$ rpki-client -vvf repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/1762D22131EE967D86536D2B475A9A8C08CE6003.mft File: 1762D22131EE967D86536D2B475A9A8C08CE6003.mft (raw, json) Hash identifier: af+xiuPyRm1+YdlXXdGup6BQgCXsGtiWWrr+knA1hzc= Subject key identifier: FA:55:17:4C:46:2A:0F:F3:16:9A:05:BD:6C:CD:CD:89:F1:44:E3:81 Authority key identifier: 17:62:D2:21:31:EE:96:7D:86:53:6D:2B:47:5A:9A:8C:08:CE:60:03 Certificate issuer: /CN=1762D22131EE967D86536D2B475A9A8C08CE6003 Certificate serial: 23A8A28DBE3BE5B56154B1207C76DADD755B5BB4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1762D22131EE967D86536D2B475A9A8C08CE6003.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/1762D22131EE967D86536D2B475A9A8C08CE6003.mft Manifest number: 0389 Signing time: Tue 24 Mar 2026 22:11:32 +0000 Manifest this update: Tue 24 Mar 2026 22:06:32 +0000 Manifest next update: Sat 28 Mar 2026 00:34:32 +0000 Files and hashes: 1: 3130332e3135392e3230342e302f32332d3234203d3e20313331313131.roa (hash: uumiLUQfphgqskF7mpd6oqfDDTxMSTqQ7X8YmHylWvY=) 2: 1762D22131EE967D86536D2B475A9A8C08CE6003.crl (hash: tcmVln3femGg7kB19mHh5DltJVhenk6q8BDqQ6yVWCk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/1762D22131EE967D86536D2B475A9A8C08CE6003.crl rsync://repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/1762D22131EE967D86536D2B475A9A8C08CE6003.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1762D22131EE967D86536D2B475A9A8C08CE6003.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 00:34:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:a8:a2:8d:be:3b:e5:b5:61:54:b1:20:7c:76:da:dd:75:5b:5b:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1762D22131EE967D86536D2B475A9A8C08CE6003 Validity Not Before: Mar 24 22:06:32 2026 GMT Not After : Mar 28 00:34:32 2026 GMT Subject: CN=FA55174C462A0FF3169A05BD6CCDCD89F144E381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6f:9e:13:e7:b5:74:a1:f2:d5:d8:48:28:00: fd:b4:9d:78:30:08:a9:d0:1a:ac:d0:c8:58:a0:04: b3:90:24:1b:8b:60:c6:65:43:22:e3:7e:50:75:9e: 4d:98:9e:35:f7:1b:22:b9:a7:15:4a:c4:f4:12:1f: 08:57:ef:78:9a:5e:91:94:de:bf:07:33:6c:29:d8: 0a:3f:79:42:90:24:1c:d5:87:1e:b4:e5:43:7c:6d: 14:5d:8e:79:62:b1:c5:a7:68:6c:a2:70:f2:69:61: e3:31:90:76:ba:18:a7:4f:56:e1:ef:06:8a:ad:5d: ad:ee:a6:b2:bf:e5:db:a4:82:08:fa:fe:20:42:f0: a4:bd:c5:6a:71:07:71:61:fe:aa:36:c7:b7:d0:d6: b4:7f:c9:53:59:6c:be:4f:34:7b:2f:2b:d9:da:be: 30:c8:c7:b0:19:c4:95:06:ea:5c:50:97:4d:ee:88: 51:62:98:95:9e:f2:6b:d1:f2:b5:1d:0d:4d:ba:73: 82:45:0f:69:77:97:ee:33:f9:e2:dc:69:e6:86:d2: 19:eb:19:4c:63:4e:8d:dc:41:0c:10:08:2b:8d:d9: 30:96:b0:22:74:9c:2e:2c:76:27:03:2e:ae:ca:3e: f9:4b:6d:b1:3c:08:fa:4c:7c:1a:60:e8:94:9b:ca: 0a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:55:17:4C:46:2A:0F:F3:16:9A:05:BD:6C:CD:CD:89:F1:44:E3:81 X509v3 Authority Key Identifier: keyid:17:62:D2:21:31:EE:96:7D:86:53:6D:2B:47:5A:9A:8C:08:CE:60:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/1762D22131EE967D86536D2B475A9A8C08CE6003.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1762D22131EE967D86536D2B475A9A8C08CE6003.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/1762D22131EE967D86536D2B475A9A8C08CE6003.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:af:b3:e7:7e:48:1e:13:a4:bf:09:52:8d:d3:ed:24:2d:ba: 51:9a:d1:db:7b:5b:79:fd:1b:a6:26:8d:60:c4:25:72:9e:6e: c3:06:0b:65:52:17:35:86:3a:58:04:42:35:7f:92:95:20:de: 97:f7:51:d9:fe:83:46:e6:82:42:36:f8:50:17:81:2b:62:36: fb:2f:e9:33:06:d1:2a:1d:76:57:2f:ab:2a:0d:13:bd:35:a3: 2b:1e:52:e9:5b:92:9d:14:0f:61:bd:d1:6d:94:02:b7:2f:91: ce:37:6a:14:01:61:c4:2d:cc:cd:d2:8a:0b:b3:3b:7d:fa:47: f5:29:e1:ea:64:e9:0f:65:81:df:7d:6b:f9:5c:e9:a9:3a:a8: b8:1f:d3:f9:81:07:ce:c8:7d:4a:52:79:e2:1a:65:57:b3:d4: e5:5c:1e:2a:01:13:20:23:5f:e9:43:38:fd:9e:8b:16:b7:71: 69:4f:69:c3:15:e1:fe:5c:b9:65:f2:bc:af:23:c2:eb:35:f9: 3c:1f:63:57:56:0b:4a:22:64:03:1a:23:40:3b:c1:f4:19:5b: a0:c9:2f:82:c1:cf:71:57:1c:92:bb:25:c1:66:4a:b4:eb:03: d0:a6:6f:7d:77:b6:8d:24:17:d5:d9:6d:06:d4:2b:e6:45:f1: 86:b9:8f:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI6iijb475bVhVLEgfHba3XVbW7QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTc2MkQyMjEzMUVFOTY3RDg2NTM2RDJCNDc1QTlBOEMw OENFNjAwMzAeFw0yNjAzMjQyMjA2MzJaFw0yNjAzMjgwMDM0MzJaMDMxMTAvBgNV BAMTKEZBNTUxNzRDNDYyQTBGRjMxNjlBMDVCRDZDQ0RDRDg5RjE0NEUzODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkb54T57V0ofLV2EgoAP20nXgw CKnQGqzQyFigBLOQJBuLYMZlQyLjflB1nk2YnjX3GyK5pxVKxPQSHwhX73iaXpGU 3r8HM2wp2Ao/eUKQJBzVhx605UN8bRRdjnliscWnaGyicPJpYeMxkHa6GKdPVuHv BoqtXa3uprK/5dukggj6/iBC8KS9xWpxB3Fh/qo2x7fQ1rR/yVNZbL5PNHsvK9na vjDIx7AZxJUG6lxQl03uiFFimJWe8mvR8rUdDU26c4JFD2l3l+4z+eLcaeaG0hnr GUxjTo3cQQwQCCuN2TCWsCJ0nC4sdicDLq7KPvlLbbE8CPpMfBpg6JSbygoXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+lUXTEYqD/MWmgW9bM3NifFE44EwHwYDVR0j BBgwFoAUF2LSITHuln2GU20rR1qajAjOYAMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MjBmYTE0YS1hYWFjLTQwZjQtOWM4NC02OTI1Nzg2OGYyY2IvMC8xNzYyRDIyMTMx RUU5NjdEODY1MzZEMkI0NzVBOUE4QzA4Q0U2MDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTc2MkQyMjEzMUVFOTY3RDg2NTM2RDJCNDc1QTlBOEMwOENF NjAwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDIwZmExNGEtYWFhYy00MGY0LTlj ODQtNjkyNTc4NjhmMmNiLzAvMTc2MkQyMjEzMUVFOTY3RDg2NTM2RDJCNDc1QTlB OEMwOENFNjAwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACCvs+d+SB4TpL8JUo3T7SQtulGa0dt7W3n9 G6YmjWDEJXKebsMGC2VSFzWGOlgEQjV/kpUg3pf3Udn+g0bmgkI2+FAXgStiNvsv 6TMG0SoddlcvqyoNE701oyseUulbkp0UD2G90W2UArcvkc43ahQBYcQtzM3Siguz O336R/Up4epk6Q9lgd99a/lc6ak6qLgf0/mBB87IfUpSeeIaZVez1OVcHioBEyAj X+lDOP2eixa3cWlPacMV4f5cuWXyvK8jwus1+TwfY1dWC0oiZAMaI0A7wfQZW6DJ L4LBz3FXHJK7JcFmSrTrA9Cmb313to0kF9XZbQbUK+ZF8Ya5jxk= -----END CERTIFICATE-----Generated at Thu Mar 26 17:01:51 2026 by rpki-client