity Not Before: Mar 24 15:26:19 2026 GMT Not After : Mar 28 01:17:19 2026 GMT Subject: CN=A0B3B495A6F6B1BFA4B20CAAEC5ECBCA7D898B79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f6:89:1b:06:ee:29:5a:6d:df:de:4d:8a:09: bf:4e:28:b5:e2:48:6d:e2:4b:65:76:a5:b9:13:35: a5:b3:95:62:0d:ae:b3:a4:c4:ab:64:f5:9d:be:1f: ce:93:0f:6b:9d:6f:a9:1c:0d:43:86:a3:cc:ba:da: f7:f7:85:44:43:c2:6b:9f:9f:91:03:a3:1a:ad:13: 71:c0:07:95:31:3d:27:3d:63:e7:02:07:60:30:63: a5:29:39:c5:c5:1b:aa:06:48:57:04:f2:6b:7c:63: 32:3a:41:75:71:a8:89:6c:65:06:e2:6a:39:e4:a4: 80:74:4d:b8:f9:b6:c0:a2:5c:7d:eb:df:ee:e2:b7: 56:f1:ca:67:25:ad:77:4b:fc:0a:0c:ad:e0:18:4f: 16:9c:64:a3:b4:ec:83:88:86:5e:d4:c1:f5:4b:ad: b9:b1:10:77:48:fe:0c:23:67:49:2b:0c:25:01:44: 3f:09:94:e3:dd:b2:80:96:02:52:74:b4:04:44:68: 97:a4:2d:47:14:01:d0:1b:0b:6f:28:52:46:67:67: f8:42:82:e4:48:89:b6:cf:ff:fd:cf:1b:05:92:42: 45:99:86:75:0d:3f:44:4c:0a:85:7f:62:2c:93:87: cd:d7:4f:a5:e3:ca:82:4a:40:d7:bc:f5:43:52:cb: e6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B3:B4:95:A6:F6:B1:BF:A4:B2:0C:AA:EC:5E:CB:CA:7D:89:8B:79 X509v3 Authority Key Identifier: keyid:D0:0F:48:BC:87:79:10:FD:D0:B7:FF:22:9F:D7:DA:51:67:69:C9:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D00F48BC877910FDD0B7FF229FD7DA516769C90B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:24:48:58:28:84:93:f0:fd:f9:a1:12:5f:a2:5c:b4:e5:cb: d0:27:d5:6b:bd:0a:b6:89:d7:be:93:e8:ec:c7:5f:50:20:2d: 18:db:55:a5:f9:e4:a9:89:d6:29:99:c8:da:20:db:3c:7e:ed: c0:44:50:5c:36:78:67:4c:dc:e1:92:bc:d0:b3:12:9f:8f:84: 45:09:78:06:6b:7d:b7:63:69:ba:b1:1c:bb:10:24:02:8a:40: 66:6d:3d:7b:43:69:fa:1c:5a:66:24:73:d8:e9:d1:e1:03:6b: af:0f:4e:89:f4:9a:78:8f:bc:02:47:ce:24:ac:dd:98:f9:ab: b6:7e:ec:68:93:de:28:9c:54:1a:26:26:ba:0e:1f:e6:91:57: 6f:08:77:cf:14:c8:e9:f0:f6:62:2e:e2:23:64:53:e8:89:bd: 97:de:e9:c7:f6:7c:0f:26:9d:c9:05:3b:9a:f7:b5:bf:cc:18: d9:c6:d2:e5:eb:d2:2b:43:3d:a3:11:f8:f1:d0:f7:e1:83:10: 30:82:46:ca:29:e8:ad:b9:54:e8:0a:c0:5d:ca:db:10:4d:23: fe:06:65:b5:e8:71:dd:eb:d1:fb:67:2e:d0:d5:59:e0:0d:07: 3a:70:52:b7:a5:da:45:51:1e:b6:1f:fd:21:cf:7c:30:0c:79: 50:35:c0:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGXtOcw5FLmEpLlJkATsnhoF+8HUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDAwRjQ4QkM4Nzc5MTBGREQwQjdGRjIyOUZEN0RBNTE2 NzY5QzkwQjAeFw0yNjAzMjQxNTI2MTlaFw0yNjAzMjgwMTE3MTlaMDMxMTAvBgNV BAMTKEEwQjNCNDk1QTZGNkIxQkZBNEIyMENBQUVDNUVDQkNBN0Q4OThCNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC29okbBu4pWm3f3k2KCb9OKLXi SG3iS2V2pbkTNaWzlWINrrOkxKtk9Z2+H86TD2udb6kcDUOGo8y62vf3hURDwmuf n5EDoxqtE3HAB5UxPSc9Y+cCB2AwY6UpOcXFG6oGSFcE8mt8YzI6QXVxqIlsZQbi ajnkpIB0Tbj5tsCiXH3r3+7it1bxymclrXdL/AoMreAYTxacZKO07IOIhl7UwfVL rbmxEHdI/gwjZ0krDCUBRD8JlOPdsoCWAlJ0tAREaJekLUcUAdAbC28oUkZnZ/hC guRIibbP//3PGwWSQkWZhnUNP0RMCoV/YiyTh83XT6XjyoJKQNe89UNSy+b3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoLO0lab2sb+ksgyq7F7Lyn2Ji3kwHwYDVR0j BBgwFoAU0A9IvId5EP3Qt/8in9faUWdpyQswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWI0ZTE0ZC0wMjFkLTQwZGMtOTIzYS1jMTJkMWFmNDQzYjUvMC9EMDBGNDhCQzg3 NzkxMEZERDBCN0ZGMjI5RkQ3REE1MTY3NjlDOTBCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDAwRjQ4QkM4Nzc5MTBGREQwQjdGRjIyOUZEN0RBNTE2NzY5 QzkwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFiNGUxNGQtMDIxZC00MGRjLTky M2EtYzEyZDFhZjQ0M2I1LzAvRDAwRjQ4QkM4Nzc5MTBGREQwQjdGRjIyOUZEN0RB NTE2NzY5QzkwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHokSFgohJPw/fmhEl+iXLTly9An1Wu9CraJ 176T6OzHX1AgLRjbVaX55KmJ1imZyNog2zx+7cBEUFw2eGdM3OGSvNCzEp+PhEUJ eAZrfbdjabqxHLsQJAKKQGZtPXtDafocWmYkc9jp0eEDa68PTon0mniPvAJHziSs 3Zj5q7Z+7GiT3iicVBomJroOH+aRV28Id88UyOnw9mIu4iNkU+iJvZfe6cf2fA8m nckFO5r3tb/MGNnG0uXr0itDPaMR+PHQ9+GDEDCCRsop6K25VOgKwF3K2xBNI/4G ZbXocd3r0ftnLtDVWeANBzpwUrel2kVRHrYf/SHPfDAMeVA1wDc= -----END CERTIFICATE-----Generated at Thu Mar 26 13:51:52 2026 by rpki-client