$ rpki-client -vvf repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft File: D456F5EAD8D734455DAEF896A9055409FF4A078F.mft (raw, json) Hash identifier: QH9wn7BARVrlsB++r3qTNUgrP3BwoEKFF8j4wmVrk5w= Subject key identifier: 2B:9C:87:D4:2F:00:90:66:69:C2:08:F3:1A:8D:C1:35:FC:46:BC:0C Authority key identifier: D4:56:F5:EA:D8:D7:34:45:5D:AE:F8:96:A9:05:54:09:FF:4A:07:8F Certificate issuer: /CN=D456F5EAD8D734455DAEF896A9055409FF4A078F Certificate serial: 07BEC13A30E34EB582CAB04328FA10477C0FCD8A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D456F5EAD8D734455DAEF896A9055409FF4A078F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft Manifest number: 01DE Signing time: Tue 24 Mar 2026 10:51:06 +0000 Manifest this update: Tue 24 Mar 2026 10:46:06 +0000 Manifest next update: Fri 27 Mar 2026 16:35:06 +0000 Files and hashes: 1: 3130332e32312e36342e302f32332d3233203d3e20313530393832.roa (hash: gwbJnPHpSeHg+TMGbvaYpRRpr3Bq8iLm10t802UwTG4=) 2: D456F5EAD8D734455DAEF896A9055409FF4A078F.crl (hash: IbiBFd5hFMNK4kaWZ1Hy1bAPxI4MphnnezxWQj7zmrM=) 3: 3130332e32312e36352e302f32342d3234203d3e20313530393832.roa (hash: 9oxT5RDcr9Ek1xIr6QpdXnO6XUo20PqnOOCrdJPUbMk=) 4: 3130332e32312e36342e302f32342d3234203d3e20313530393832.roa (hash: wCS0nyyn34cApWcZ5FUBxPZYDFIlv5DQUxLaCfWoRF4=) 5: 323030313a6466323a356434303a3a2f34382d3438203d3e20313530393832.roa (hash: xlxWynyg4hfKziS2fdPWIlDySNvIWbbHvXpQyS625Nc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.crl rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D456F5EAD8D734455DAEF896A9055409FF4A078F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 16:35:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:be:c1:3a:30:e3:4e:b5:82:ca:b0:43:28:fa:10:47:7c:0f:cd:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D456F5EAD8D734455DAEF896A9055409FF4A078F Validity Not Before: Mar 24 10:46:06 2026 GMT Not After : Mar 27 16:35:06 2026 GMT Subject: CN=2B9C87D42F00906669C208F31A8DC135FC46BC0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:68:94:e6:7b:48:1c:69:81:1d:13:63:79:10: 72:fa:ee:b9:b2:f3:85:c6:af:0f:12:07:b3:b7:6f: a7:e8:9f:68:f5:5b:98:20:c0:a6:12:8c:a6:91:3c: 5a:31:7f:cc:70:fe:fc:f8:24:82:c0:c1:1b:59:c9: f0:f7:bb:d7:52:1c:9a:e8:d6:3a:d0:cc:51:18:01: 17:14:f2:7e:0e:01:7a:bc:5a:c5:e8:27:09:fe:5a: d0:02:55:ba:a4:58:af:ac:7c:27:c3:11:1e:13:1d: 4f:e4:08:8f:43:a1:6b:a4:af:df:55:a1:33:e8:94: b7:c1:9b:7a:95:ff:98:08:57:4f:8c:64:90:32:91: bb:76:c0:f2:82:c8:67:0e:ec:18:39:dd:c2:c2:6e: b9:49:36:ec:f3:94:62:4d:7a:4d:c2:a4:54:65:fa: 9e:ce:cf:bd:90:31:05:63:24:06:d8:e1:4c:92:35: a1:16:b9:aa:9e:77:91:d8:c2:e3:4d:d8:dc:6f:6b: 7c:a6:fb:97:eb:4e:dc:80:eb:d4:b8:12:ca:47:2b: 56:a4:af:80:a3:7d:83:70:71:ab:5b:35:28:c7:bb: 74:10:0b:0a:77:86:c6:6d:ba:97:03:69:a7:f6:76: e9:d9:e8:a5:db:3a:99:5a:4e:2a:94:8d:42:4f:a4: c7:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:9C:87:D4:2F:00:90:66:69:C2:08:F3:1A:8D:C1:35:FC:46:BC:0C X509v3 Authority Key Identifier: keyid:D4:56:F5:EA:D8:D7:34:45:5D:AE:F8:96:A9:05:54:09:FF:4A:07:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D456F5EAD8D734455DAEF896A9055409FF4A078F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:87:54:ab:5d:5f:d1:47:c2:f3:c7:a0:92:48:8c:a7:9a:fa: 2b:8a:33:0e:88:47:43:b2:46:ef:b0:c0:59:86:48:f1:cc:1f: d1:c2:06:53:6e:b3:52:d9:82:ab:35:29:df:f2:13:9a:ea:31: 08:d7:9f:6f:45:97:2e:77:95:38:24:56:be:3a:9e:73:95:23: 0b:93:9e:9b:43:11:19:51:14:e2:f4:2c:33:cf:f5:01:36:41: 4a:aa:16:12:68:c6:cd:2a:13:38:56:12:bc:1d:66:7c:79:a5: b3:16:20:87:3f:b5:a3:74:f6:f4:6b:36:99:92:25:87:4f:3c: 61:c1:e3:79:44:bb:ce:06:63:b3:89:f8:f1:6d:d7:35:02:43: 9c:1b:89:25:61:ce:35:a3:51:54:94:85:62:e8:02:8c:74:17: f2:93:a4:ba:25:78:56:08:f2:42:b8:e7:f5:96:1d:77:17:fd: c9:ae:39:6f:10:d7:5d:a8:d6:5b:f5:29:83:72:af:af:d8:4e: a0:38:c1:0a:51:56:7f:f5:ba:5e:40:76:91:b0:fd:a0:64:86: 35:1d:c3:7a:08:09:b0:5c:1e:a6:a5:d0:3f:f0:0c:40:bc:57: f1:3e:b6:64:46:fa:8d:4c:67:4b:bc:fa:f1:be:02:89:36:af: d4:25:07:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB77BOjDjTrWCyrBDKPoQR3wPzYowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ1NkY1RUFEOEQ3MzQ0NTVEQUVGODk2QTkwNTU0MDlG RjRBMDc4RjAeFw0yNjAzMjQxMDQ2MDZaFw0yNjAzMjcxNjM1MDZaMDMxMTAvBgNV BAMTKDJCOUM4N0Q0MkYwMDkwNjY2OUMyMDhGMzFBOERDMTM1RkM0NkJDMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuaJTme0gcaYEdE2N5EHL67rmy 84XGrw8SB7O3b6fon2j1W5ggwKYSjKaRPFoxf8xw/vz4JILAwRtZyfD3u9dSHJro 1jrQzFEYARcU8n4OAXq8WsXoJwn+WtACVbqkWK+sfCfDER4THU/kCI9DoWukr99V oTPolLfBm3qV/5gIV0+MZJAykbt2wPKCyGcO7Bg53cLCbrlJNuzzlGJNek3CpFRl +p7Oz72QMQVjJAbY4UySNaEWuaqed5HYwuNN2Nxva3ym+5frTtyA69S4EspHK1ak r4CjfYNwcatbNSjHu3QQCwp3hsZtupcDaaf2dunZ6KXbOplaTiqUjUJPpMeZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK5yH1C8AkGZpwgjzGo3BNfxGvAwwHwYDVR0j BBgwFoAU1Fb16tjXNEVdrviWqQVUCf9KB48wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NmJlYzhlOS02NTY4LTQ3OGQtYmQyNi1mNmU3Nzc4NzU1MTEvMC9ENDU2RjVFQUQ4 RDczNDQ1NURBRUY4OTZBOTA1NTQwOUZGNEEwNzhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDQ1NkY1RUFEOEQ3MzQ0NTVEQUVGODk2QTkwNTU0MDlGRjRB MDc4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzZiZWM4ZTktNjU2OC00NzhkLWJk MjYtZjZlNzc3ODc1NTExLzAvRDQ1NkY1RUFEOEQ3MzQ0NTVEQUVGODk2QTkwNTU0 MDlGRjRBMDc4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJaHVKtdX9FHwvPHoJJIjKea+iuKMw6IR0Oy Ru+wwFmGSPHMH9HCBlNus1LZgqs1Kd/yE5rqMQjXn29Fly53lTgkVr46nnOVIwuT nptDERlRFOL0LDPP9QE2QUqqFhJoxs0qEzhWErwdZnx5pbMWIIc/taN09vRrNpmS JYdPPGHB43lEu84GY7OJ+PFt1zUCQ5wbiSVhzjWjUVSUhWLoAox0F/KTpLoleFYI 8kK45/WWHXcX/cmuOW8Q112o1lv1KYNyr6/YTqA4wQpRVn/1ul5AdpGw/aBkhjUd w3oICbBcHqal0D/wDEC8V/E+tmRG+o1MZ0u8+vG+Aok2r9QlB24= -----END CERTIFICATE-----Generated at Thu Mar 26 18:36:54 2026 by rpki-client