$ rpki-client -vvf repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.mft File: D34F7D48A07BB8A2DEEDC8C87819771181935231.mft (raw, json) Hash identifier: ntoyy2GZ6YndLiupiemWPmljQs1FETigHqW47Vt7V3k= Subject key identifier: 4F:BD:27:46:9E:ED:9A:3D:7A:48:40:21:39:68:C9:45:FB:1F:F7:6C Authority key identifier: D3:4F:7D:48:A0:7B:B8:A2:DE:ED:C8:C8:78:19:77:11:81:93:52:31 Certificate issuer: /CN=D34F7D48A07BB8A2DEEDC8C87819771181935231 Certificate serial: 25E926E73E8F3252CD60834DB733310B858D3FD7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D34F7D48A07BB8A2DEEDC8C87819771181935231.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.mft Manifest number: 0257 Signing time: Thu 26 Mar 2026 05:02:51 +0000 Manifest this update: Thu 26 Mar 2026 04:57:51 +0000 Manifest next update: Sun 29 Mar 2026 09:35:51 +0000 Files and hashes: 1: D34F7D48A07BB8A2DEEDC8C87819771181935231.crl (hash: e+KFfB45pcaPR0k9WVpD86Y6OxtepsvF7TH0//huSCM=) 2: 3130332e3138392e3131342e302f32342d3234203d3e20313439373533.roa (hash: x5Hp+HOblAHOHP0M7M1Nf47NaRwReuKAEuMVfjybHpo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.crl rsync://repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D34F7D48A07BB8A2DEEDC8C87819771181935231.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 09:35:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:e9:26:e7:3e:8f:32:52:cd:60:83:4d:b7:33:31:0b:85:8d:3f:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34F7D48A07BB8A2DEEDC8C87819771181935231 Validity Not Before: Mar 26 04:57:51 2026 GMT Not After : Mar 29 09:35:51 2026 GMT Subject: CN=4FBD27469EED9A3D7A4840213968C945FB1FF76C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:84:58:7d:1d:78:aa:4d:6a:84:59:6b:d7:6a: f8:49:fa:37:ba:90:53:5c:35:03:71:b8:b3:d8:80: 5b:36:a6:e7:23:95:6a:dd:3a:e0:d2:02:dc:04:8a: 00:8a:9b:57:c9:59:d6:62:ed:32:d8:d6:d8:22:d2: 28:53:e9:7b:bd:30:d5:31:50:eb:e4:d6:f8:96:84: 28:bf:08:71:35:32:51:68:39:d6:5d:5d:88:3a:50: cf:48:9b:f5:f7:50:a5:54:34:65:c6:de:a7:ea:b6: c0:76:9a:5e:a9:0d:1a:4e:74:7f:95:f2:ea:fa:e8: b0:d2:f8:ae:71:22:12:be:62:21:b1:0f:8d:4b:a9: bc:59:12:c5:25:a2:ac:b0:3d:db:1b:b1:1b:fc:56: 58:7f:9a:8d:ae:8e:d4:e8:7e:8a:fc:d9:5c:ed:24: a4:53:05:c7:e0:7a:c0:d9:94:4e:af:75:c5:85:a2: 99:05:ee:de:b5:9b:03:f1:27:2f:09:ef:e6:1a:d3: d4:24:45:08:19:8d:0c:83:51:cd:65:90:fe:17:ad: 4a:6f:6c:93:af:ee:0a:20:d2:ef:fc:24:23:c4:5e: 20:d3:1a:37:34:47:d7:aa:79:03:81:15:f0:f3:d4: bf:2a:a1:e0:db:46:3c:5f:f0:16:94:a6:9c:61:3b: 5b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:BD:27:46:9E:ED:9A:3D:7A:48:40:21:39:68:C9:45:FB:1F:F7:6C X509v3 Authority Key Identifier: keyid:D3:4F:7D:48:A0:7B:B8:A2:DE:ED:C8:C8:78:19:77:11:81:93:52:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D34F7D48A07BB8A2DEEDC8C87819771181935231.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:4a:87:da:26:b2:b4:58:44:15:7b:a5:1d:a3:00:79:09:2e: b3:e2:6f:7a:43:69:40:73:38:b4:24:95:c2:aa:43:b6:3b:ac: b1:dc:56:51:3c:e2:da:d9:42:53:b3:34:2e:81:98:be:88:9d: db:b1:58:35:d7:96:2f:4b:32:bd:2b:16:e6:75:7e:1d:44:34: 98:db:4c:33:70:80:89:8d:03:56:3a:d3:21:87:11:ca:e9:c1: fd:0f:d7:99:a0:1c:78:0f:b2:91:4a:e4:28:d2:95:43:e3:1e: 65:27:14:8c:e7:e8:00:30:e9:3d:41:96:49:a8:34:5d:62:27: 5e:83:68:de:a3:45:24:0e:11:bb:45:cf:a5:25:82:48:f9:1c: a3:f9:97:8a:78:47:9a:d0:80:29:70:f5:62:4c:b4:59:2d:e1: 34:6a:1b:fe:d2:de:c8:c3:51:fa:f3:f2:d8:04:f1:b5:8d:a1: c3:4b:4b:3c:da:d6:d3:04:eb:2e:3f:32:df:8b:b4:a3:01:f3: cd:7e:a8:ec:04:f2:d1:85:01:97:f3:72:43:5d:1e:7c:1e:ab: b8:f7:eb:a6:5c:f3:fc:28:2e:3a:ff:86:e7:18:39:68:da:26: 30:bc:42:d8:5d:e2:f9:46:87:d8:98:7e:54:35:1d:18:d5:6b: 15:57:c7:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJekm5z6PMlLNYINNtzMxC4WNP9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0RjdENDhBMDdCQjhBMkRFRURDOEM4NzgxOTc3MTE4 MTkzNTIzMTAeFw0yNjAzMjYwNDU3NTFaFw0yNjAzMjkwOTM1NTFaMDMxMTAvBgNV BAMTKDRGQkQyNzQ2OUVFRDlBM0Q3QTQ4NDAyMTM5NjhDOTQ1RkIxRkY3NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDShFh9HXiqTWqEWWvXavhJ+je6 kFNcNQNxuLPYgFs2pucjlWrdOuDSAtwEigCKm1fJWdZi7TLY1tgi0ihT6Xu9MNUx UOvk1viWhCi/CHE1MlFoOdZdXYg6UM9Im/X3UKVUNGXG3qfqtsB2ml6pDRpOdH+V 8ur66LDS+K5xIhK+YiGxD41LqbxZEsUloqywPdsbsRv8Vlh/mo2ujtTofor82Vzt JKRTBcfgesDZlE6vdcWFopkF7t61mwPxJy8J7+Ya09QkRQgZjQyDUc1lkP4XrUpv bJOv7gog0u/8JCPEXiDTGjc0R9eqeQOBFfDz1L8qoeDbRjxf8BaUppxhO1v/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT70nRp7tmj16SEAhOWjJRfsf92wwHwYDVR0j BBgwFoAU0099SKB7uKLe7cjIeBl3EYGTUjEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzU5YjZhMy1iNzRiLTRiYWEtOTkzYS04MThmYjcyMTA3MjIvMC9EMzRGN0Q0OEEw N0JCOEEyREVFREM4Qzg3ODE5NzcxMTgxOTM1MjMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDM0RjdENDhBMDdCQjhBMkRFRURDOEM4NzgxOTc3MTE4MTkz NTIzMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzM1OWI2YTMtYjc0Yi00YmFhLTk5 M2EtODE4ZmI3MjEwNzIyLzAvRDM0RjdENDhBMDdCQjhBMkRFRURDOEM4NzgxOTc3 MTE4MTkzNTIzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHpKh9omsrRYRBV7pR2jAHkJLrPib3pDaUBz OLQklcKqQ7Y7rLHcVlE84trZQlOzNC6BmL6InduxWDXXli9LMr0rFuZ1fh1ENJjb TDNwgImNA1Y60yGHEcrpwf0P15mgHHgPspFK5CjSlUPjHmUnFIzn6AAw6T1Blkmo NF1iJ16DaN6jRSQOEbtFz6Ulgkj5HKP5l4p4R5rQgClw9WJMtFkt4TRqG/7S3sjD Ufrz8tgE8bWNocNLSzza1tME6y4/Mt+LtKMB881+qOwE8tGFAZfzckNdHnweq7j3 66Zc8/woLjr/hucYOWjaJjC8Qthd4vlGh9iYflQ1HRjVaxVXxws= -----END CERTIFICATE-----Generated at Thu Mar 26 23:02:50 2026 by rpki-client