$ rpki-client -vvf repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft File: 312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft (raw, json) Hash identifier: vVGCUSq/sCmbv/nhZ/ajjLppFdOe8nE4jVZb7oCE0Rw= Subject key identifier: 5E:E1:D7:7C:78:57:96:92:96:92:88:63:51:25:30:C4:7C:B0:ED:60 Authority key identifier: 31:2D:65:72:B0:C1:04:C0:D5:18:34:C1:B0:1C:B0:C5:93:DA:E8:B4 Certificate issuer: /CN=312D6572B0C104C0D51834C1B01CB0C593DAE8B4 Certificate serial: 05550E222AEE17099FC097CD66B091C8FE242A5B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft Manifest number: 017F Signing time: Tue 24 Mar 2026 13:22:42 +0000 Manifest this update: Tue 24 Mar 2026 13:17:42 +0000 Manifest next update: Sat 28 Mar 2026 00:13:42 +0000 Files and hashes: 1: 312D6572B0C104C0D51834C1B01CB0C593DAE8B4.crl (hash: icGVgL6Y+lsfU+4Ru4Bq4tVOhUkb3wjgEfrEF4Uf1hU=) 2: 3230332e3137352e3130302e302f32332d3234203d3e20313532303132.roa (hash: Via8twfYiTOYYUS4MnDOw8zvlMb40Ue2urMBm24mYnU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.crl rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 00:13:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:55:0e:22:2a:ee:17:09:9f:c0:97:cd:66:b0:91:c8:fe:24:2a:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=312D6572B0C104C0D51834C1B01CB0C593DAE8B4 Validity Not Before: Mar 24 13:17:42 2026 GMT Not After : Mar 28 00:13:42 2026 GMT Subject: CN=5EE1D77C7857969296928863512530C47CB0ED60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:90:d3:13:83:eb:3c:5d:54:5a:e9:d7:c7:6c: 88:6b:d7:b9:78:df:f9:6a:9b:46:2e:40:6c:d2:b4: f0:89:43:3e:e1:e5:db:7f:0c:79:8c:e2:ea:8d:7d: 92:ab:db:e8:50:1f:39:d0:9e:0d:cc:a8:16:66:2b: d9:a5:91:2b:af:02:4e:f8:94:ef:43:dc:28:4a:b3: 7f:cd:5f:ff:dd:0a:11:3a:14:ee:b4:f4:e4:17:41: 8e:ea:5f:b7:8f:75:f0:96:24:4f:ec:c2:40:b9:e2: ca:95:16:9c:35:f6:88:2b:25:44:da:e5:8e:75:fa: ff:46:3c:47:a0:4c:d5:fc:86:84:d7:e9:ed:1e:3b: d4:57:44:cb:2b:61:c3:f2:d4:da:f9:5a:5a:79:17: ae:ca:ad:ee:d1:3d:3f:16:99:0b:9f:0a:52:6b:91: 68:30:7d:54:8f:d4:e4:3b:f8:fd:79:fd:76:a5:e5: 71:7b:88:42:3e:51:d3:ee:79:06:f3:ab:b5:be:3e: 93:06:19:52:9a:16:02:32:b2:db:31:fa:86:31:68: 01:39:3e:a7:af:56:b9:31:8b:63:1e:b6:48:30:a9: b6:b8:f6:65:ed:9e:bb:f8:3b:07:03:86:51:81:c4: 93:01:fb:52:14:3b:c7:88:08:48:3c:1c:2d:9b:78: 2f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:E1:D7:7C:78:57:96:92:96:92:88:63:51:25:30:C4:7C:B0:ED:60 X509v3 Authority Key Identifier: keyid:31:2D:65:72:B0:C1:04:C0:D5:18:34:C1:B0:1C:B0:C5:93:DA:E8:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:50:cb:d7:04:57:2b:ed:07:10:2a:0a:ea:4a:a1:3f:37:7c: 28:57:1a:0f:99:52:fc:3d:40:eb:9d:31:00:3d:f5:69:b6:7a: 09:d8:50:63:a7:9e:72:aa:c6:aa:54:46:2b:3c:85:f1:c5:9b: d0:de:f8:5c:9c:a8:45:6c:f9:2b:d8:1c:b8:8e:b7:d4:af:8a: b4:90:8d:6f:41:75:cf:99:9a:ce:b5:23:18:0e:24:1e:e7:d1: 10:5f:0c:b3:60:04:bb:b1:06:fb:7c:6b:78:03:45:5a:9b:95: 92:d8:95:b0:bd:38:e2:b7:01:fa:ec:80:5d:ba:1f:7d:d3:1a: 55:b3:d0:15:56:3c:f2:b6:8f:d3:00:cd:9c:42:80:89:b9:0a: 64:1d:72:9a:87:06:c0:d1:df:36:e8:07:13:8a:ac:b7:41:bf: 88:e7:d3:ba:13:ae:60:9a:d1:7f:68:d2:7a:24:79:a6:d0:02: 90:0a:d1:e7:b4:ab:3d:9a:34:85:26:06:b1:cb:cb:60:de:b0: 6a:9b:f6:f6:20:14:a1:a7:3a:4c:ed:7b:0b:4b:09:a5:4e:dc: d2:96:ea:1c:03:33:72:38:1c:e1:b0:dc:c2:4f:a2:44:b9:56: 11:45:82:b2:d3:00:2e:47:56:f2:cd:5f:49:1a:c0:fb:32:31: e2:08:5b:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBVUOIiruFwmfwJfNZrCRyP4kKlswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzEyRDY1NzJCMEMxMDRDMEQ1MTgzNEMxQjAxQ0IwQzU5 M0RBRThCNDAeFw0yNjAzMjQxMzE3NDJaFw0yNjAzMjgwMDEzNDJaMDMxMTAvBgNV BAMTKDVFRTFENzdDNzg1Nzk2OTI5NjkyODg2MzUxMjUzMEM0N0NCMEVENjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxkNMTg+s8XVRa6dfHbIhr17l4 3/lqm0YuQGzStPCJQz7h5dt/DHmM4uqNfZKr2+hQHznQng3MqBZmK9mlkSuvAk74 lO9D3ChKs3/NX//dChE6FO609OQXQY7qX7ePdfCWJE/swkC54sqVFpw19ogrJUTa 5Y51+v9GPEegTNX8hoTX6e0eO9RXRMsrYcPy1Nr5Wlp5F67Kre7RPT8WmQufClJr kWgwfVSP1OQ7+P15/Xal5XF7iEI+UdPueQbzq7W+PpMGGVKaFgIystsx+oYxaAE5 PqevVrkxi2Metkgwqba49mXtnrv4OwcDhlGBxJMB+1IUO8eICEg8HC2beC/VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXuHXfHhXlpKWkohjUSUwxHyw7WAwHwYDVR0j BBgwFoAUMS1lcrDBBMDVGDTBsBywxZPa6LQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTk4MTk1Zi0xNGJiLTQxZmQtYjZlZC03YTk2N2M4ZTQzZGYvMC8zMTJENjU3MkIw QzEwNEMwRDUxODM0QzFCMDFDQjBDNTkzREFFOEI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzEyRDY1NzJCMEMxMDRDMEQ1MTgzNEMxQjAxQ0IwQzU5M0RB RThCNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk5ODE5NWYtMTRiYi00MWZkLWI2 ZWQtN2E5NjdjOGU0M2RmLzAvMzEyRDY1NzJCMEMxMDRDMEQ1MTgzNEMxQjAxQ0Iw QzU5M0RBRThCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADtQy9cEVyvtBxAqCupKoT83fChXGg+ZUvw9 QOudMQA99Wm2egnYUGOnnnKqxqpURis8hfHFm9De+FycqEVs+SvYHLiOt9SvirSQ jW9Bdc+Zms61IxgOJB7n0RBfDLNgBLuxBvt8a3gDRVqblZLYlbC9OOK3AfrsgF26 H33TGlWz0BVWPPK2j9MAzZxCgIm5CmQdcpqHBsDR3zboBxOKrLdBv4jn07oTrmCa 0X9o0nokeabQApAK0ee0qz2aNIUmBrHLy2DesGqb9vYgFKGnOkztewtLCaVO3NKW 6hwDM3I4HOGw3MJPokS5VhFFgrLTAC5HVvLNX0kawPsyMeIIW10= -----END CERTIFICATE-----Generated at Thu Mar 26 10:54:22 2026 by rpki-client