$ rpki-client -vvf repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft File: E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft (raw, json) Hash identifier: txrRQKHCBoL9eQN6OgUNgHW+OY3c+nsyfWdRKJIIGEU= Subject key identifier: 86:92:DC:C8:DC:D2:0C:86:C7:14:98:BA:4F:90:89:CD:69:70:40:AD Authority key identifier: E7:26:22:AE:0F:69:B4:CD:AB:C9:CD:22:3B:3E:06:C7:DC:5E:10:14 Certificate issuer: /CN=E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014 Certificate serial: 0734F0E7035BA6BD512FFC8F3882DB8D45440779 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft Manifest number: 0569 Signing time: Tue 24 Mar 2026 16:42:39 +0000 Manifest this update: Tue 24 Mar 2026 16:37:39 +0000 Manifest next update: Fri 27 Mar 2026 20:29:39 +0000 Files and hashes: 1: E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.crl (hash: 3ck2WLXeHSZXYgucZaYrO6lg1VXoDHLoy+KHLy8jVAw=) 2: 323430323a366163303a3a2f33332d3333203d3e20313337333036.roa (hash: +LtGD0I+CcS2FlJTjK9Ti6xX24NgEqNHjvhmLsu4MGU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.crl rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 20:29:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:34:f0:e7:03:5b:a6:bd:51:2f:fc:8f:38:82:db:8d:45:44:07:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014 Validity Not Before: Mar 24 16:37:39 2026 GMT Not After : Mar 27 20:29:39 2026 GMT Subject: CN=8692DCC8DCD20C86C71498BA4F9089CD697040AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5e:b6:cb:c3:e3:5e:04:87:43:a5:2b:3f:cf: cb:7b:8a:8b:39:43:c3:c3:0e:4b:2f:15:07:66:b3: 51:9d:6a:be:3a:79:f9:14:ae:f4:fd:aa:67:3f:ba: e6:77:1f:9f:3a:63:7e:06:b4:a3:ae:d0:0b:27:10: bb:fb:ec:80:97:25:83:ce:57:b9:88:68:a5:0b:60: f0:fe:2b:ff:c3:c6:87:58:64:e5:76:7d:99:de:fe: 4d:05:53:35:b8:7b:b3:64:e5:3e:b5:5f:86:9a:6b: 41:68:6c:ff:6b:2c:bb:05:36:40:7d:cb:8e:2e:bf: f9:01:ea:e2:e3:b5:55:06:b2:0d:a4:d8:86:44:c1: 6d:13:46:1f:e7:b9:8f:f1:a3:e6:1b:93:48:d8:42: ec:c1:68:d1:c6:0e:e2:b6:f4:8b:47:37:7f:3f:d7: 62:da:3b:5a:1f:f7:83:19:3b:94:51:36:a4:db:55: 6c:3a:8b:03:75:af:81:a4:8e:ae:18:c4:b3:5a:25: 53:58:68:55:e5:0d:d5:65:5b:de:75:72:04:18:b9: 18:46:13:99:66:a0:0a:3e:15:e1:3e:2d:ec:dd:4f: 99:27:c2:f3:63:b6:d0:9c:a1:3a:e7:47:a4:d1:7c: 04:e7:d1:68:32:f5:78:45:35:e6:19:ab:7e:86:22: 07:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:92:DC:C8:DC:D2:0C:86:C7:14:98:BA:4F:90:89:CD:69:70:40:AD X509v3 Authority Key Identifier: keyid:E7:26:22:AE:0F:69:B4:CD:AB:C9:CD:22:3B:3E:06:C7:DC:5E:10:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:f0:1c:bd:0c:99:8a:87:14:f7:7e:63:41:20:da:71:36:51: 43:db:75:ad:fe:5d:38:9a:1a:53:d8:01:e2:5b:cd:fb:b6:9d: 97:d0:59:71:5b:30:0e:48:65:e6:54:fa:da:9c:a9:54:3a:22: be:54:74:16:82:ed:92:8e:5a:7c:54:57:f1:d5:95:f7:88:a9: 1c:29:b7:93:e1:fe:12:b6:7c:64:3d:56:3f:61:2a:95:a9:43: 4f:d5:13:a3:6a:62:60:84:86:d0:ef:66:dc:67:6d:1b:56:cc: 2e:f1:98:f3:ae:9d:eb:3d:1d:49:db:2a:f1:77:56:30:87:09: 7b:c7:3f:e0:3b:27:81:07:89:aa:3e:6a:b9:cc:ed:57:88:d4: fa:c2:17:99:17:61:77:75:65:e5:3f:83:e2:4c:5f:32:66:c3: e0:d8:08:c3:e3:71:41:bc:5d:d5:4c:55:d2:95:7d:37:67:d4: 10:c9:bb:1d:8a:25:ba:b0:38:34:05:97:83:cc:44:2a:15:e0: 3e:c3:13:e6:5e:25:3d:ad:91:92:1c:9d:26:3d:5a:15:74:62: e2:8d:22:da:c2:9d:c2:d5:f4:aa:7d:0b:41:d2:fe:c2:a2:17: 1c:22:f5:37:e1:f5:27:24:6f:d2:70:92:3c:e8:4d:cd:2e:d2: c0:a2:2b:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBzTw5wNbpr1RL/yPOILbjUVEB3kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcyNjIyQUUwRjY5QjRDREFCQzlDRDIyM0IzRTA2QzdE QzVFMTAxNDAeFw0yNjAzMjQxNjM3MzlaFw0yNjAzMjcyMDI5MzlaMDMxMTAvBgNV BAMTKDg2OTJEQ0M4RENEMjBDODZDNzE0OThCQTRGOTA4OUNENjk3MDQwQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpXrbLw+NeBIdDpSs/z8t7ios5 Q8PDDksvFQdms1Gdar46efkUrvT9qmc/uuZ3H586Y34GtKOu0AsnELv77ICXJYPO V7mIaKULYPD+K//DxodYZOV2fZne/k0FUzW4e7Nk5T61X4aaa0FobP9rLLsFNkB9 y44uv/kB6uLjtVUGsg2k2IZEwW0TRh/nuY/xo+Ybk0jYQuzBaNHGDuK29ItHN38/ 12LaO1of94MZO5RRNqTbVWw6iwN1r4Gkjq4YxLNaJVNYaFXlDdVlW951cgQYuRhG E5lmoAo+FeE+LezdT5knwvNjttCcoTrnR6TRfATn0Wgy9XhFNeYZq36GIgfpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhpLcyNzSDIbHFJi6T5CJzWlwQK0wHwYDVR0j BBgwFoAU5yYirg9ptM2ryc0iOz4Gx9xeEBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDM1YmY3OS1lODRhLTQwZTAtOGZkNC1mMTY5YzE4NmJlOGYvMC9FNzI2MjJBRTBG NjlCNENEQUJDOUNEMjIzQjNFMDZDN0RDNUUxMDE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTcyNjIyQUUwRjY5QjRDREFCQzlDRDIyM0IzRTA2QzdEQzVF MTAxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQzNWJmNzktZTg0YS00MGUwLThm ZDQtZjE2OWMxODZiZThmLzAvRTcyNjIyQUUwRjY5QjRDREFCQzlDRDIyM0IzRTA2 QzdEQzVFMTAxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHXwHL0MmYqHFPd+Y0Eg2nE2UUPbda3+XTia GlPYAeJbzfu2nZfQWXFbMA5IZeZU+tqcqVQ6Ir5UdBaC7ZKOWnxUV/HVlfeIqRwp t5Ph/hK2fGQ9Vj9hKpWpQ0/VE6NqYmCEhtDvZtxnbRtWzC7xmPOunes9HUnbKvF3 VjCHCXvHP+A7J4EHiao+arnM7VeI1PrCF5kXYXd1ZeU/g+JMXzJmw+DYCMPjcUG8 XdVMVdKVfTdn1BDJux2KJbqwODQFl4PMRCoV4D7DE+ZeJT2tkZIcnSY9WhV0YuKN ItrCncLV9Kp9C0HS/sKiFxwi9Tfh9Sckb9JwkjzoTc0u0sCiK1g= -----END CERTIFICATE-----Generated at Thu Mar 26 19:39:56 2026 by rpki-client