$ rpki-client -vvf repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft File: D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft (raw, json) Hash identifier: /V6ihREQywhoEtZ2RoIuzQFNb6sbId/4Un3m2WhCeKc= Subject key identifier: 36:FF:9B:9F:27:3E:A6:79:F7:41:D5:FA:AA:39:5D:F9:94:37:43:30 Authority key identifier: D7:85:2A:F0:5D:FB:B9:7A:CD:46:A3:73:99:F2:0D:EA:19:C2:EF:2C Certificate issuer: /CN=D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C Certificate serial: 1923AA8262FF915A223529B7D1427E1D85B2449C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft Manifest number: 036A Signing time: Wed 25 Mar 2026 06:22:19 +0000 Manifest this update: Wed 25 Mar 2026 06:17:19 +0000 Manifest next update: Sat 28 Mar 2026 12:58:19 +0000 Files and hashes: 1: D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl (hash: 6eXtNb+S0mXFvX2wPejDONV49WXQZe3HUVSABtwo8u8=) 2: 3130332e3136342e3137322e302f32342d3234203d3e20313338313331.roa (hash: oLV8DpLz1l+1Ajh0O28O/v5GcjJ/k+/Vq+9P5fe+FMU=) 3: 3130332e3136342e3137332e302f32342d3234203d3e20313338313331.roa (hash: KhAy9i7rNh+YO2rkl451EFCJ0ALmEvE00mvytErQzRA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 12:58:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:23:aa:82:62:ff:91:5a:22:35:29:b7:d1:42:7e:1d:85:b2:44:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C Validity Not Before: Mar 25 06:17:19 2026 GMT Not After : Mar 28 12:58:19 2026 GMT Subject: CN=36FF9B9F273EA679F741D5FAAA395DF994374330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7c:e1:ef:12:76:9a:5e:3d:30:f1:81:62:c3: 30:d2:01:69:e4:8c:f7:c8:ae:36:c9:e6:10:e1:39: 03:5f:9e:6b:ef:f3:84:23:e4:f3:ce:fc:f7:cc:75: b0:69:83:9f:91:59:bb:0f:0b:cc:bd:cb:26:6a:d3: 20:21:ce:39:ec:d2:a7:7b:9a:16:78:bc:ce:b7:06: 64:51:19:95:6c:4a:4c:6f:6e:a6:76:b0:46:0b:f4: 69:2f:de:8d:a1:23:82:e9:c6:14:1c:18:6b:a8:e0: ad:03:a5:2c:6f:8d:b5:97:1d:93:f9:e3:4c:66:f2: c5:19:cf:70:f5:49:f9:d4:42:d0:49:32:65:4d:78: 4c:b9:2e:4c:20:9f:15:16:ce:c2:cc:b1:52:6b:eb: ec:d8:43:3c:d9:62:7f:c9:f7:31:97:e6:e8:8f:1b: ff:89:4f:bf:d3:85:1e:7d:14:b3:71:f8:06:5a:6e: 8f:e7:11:f2:5d:6d:5f:5f:2a:e7:65:29:2c:6b:21: b4:34:42:c5:5e:31:c2:0d:bf:dd:fd:2c:d3:8e:dc: a7:0e:61:b8:f5:98:29:0d:a2:df:93:d0:61:ed:55: d9:36:c7:8d:07:ed:f4:99:35:68:28:88:5e:16:63: 6d:1d:d9:4c:d3:d3:d9:35:d2:fe:7e:e0:4d:a5:05: d3:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:FF:9B:9F:27:3E:A6:79:F7:41:D5:FA:AA:39:5D:F9:94:37:43:30 X509v3 Authority Key Identifier: keyid:D7:85:2A:F0:5D:FB:B9:7A:CD:46:A3:73:99:F2:0D:EA:19:C2:EF:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:f8:8f:a1:c0:a0:8f:63:29:79:e7:81:cf:b5:48:58:cb:53: 52:eb:7d:a2:72:9e:78:82:44:b9:f8:81:4c:31:66:0a:91:be: bf:0a:ff:0c:f4:7e:f3:ce:e2:c6:20:7e:8c:df:17:3f:52:32: 2a:73:b2:ed:cc:e5:3a:21:90:ee:9c:c2:af:40:1a:f8:c7:b9: 3b:76:75:f9:f6:98:cc:4f:16:4b:ee:a6:ad:2e:32:eb:0b:e1: f9:db:48:35:96:ad:20:ee:21:84:62:11:35:32:80:f7:e8:c1: 51:53:3c:2b:19:25:59:72:44:23:9b:11:de:3a:cd:b6:79:81: ab:46:7d:47:be:62:05:2f:4d:e3:61:4b:39:37:96:9b:60:71: 72:ec:76:8b:90:37:b0:7e:b7:dd:bc:3e:e1:5a:13:92:9f:b7: b1:db:d6:78:b3:c5:d3:a0:57:f6:1d:6f:71:93:53:66:35:c1: 57:4b:4e:8f:ec:ea:40:b9:29:4d:80:a3:92:bd:86:a3:bb:32: f9:86:ac:ea:9e:0e:92:9e:04:58:a7:6c:28:44:98:7d:51:a1: d2:a1:d7:21:a3:08:0b:de:cc:86:9b:fa:37:44:18:13:3b:64: 4a:86:6c:83:0c:15:72:20:c4:e9:4f:09:58:ca:ff:be:17:79: e9:0a:d9:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGSOqgmL/kVoiNSm30UJ+HYWyRJwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBERUEx OUMyRUYyQzAeFw0yNjAzMjUwNjE3MTlaFw0yNjAzMjgxMjU4MTlaMDMxMTAvBgNV BAMTKDM2RkY5QjlGMjczRUE2NzlGNzQxRDVGQUFBMzk1REY5OTQzNzQzMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmfOHvEnaaXj0w8YFiwzDSAWnk jPfIrjbJ5hDhOQNfnmvv84Qj5PPO/PfMdbBpg5+RWbsPC8y9yyZq0yAhzjns0qd7 mhZ4vM63BmRRGZVsSkxvbqZ2sEYL9Gkv3o2hI4LpxhQcGGuo4K0DpSxvjbWXHZP5 40xm8sUZz3D1SfnUQtBJMmVNeEy5LkwgnxUWzsLMsVJr6+zYQzzZYn/J9zGX5uiP G/+JT7/ThR59FLNx+AZabo/nEfJdbV9fKudlKSxrIbQ0QsVeMcINv939LNOO3KcO Ybj1mCkNot+T0GHtVdk2x40H7fSZNWgoiF4WY20d2UzT09k10v5+4E2lBdNbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNv+bnyc+pnn3QdX6qjld+ZQ3QzAwHwYDVR0j BBgwFoAU14Uq8F37uXrNRqNzmfIN6hnC7ywwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTg5ZjFiNC1lZjYzLTQ1MzktODQ1NS05OGM2NzE5OTVjY2YvMC9ENzg1MkFGMDVE RkJCOTdBQ0Q0NkEzNzM5OUYyMERFQTE5QzJFRjJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBERUExOUMy RUYyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU4OWYxYjQtZWY2My00NTM5LTg0 NTUtOThjNjcxOTk1Y2NmLzAvRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBE RUExOUMyRUYyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH/4j6HAoI9jKXnngc+1SFjLU1LrfaJynniC RLn4gUwxZgqRvr8K/wz0fvPO4sYgfozfFz9SMipzsu3M5TohkO6cwq9AGvjHuTt2 dfn2mMxPFkvupq0uMusL4fnbSDWWrSDuIYRiETUygPfowVFTPCsZJVlyRCObEd46 zbZ5gatGfUe+YgUvTeNhSzk3lptgcXLsdouQN7B+t928PuFaE5Kft7Hb1nizxdOg V/Ydb3GTU2Y1wVdLTo/s6kC5KU2Ao5K9hqO7MvmGrOqeDpKeBFinbChEmH1RodKh 1yGjCAvezIab+jdEGBM7ZEqGbIMMFXIgxOlPCVjK/74XeekK2XE= -----END CERTIFICATE-----Generated at Thu Mar 26 06:27:36 2026 by rpki-client