$ rpki-client -vvf repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft File: D51CE7B1B9196EF73BFF65318453095C925ECF91.mft (raw, json) Hash identifier: Dxm3JHKkSTZovHymfUvED5Yip80Qls0TqVr0Fs2aE8s= Subject key identifier: 92:AE:22:96:C4:26:C0:8F:26:B6:3C:F5:26:19:C9:F8:F7:D3:CC:07 Authority key identifier: D5:1C:E7:B1:B9:19:6E:F7:3B:FF:65:31:84:53:09:5C:92:5E:CF:91 Certificate issuer: /CN=D51CE7B1B9196EF73BFF65318453095C925ECF91 Certificate serial: 78D380EECEC5F10E1A5F95660DFF2FAA0331CF46 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft Manifest number: 0528 Signing time: Wed 25 Mar 2026 11:01:25 +0000 Manifest this update: Wed 25 Mar 2026 10:56:25 +0000 Manifest next update: Sat 28 Mar 2026 14:51:25 +0000 Files and hashes: 1: D51CE7B1B9196EF73BFF65318453095C925ECF91.crl (hash: lHtuY5mLVSt6YLuVuFapKuPky5qMJ1LA4rhLvTEp4Vw=) 2: 3130332e3134362e3132382e302f32342d3234203d3e20313430303238.roa (hash: gicJjzX38cvUlj+q/M4Y/XP1+pLgazBAyQOFz8mgKiM=) 3: 3130332e3134362e3132382e302f32332d3233203d3e20313430303238.roa (hash: yKK3Hq8hEk1LGbPgkhx2NEZ4T23a1BRrLBg1d7QrEfc=) 4: 3130332e3134362e3132392e302f32342d3234203d3e20313430303238.roa (hash: 1Ph7pIbfyLL/MFd5kaSHsFP+/qk1l1ex5P/+8l18KxM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.crl rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 14:51:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:d3:80:ee:ce:c5:f1:0e:1a:5f:95:66:0d:ff:2f:aa:03:31:cf:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D51CE7B1B9196EF73BFF65318453095C925ECF91 Validity Not Before: Mar 25 10:56:25 2026 GMT Not After : Mar 28 14:51:25 2026 GMT Subject: CN=92AE2296C426C08F26B63CF52619C9F8F7D3CC07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:52:91:d1:1c:14:5c:ce:e4:94:b2:86:c0:ee: b1:03:b0:fd:32:3e:46:52:98:c9:de:eb:60:57:9d: e5:d3:2c:9c:c4:f0:fb:92:1f:a3:20:81:be:4f:57: bc:44:e0:94:4b:62:70:bd:0d:bd:f4:7b:b4:31:6a: de:4c:e1:6d:b1:00:c1:57:4f:9e:c4:74:bb:c3:6d: 30:7b:1f:3f:7b:ca:4e:dd:17:97:9b:8a:32:b5:9a: 86:9d:a2:5b:86:ab:7d:17:bf:28:9d:0b:b0:f5:a8: 60:49:cd:ef:81:6c:31:06:b7:ea:f9:b4:61:ab:eb: 9d:6f:69:e8:fc:42:2e:6d:d9:e2:7c:64:9f:ef:52: de:39:99:51:bc:9e:9f:cd:af:64:58:bd:e6:d7:db: 06:59:69:03:f2:75:c8:f1:09:3e:70:72:4d:06:62: 39:5f:75:61:2a:f0:7d:33:9f:e8:a2:ee:9f:4a:8e: 85:59:67:bc:f6:56:8e:9c:5a:4d:43:fa:c2:16:1d: e5:20:83:4e:f4:79:7a:3e:fc:9e:db:3e:90:0c:9f: dd:8f:41:fe:e3:07:7f:dc:8f:8e:26:cd:f4:35:71: ea:78:a5:d9:5f:7d:fb:b4:26:5a:23:75:7a:5d:b0: 93:cf:b3:60:26:cc:05:cb:86:5a:5b:8f:9c:8e:1e: d4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:AE:22:96:C4:26:C0:8F:26:B6:3C:F5:26:19:C9:F8:F7:D3:CC:07 X509v3 Authority Key Identifier: keyid:D5:1C:E7:B1:B9:19:6E:F7:3B:FF:65:31:84:53:09:5C:92:5E:CF:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:4f:89:08:44:38:cd:99:e0:36:78:02:d9:8c:7f:f2:ea:99: 56:b7:7e:44:8e:eb:e3:45:f7:f7:eb:0e:32:d8:9a:48:10:c9: d1:cb:df:85:3b:7f:8c:89:ba:34:50:bf:e9:be:86:3a:ea:8b: 95:28:30:ee:0f:6c:fc:16:4c:e0:f3:74:3a:7c:a5:17:08:69: 29:28:45:59:2e:f7:e4:a3:58:c0:1e:50:7b:41:d6:13:be:76: 23:32:3f:be:e7:41:e5:f8:1a:1e:6f:b7:3d:bd:2c:9f:b4:90: 38:55:97:9f:ac:60:e0:2f:9e:4c:e2:3f:d8:18:9b:eb:c2:c8: d3:f2:ac:8a:6c:4c:d8:d9:aa:11:93:a8:a4:85:4e:e9:6e:6e: 80:e6:9e:c7:84:c3:03:65:f3:46:a9:7e:56:fb:5c:78:34:02: 43:01:e3:ab:dc:74:88:5d:6d:3a:00:6b:83:a5:c7:0e:8f:91: 11:8e:84:3a:98:6f:30:0a:83:b9:15:3a:6c:56:61:34:5e:c3: cb:77:f4:a8:87:74:b0:ba:29:10:88:90:22:a4:27:7f:c2:97: bb:ce:cd:10:d8:24:1d:6f:24:96:80:98:85:fd:d8:20:06:2b: aa:dd:e5:7b:8f:43:44:4a:44:35:a1:6f:9e:82:e1:35:88:4f: f9:34:bd:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeNOA7s7F8Q4aX5VmDf8vqgMxz0YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUxQ0U3QjFCOTE5NkVGNzNCRkY2NTMxODQ1MzA5NUM5 MjVFQ0Y5MTAeFw0yNjAzMjUxMDU2MjVaFw0yNjAzMjgxNDUxMjVaMDMxMTAvBgNV BAMTKDkyQUUyMjk2QzQyNkMwOEYyNkI2M0NGNTI2MTlDOUY4RjdEM0NDMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0UpHRHBRczuSUsobA7rEDsP0y PkZSmMne62BXneXTLJzE8PuSH6Mggb5PV7xE4JRLYnC9Db30e7Qxat5M4W2xAMFX T57EdLvDbTB7Hz97yk7dF5ebijK1moadoluGq30XvyidC7D1qGBJze+BbDEGt+r5 tGGr651vaej8Qi5t2eJ8ZJ/vUt45mVG8np/Nr2RYvebX2wZZaQPydcjxCT5wck0G YjlfdWEq8H0zn+ii7p9KjoVZZ7z2Vo6cWk1D+sIWHeUgg070eXo+/J7bPpAMn92P Qf7jB3/cj44mzfQ1cep4pdlfffu0JlojdXpdsJPPs2AmzAXLhlpbj5yOHtQzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkq4ilsQmwI8mtjz1JhnJ+PfTzAcwHwYDVR0j BBgwFoAU1RznsbkZbvc7/2UxhFMJXJJez5EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDJhYTBhOS00NTg4LTRmODctYWI4OS1mM2I5ZGM2MTA3YjYvMC9ENTFDRTdCMUI5 MTk2RUY3M0JGRjY1MzE4NDUzMDk1QzkyNUVDRjkxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDUxQ0U3QjFCOTE5NkVGNzNCRkY2NTMxODQ1MzA5NUM5MjVF Q0Y5MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjQyYWEwYTktNDU4OC00Zjg3LWFi ODktZjNiOWRjNjEwN2I2LzAvRDUxQ0U3QjFCOTE5NkVGNzNCRkY2NTMxODQ1MzA5 NUM5MjVFQ0Y5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADtPiQhEOM2Z4DZ4AtmMf/LqmVa3fkSO6+NF 9/frDjLYmkgQydHL34U7f4yJujRQv+m+hjrqi5UoMO4PbPwWTODzdDp8pRcIaSko RVku9+SjWMAeUHtB1hO+diMyP77nQeX4Gh5vtz29LJ+0kDhVl5+sYOAvnkziP9gY m+vCyNPyrIpsTNjZqhGTqKSFTuluboDmnseEwwNl80apflb7XHg0AkMB46vcdIhd bToAa4Olxw6PkRGOhDqYbzAKg7kVOmxWYTRew8t39KiHdLC6KRCIkCKkJ3/Cl7vO zRDYJB1vJJaAmIX92CAGK6rd5XuPQ0RKRDWhb56C4TWIT/k0vZk= -----END CERTIFICATE-----Generated at Thu Mar 26 20:17:13 2026 by rpki-client