$ rpki-client -vvf repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.mft File: D2EF21DBD545255BED30EEC34623F204A3E12D23.mft (raw, json) Hash identifier: r5INePRsHmiDztMffm7G5fIQwZbALHiKvqo5EOoDZIM= Subject key identifier: C3:F4:E6:27:98:4D:E1:91:EF:7F:1E:E5:BD:BB:52:C2:F1:B5:97:AA Authority key identifier: D2:EF:21:DB:D5:45:25:5B:ED:30:EE:C3:46:23:F2:04:A3:E1:2D:23 Certificate issuer: /CN=D2EF21DBD545255BED30EEC34623F204A3E12D23 Certificate serial: 56FC9462076E80868704849B69ADAA60600F174D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EF21DBD545255BED30EEC34623F204A3E12D23.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.mft Manifest number: 055A Signing time: Tue 24 Mar 2026 22:21:26 +0000 Manifest this update: Tue 24 Mar 2026 22:16:26 +0000 Manifest next update: Sat 28 Mar 2026 01:03:26 +0000 Files and hashes: 1: 3130332e3130342e3230372e302f32342d3234203d3e20313336383639.roa (hash: 2COjLCJ4YEuRoqvYvSrj9dQC5huF+G+dAbpMe2HpJLo=) 2: 323430323a316134303a3a2f33322d3332203d3e20313336383639.roa (hash: HI0hJJXTQDhzD7pTczCRmyIdw4yYJFsaIwjzSTbxsrY=) 3: 3130332e3130342e3230362e302f32342d3234203d3e20313336383639.roa (hash: W2IYXy+JkbGpp85/sS2UKLUazxQpNz2N8iZifbHeJpI=) 4: 3130332e3130342e3230342e302f32342d3234203d3e20313336383639.roa (hash: w7Chi4gZxBYt1ZeGb/YO7tH8OTI2H/0aS5PoiZEPc/Y=) 5: D2EF21DBD545255BED30EEC34623F204A3E12D23.crl (hash: rVJ3qMyDqkv4SuYMNJaGgEdjFqtRfEnbpmWRTNjH3f4=) 6: 3130332e3130342e3230352e302f32342d3234203d3e20313336383639.roa (hash: iReeweCReiVdyDxdcHaFTjeSzHc3cSR3SFaF6DPJP8s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.crl rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EF21DBD545255BED30EEC34623F204A3E12D23.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 01:03:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:fc:94:62:07:6e:80:86:87:04:84:9b:69:ad:aa:60:60:0f:17:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2EF21DBD545255BED30EEC34623F204A3E12D23 Validity Not Before: Mar 24 22:16:26 2026 GMT Not After : Mar 28 01:03:26 2026 GMT Subject: CN=C3F4E627984DE191EF7F1EE5BDBB52C2F1B597AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:49:fc:79:65:e8:9a:bf:5a:49:ff:52:49:2c: 91:97:2e:f9:8e:2e:1e:03:89:c5:1b:9b:a9:e7:14: 23:6b:51:b3:b9:99:31:3d:93:22:bf:05:18:cc:6e: 5e:70:29:fd:e6:53:76:1d:54:0b:7f:98:d6:06:1f: e0:49:e2:bd:ef:70:44:c9:0c:2e:22:e8:ce:7c:e7: 29:f9:16:91:32:f5:ea:57:97:6b:93:82:59:5b:2f: 6f:b9:3d:51:39:43:c8:90:fb:78:71:d5:c4:d8:0a: 89:55:c3:8f:81:68:f9:4a:aa:66:c7:2e:f1:17:ea: 14:1d:b9:bb:0f:7f:9a:de:f7:8c:9f:64:12:c8:00: 00:20:dc:ec:46:ef:f3:dc:14:e7:7d:b8:b8:ba:15: 20:2b:13:09:67:ce:44:2c:bf:0b:2f:54:1b:93:c1: df:6c:fa:fd:b2:8f:a5:90:5f:b5:f1:14:1d:a0:10: 8a:fd:ca:ac:39:86:16:74:0a:49:fc:c9:e9:82:c7: 19:bd:f7:4a:a6:8d:2a:fc:30:6a:8a:c1:1d:24:52: d7:f3:f9:3d:8e:63:47:40:10:cf:e1:44:45:05:1a: da:d2:da:0d:32:58:d8:2d:ed:18:1b:c1:db:8e:4a: 5d:2c:b5:09:e9:e6:0e:34:46:c3:16:c3:7e:c8:ed: 21:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:F4:E6:27:98:4D:E1:91:EF:7F:1E:E5:BD:BB:52:C2:F1:B5:97:AA X509v3 Authority Key Identifier: keyid:D2:EF:21:DB:D5:45:25:5B:ED:30:EE:C3:46:23:F2:04:A3:E1:2D:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EF21DBD545255BED30EEC34623F204A3E12D23.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:d1:2c:b5:e7:93:97:68:61:50:5f:5a:2f:5b:cb:4b:26:c1: ea:54:c2:ba:a3:9f:37:00:31:a1:51:44:8d:d1:47:2c:28:f4: bf:00:fd:e1:f5:a8:b1:0b:2d:56:d0:7a:95:e2:97:0c:00:e6: 42:80:76:c3:5b:e4:1b:de:77:3d:05:16:da:0d:57:dc:0b:0b: 0c:76:45:43:0a:53:1c:da:05:ba:ce:c2:29:e0:d5:fd:56:5f: 21:d6:f8:fa:02:bc:50:06:e3:bf:63:11:0d:a2:de:00:d1:be: 5c:82:58:9b:90:10:0c:60:d2:bb:7b:92:2e:98:b4:58:05:64: 47:2a:5f:3b:d0:0b:f8:84:2a:85:86:f7:ae:5a:f5:d0:de:bf: 1c:be:6a:74:1a:02:a6:9d:0a:d8:17:67:24:19:43:86:78:c2: de:db:64:6b:86:fc:fe:b1:13:e3:e4:ad:fe:50:8a:09:6d:24: 59:17:c6:6b:98:84:e8:f3:23:53:bc:5a:7c:83:bd:dd:fd:07: a0:3d:1b:a4:f2:c4:3a:25:e3:e0:a7:75:52:96:1a:30:2b:60: 18:5d:7d:3e:43:84:85:30:c1:69:a7:95:2b:de:fa:87:eb:7c: 24:2a:74:32:c7:4a:2a:30:d7:79:a3:d5:94:5a:1f:fe:16:d6: 18:89:92:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVvyUYgdugIaHBISbaa2qYGAPF00wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJFRjIxREJENTQ1MjU1QkVEMzBFRUMzNDYyM0YyMDRB M0UxMkQyMzAeFw0yNjAzMjQyMjE2MjZaFw0yNjAzMjgwMTAzMjZaMDMxMTAvBgNV BAMTKEMzRjRFNjI3OTg0REUxOTFFRjdGMUVFNUJEQkI1MkMyRjFCNTk3QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Sfx5Zeiav1pJ/1JJLJGXLvmO Lh4DicUbm6nnFCNrUbO5mTE9kyK/BRjMbl5wKf3mU3YdVAt/mNYGH+BJ4r3vcETJ DC4i6M585yn5FpEy9epXl2uTgllbL2+5PVE5Q8iQ+3hx1cTYColVw4+BaPlKqmbH LvEX6hQdubsPf5re94yfZBLIAAAg3OxG7/PcFOd9uLi6FSArEwlnzkQsvwsvVBuT wd9s+v2yj6WQX7XxFB2gEIr9yqw5hhZ0Ckn8yemCxxm990qmjSr8MGqKwR0kUtfz +T2OY0dAEM/hREUFGtrS2g0yWNgt7RgbwduOSl0stQnp5g40RsMWw37I7SGvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw/TmJ5hN4ZHvfx7lvbtSwvG1l6owHwYDVR0j BBgwFoAU0u8h29VFJVvtMO7DRiPyBKPhLSMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MjMxZTZiMS0xODQxLTQ3NmQtYjQ2Yi1iNDRiOWNiOTY4YjAvMC9EMkVGMjFEQkQ1 NDUyNTVCRUQzMEVFQzM0NjIzRjIwNEEzRTEyRDIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDJFRjIxREJENTQ1MjU1QkVEMzBFRUMzNDYyM0YyMDRBM0Ux MkQyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDIzMWU2YjEtMTg0MS00NzZkLWI0 NmItYjQ0YjljYjk2OGIwLzAvRDJFRjIxREJENTQ1MjU1QkVEMzBFRUMzNDYyM0Yy MDRBM0UxMkQyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALzRLLXnk5doYVBfWi9by0smwepUwrqjnzcA MaFRRI3RRywo9L8A/eH1qLELLVbQepXilwwA5kKAdsNb5Bvedz0FFtoNV9wLCwx2 RUMKUxzaBbrOwing1f1WXyHW+PoCvFAG479jEQ2i3gDRvlyCWJuQEAxg0rt7ki6Y tFgFZEcqXzvQC/iEKoWG965a9dDevxy+anQaAqadCtgXZyQZQ4Z4wt7bZGuG/P6x E+Pkrf5QigltJFkXxmuYhOjzI1O8WnyDvd39B6A9G6TyxDol4+CndVKWGjArYBhd fT5DhIUwwWmnlSve+ofrfCQqdDLHSiow13mj1ZRaH/4W1hiJkgk= -----END CERTIFICATE-----Generated at Thu Mar 26 07:24:46 2026 by rpki-client