$ rpki-client -vvf repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft File: 687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft (raw, json) Hash identifier: hz/Bnn/uZIu5NWHIY5QfNYPUHBHuNBpaNGyx7diqneM= Subject key identifier: A0:4B:66:FB:83:6F:B0:25:7A:ED:9C:C0:A9:62:4C:D7:F6:4D:D8:AF Authority key identifier: 68:72:47:CE:80:E6:2A:D4:B4:0F:0B:99:15:A1:B6:F3:02:0F:68:4C Certificate issuer: /CN=687247CE80E62AD4B40F0B9915A1B6F3020F684C Certificate serial: 1EFD51089D60C728B90A022A857A79D258AEA26A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft Manifest number: 03DE Signing time: Wed 25 Mar 2026 14:41:44 +0000 Manifest this update: Wed 25 Mar 2026 14:36:44 +0000 Manifest next update: Sat 28 Mar 2026 18:30:44 +0000 Files and hashes: 1: 3130332e3136352e3235342e302f32332d3234203d3e203137393935.roa (hash: I5vk4CZVaOAQSTZi+mpaPTk3GaYie2KrNjsP/ZfsCsY=) 2: 687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl (hash: GtufUvOnwtidDO7B0MQEsko15hwEMZSbL1OAzzp4mQo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 18:30:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:fd:51:08:9d:60:c7:28:b9:0a:02:2a:85:7a:79:d2:58:ae:a2:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=687247CE80E62AD4B40F0B9915A1B6F3020F684C Validity Not Before: Mar 25 14:36:44 2026 GMT Not After : Mar 28 18:30:44 2026 GMT Subject: CN=A04B66FB836FB0257AED9CC0A9624CD7F64DD8AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0e:1c:bc:56:df:4b:0a:0b:57:21:80:cd:42: 8d:23:ba:44:39:8b:c9:46:78:95:37:d5:6d:9f:d9: 9e:af:0d:3a:10:85:c5:2b:5b:07:83:f7:6c:4c:90: bd:ed:a1:e3:53:c5:56:03:e8:1c:6a:a3:64:3f:07: e0:39:6d:da:e4:e9:7b:b8:c0:7c:da:25:9a:42:82: f8:31:16:5f:86:a6:55:6b:da:7b:ef:38:b6:ee:0f: b0:04:31:d3:20:98:42:8d:5d:1f:b5:fa:fb:29:3a: 57:8e:5e:72:34:da:a3:83:c5:de:ab:f0:9c:12:72: 3a:26:25:a9:c0:a3:e2:60:60:8e:8b:82:00:60:d7: 7c:68:58:9d:c0:06:7e:d9:70:2f:f5:16:5c:9f:50: 34:4d:52:0d:26:42:c7:a1:d6:1c:e9:fe:ab:31:c5: 70:02:fe:5d:c4:9a:d1:56:59:38:9d:b3:c1:ef:16: 87:2a:7c:d1:ec:2c:b0:b0:e4:87:6f:dc:67:73:0d: 6f:6d:94:e6:38:6f:d9:91:44:f4:c2:80:2d:1e:91: 76:03:07:39:47:d2:72:f9:78:57:cf:62:57:f2:c1: 6f:2e:d2:36:c6:e8:68:5b:36:56:c1:9b:42:3b:2e: 15:c5:6e:86:8b:c8:ff:2f:ec:57:ec:74:bf:9e:35: 0d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:4B:66:FB:83:6F:B0:25:7A:ED:9C:C0:A9:62:4C:D7:F6:4D:D8:AF X509v3 Authority Key Identifier: keyid:68:72:47:CE:80:E6:2A:D4:B4:0F:0B:99:15:A1:B6:F3:02:0F:68:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:39:4b:19:13:41:5f:45:d6:22:50:b2:71:eb:fe:fe:eb:0d: 94:ba:06:ce:4e:da:af:0d:cd:2a:f6:96:cf:67:5b:d9:cf:58: 24:56:53:ea:fc:5a:89:93:8c:50:59:d1:c3:9f:06:ee:e1:3e: 7c:75:b7:7b:03:be:1f:4b:6d:ed:2f:50:ab:ea:7d:4a:67:72: e4:44:37:36:d4:26:78:56:db:68:74:a7:33:3d:dc:b7:e3:4f: 5d:07:25:75:2c:73:a6:d0:69:b3:a9:f7:06:40:be:ff:b5:05: 04:1c:0c:ea:98:5b:a7:79:76:b1:44:47:bc:67:25:e0:fa:db: 0a:58:d4:f1:de:18:7f:6b:05:0a:7f:b4:72:25:95:9d:90:f0: d0:e5:21:78:ea:45:02:0b:b7:4a:15:64:57:9f:a9:de:7a:99: 31:da:2e:05:73:e8:21:d7:ea:ed:63:35:ad:d7:e9:cb:b9:14: 5e:60:53:dc:55:f9:79:32:18:e0:43:3f:99:44:d8:5c:05:8d: b6:98:f5:30:00:f4:f3:e9:5b:9c:6a:aa:13:c9:0b:02:03:d7: 4d:86:74:b4:f8:09:68:fd:6c:fe:1a:8e:91:eb:92:45:19:c8: 2d:82:ba:0e:b5:6c:ae:7b:3d:af:ab:9a:5c:21:43:29:c2:45: 2b:01:ce:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHv1RCJ1gxyi5CgIqhXp50liuomowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg3MjQ3Q0U4MEU2MkFENEI0MEYwQjk5MTVBMUI2RjMw MjBGNjg0QzAeFw0yNjAzMjUxNDM2NDRaFw0yNjAzMjgxODMwNDRaMDMxMTAvBgNV BAMTKEEwNEI2NkZCODM2RkIwMjU3QUVEOUNDMEE5NjI0Q0Q3RjY0REQ4QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Dhy8Vt9LCgtXIYDNQo0jukQ5 i8lGeJU31W2f2Z6vDToQhcUrWweD92xMkL3toeNTxVYD6Bxqo2Q/B+A5bdrk6Xu4 wHzaJZpCgvgxFl+GplVr2nvvOLbuD7AEMdMgmEKNXR+1+vspOleOXnI02qODxd6r 8JwScjomJanAo+JgYI6LggBg13xoWJ3ABn7ZcC/1FlyfUDRNUg0mQseh1hzp/qsx xXAC/l3EmtFWWTids8HvFocqfNHsLLCw5Idv3GdzDW9tlOY4b9mRRPTCgC0ekXYD BzlH0nL5eFfPYlfywW8u0jbG6GhbNlbBm0I7LhXFboaLyP8v7FfsdL+eNQ25AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoEtm+4NvsCV67ZzAqWJM1/ZN2K8wHwYDVR0j BBgwFoAUaHJHzoDmKtS0DwuZFaG28wIPaEwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWU1NDY4Yy0wYWM3LTQ0YTktODgyMS0yODI1N2M1YTg2MDcvMC82ODcyNDdDRTgw RTYyQUQ0QjQwRjBCOTkxNUExQjZGMzAyMEY2ODRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg3MjQ3Q0U4MEU2MkFENEI0MEYwQjk5MTVBMUI2RjMwMjBG Njg0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzVlNTQ2OGMtMGFjNy00NGE5LTg4 MjEtMjgyNTdjNWE4NjA3LzAvNjg3MjQ3Q0U4MEU2MkFENEI0MEYwQjk5MTVBMUI2 RjMwMjBGNjg0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACY5SxkTQV9F1iJQsnHr/v7rDZS6Bs5O2q8N zSr2ls9nW9nPWCRWU+r8WomTjFBZ0cOfBu7hPnx1t3sDvh9Lbe0vUKvqfUpncuRE NzbUJnhW22h0pzM93LfjT10HJXUsc6bQabOp9wZAvv+1BQQcDOqYW6d5drFER7xn JeD62wpY1PHeGH9rBQp/tHIllZ2Q8NDlIXjqRQILt0oVZFefqd56mTHaLgVz6CHX 6u1jNa3X6cu5FF5gU9xV+XkyGOBDP5lE2FwFjbaY9TAA9PPpW5xqqhPJCwID102G dLT4CWj9bP4ajpHrkkUZyC2Cug61bK57Pa+rmlwhQynCRSsBzpg= -----END CERTIFICATE-----Generated at Thu Mar 26 12:21:02 2026 by rpki-client