$ rpki-client -vvf repo-rpki.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/82FB9CE597D61EC382BA2D63909426959C43F18F.mft File: 82FB9CE597D61EC382BA2D63909426959C43F18F.mft (raw, json) Hash identifier: ZseKwSDLR1zzfB0/ObbWr03nTvNNp68RZSJlVk6L7ms= Subject key identifier: 2A:7B:52:03:05:5E:AA:FC:3F:97:CB:36:EA:8A:66:BC:1D:C4:2E:72 Authority key identifier: 82:FB:9C:E5:97:D6:1E:C3:82:BA:2D:63:90:94:26:95:9C:43:F1:8F Certificate issuer: /CN=82FB9CE597D61EC382BA2D63909426959C43F18F Certificate serial: 3EDE1FDB1A3E3BCAC35468558E5EAA0E4C87B800 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82FB9CE597D61EC382BA2D63909426959C43F18F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/82FB9CE597D61EC382BA2D63909426959C43F18F.mft Manifest number: 0187 Signing time: Wed 25 Mar 2026 20:12:44 +0000 Manifest this update: Wed 25 Mar 2026 20:07:44 +0000 Manifest next update: Sat 28 Mar 2026 20:51:44 +0000 Files and hashes: 1: 3130332e372e3130342e302f32342d3234203d3e20313531353933.roa (hash: 3uNfdf5OyBJLpmZT75dt2srrC7nbkL5sTgGA5ZUxCD8=) 2: 3130332e372e3130352e302f32342d3234203d3e20313531353933.roa (hash: +Rw2T75m1ati4oVfQCR6RiMANt/qU5P03srE51mQwtg=) 3: 82FB9CE597D61EC382BA2D63909426959C43F18F.crl (hash: PpOn//ujIVGAsqFqUWqfk+lpsilMn3oNOf+IXiEV/yE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/82FB9CE597D61EC382BA2D63909426959C43F18F.crl rsync://repo-rpki.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/82FB9CE597D61EC382BA2D63909426959C43F18F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82FB9CE597D61EC382BA2D63909426959C43F18F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 20:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:de:1f:db:1a:3e:3b:ca:c3:54:68:55:8e:5e:aa:0e:4c:87:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82FB9CE597D61EC382BA2D63909426959C43F18F Validity Not Before: Mar 25 20:07:44 2026 GMT Not After : Mar 28 20:51:44 2026 GMT Subject: CN=2A7B5203055EAAFC3F97CB36EA8A66BC1DC42E72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:88:bc:90:0e:f9:49:1f:36:ac:98:17:7a:ef: 78:bf:b9:13:9f:3f:a6:fb:9d:90:3c:b4:90:bf:cb: 88:a7:bc:fe:2b:c0:69:c2:f1:46:76:6e:d7:47:3b: 64:83:5a:57:3d:f1:b9:8b:29:0e:b2:52:7c:78:60: 8a:42:60:c6:fe:07:77:9a:74:a5:2c:d2:8b:ab:92: 6e:3c:45:59:01:55:73:b9:ca:60:79:66:91:84:51: ec:9b:fc:25:bb:7e:4f:44:d7:42:70:37:6e:64:4c: 72:0e:b6:22:c3:2f:48:9c:6d:9c:16:c4:43:ed:c3: b9:9e:d9:d6:0e:d7:90:30:53:2c:a0:45:c1:b5:2f: 1e:2c:ef:e3:6f:33:c9:95:ef:6f:66:89:48:9b:ac: a3:2e:dd:54:c0:a0:b9:c3:4b:ca:bb:ae:ba:3d:fc: e3:3d:67:d0:d6:07:ff:76:44:62:22:64:2c:da:d8: e3:ab:22:61:96:95:6f:40:77:ef:89:7c:bc:ed:12: f6:37:c2:a1:13:a0:bc:95:f0:04:27:5e:d2:ab:be: ce:33:44:d5:7d:24:e8:fb:33:6c:0a:b1:2b:be:f1: 82:11:cd:94:a9:78:4b:58:27:6b:7a:51:c2:bf:07: ed:15:26:fa:98:c0:df:46:98:c5:a6:81:63:d5:4d: b1:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:7B:52:03:05:5E:AA:FC:3F:97:CB:36:EA:8A:66:BC:1D:C4:2E:72 X509v3 Authority Key Identifier: keyid:82:FB:9C:E5:97:D6:1E:C3:82:BA:2D:63:90:94:26:95:9C:43:F1:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/82FB9CE597D61EC382BA2D63909426959C43F18F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82FB9CE597D61EC382BA2D63909426959C43F18F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/82FB9CE597D61EC382BA2D63909426959C43F18F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:64:c1:54:e6:b4:64:f3:a6:0e:4e:da:a9:03:42:87:61:61: cc:52:4e:63:de:b2:6f:20:47:c0:14:d4:63:24:ce:d8:58:a4: d5:c1:9f:36:71:d2:67:0f:b8:56:01:22:22:f1:79:21:c2:db: 54:6d:a9:df:c6:1e:d1:ba:7f:f9:f4:e9:eb:ac:0b:4e:2a:39: 33:a8:96:ec:87:7e:42:83:73:05:76:47:b2:0b:a4:fe:0b:24: 79:cf:73:8c:f0:69:fc:2d:b9:3b:12:a3:4c:0f:4a:e1:9f:b6: 28:a0:3c:d2:90:0f:72:00:fc:14:11:bf:c5:ae:66:dc:cc:da: f0:f9:5a:69:23:1e:b0:05:a6:5c:02:32:cf:42:5f:4a:44:04: ca:15:73:4f:f4:45:d6:1f:4f:a1:30:75:c3:26:0f:95:09:82: e4:b4:81:c3:2c:1b:8c:3f:94:6b:11:c5:48:76:00:55:c1:af: 86:ca:22:e1:ab:a2:a9:92:a8:f6:26:5e:05:57:e1:07:9c:ac: 84:ed:c3:24:ae:2e:87:25:0d:54:89:81:69:bf:9f:4f:8e:17: 7d:28:0f:05:e7:8c:8d:1a:62:e0:ca:c8:d5:be:90:fd:58:36: 1c:b9:2d:9a:5e:46:5b:82:96:33:93:57:17:85:c3:ea:a1:e7: ac:96:76:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPt4f2xo+O8rDVGhVjl6qDkyHuAAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODJGQjlDRTU5N0Q2MUVDMzgyQkEyRDYzOTA5NDI2OTU5 QzQzRjE4RjAeFw0yNjAzMjUyMDA3NDRaFw0yNjAzMjgyMDUxNDRaMDMxMTAvBgNV BAMTKDJBN0I1MjAzMDU1RUFBRkMzRjk3Q0IzNkVBOEE2NkJDMURDNDJFNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPiLyQDvlJHzasmBd673i/uROf P6b7nZA8tJC/y4invP4rwGnC8UZ2btdHO2SDWlc98bmLKQ6yUnx4YIpCYMb+B3ea dKUs0ourkm48RVkBVXO5ymB5ZpGEUeyb/CW7fk9E10JwN25kTHIOtiLDL0icbZwW xEPtw7me2dYO15AwUyygRcG1Lx4s7+NvM8mV729miUibrKMu3VTAoLnDS8q7rro9 /OM9Z9DWB/92RGIiZCza2OOrImGWlW9Ad++JfLztEvY3wqEToLyV8AQnXtKrvs4z RNV9JOj7M2wKsSu+8YIRzZSpeEtYJ2t6UcK/B+0VJvqYwN9GmMWmgWPVTbGTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKntSAwVeqvw/l8s26opmvB3ELnIwHwYDVR0j BBgwFoAUgvuc5ZfWHsOCui1jkJQmlZxD8Y8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzZjNzgyNS04YjNkLTQ2NmMtYmEwYy05OTU1M2MxZDczZWEvMC84MkZCOUNFNTk3 RDYxRUMzODJCQTJENjM5MDk0MjY5NTlDNDNGMThGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODJGQjlDRTU5N0Q2MUVDMzgyQkEyRDYzOTA5NDI2OTU5QzQz RjE4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzc2Yzc4MjUtOGIzZC00NjZjLWJh MGMtOTk1NTNjMWQ3M2VhLzAvODJGQjlDRTU5N0Q2MUVDMzgyQkEyRDYzOTA5NDI2 OTU5QzQzRjE4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABpkwVTmtGTzpg5O2qkDQodhYcxSTmPesm8g R8AU1GMkzthYpNXBnzZx0mcPuFYBIiLxeSHC21Rtqd/GHtG6f/n06eusC04qOTOo luyHfkKDcwV2R7ILpP4LJHnPc4zwafwtuTsSo0wPSuGftiigPNKQD3IA/BQRv8Wu ZtzM2vD5WmkjHrAFplwCMs9CX0pEBMoVc0/0RdYfT6EwdcMmD5UJguS0gcMsG4w/ lGsRxUh2AFXBr4bKIuGroqmSqPYmXgVX4QecrITtwySuLoclDVSJgWm/n0+OF30o DwXnjI0aYuDKyNW+kP1YNhy5LZpeRluCljOTVxeFw+qh56yWdlI= -----END CERTIFICATE-----Generated at Thu Mar 26 14:41:59 2026 by rpki-client