$ rpki-client -vvf repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft File: 131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft (raw, json) Hash identifier: 6vrf2hhfsdLS/30Nj/2U05Svs6/U5P2C8AMnY6N5z5Y= Subject key identifier: 5A:AA:5F:87:69:D0:FC:93:1C:BA:DA:FB:CC:08:A0:B6:88:AF:8B:FF Authority key identifier: 13:18:07:BD:DA:AF:97:ED:72:21:4D:FB:C5:C5:39:AC:B0:4F:DC:BE Certificate issuer: /CN=131807BDDAAF97ED72214DFBC5C539ACB04FDCBE Certificate serial: 19A6999850740497B3F2FB89D97720608883176A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft Manifest number: 0363 Signing time: Wed 25 Mar 2026 14:41:03 +0000 Manifest this update: Wed 25 Mar 2026 14:36:03 +0000 Manifest next update: Sun 29 Mar 2026 00:16:03 +0000 Files and hashes: 1: 131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl (hash: Zb9Dg69DwkDTtSDQ/3XbcAQnYPqUiszlli4peoFDmRA=) 2: 3130332e3137342e32342e302f32332d3234203d3e20313331313131.roa (hash: IcV/PuSEjSNsy6cbDUeXZVgPYs8xhMimlvvll5vTiXU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 00:16:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:a6:99:98:50:74:04:97:b3:f2:fb:89:d9:77:20:60:88:83:17:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=131807BDDAAF97ED72214DFBC5C539ACB04FDCBE Validity Not Before: Mar 25 14:36:03 2026 GMT Not After : Mar 29 00:16:03 2026 GMT Subject: CN=5AAA5F8769D0FC931CBADAFBCC08A0B688AF8BFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4e:ee:90:63:8f:f5:f6:af:43:26:2e:b7:d5: 71:c0:f2:d2:0d:38:b7:83:ac:63:74:15:96:85:7f: 4e:7a:75:dd:8e:6c:aa:f7:bc:3f:8f:d4:ea:ad:61: 45:cd:a4:1e:00:07:52:b7:31:32:bb:68:af:11:61: 58:a9:45:02:7a:22:a1:62:19:06:ee:11:79:2c:b1: 8c:6d:e4:23:9e:ca:59:3f:64:c9:20:d6:66:dd:56: 69:ed:20:64:d2:c2:8f:ef:bb:9a:42:5d:50:b6:0d: 73:b6:80:e5:cd:6d:84:73:a3:3f:84:ae:37:10:39: 4e:d1:87:09:d9:06:4b:8f:4f:06:2d:f9:c4:e7:0f: 3d:22:1f:31:04:15:21:35:93:ce:01:e1:f2:fa:87: bc:b5:2e:f9:a7:40:5e:c5:74:63:ea:94:bc:ad:c2: 54:ef:06:99:b4:72:37:19:b0:1a:99:8f:43:a1:2f: d2:83:26:d7:78:1c:67:71:00:e0:ec:49:fc:7a:44: f7:67:12:06:f9:47:e2:b2:55:4e:0f:90:41:ec:91: 43:44:4a:80:e6:b7:ae:f7:eb:3e:0f:31:1d:c9:fa: 26:c3:04:dc:75:15:c9:6d:d0:8e:51:19:e1:34:db: 81:e4:e8:fa:80:1c:7b:6f:d5:72:29:3a:43:ee:0c: a1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:AA:5F:87:69:D0:FC:93:1C:BA:DA:FB:CC:08:A0:B6:88:AF:8B:FF X509v3 Authority Key Identifier: keyid:13:18:07:BD:DA:AF:97:ED:72:21:4D:FB:C5:C5:39:AC:B0:4F:DC:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:7c:f0:b3:4c:15:02:1c:47:65:d7:da:a7:64:2f:7c:fd:cd: 07:d8:fc:76:cd:1f:59:c8:f8:bb:8a:9b:c1:4a:88:04:7f:7f: 28:27:8a:57:51:70:21:c9:8d:18:0a:e8:a1:84:97:90:9c:93: 18:33:5b:fb:63:92:e1:ad:a2:ed:65:e1:54:60:df:a4:20:02: 31:4e:a8:44:9d:e5:b1:a2:1c:07:43:bd:9c:6c:d5:fb:72:ce: ea:21:db:40:bb:e6:e8:4e:c2:92:60:21:67:9b:c7:dd:46:4a: 20:e4:f7:b8:af:8e:b4:d9:6d:d7:85:c5:87:6d:38:15:8c:23: 4e:06:33:ad:e7:12:a3:4d:cc:fa:4d:15:96:b2:94:fc:6b:fa: 7c:37:b1:48:f5:58:78:2a:2b:0d:6e:5f:a8:a8:bf:fa:35:28: 69:1c:1e:77:40:af:f2:ed:22:b2:35:ef:01:e3:cd:39:d0:69: 89:26:44:a1:6e:92:7e:36:8f:ae:db:02:92:23:77:68:e4:a7: 2a:8c:a5:a3:da:6d:03:da:e8:4f:92:e6:12:64:3e:d9:8c:96: fc:48:51:4c:f1:89:95:b7:98:53:3d:aa:c7:6e:5d:57:b9:e8: 6f:53:9b:6e:ad:9a:d7:73:a1:af:ce:72:5c:5b:27:91:87:9e: de:8e:07:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGaaZmFB0BJez8vuJ2XcgYIiDF2owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5QUNC MDRGRENCRTAeFw0yNjAzMjUxNDM2MDNaFw0yNjAzMjkwMDE2MDNaMDMxMTAvBgNV BAMTKDVBQUE1Rjg3NjlEMEZDOTMxQ0JBREFGQkNDMDhBMEI2ODhBRjhCRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNTu6QY4/19q9DJi631XHA8tIN OLeDrGN0FZaFf056dd2ObKr3vD+P1OqtYUXNpB4AB1K3MTK7aK8RYVipRQJ6IqFi GQbuEXkssYxt5COeylk/ZMkg1mbdVmntIGTSwo/vu5pCXVC2DXO2gOXNbYRzoz+E rjcQOU7RhwnZBkuPTwYt+cTnDz0iHzEEFSE1k84B4fL6h7y1LvmnQF7FdGPqlLyt wlTvBpm0cjcZsBqZj0OhL9KDJtd4HGdxAODsSfx6RPdnEgb5R+KyVU4PkEHskUNE SoDmt6736z4PMR3J+ibDBNx1Fclt0I5RGeE024Hk6PqAHHtv1XIpOkPuDKEVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWqpfh2nQ/JMcutr7zAigtoivi/8wHwYDVR0j BBgwFoAUExgHvdqvl+1yIU37xcU5rLBP3L4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZjI1Yjk2OC0wOTI3LTQ1OTQtODg3ZS02N2Y1M2Y5NjdiMTIvMC8xMzE4MDdCRERB QUY5N0VENzIyMTRERkJDNUM1MzlBQ0IwNEZEQ0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5QUNCMDRG RENCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmYyNWI5NjgtMDkyNy00NTk0LTg4 N2UtNjdmNTNmOTY3YjEyLzAvMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5 QUNCMDRGRENCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABx88LNMFQIcR2XX2qdkL3z9zQfY/HbNH1nI +LuKm8FKiAR/fygnildRcCHJjRgK6KGEl5CckxgzW/tjkuGtou1l4VRg36QgAjFO qESd5bGiHAdDvZxs1ftyzuoh20C75uhOwpJgIWebx91GSiDk97ivjrTZbdeFxYdt OBWMI04GM63nEqNNzPpNFZaylPxr+nw3sUj1WHgqKw1uX6iov/o1KGkcHndAr/Lt IrI17wHjzTnQaYkmRKFukn42j67bApIjd2jkpyqMpaPabQPa6E+S5hJkPtmMlvxI UUzxiZW3mFM9qsduXVe56G9Tm26tmtdzoa/OclxbJ5GHnt6OB4k= -----END CERTIFICATE-----Generated at Thu Mar 26 21:05:17 2026 by rpki-client