$ rpki-client -vvf repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.mft File: 75F87E19F3D7CA128A64BB0695F7DD416C17CC96.mft (raw, json) Hash identifier: uz20/+Rz8PMi1zCO+s4k/ZUWzBDK7SksTsfQvCd96+k= Subject key identifier: A5:FA:D3:0B:7A:AE:01:52:14:38:3B:85:79:96:1C:7E:B7:16:21:FF Authority key identifier: 75:F8:7E:19:F3:D7:CA:12:8A:64:BB:06:95:F7:DD:41:6C:17:CC:96 Certificate issuer: /CN=75F87E19F3D7CA128A64BB0695F7DD416C17CC96 Certificate serial: 3FBA421BEC8295143B79C5884828FD1D2DE34E3C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.mft Manifest number: 01FE Signing time: Wed 25 Mar 2026 12:52:20 +0000 Manifest this update: Wed 25 Mar 2026 12:47:20 +0000 Manifest next update: Sat 28 Mar 2026 15:22:20 +0000 Files and hashes: 1: 3130332e37392e35302e302f32332d3233203d3e20313337323839.roa (hash: kjJHpX400POBZ9FlMf7b79LcwWfnSnzD5KY03dFlaSQ=) 2: 3130332e37392e35312e302f32342d3234203d3e20313337323839.roa (hash: Pz+PV87koaQ3kPMJ5gPU/if4f0LOXPtq+HAAi9cx8ZY=) 3: 75F87E19F3D7CA128A64BB0695F7DD416C17CC96.crl (hash: vtyWWM1iRi3WBALKo4ElpwgrEoubfPOefz1GzMEs8MI=) 4: 3130332e37392e35302e302f32342d3234203d3e20313337323839.roa (hash: 5sqgaEJx6XUtjCixcNOClY5Lhb81nBxRqHV7wJSD8SQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.crl rsync://repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 15:22:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:ba:42:1b:ec:82:95:14:3b:79:c5:88:48:28:fd:1d:2d:e3:4e:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75F87E19F3D7CA128A64BB0695F7DD416C17CC96 Validity Not Before: Mar 25 12:47:20 2026 GMT Not After : Mar 28 15:22:20 2026 GMT Subject: CN=A5FAD30B7AAE015214383B8579961C7EB71621FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7b:06:32:f0:6d:4c:42:73:53:5f:94:dc:ae: a7:c8:54:32:5e:c3:af:8c:ff:ca:2b:da:e6:5d:81: be:e3:94:a2:a6:d0:43:a6:b5:50:20:68:8d:28:fb: aa:c8:c3:00:d7:e0:8d:6b:a9:78:cd:f3:c0:06:95: a3:d7:df:0a:95:8c:5f:26:5e:81:26:42:00:f1:5c: f2:0d:b9:50:04:fe:fd:7f:a9:78:b9:6b:1d:ca:03: 45:2d:ec:30:34:4b:ca:b9:8e:1b:c5:be:b3:c5:49: 67:e9:2f:85:cf:95:20:24:fc:bf:9b:f7:5b:b4:8d: ff:d0:e3:b5:e8:9b:32:8c:31:8d:57:35:ed:47:b7: 71:ad:27:f2:8b:21:9b:24:e4:f5:88:d2:b5:5c:1a: ea:e1:bf:22:02:39:53:74:bc:ab:66:87:32:aa:68: 38:c3:19:4b:81:72:07:f7:40:cc:f5:a9:fd:fb:1a: b7:fa:e3:d6:31:78:fa:0c:43:cf:b1:86:b5:12:97: 08:68:ea:a3:16:d2:4a:c3:b3:78:ed:05:a0:5e:02: ed:63:ae:3d:35:fc:15:a9:17:4c:ac:66:3b:00:af: 4f:87:86:ea:c7:14:f5:bb:6f:8e:3e:80:93:0b:f0: 86:14:a3:7f:b3:d2:3e:db:34:19:ce:d6:67:fc:1e: 6d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:FA:D3:0B:7A:AE:01:52:14:38:3B:85:79:96:1C:7E:B7:16:21:FF X509v3 Authority Key Identifier: keyid:75:F8:7E:19:F3:D7:CA:12:8A:64:BB:06:95:F7:DD:41:6C:17:CC:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:6f:f9:f7:2b:26:eb:6a:59:20:10:35:39:9c:55:35:81:db: 14:ec:cc:9e:2d:79:51:80:83:f4:27:59:da:10:e2:e2:e7:ae: a5:7b:41:25:40:b8:4f:a5:b0:e2:36:63:59:40:a3:05:81:10: 47:62:20:0b:07:e2:73:62:03:cc:4d:cf:a3:06:0a:0c:19:62: f5:e0:43:90:56:16:49:c3:8f:8c:06:88:b5:86:21:3f:5b:a4: 53:cd:4c:7f:3b:70:6f:74:92:f8:2e:c7:ed:5f:ab:54:0e:b8: 4e:2c:7f:c0:e2:7b:fe:4b:12:15:f2:c3:2a:42:62:b7:0c:76: 9d:1c:49:49:06:ce:1d:13:07:94:d7:87:57:08:f6:fc:75:48: 2f:c1:86:47:0d:77:0d:b9:f1:bb:2c:cf:fd:59:66:df:e3:52: 9e:14:9e:c9:7c:9b:6e:1b:56:78:28:be:4e:84:d1:a0:8c:ab: d6:d6:56:c6:80:fe:3b:7e:a8:7a:2f:aa:d9:3a:ea:3c:0b:9a: 71:ee:0f:70:e6:98:16:b2:2b:c0:61:a5:13:c5:cf:78:73:cf: c3:ce:e5:1a:20:d9:fa:d4:91:bd:57:8e:87:ff:2d:cc:83:35: d0:24:38:f5:83:c2:a7:51:bc:62:f9:c3:66:1b:ad:bf:66:db: 42:6f:76:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP7pCG+yClRQ7ecWISCj9HS3jTjwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzVGODdFMTlGM0Q3Q0ExMjhBNjRCQjA2OTVGN0RENDE2 QzE3Q0M5NjAeFw0yNjAzMjUxMjQ3MjBaFw0yNjAzMjgxNTIyMjBaMDMxMTAvBgNV BAMTKEE1RkFEMzBCN0FBRTAxNTIxNDM4M0I4NTc5OTYxQzdFQjcxNjIxRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSewYy8G1MQnNTX5TcrqfIVDJe w6+M/8or2uZdgb7jlKKm0EOmtVAgaI0o+6rIwwDX4I1rqXjN88AGlaPX3wqVjF8m XoEmQgDxXPINuVAE/v1/qXi5ax3KA0Ut7DA0S8q5jhvFvrPFSWfpL4XPlSAk/L+b 91u0jf/Q47XomzKMMY1XNe1Ht3GtJ/KLIZsk5PWI0rVcGurhvyICOVN0vKtmhzKq aDjDGUuBcgf3QMz1qf37Grf649YxePoMQ8+xhrUSlwho6qMW0krDs3jtBaBeAu1j rj01/BWpF0ysZjsAr0+HhurHFPW7b44+gJML8IYUo3+z0j7bNBnO1mf8Hm2vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpfrTC3quAVIUODuFeZYcfrcWIf8wHwYDVR0j BBgwFoAUdfh+GfPXyhKKZLsGlffdQWwXzJYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YmNhZWEzYi1iZDdmLTQ4MWEtOWJjNy1hYTE2MGQwNWQyNjIvMC83NUY4N0UxOUYz RDdDQTEyOEE2NEJCMDY5NUY3REQ0MTZDMTdDQzk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzVGODdFMTlGM0Q3Q0ExMjhBNjRCQjA2OTVGN0RENDE2QzE3 Q0M5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWJjYWVhM2ItYmQ3Zi00ODFhLTli YzctYWExNjBkMDVkMjYyLzAvNzVGODdFMTlGM0Q3Q0ExMjhBNjRCQjA2OTVGN0RE NDE2QzE3Q0M5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALZv+fcrJutqWSAQNTmcVTWB2xTszJ4teVGA g/QnWdoQ4uLnrqV7QSVAuE+lsOI2Y1lAowWBEEdiIAsH4nNiA8xNz6MGCgwZYvXg Q5BWFknDj4wGiLWGIT9bpFPNTH87cG90kvgux+1fq1QOuE4sf8Die/5LEhXywypC YrcMdp0cSUkGzh0TB5TXh1cI9vx1SC/BhkcNdw258bssz/1ZZt/jUp4Unsl8m24b Vngovk6E0aCMq9bWVsaA/jt+qHovqtk66jwLmnHuD3DmmBayK8BhpRPFz3hzz8PO 5Rog2frUkb1Xjof/LcyDNdAkOPWDwqdRvGL5w2Ybrb9m20JvdnQ= -----END CERTIFICATE-----Generated at Thu Mar 26 13:07:39 2026 by rpki-client