$ rpki-client -vvf repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft File: D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft (raw, json) Hash identifier: 1H78ZMelhNyGkaFhERsM9u5s5wilynYKNPF81IGoz4c= Subject key identifier: 73:0A:47:24:10:7D:F4:91:07:7D:FE:6C:F2:6D:70:71:16:7C:E7:D8 Authority key identifier: D5:67:7E:FA:13:70:87:11:CD:AF:B6:7D:9C:4C:8F:5F:FF:A9:A2:71 Certificate issuer: /CN=D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271 Certificate serial: 43F8B8D65ABB395224FB81F17FE62C4F6C36B6DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft Manifest number: 0371 Signing time: Wed 25 Mar 2026 10:20:41 +0000 Manifest this update: Wed 25 Mar 2026 10:15:41 +0000 Manifest next update: Sat 28 Mar 2026 12:44:41 +0000 Files and hashes: 1: D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.crl (hash: AnVVeohr9ZG72BsXlIimiDBoT2JI85qUNjs9avFfeX8=) 2: 3130332e3134372e38342e302f32332d3234203d3e20313339393535.roa (hash: ZHafjJKgXW9RsmPF8VNVEw6T28/f2O0/FZCCLymCOMc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.crl rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 12:44:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:f8:b8:d6:5a:bb:39:52:24:fb:81:f1:7f:e6:2c:4f:6c:36:b6:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271 Validity Not Before: Mar 25 10:15:41 2026 GMT Not After : Mar 28 12:44:41 2026 GMT Subject: CN=730A4724107DF491077DFE6CF26D7071167CE7D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:5e:e4:8a:53:9e:77:0e:d8:dd:80:1c:56:58: 9f:14:f5:f9:07:1b:2d:8c:57:b1:36:8c:49:da:a5: 2b:c3:1c:cc:2d:7d:95:fe:0d:51:19:fa:8d:9a:53: a7:d7:a5:6c:5c:23:83:70:f9:4e:bd:14:4f:93:7b: d6:52:d6:b4:23:2f:6c:6d:27:9d:b3:38:66:26:33: 88:03:fd:92:bc:6b:be:7b:48:27:f2:46:ee:e4:f4: 94:9b:9f:8c:da:e9:3d:bc:44:8e:48:7d:54:92:8e: 13:0d:8a:46:70:0b:c0:b1:ba:f2:76:74:cc:e0:8f: 69:a1:01:db:ab:3b:bc:1d:85:92:9f:64:6d:28:9c: cb:c6:bc:96:a3:5e:6b:e8:dd:b1:fc:aa:fb:af:81: 78:1a:32:ec:06:d8:a8:b2:d6:2a:c3:31:54:5f:cc: 3f:7b:34:cc:52:09:f8:83:0c:42:fb:ca:c1:36:6b: e6:a3:e6:1c:b3:25:0e:92:d4:e6:16:50:4c:6c:b2: 50:bc:b6:10:e7:3b:78:13:1b:ca:97:4c:2c:a2:fa: c6:5f:23:ba:ee:ae:f1:4b:7b:16:d2:b3:96:61:f9: dd:36:f7:fe:9c:cf:1f:13:37:53:b1:c8:65:45:cd: 7d:21:0c:c2:17:4b:59:68:7c:00:4c:dc:4f:9a:fe: 87:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:0A:47:24:10:7D:F4:91:07:7D:FE:6C:F2:6D:70:71:16:7C:E7:D8 X509v3 Authority Key Identifier: keyid:D5:67:7E:FA:13:70:87:11:CD:AF:B6:7D:9C:4C:8F:5F:FF:A9:A2:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:32:b9:dc:ec:12:52:a1:27:4a:7b:3d:3e:5e:79:5b:dc:ae: 5c:ad:f7:3a:2b:42:bc:cf:fc:08:3f:78:04:a0:50:a5:82:2c: b8:c8:9c:59:8b:7d:df:d0:ec:7e:26:f3:5d:78:d0:52:96:b9: 19:18:29:6d:73:a8:f7:62:b4:83:06:27:3e:4d:0d:56:0b:25: 4f:0d:1f:83:56:6a:d9:29:a1:2f:f9:7e:a2:01:78:05:2b:6d: 8d:80:a5:3c:cd:5f:c7:0a:59:4a:0c:6c:5b:72:15:53:34:3e: 3b:33:67:ce:f8:70:82:ac:fc:6f:ee:93:4e:24:e2:33:24:77: 02:a8:a0:40:67:74:7c:4d:f6:f8:a3:b4:42:35:48:e3:f7:4e: 15:87:18:3e:21:2e:e2:9f:aa:41:9c:57:94:c6:cf:bd:45:81: 74:14:02:3a:81:55:c5:0e:cc:54:c8:50:7b:00:e9:3d:7c:c9: c6:5b:cd:f3:fb:f4:67:60:4f:b8:cd:30:94:ee:28:d9:bf:95: a8:a7:4c:73:cb:d4:27:36:d3:f9:83:be:fb:19:80:8a:40:21: 6d:00:1e:cb:25:e5:d2:cd:ae:1c:e5:f8:0a:f5:a9:fd:4a:af: 38:d0:27:5c:6f:3e:09:50:ca:ff:3d:8e:69:2a:ce:15:2a:81: 49:16:fa:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ/i41lq7OVIk+4Hxf+YsT2w2tt0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU2NzdFRkExMzcwODcxMUNEQUZCNjdEOUM0QzhGNUZG RkE5QTI3MTAeFw0yNjAzMjUxMDE1NDFaFw0yNjAzMjgxMjQ0NDFaMDMxMTAvBgNV BAMTKDczMEE0NzI0MTA3REY0OTEwNzdERkU2Q0YyNkQ3MDcxMTY3Q0U3RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdXuSKU553DtjdgBxWWJ8U9fkH Gy2MV7E2jEnapSvDHMwtfZX+DVEZ+o2aU6fXpWxcI4Nw+U69FE+Te9ZS1rQjL2xt J52zOGYmM4gD/ZK8a757SCfyRu7k9JSbn4za6T28RI5IfVSSjhMNikZwC8CxuvJ2 dMzgj2mhAdurO7wdhZKfZG0onMvGvJajXmvo3bH8qvuvgXgaMuwG2Kiy1irDMVRf zD97NMxSCfiDDEL7ysE2a+aj5hyzJQ6S1OYWUExsslC8thDnO3gTG8qXTCyi+sZf I7rurvFLexbSs5Zh+d029/6czx8TN1OxyGVFzX0hDMIXS1lofABM3E+a/ocLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcwpHJBB99JEHff5s8m1wcRZ859gwHwYDVR0j BBgwFoAU1Wd++hNwhxHNr7Z9nEyPX/+ponEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Nzk2NTlhOS01NTA1LTQ5NGItYTAzYy02ZWJhY2ZhZGY5MzEvMC9ENTY3N0VGQTEz NzA4NzExQ0RBRkI2N0Q5QzRDOEY1RkZGQTlBMjcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDU2NzdFRkExMzcwODcxMUNEQUZCNjdEOUM0QzhGNUZGRkE5 QTI3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzc5NjU5YTktNTUwNS00OTRiLWEw M2MtNmViYWNmYWRmOTMxLzAvRDU2NzdFRkExMzcwODcxMUNEQUZCNjdEOUM0QzhG NUZGRkE5QTI3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF4yudzsElKhJ0p7PT5eeVvcrlyt9zorQrzP /Ag/eASgUKWCLLjInFmLfd/Q7H4m81140FKWuRkYKW1zqPditIMGJz5NDVYLJU8N H4NWatkpoS/5fqIBeAUrbY2ApTzNX8cKWUoMbFtyFVM0PjszZ874cIKs/G/uk04k 4jMkdwKooEBndHxN9vijtEI1SOP3ThWHGD4hLuKfqkGcV5TGz71FgXQUAjqBVcUO zFTIUHsA6T18ycZbzfP79GdgT7jNMJTuKNm/lainTHPL1Cc20/mDvvsZgIpAIW0A Hssl5dLNrhzl+Ar1qf1KrzjQJ1xvPglQyv89jmkqzhUqgUkW+mY= -----END CERTIFICATE-----Generated at Thu Mar 26 22:34:20 2026 by rpki-client