$ rpki-client -vvf repo-rpki.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/92BD4E7FB69716E8F64947A59903AFF77CCBE441.mft File: 92BD4E7FB69716E8F64947A59903AFF77CCBE441.mft (raw, json) Hash identifier: Q1FCN6321nNm19aEUU+iSaz+2MzYlEr08dcjifWMDPc= Subject key identifier: E3:FB:94:22:2F:7D:04:62:AD:99:87:E2:A4:BA:83:F9:C7:B3:CF:44 Authority key identifier: 92:BD:4E:7F:B6:97:16:E8:F6:49:47:A5:99:03:AF:F7:7C:CB:E4:41 Certificate issuer: /CN=92BD4E7FB69716E8F64947A59903AFF77CCBE441 Certificate serial: 275C3D6C59CCF43E222B782D2ED6F1E02F7A0B34 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/92BD4E7FB69716E8F64947A59903AFF77CCBE441.cer Subject info access: rsync://repo-rpki.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/92BD4E7FB69716E8F64947A59903AFF77CCBE441.mft Manifest number: D7 Signing time: Wed 25 Mar 2026 09:32:06 +0000 Manifest this update: Wed 25 Mar 2026 09:27:06 +0000 Manifest next update: Sat 28 Mar 2026 17:15:06 +0000 Files and hashes: 1: 3136302e32322e3231382e302f32342d3234203d3e20313533303832.roa (hash: wkYiZl4OD2/WIQUb3uhI0STi5SwbOPkvcCiktl/4DZc=) 2: 3136302e32322e3231382e302f32332d3233203d3e20313533303832.roa (hash: zf1MaGLqV/tw8WvNNhputR/GL/ayDucvUD33jfoZSO8=) 3: 92BD4E7FB69716E8F64947A59903AFF77CCBE441.crl (hash: nsZsD9E1P0MPZHwBN1cJ4W/zT6Ut/OKPWc6eel6U1lg=) 4: 3136302e32322e3231392e302f32342d3234203d3e20313533303832.roa (hash: xK1cySsZG++2I6rCYVHEbww86m1izKvQx6hrvB42kz0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/92BD4E7FB69716E8F64947A59903AFF77CCBE441.crl rsync://repo-rpki.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/92BD4E7FB69716E8F64947A59903AFF77CCBE441.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/92BD4E7FB69716E8F64947A59903AFF77CCBE441.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 17:15:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:5c:3d:6c:59:cc:f4:3e:22:2b:78:2d:2e:d6:f1:e0:2f:7a:0b:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92BD4E7FB69716E8F64947A59903AFF77CCBE441 Validity Not Before: Mar 25 09:27:06 2026 GMT Not After : Mar 28 17:15:06 2026 GMT Subject: CN=E3FB94222F7D0462AD9987E2A4BA83F9C7B3CF44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c1:f7:e9:55:78:1e:7c:2b:8b:ba:f7:88:2f: 25:0f:0b:c3:66:bb:88:01:4b:90:d4:f7:3a:23:44: dc:3b:66:01:cd:41:f0:be:d5:4e:65:2e:6d:64:da: 7f:eb:ef:3e:52:ee:80:60:e6:10:ea:68:b9:2e:2b: 06:6d:f9:62:ab:84:46:6c:9c:53:ba:e1:88:a9:9b: 21:2c:7f:13:2d:4b:dc:9b:1a:de:84:12:6d:41:46: e0:07:df:e2:d4:ce:31:e2:29:ea:f3:7a:d5:37:ba: a1:41:28:c6:b2:09:6c:50:f1:a8:d6:44:73:86:b5: 93:1f:62:cf:6c:da:3a:ac:13:96:38:b5:a2:7b:9c: 58:c0:56:67:5a:59:17:40:27:19:d1:31:74:f6:3c: 23:37:8d:29:59:e7:02:e0:70:ac:3b:93:26:08:e0: 47:3e:5f:1c:e3:45:91:34:14:09:37:78:d2:77:a4: dd:df:99:0b:fa:cb:63:7f:7b:8f:ab:24:cc:11:36: d5:e5:d4:25:5d:17:5b:4c:88:1a:96:9a:cc:70:f3: 93:78:96:57:a2:f7:33:00:3d:5b:d8:af:74:b3:cb: da:6b:4a:5f:11:ed:b6:3f:bc:e4:21:dd:22:42:97: 98:90:03:ea:ae:95:1c:11:ad:3e:41:9f:6c:94:0c: 39:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:FB:94:22:2F:7D:04:62:AD:99:87:E2:A4:BA:83:F9:C7:B3:CF:44 X509v3 Authority Key Identifier: keyid:92:BD:4E:7F:B6:97:16:E8:F6:49:47:A5:99:03:AF:F7:7C:CB:E4:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/92BD4E7FB69716E8F64947A59903AFF77CCBE441.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/92BD4E7FB69716E8F64947A59903AFF77CCBE441.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/92BD4E7FB69716E8F64947A59903AFF77CCBE441.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:f6:d4:ba:82:1f:d2:f7:c4:b4:4e:6f:45:16:e8:5c:2f:b5: 15:3c:a9:7c:dc:f5:4e:c8:aa:74:e4:03:fa:f7:2b:ee:01:32: 7d:27:2c:23:30:3f:32:e2:a9:28:78:08:b4:12:1d:b5:10:d8: b0:05:a4:cc:35:4f:0a:34:49:d5:1c:30:ab:5c:13:c6:f7:cd: 65:5f:dd:33:4c:48:e3:4d:a1:72:8a:dd:1f:86:ec:3e:4e:06: 3d:7d:45:c7:b6:49:bc:ea:17:d1:54:20:b5:12:13:53:fb:66: e8:d2:3b:ed:c1:73:1e:ab:26:13:68:29:25:78:da:8b:83:f7: 7d:03:ac:76:ef:b9:7d:62:12:7d:9f:e9:41:9c:3a:ae:1e:28: 7e:03:a2:c1:a4:83:89:98:28:35:04:cc:44:b4:ca:10:f9:77: 5b:70:93:fe:10:a3:aa:8d:b5:09:39:3d:f4:63:c6:56:7f:40: 0d:52:e0:5c:ad:46:32:3a:66:af:8a:75:a3:2a:99:ef:87:83: 69:ae:a1:d2:38:da:e0:4e:6e:6a:51:1e:d8:54:5c:37:49:13: ef:86:6c:cc:0f:ec:b1:71:30:aa:1a:ac:55:49:14:b6:50:4d: c1:d1:46:f7:b2:26:9d:4c:31:51:f9:09:8d:90:84:15:b9:4c: 9b:e8:b9:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ1w9bFnM9D4iK3gtLtbx4C96CzQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJCRDRFN0ZCNjk3MTZFOEY2NDk0N0E1OTkwM0FGRjc3 Q0NCRTQ0MTAeFw0yNjAzMjUwOTI3MDZaFw0yNjAzMjgxNzE1MDZaMDMxMTAvBgNV BAMTKEUzRkI5NDIyMkY3RDA0NjJBRDk5ODdFMkE0QkE4M0Y5QzdCM0NGNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/wffpVXgefCuLuveILyUPC8Nm u4gBS5DU9zojRNw7ZgHNQfC+1U5lLm1k2n/r7z5S7oBg5hDqaLkuKwZt+WKrhEZs nFO64YipmyEsfxMtS9ybGt6EEm1BRuAH3+LUzjHiKerzetU3uqFBKMayCWxQ8ajW RHOGtZMfYs9s2jqsE5Y4taJ7nFjAVmdaWRdAJxnRMXT2PCM3jSlZ5wLgcKw7kyYI 4Ec+XxzjRZE0FAk3eNJ3pN3fmQv6y2N/e4+rJMwRNtXl1CVdF1tMiBqWmsxw85N4 llei9zMAPVvYr3Szy9prSl8R7bY/vOQh3SJCl5iQA+qulRwRrT5Bn2yUDDkPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4/uUIi99BGKtmYfipLqD+cezz0QwHwYDVR0j BBgwFoAUkr1Of7aXFuj2SUelmQOv93zL5EEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Y2RiMmJmOC1iZWIzLTRjYzktODNhZC0yYzlkNTc1Zjk0YWYvMC85MkJENEU3RkI2 OTcxNkU4RjY0OTQ3QTU5OTAzQUZGNzdDQ0JFNDQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTJCRDRFN0ZCNjk3MTZFOEY2NDk0N0E1OTkwM0FGRjc3Q0NC RTQ0MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWNkYjJiZjgtYmViMy00Y2M5LTgz YWQtMmM5ZDU3NWY5NGFmLzAvOTJCRDRFN0ZCNjk3MTZFOEY2NDk0N0E1OTkwM0FG Rjc3Q0NCRTQ0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJb21LqCH9L3xLROb0UW6FwvtRU8qXzc9U7I qnTkA/r3K+4BMn0nLCMwPzLiqSh4CLQSHbUQ2LAFpMw1Two0SdUcMKtcE8b3zWVf 3TNMSONNoXKK3R+G7D5OBj19Rce2SbzqF9FUILUSE1P7ZujSO+3Bcx6rJhNoKSV4 2ouD930DrHbvuX1iEn2f6UGcOq4eKH4DosGkg4mYKDUEzES0yhD5d1twk/4Qo6qN tQk5PfRjxlZ/QA1S4FytRjI6Zq+KdaMqme+Hg2muodI42uBObmpRHthUXDdJE++G bMwP7LFxMKoarFVJFLZQTcHRRveyJp1MMVH5CY2QhBW5TJvouek= -----END CERTIFICATE-----Generated at Thu Mar 26 15:18:14 2026 by rpki-client