$ rpki-client -vvf repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft File: D1C35136280415655DEC1D442C7C982FD36A5B86.mft (raw, json) Hash identifier: +HM2sK8jQsPbuD5R6hqgYzfl36lkpF6yy2ihD2HeZYw= Subject key identifier: 58:C5:DF:82:9C:F5:2B:A6:05:5D:0A:36:63:02:3D:0C:AE:2B:51:3B Authority key identifier: D1:C3:51:36:28:04:15:65:5D:EC:1D:44:2C:7C:98:2F:D3:6A:5B:86 Certificate issuer: /CN=D1C35136280415655DEC1D442C7C982FD36A5B86 Certificate serial: 6BF9D1C84FDE2167714EEF3F85AEEC159E3BD726 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1C35136280415655DEC1D442C7C982FD36A5B86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft Manifest number: CE Signing time: Wed 25 Mar 2026 07:02:45 +0000 Manifest this update: Wed 25 Mar 2026 06:57:45 +0000 Manifest next update: Sat 28 Mar 2026 16:09:45 +0000 Files and hashes: 1: D1C35136280415655DEC1D442C7C982FD36A5B86.crl (hash: FfFvwYgfPLhb5t8ot6VRADLqdmGFMZzMJHMFMu9GSn8=) 2: 323030313a6466323a336430303a3a2f34382d3438203d3e20313336383339.roa (hash: EbL+LGKDt0V5U6jXXy9+v+fX+4Su7Ml6HM1hNFrtkbw=) 3: 3130332e39382e3233392e302f32342d3234203d3e20313336383339.roa (hash: t33hGK2tWrXOFyyr6frOa0APXlIHVzP4IgSNamcMq50=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.crl rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1C35136280415655DEC1D442C7C982FD36A5B86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 16:09:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:f9:d1:c8:4f:de:21:67:71:4e:ef:3f:85:ae:ec:15:9e:3b:d7:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1C35136280415655DEC1D442C7C982FD36A5B86 Validity Not Before: Mar 25 06:57:45 2026 GMT Not After : Mar 28 16:09:45 2026 GMT Subject: CN=58C5DF829CF52BA6055D0A3663023D0CAE2B513B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c7:38:a3:7f:b9:27:a6:d9:59:4b:28:32:73: fd:9b:c6:53:2e:bf:43:88:74:a4:a9:83:25:21:92: 95:81:bb:04:72:ab:bb:64:d0:51:5a:a2:57:b5:82: 55:c2:a1:d7:c6:e5:31:11:f4:22:6e:6c:83:46:30: d7:ea:b0:e4:c9:89:af:33:fa:41:e1:ef:22:d4:ec: a7:ec:74:f9:43:d9:03:80:c4:d2:8f:d6:ef:30:aa: 8a:47:76:ff:72:3b:c2:dc:2f:f0:1d:ff:bf:70:03: 2a:44:e6:99:00:a8:3e:b3:14:c6:1a:ea:71:d4:3b: 6b:25:0e:b4:8e:da:47:8e:52:41:ec:bc:ec:f3:7f: 83:ce:8b:96:3f:5f:4d:64:dc:e9:9c:b5:24:41:55: e9:5f:a1:bd:1d:f9:45:99:89:da:4e:35:0a:2d:34: af:19:53:3c:a3:ea:fb:6e:c6:9b:6d:6b:23:4e:6d: 02:cd:53:95:0e:7b:30:b8:76:b7:1a:1f:95:a5:f8: 47:35:c4:f6:28:fe:bf:15:5e:47:32:7f:67:ec:6d: 0c:e2:1b:96:e9:49:03:86:65:69:b9:f7:dd:f9:bc: 03:3b:b1:b4:de:85:aa:4f:a7:41:e9:f0:b7:78:1b: c5:fc:a7:15:46:4b:f3:ff:1d:92:52:41:f9:28:ac: d9:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:C5:DF:82:9C:F5:2B:A6:05:5D:0A:36:63:02:3D:0C:AE:2B:51:3B X509v3 Authority Key Identifier: keyid:D1:C3:51:36:28:04:15:65:5D:EC:1D:44:2C:7C:98:2F:D3:6A:5B:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1C35136280415655DEC1D442C7C982FD36A5B86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:ad:71:24:64:b6:65:cb:f3:ca:d0:bb:9d:a6:c6:03:29:2b: 21:b7:d3:74:eb:fd:5d:f5:d8:f1:35:84:fe:67:47:50:39:ff: 7a:9b:fe:28:ea:99:37:51:10:62:e9:da:cb:b9:27:2e:38:bf: a5:b3:a5:37:fc:83:63:6f:94:78:18:3e:ad:75:29:48:8c:51: 0c:01:d2:c0:34:9b:9b:dc:17:c7:eb:cb:9f:22:77:74:76:72: cd:a5:73:e2:ae:64:e0:e5:b8:20:b1:d7:14:3c:cb:49:04:2a: 02:61:ed:b1:cd:01:85:11:06:17:a2:1a:b7:24:3a:f5:b1:f8: 9b:87:45:20:f9:0d:3e:82:82:10:a9:49:8a:09:d4:3a:a1:06: a0:46:0e:0a:7d:75:6e:f2:7e:a6:6b:45:9f:15:a0:3b:b6:f7: bc:92:04:f1:e5:58:0a:75:f8:92:a6:be:ce:95:58:cc:9d:58: 4f:06:f2:9e:30:3c:4b:db:26:8a:fc:2b:81:ce:bb:44:33:d9: 94:1e:b1:a4:bf:43:ae:a4:16:ec:a3:f3:39:e4:0f:39:61:a6: 2d:d3:4c:bb:29:0d:af:9d:65:31:4a:fe:34:c8:eb:23:86:bf: 7e:1c:17:90:d5:2e:1c:f9:e8:76:5d:d6:ac:82:c7:0a:83:21: 18:2e:96:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa/nRyE/eIWdxTu8/ha7sFZ471yYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFDMzUxMzYyODA0MTU2NTVERUMxRDQ0MkM3Qzk4MkZE MzZBNUI4NjAeFw0yNjAzMjUwNjU3NDVaFw0yNjAzMjgxNjA5NDVaMDMxMTAvBgNV BAMTKDU4QzVERjgyOUNGNTJCQTYwNTVEMEEzNjYzMDIzRDBDQUUyQjUxM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOxzijf7knptlZSygyc/2bxlMu v0OIdKSpgyUhkpWBuwRyq7tk0FFaole1glXCodfG5TER9CJubINGMNfqsOTJia8z +kHh7yLU7KfsdPlD2QOAxNKP1u8wqopHdv9yO8LcL/Ad/79wAypE5pkAqD6zFMYa 6nHUO2slDrSO2keOUkHsvOzzf4POi5Y/X01k3OmctSRBVelfob0d+UWZidpONQot NK8ZUzyj6vtuxpttayNObQLNU5UOezC4drcaH5Wl+Ec1xPYo/r8VXkcyf2fsbQzi G5bpSQOGZWm59935vAM7sbTehapPp0Hp8Ld4G8X8pxVGS/P/HZJSQfkorNk5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWMXfgpz1K6YFXQo2YwI9DK4rUTswHwYDVR0j BBgwFoAU0cNRNigEFWVd7B1ELHyYL9NqW4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjljMDI5YS1kYjUxLTRhMGUtOTIwMy02ZWUyMzMyZGY4M2YvMC9EMUMzNTEzNjI4 MDQxNTY1NURFQzFENDQyQzdDOTgyRkQzNkE1Qjg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFDMzUxMzYyODA0MTU2NTVERUMxRDQ0MkM3Qzk4MkZEMzZB NUI4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Y5YzAyOWEtZGI1MS00YTBlLTky MDMtNmVlMjMzMmRmODNmLzAvRDFDMzUxMzYyODA0MTU2NTVERUMxRDQ0MkM3Qzk4 MkZEMzZBNUI4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFqtcSRktmXL88rQu52mxgMpKyG303Tr/V31 2PE1hP5nR1A5/3qb/ijqmTdREGLp2su5Jy44v6WzpTf8g2NvlHgYPq11KUiMUQwB 0sA0m5vcF8fry58id3R2cs2lc+KuZODluCCx1xQ8y0kEKgJh7bHNAYURBheiGrck OvWx+JuHRSD5DT6CghCpSYoJ1DqhBqBGDgp9dW7yfqZrRZ8VoDu297ySBPHlWAp1 +JKmvs6VWMydWE8G8p4wPEvbJor8K4HOu0Qz2ZQesaS/Q66kFuyj8znkDzlhpi3T TLspDa+dZTFK/jTI6yOGv34cF5DVLhz56HZd1qyCxwqDIRgulmo= -----END CERTIFICATE-----Generated at Thu Mar 26 12:06:53 2026 by rpki-client