$ rpki-client -vvf repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft File: D5265466AE0186702AF52D11170A29AC32F54EF5.mft (raw, json) Hash identifier: 2QiCPszkvaSp14fp3oDsfmwcqp3/WXMMjyrMbarQrT8= Subject key identifier: 1F:59:14:7D:BB:C6:EA:F7:EF:E7:25:67:04:14:52:6A:71:7F:07:EA Authority key identifier: D5:26:54:66:AE:01:86:70:2A:F5:2D:11:17:0A:29:AC:32:F5:4E:F5 Certificate issuer: /CN=D5265466AE0186702AF52D11170A29AC32F54EF5 Certificate serial: 3F9BE58220B6A42F63D13A52A5135A40B0790D0C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D5265466AE0186702AF52D11170A29AC32F54EF5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft Manifest number: 0127 Signing time: Wed 25 Mar 2026 00:00:48 +0000 Manifest this update: Tue 24 Mar 2026 23:55:48 +0000 Manifest next update: Sat 28 Mar 2026 01:41:48 +0000 Files and hashes: 1: D5265466AE0186702AF52D11170A29AC32F54EF5.crl (hash: TleiYhi+lrLpgxI84jwpA1LxxChjpvZ39bDBVbaWk0c=) 2: 3135372e31352e302e302f32332d3234203d3e20313532373639.roa (hash: wP7WlQEFbQk8vKWjoSw9Vlhgkk9UBNqB1fB0mYPDnk8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.crl rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D5265466AE0186702AF52D11170A29AC32F54EF5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 01:41:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:9b:e5:82:20:b6:a4:2f:63:d1:3a:52:a5:13:5a:40:b0:79:0d:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5265466AE0186702AF52D11170A29AC32F54EF5 Validity Not Before: Mar 24 23:55:48 2026 GMT Not After : Mar 28 01:41:48 2026 GMT Subject: CN=1F59147DBBC6EAF7EFE725670414526A717F07EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:58:67:60:47:4e:7c:b6:36:51:b4:b5:85:7e: 50:3e:12:2f:75:23:26:e7:35:2a:2f:84:d4:4b:6c: 10:05:f3:f7:25:59:3b:8a:c4:ca:ca:b8:95:4e:e6: 87:59:ab:4e:a1:5e:b2:65:16:d8:5d:54:71:9f:8b: f9:8f:b3:82:45:cb:d4:07:f8:70:05:68:29:4e:3e: 21:fa:35:94:a5:a4:e7:bf:dd:29:69:85:87:a5:c9: 5c:9f:9c:a5:02:ad:45:37:ca:58:0b:21:6f:4f:6d: b5:ba:1e:4e:7d:eb:29:fc:a8:b0:12:19:03:22:85: 70:ba:30:fc:6a:a0:6d:18:96:01:e1:71:c0:e5:cb: fa:ef:4e:6b:94:62:a5:9f:0f:24:91:1b:72:7d:87: ee:ac:ef:b6:a4:f0:61:62:43:e8:55:ad:f6:91:01: 44:05:fc:d5:a5:f4:3d:2d:32:d2:9b:bb:75:72:8a: 0a:86:b7:cd:49:d7:cc:3f:35:18:6a:e3:86:b5:83: 40:34:b7:76:4d:d7:cf:76:3e:8e:bd:85:3a:4e:da: be:52:65:da:62:42:cc:2a:f5:a4:73:cd:8f:4a:4c: ee:07:be:27:05:24:48:be:88:3b:a7:5b:d5:50:a3: 69:2c:5f:22:9a:7c:bc:0b:cc:5a:5c:ee:06:61:a6: 75:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:59:14:7D:BB:C6:EA:F7:EF:E7:25:67:04:14:52:6A:71:7F:07:EA X509v3 Authority Key Identifier: keyid:D5:26:54:66:AE:01:86:70:2A:F5:2D:11:17:0A:29:AC:32:F5:4E:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D5265466AE0186702AF52D11170A29AC32F54EF5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:0e:a1:d0:d4:23:5e:76:42:9b:bb:d7:8f:03:eb:1c:d8:7f: af:72:a1:bf:a6:c9:71:fc:86:87:c6:12:22:f1:91:19:92:1c: 79:52:b2:5b:ef:78:2d:29:0e:61:38:8e:d8:a0:a2:5e:7a:b6: c8:72:80:6d:63:89:da:88:b1:65:c4:7f:0e:7a:c8:11:c6:42: d1:69:24:b1:44:6b:03:f8:05:d7:0e:38:f8:e2:52:cd:a2:a1: 76:9c:98:e6:9a:5a:56:72:58:50:0e:70:ea:34:f1:63:80:84: 07:46:bc:f3:70:0e:08:65:fd:0e:ee:fa:89:44:a2:b4:6a:4d: 55:f4:bd:5d:d9:17:6a:46:ee:90:b6:67:56:0c:a9:0b:0c:31: 2c:47:7b:95:c9:e0:f7:24:56:3f:ed:4b:b7:86:55:bd:0f:19: d2:db:96:2b:ac:3a:17:52:48:a0:54:53:c6:05:97:21:88:e3: d9:72:c0:95:8f:21:6e:b3:b9:f0:3e:f2:9b:43:b7:80:c9:9e: a5:4a:76:50:57:2d:9f:c0:bd:59:c5:63:30:4e:22:b9:ca:20: b5:6d:cc:4d:97:29:82:90:33:3e:85:d3:c8:3c:e9:bd:60:d3: f0:53:c0:2b:82:12:13:d8:ff:53:6f:bd:9f:fb:26:b0:1e:73: 59:dd:6c:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP5vlgiC2pC9j0TpSpRNaQLB5DQwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUyNjU0NjZBRTAxODY3MDJBRjUyRDExMTcwQTI5QUMz MkY1NEVGNTAeFw0yNjAzMjQyMzU1NDhaFw0yNjAzMjgwMTQxNDhaMDMxMTAvBgNV BAMTKDFGNTkxNDdEQkJDNkVBRjdFRkU3MjU2NzA0MTQ1MjZBNzE3RjA3RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLWGdgR058tjZRtLWFflA+Ei91 IybnNSovhNRLbBAF8/clWTuKxMrKuJVO5odZq06hXrJlFthdVHGfi/mPs4JFy9QH +HAFaClOPiH6NZSlpOe/3SlphYelyVyfnKUCrUU3ylgLIW9PbbW6Hk596yn8qLAS GQMihXC6MPxqoG0YlgHhccDly/rvTmuUYqWfDySRG3J9h+6s77ak8GFiQ+hVrfaR AUQF/NWl9D0tMtKbu3VyigqGt81J18w/NRhq44a1g0A0t3ZN1892Po69hTpO2r5S ZdpiQswq9aRzzY9KTO4HvicFJEi+iDunW9VQo2ksXyKafLwLzFpc7gZhpnXZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH1kUfbvG6vfv5yVnBBRSanF/B+owHwYDVR0j BBgwFoAU1SZUZq4BhnAq9S0RFwoprDL1TvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDYxMzdhZS0yZWZiLTQzYzAtYmRiNy00M2Y1ZDkzOWNmMGMvMC9ENTI2NTQ2NkFF MDE4NjcwMkFGNTJEMTExNzBBMjlBQzMyRjU0RUY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDUyNjU0NjZBRTAxODY3MDJBRjUyRDExMTcwQTI5QUMzMkY1 NEVGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjQ2MTM3YWUtMmVmYi00M2MwLWJk YjctNDNmNWQ5MzljZjBjLzAvRDUyNjU0NjZBRTAxODY3MDJBRjUyRDExMTcwQTI5 QUMzMkY1NEVGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMAOodDUI152Qpu7148D6xzYf69yob+myXH8 hofGEiLxkRmSHHlSslvveC0pDmE4jtigol56tshygG1jidqIsWXEfw56yBHGQtFp JLFEawP4BdcOOPjiUs2ioXacmOaaWlZyWFAOcOo08WOAhAdGvPNwDghl/Q7u+olE orRqTVX0vV3ZF2pG7pC2Z1YMqQsMMSxHe5XJ4PckVj/tS7eGVb0PGdLbliusOhdS SKBUU8YFlyGI49lywJWPIW6zufA+8ptDt4DJnqVKdlBXLZ/AvVnFYzBOIrnKILVt zE2XKYKQMz6F08g86b1g0/BTwCuCEhPY/1NvvZ/7JrAec1ndbL4= -----END CERTIFICATE-----Generated at Thu Mar 26 21:48:46 2026 by rpki-client