$ rpki-client -vvf repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.mft File: D454E26475969CECE78A97B9152AFC76DB922AA3.mft (raw, json) Hash identifier: I4MB73/e7dYf+hpO7Mzjgr3E6ijuPU/fnBruFAelyy4= Subject key identifier: D6:9B:31:80:99:23:45:3B:8A:17:50:FC:4D:2C:84:17:D7:B0:CC:0D Authority key identifier: D4:54:E2:64:75:96:9C:EC:E7:8A:97:B9:15:2A:FC:76:DB:92:2A:A3 Certificate issuer: /CN=D454E26475969CECE78A97B9152AFC76DB922AA3 Certificate serial: 4D87FFF2AE62EB647A175004A113293FACE271EB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D454E26475969CECE78A97B9152AFC76DB922AA3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.mft Manifest number: 0204 Signing time: Tue 24 Mar 2026 23:42:42 +0000 Manifest this update: Tue 24 Mar 2026 23:37:42 +0000 Manifest next update: Sat 28 Mar 2026 10:53:42 +0000 Files and hashes: 1: 3130332e3136342e36312e302f32342d3234203d3e20313431393632.roa (hash: Sh/uW9aUlYmns674VC/3EQDEJjmYQNSXDMXSfx+QzvU=) 2: D454E26475969CECE78A97B9152AFC76DB922AA3.crl (hash: i9+MEDxaLWbyKllwVloqLdyus8VDWYug6bsKhsRoh8g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.crl rsync://repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D454E26475969CECE78A97B9152AFC76DB922AA3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 10:53:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:87:ff:f2:ae:62:eb:64:7a:17:50:04:a1:13:29:3f:ac:e2:71:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D454E26475969CECE78A97B9152AFC76DB922AA3 Validity Not Before: Mar 24 23:37:42 2026 GMT Not After : Mar 28 10:53:42 2026 GMT Subject: CN=D69B31809923453B8A1750FC4D2C8417D7B0CC0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d6:12:2a:f0:f0:b7:cf:6f:7b:99:67:d7:c8: e2:74:03:e9:28:5a:5c:2e:b3:04:2a:d0:a7:73:14: 84:3f:61:4a:67:05:b3:26:25:10:67:16:51:83:ba: a7:9c:d5:23:ed:20:2b:da:8c:12:8f:f8:bd:2d:dc: 82:ad:84:68:5f:f9:58:e0:86:3d:9d:2d:8f:b9:c7: 04:d1:54:e9:cb:a7:50:71:cd:a8:a2:c6:ce:ae:fe: 09:44:60:a6:7c:b2:f3:53:ca:d9:3b:1d:7e:2c:4e: 71:eb:26:7e:3b:48:e3:f4:f6:7c:92:44:d1:e9:8b: 85:0f:99:1f:e6:4f:ed:0a:c0:ed:e1:e2:b3:6c:18: 62:79:4a:8f:fc:81:21:b0:ea:57:77:d0:c7:b4:62: fa:ec:ec:6d:20:67:61:48:8e:6b:51:79:7a:9b:7d: 29:c2:ce:c7:c4:15:45:99:87:87:bc:28:4b:1b:fc: f3:a5:4b:6b:e2:b5:ef:bf:27:f0:ea:52:f5:6c:c5: 15:e8:a2:e0:e4:88:a0:9d:12:28:63:a3:ed:f3:da: 0e:05:46:78:c6:f0:47:e7:97:0b:63:00:10:a8:9c: 15:99:17:03:be:16:01:e6:b4:05:fc:04:de:f3:80: 4d:24:28:88:bf:f4:8f:d4:de:af:83:66:ea:e9:9f: 3b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:9B:31:80:99:23:45:3B:8A:17:50:FC:4D:2C:84:17:D7:B0:CC:0D X509v3 Authority Key Identifier: keyid:D4:54:E2:64:75:96:9C:EC:E7:8A:97:B9:15:2A:FC:76:DB:92:2A:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D454E26475969CECE78A97B9152AFC76DB922AA3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:8f:ef:4b:2b:45:7b:a3:92:6a:24:46:08:a5:60:3e:6b:f7: c0:54:e0:60:f1:a4:85:14:43:37:5f:af:64:0f:19:64:20:c9: cf:be:bb:4c:1d:4e:39:96:72:b6:68:91:a4:1d:c4:a8:52:c3: b8:d0:9e:0d:90:a0:60:4c:e4:c7:18:ce:ee:79:a7:64:0f:c9: 09:84:12:b8:79:74:b7:34:86:e8:3f:bd:ca:44:e2:db:db:eb: df:d2:2c:8d:74:05:a9:ea:1a:b8:6f:7f:0d:ba:69:da:77:d1: 99:b2:76:41:2a:0f:9f:ec:55:30:f3:a2:37:d0:27:41:53:cf: d7:77:00:07:13:7a:b0:13:5c:48:c4:8d:aa:af:86:5d:c0:30: e0:34:40:72:a2:01:8e:2d:0f:5a:96:c9:ef:ec:8a:e2:26:ce: 81:62:79:f1:5d:99:a9:7f:8a:31:06:bf:fa:43:4d:81:22:78: 79:62:a8:5c:a0:76:5e:da:e1:17:a2:fc:f3:d6:29:b6:8f:bd: 12:69:60:e3:c7:42:16:17:b9:fe:23:e0:d4:2e:68:32:d4:70: 9b:24:26:d3:3a:a2:33:1e:4f:5b:b1:ea:54:2d:91:38:f2:f8: df:34:d4:97:7c:7a:b7:4f:47:fb:fd:56:2c:c5:be:0a:fa:c6: d3:15:c5:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTYf/8q5i62R6F1AEoRMpP6ziceswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ1NEUyNjQ3NTk2OUNFQ0U3OEE5N0I5MTUyQUZDNzZE QjkyMkFBMzAeFw0yNjAzMjQyMzM3NDJaFw0yNjAzMjgxMDUzNDJaMDMxMTAvBgNV BAMTKEQ2OUIzMTgwOTkyMzQ1M0I4QTE3NTBGQzREMkM4NDE3RDdCMENDMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt1hIq8PC3z297mWfXyOJ0A+ko WlwuswQq0KdzFIQ/YUpnBbMmJRBnFlGDuqec1SPtICvajBKP+L0t3IKthGhf+Vjg hj2dLY+5xwTRVOnLp1Bxzaiixs6u/glEYKZ8svNTytk7HX4sTnHrJn47SOP09nyS RNHpi4UPmR/mT+0KwO3h4rNsGGJ5So/8gSGw6ld30Me0Yvrs7G0gZ2FIjmtReXqb fSnCzsfEFUWZh4e8KEsb/POlS2vite+/J/DqUvVsxRXoouDkiKCdEihjo+3z2g4F RnjG8EfnlwtjABConBWZFwO+FgHmtAX8BN7zgE0kKIi/9I/U3q+DZurpnzu7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1psxgJkjRTuKF1D8TSyEF9ewzA0wHwYDVR0j BBgwFoAU1FTiZHWWnOznipe5FSr8dtuSKqMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YjE3YzIwNi05YjYzLTRjNTYtOTQzNi00NzVkODIxNDFhNjYvMC9ENDU0RTI2NDc1 OTY5Q0VDRTc4QTk3QjkxNTJBRkM3NkRCOTIyQUEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDQ1NEUyNjQ3NTk2OUNFQ0U3OEE5N0I5MTUyQUZDNzZEQjky MkFBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmIxN2MyMDYtOWI2My00YzU2LTk0 MzYtNDc1ZDgyMTQxYTY2LzAvRDQ1NEUyNjQ3NTk2OUNFQ0U3OEE5N0I5MTUyQUZD NzZEQjkyMkFBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFuP70srRXujkmokRgilYD5r98BU4GDxpIUU Qzdfr2QPGWQgyc++u0wdTjmWcrZokaQdxKhSw7jQng2QoGBM5McYzu55p2QPyQmE Erh5dLc0hug/vcpE4tvb69/SLI10BanqGrhvfw26adp30ZmydkEqD5/sVTDzojfQ J0FTz9d3AAcTerATXEjEjaqvhl3AMOA0QHKiAY4tD1qWye/siuImzoFiefFdmal/ ijEGv/pDTYEieHliqFygdl7a4Rei/PPWKbaPvRJpYOPHQhYXuf4j4NQuaDLUcJsk JtM6ojMeT1ux6lQtkTjy+N801Jd8erdPR/v9VizFvgr6xtMVxXA= -----END CERTIFICATE-----Generated at Thu Mar 26 14:34:01 2026 by rpki-client