$ rpki-client -vvf repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft File: 1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft (raw, json) Hash identifier: 0cvvHUIxF4G7XiS6VKQQJF7BBCnbZ9Jo+Beladompq0= Subject key identifier: 32:19:2A:8D:BF:4D:0C:1F:DE:2C:92:EC:90:65:59:A3:59:DE:4F:77 Authority key identifier: 1D:60:01:A4:F4:65:48:B3:7E:D8:71:CA:5C:F0:88:F7:AF:50:D7:54 Certificate issuer: /CN=1D6001A4F46548B37ED871CA5CF088F7AF50D754 Certificate serial: 3932E8B670A6E82620AA24FEB87CA0EDCB63B6E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft Manifest number: 0284 Signing time: Wed 25 Mar 2026 18:21:55 +0000 Manifest this update: Wed 25 Mar 2026 18:16:55 +0000 Manifest next update: Sun 29 Mar 2026 05:00:55 +0000 Files and hashes: 1: 3130332e3130322e3134312e302f32342d3234203d3e20313336383534.roa (hash: Mn2kP+cKGGOLyQSD70wITKilYtAFBvqgDyOS5Ob9KJw=) 2: 3130332e3130322e3134322e302f32342d3234203d3e20313336383534.roa (hash: FHbXQkePjO5Kv7MIwfEIPoO/ttV45kfWL4gTr6/e2cs=) 3: 3130332e3130322e3134302e302f32322d3232203d3e20313336383534.roa (hash: W4QqpemtzShS1QHLz/OQQiGGQqIHL/ZWTyinECHq8iM=) 4: 3130332e3130322e3134302e302f32342d3234203d3e20313336383534.roa (hash: Jg0eBzFNwVRly/0j1c4wnh+Pn1/PmT37QsudfpP4Olc=) 5: 1D6001A4F46548B37ED871CA5CF088F7AF50D754.crl (hash: 7n1Wo25paehX/Dcg3NuoxVq/WHNQh+SO3PtKNFkQbPM=) 6: 3130332e3130322e3134332e302f32342d3234203d3e20313336383534.roa (hash: IHBWZ2aLtDtFiajS88smGA0f9ZjzM14ZA4EnckIFmqY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.crl rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 05:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:32:e8:b6:70:a6:e8:26:20:aa:24:fe:b8:7c:a0:ed:cb:63:b6:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D6001A4F46548B37ED871CA5CF088F7AF50D754 Validity Not Before: Mar 25 18:16:55 2026 GMT Not After : Mar 29 05:00:55 2026 GMT Subject: CN=32192A8DBF4D0C1FDE2C92EC906559A359DE4F77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c4:b1:58:a8:3c:80:bb:e6:b2:88:23:79:10: 28:ca:cb:49:97:88:9c:b1:4f:6c:b8:ac:8f:83:d6: 9c:1b:81:db:b1:42:ce:c3:c5:2a:80:00:26:f8:c9: 7e:7c:8e:52:7b:78:82:49:95:02:f1:d5:5e:f9:e4: 98:47:08:28:cf:9a:09:49:b0:fe:d6:6c:c5:60:62: 11:4c:5a:ae:fe:ef:b4:36:ad:8e:f8:dd:60:6d:dd: 14:7a:dc:82:8e:61:8c:68:f5:1b:84:a5:1d:87:46: 5a:51:1e:91:35:ba:76:60:95:de:b9:52:be:13:fd: 98:fa:6f:7b:1c:69:0b:59:66:01:26:51:cb:eb:83: f2:04:13:1e:eb:3e:3f:e8:9a:03:58:dc:75:7b:b5: 9e:51:a6:75:21:84:3c:d0:89:0f:3d:5c:76:c7:f1: 28:c4:57:2a:7f:c4:ca:9d:92:2c:45:53:44:1e:59: c9:45:d7:11:98:87:2a:12:ff:35:b2:00:de:dc:08: 1c:83:b0:39:08:3d:8a:81:ad:e3:ce:39:fc:d2:63: 9c:d0:b4:56:51:3d:6f:d9:2f:45:8e:34:14:95:b7: 36:8e:e8:45:46:3b:02:f5:00:c9:50:40:a9:93:8f: 45:4e:d6:d1:3f:48:0b:fd:9d:44:88:ab:99:b2:aa: 34:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:19:2A:8D:BF:4D:0C:1F:DE:2C:92:EC:90:65:59:A3:59:DE:4F:77 X509v3 Authority Key Identifier: keyid:1D:60:01:A4:F4:65:48:B3:7E:D8:71:CA:5C:F0:88:F7:AF:50:D7:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:17:7b:ba:76:54:87:c5:68:d6:f4:e8:df:7b:95:79:22:14: d1:43:32:7a:51:a4:fc:43:62:bc:10:c5:70:32:4a:de:c2:79: 2b:8c:45:eb:18:78:48:14:7e:0e:1f:dd:2d:77:1e:d9:56:fa: a5:cd:04:d6:17:21:6a:65:32:2e:36:21:9b:63:ca:be:5a:23: 92:a9:48:c3:ed:dd:1f:1b:e2:7b:f0:5e:89:aa:ff:32:77:0c: 56:4a:d2:70:e7:99:a8:18:29:4b:da:d5:d4:f1:c6:d8:dc:41: 6e:d8:14:cb:55:ae:f9:0a:c6:76:86:6a:66:fd:53:c7:8c:60: 98:a7:b2:b1:4a:08:48:33:e5:92:0c:e8:9c:fc:50:72:25:5a: bd:75:6a:7a:8b:15:6b:c4:0c:e6:d6:77:56:fa:7a:b8:49:b4: 15:1c:e5:dd:28:3b:ae:13:8e:1d:1b:86:44:54:b0:55:0d:3d: 7b:03:dd:a2:6f:1c:1f:2e:05:8d:52:0e:ad:a2:15:1a:2c:bb: 66:0b:f4:49:8f:21:23:e5:50:74:30:d2:4f:a8:4d:7e:e4:d2: 5d:4a:51:33:08:a6:0f:2e:52:a9:86:42:c2:f6:e3:e1:a4:c3: da:af:d3:83:df:b1:ba:65:22:ab:22:cb:39:13:bd:13:78:b6: f4:d3:93:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOTLotnCm6CYgqiT+uHyg7ctjtuIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ2MDAxQTRGNDY1NDhCMzdFRDg3MUNBNUNGMDg4RjdB RjUwRDc1NDAeFw0yNjAzMjUxODE2NTVaFw0yNjAzMjkwNTAwNTVaMDMxMTAvBgNV BAMTKDMyMTkyQThEQkY0RDBDMUZERTJDOTJFQzkwNjU1OUEzNTlERTRGNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvxLFYqDyAu+ayiCN5ECjKy0mX iJyxT2y4rI+D1pwbgduxQs7DxSqAACb4yX58jlJ7eIJJlQLx1V755JhHCCjPmglJ sP7WbMVgYhFMWq7+77Q2rY743WBt3RR63IKOYYxo9RuEpR2HRlpRHpE1unZgld65 Ur4T/Zj6b3scaQtZZgEmUcvrg/IEEx7rPj/omgNY3HV7tZ5RpnUhhDzQiQ89XHbH 8SjEVyp/xMqdkixFU0QeWclF1xGYhyoS/zWyAN7cCByDsDkIPYqBrePOOfzSY5zQ tFZRPW/ZL0WONBSVtzaO6EVGOwL1AMlQQKmTj0VO1tE/SAv9nUSIq5myqjRXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMhkqjb9NDB/eLJLskGVZo1neT3cwHwYDVR0j BBgwFoAUHWABpPRlSLN+2HHKXPCI969Q11QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTYzMmQ5OS0zMmIyLTQ2N2ItYjdmZS0wZDI1Zjg1M2JmYTYvMC8xRDYwMDFBNEY0 NjU0OEIzN0VEODcxQ0E1Q0YwODhGN0FGNTBENzU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ2MDAxQTRGNDY1NDhCMzdFRDg3MUNBNUNGMDg4RjdBRjUw RDc1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU2MzJkOTktMzJiMi00NjdiLWI3 ZmUtMGQyNWY4NTNiZmE2LzAvMUQ2MDAxQTRGNDY1NDhCMzdFRDg3MUNBNUNGMDg4 RjdBRjUwRDc1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKMXe7p2VIfFaNb06N97lXkiFNFDMnpRpPxD YrwQxXAySt7CeSuMResYeEgUfg4f3S13HtlW+qXNBNYXIWplMi42IZtjyr5aI5Kp SMPt3R8b4nvwXomq/zJ3DFZK0nDnmagYKUva1dTxxtjcQW7YFMtVrvkKxnaGamb9 U8eMYJinsrFKCEgz5ZIM6Jz8UHIlWr11anqLFWvEDObWd1b6erhJtBUc5d0oO64T jh0bhkRUsFUNPXsD3aJvHB8uBY1SDq2iFRosu2YL9EmPISPlUHQw0k+oTX7k0l1K UTMIpg8uUqmGQsL24+Gkw9qv04PfsbplIqsiyzkTvRN4tvTTk4Q= -----END CERTIFICATE-----Generated at Thu Mar 26 22:03:48 2026 by rpki-client