$ rpki-client -vvf repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft File: 1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft (raw, json) Hash identifier: B48JNppIndjP+z9tjk5VfwCj2OF2JHj9+B47U+zaT20= Subject key identifier: 82:9F:80:E7:82:BC:25:CC:12:31:68:31:7A:0C:92:2F:BA:58:59:E5 Authority key identifier: 1D:4A:75:62:F0:96:F3:F7:53:E3:88:C1:45:94:BA:75:AE:09:E7:F3 Certificate issuer: /CN=1D4A7562F096F3F753E388C14594BA75AE09E7F3 Certificate serial: 552213A463F3D36246ABBA170394464449AA1AA0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft Manifest number: 01D9 Signing time: Wed 25 Mar 2026 04:51:43 +0000 Manifest this update: Wed 25 Mar 2026 04:46:43 +0000 Manifest next update: Sat 28 Mar 2026 13:29:43 +0000 Files and hashes: 1: 3130332e3130372e3137372e302f32342d3234203d3e20313530393434.roa (hash: beCtemM4s/SA3SfDRr9e13l9xGpis0BmdDGhxecgHkk=) 2: 3130332e3130372e3137362e302f32332d3233203d3e20313530393434.roa (hash: dP8kIpDP7okpX5JnaRmLzFVvH0tciUd4qyAgw5M5DdU=) 3: 1D4A7562F096F3F753E388C14594BA75AE09E7F3.crl (hash: Yo448w1PIT/ZkzqkT3mIz4k/ealoyzmlHX5Ejx/W7TU=) 4: 3130332e3130372e3137362e302f32342d3234203d3e20313530393434.roa (hash: n7eWIcnUuPxT4uKWSwqzx/Xe+eF7FqVCQsseGr+M6EE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.crl rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 13:29:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:22:13:a4:63:f3:d3:62:46:ab:ba:17:03:94:46:44:49:aa:1a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D4A7562F096F3F753E388C14594BA75AE09E7F3 Validity Not Before: Mar 25 04:46:43 2026 GMT Not After : Mar 28 13:29:43 2026 GMT Subject: CN=829F80E782BC25CC123168317A0C922FBA5859E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e6:64:33:bb:2f:2c:42:32:c5:ea:9a:97:11: 13:17:77:20:16:fd:53:d0:0a:24:cb:f0:33:54:6b: 03:66:bb:62:70:7e:27:d7:a8:3d:83:bb:fd:f3:bc: 54:d4:d3:9b:f4:7b:e8:34:c9:99:a8:54:17:c6:b8: af:c6:67:40:34:6f:5f:19:d5:03:96:fe:95:10:86: 04:bc:3e:98:a4:9f:e8:21:9e:bb:1c:f7:03:9a:37: 4c:c7:60:fd:51:64:af:f8:bf:63:20:04:17:21:bc: ba:7a:50:a8:34:84:b9:05:77:3c:06:48:43:27:f0: b5:9e:c8:47:b4:d0:5a:b4:9c:3f:4e:84:aa:a8:20: 68:03:f4:3a:e2:94:d7:53:1b:24:85:5f:7e:8c:28: 77:e2:32:c8:3e:41:d6:2b:7b:25:06:be:f6:0e:3f: f7:50:ce:ea:fa:48:0a:1c:9a:1a:2a:c5:a7:3f:1f: a6:b7:32:d9:b3:46:56:bb:b2:df:e8:5e:07:1f:04: 88:45:ad:a4:2f:9e:42:d3:cf:15:4c:a3:78:32:81: 50:23:2f:c3:66:13:4d:7c:3d:36:24:f8:6e:8d:27: cd:f2:94:30:e3:a2:c3:99:d7:e8:13:55:73:22:c8: f7:00:b9:76:2f:33:65:34:c3:ba:c7:4f:69:04:77: 62:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:9F:80:E7:82:BC:25:CC:12:31:68:31:7A:0C:92:2F:BA:58:59:E5 X509v3 Authority Key Identifier: keyid:1D:4A:75:62:F0:96:F3:F7:53:E3:88:C1:45:94:BA:75:AE:09:E7:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:df:a0:70:b4:39:97:18:c7:b5:6d:83:5b:98:7f:23:47:88: 01:05:07:37:aa:9b:a3:37:43:9a:e9:f5:93:18:4a:61:80:c2: d1:b1:b6:a3:0a:06:62:97:0d:63:2c:58:ae:dd:6c:98:fd:33: 8b:f6:46:90:d9:97:58:ed:31:ab:b8:53:1d:67:7a:15:16:f5: 4f:03:9b:56:f7:2e:8b:c4:be:ba:af:a7:f0:8b:7b:79:04:5e: 7f:c3:a4:c3:62:ae:d7:e0:a6:9f:b4:f2:16:0f:77:8f:e0:22: 46:e4:3a:c5:d0:21:bf:af:c1:5a:b0:89:32:b0:47:1e:d9:98: 86:96:0a:a3:82:82:6a:d1:5c:05:82:4c:c4:4f:b8:d6:49:33: bb:2f:37:af:fa:cb:fb:58:3d:dd:0e:16:e6:bf:14:79:a8:32: fc:69:4f:f1:11:d2:69:fa:c0:19:6a:6e:4f:21:5b:e1:74:73: 6c:91:89:0a:76:72:e3:71:62:15:a8:ad:1d:04:80:6f:29:cd: 9e:6d:a6:1d:56:64:0c:bc:94:99:fb:be:ff:7b:00:96:12:06: 8b:51:d4:63:3b:dd:f5:ca:d9:4d:b1:45:86:a2:43:05:da:a3: bc:c1:31:d0:fa:a0:b0:cf:d1:87:3e:e9:61:14:53:b1:54:f0: 8a:62:38:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVSITpGPz02JGq7oXA5RGREmqGqAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ0QTc1NjJGMDk2RjNGNzUzRTM4OEMxNDU5NEJBNzVB RTA5RTdGMzAeFw0yNjAzMjUwNDQ2NDNaFw0yNjAzMjgxMzI5NDNaMDMxMTAvBgNV BAMTKDgyOUY4MEU3ODJCQzI1Q0MxMjMxNjgzMTdBMEM5MjJGQkE1ODU5RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC35mQzuy8sQjLF6pqXERMXdyAW /VPQCiTL8DNUawNmu2JwfifXqD2Du/3zvFTU05v0e+g0yZmoVBfGuK/GZ0A0b18Z 1QOW/pUQhgS8Ppikn+ghnrsc9wOaN0zHYP1RZK/4v2MgBBchvLp6UKg0hLkFdzwG SEMn8LWeyEe00Fq0nD9OhKqoIGgD9DrilNdTGySFX36MKHfiMsg+QdYreyUGvvYO P/dQzur6SAocmhoqxac/H6a3MtmzRla7st/oXgcfBIhFraQvnkLTzxVMo3gygVAj L8NmE018PTYk+G6NJ83ylDDjosOZ1+gTVXMiyPcAuXYvM2U0w7rHT2kEd2J9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgp+A54K8JcwSMWgxegySL7pYWeUwHwYDVR0j BBgwFoAUHUp1YvCW8/dT44jBRZS6da4J5/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MzZhYjA0ZC02OGM3LTQyNDktYjEwOS00NmIyOGNmODAzZjMvMC8xRDRBNzU2MkYw OTZGM0Y3NTNFMzg4QzE0NTk0QkE3NUFFMDlFN0YzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ0QTc1NjJGMDk2RjNGNzUzRTM4OEMxNDU5NEJBNzVBRTA5 RTdGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDM2YWIwNGQtNjhjNy00MjQ5LWIx MDktNDZiMjhjZjgwM2YzLzAvMUQ0QTc1NjJGMDk2RjNGNzUzRTM4OEMxNDU5NEJB NzVBRTA5RTdGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMDfoHC0OZcYx7Vtg1uYfyNHiAEFBzeqm6M3 Q5rp9ZMYSmGAwtGxtqMKBmKXDWMsWK7dbJj9M4v2RpDZl1jtMau4Ux1nehUW9U8D m1b3LovEvrqvp/CLe3kEXn/DpMNirtfgpp+08hYPd4/gIkbkOsXQIb+vwVqwiTKw Rx7ZmIaWCqOCgmrRXAWCTMRPuNZJM7svN6/6y/tYPd0OFua/FHmoMvxpT/ER0mn6 wBlqbk8hW+F0c2yRiQp2cuNxYhWorR0EgG8pzZ5tph1WZAy8lJn7vv97AJYSBotR 1GM73fXK2U2xRYaiQwXao7zBMdD6oLDP0Yc+6WEUU7FU8IpiOE8= -----END CERTIFICATE-----Generated at Thu Mar 26 07:38:24 2026 by rpki-client