$ rpki-client -vvf repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.mft File: 037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.mft (raw, json) Hash identifier: 9MMdqpEfzEFE8Llkm7h8jGQtGJC3hKgLRV9FNGadIcY= Subject key identifier: C7:C6:48:3F:7D:20:A6:9B:BA:85:EE:AD:15:8F:BE:6D:51:BF:31:5F Authority key identifier: 03:7A:1E:47:FB:1C:CE:3B:6E:6A:93:69:ED:DD:87:0D:AE:80:D6:65 Certificate issuer: /CN=037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665 Certificate serial: 517FE75378CA24B1E1D21ADBC71C49FBE77A37F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.mft Manifest number: 018E Signing time: Wed 25 Mar 2026 12:00:57 +0000 Manifest this update: Wed 25 Mar 2026 11:55:57 +0000 Manifest next update: Sat 28 Mar 2026 14:21:57 +0000 Files and hashes: 1: 037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.crl (hash: eqkVRLVvLcafrY6Y6uRygua2TCrvtnwTG2QeGDUtkGQ=) 2: 3130332e3233392e34312e302f32342d3234203d3e20313531353331.roa (hash: lba1v4z7nYWbnoK/4kTVSAyDKKCR7EsAIZ4ZYjgIw60=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.crl rsync://repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 14:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:7f:e7:53:78:ca:24:b1:e1:d2:1a:db:c7:1c:49:fb:e7:7a:37:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665 Validity Not Before: Mar 25 11:55:57 2026 GMT Not After : Mar 28 14:21:57 2026 GMT Subject: CN=C7C6483F7D20A69BBA85EEAD158FBE6D51BF315F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d6:74:ec:f9:08:c7:4e:0a:10:7c:8f:af:89: 44:af:8b:58:ba:37:d0:7c:63:b4:f1:4c:a2:b7:89: 95:58:ad:11:bd:89:1c:7b:9a:9a:24:b5:85:20:ff: 5e:28:e5:0e:52:ac:cb:a0:8d:78:c9:6e:a2:2b:0e: e4:e2:8b:25:b4:e0:8c:9c:cf:0b:cd:39:d9:f6:b9: e2:cd:97:e3:3b:33:0b:f0:1a:1c:43:c2:ab:40:3e: 77:48:87:16:f5:7b:8d:dc:a3:02:60:0e:dd:c9:e0: 44:98:35:47:a0:8d:16:49:64:ac:60:ea:7c:b1:7f: 42:56:4e:e0:45:bc:a4:d6:57:cd:0c:c1:13:0e:59: 70:13:71:4e:cf:9b:1d:db:d5:81:44:04:1e:86:5c: 56:0c:17:a0:27:bf:9f:0b:de:aa:dc:17:eb:4d:87: 53:d6:7d:31:db:5b:d6:aa:57:8e:a0:b0:f0:cf:bc: 27:d8:33:6b:36:c5:6a:a1:f9:17:c8:be:b3:a4:47: bc:22:32:69:a6:b4:17:62:73:47:97:ef:9e:32:85: 83:23:51:bb:5c:06:82:df:c6:03:38:37:8a:b3:60: e5:84:9b:14:ef:5b:cd:0a:b9:d5:14:c1:bf:0f:d6: d5:b9:80:28:db:35:db:f1:ca:c4:c8:c6:66:72:2b: 91:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:C6:48:3F:7D:20:A6:9B:BA:85:EE:AD:15:8F:BE:6D:51:BF:31:5F X509v3 Authority Key Identifier: keyid:03:7A:1E:47:FB:1C:CE:3B:6E:6A:93:69:ED:DD:87:0D:AE:80:D6:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:ce:3a:6b:9b:dc:af:38:d8:4b:0e:38:98:18:12:28:b9:c0: e7:76:ee:33:b7:d2:bc:1f:84:d4:a7:1c:de:e6:c0:18:76:2f: 86:fd:6d:70:e5:d4:87:c4:1a:b5:fe:41:70:d9:91:c0:6b:28: c8:b9:10:55:69:10:55:47:d9:9a:b7:2c:c8:50:e6:7e:69:6e: e0:1c:8f:c5:9e:9a:27:61:fa:98:0c:97:4e:07:dd:9d:e2:4f: df:70:1b:bb:66:ce:9b:81:eb:7d:6f:76:12:2e:d9:4d:86:e5: 83:3a:ad:91:87:16:d9:32:ba:6f:e4:93:72:64:93:7f:f2:0c: a4:70:b8:d0:a8:3b:a7:23:48:ff:fd:2a:fe:ea:08:00:f1:3e: 78:87:f5:8b:71:84:f6:dc:04:da:04:bc:0c:9d:a2:83:e3:50: 40:52:be:be:5c:c7:24:e4:1e:32:2e:bf:f4:6c:0a:fd:8c:7b: 92:b0:01:d5:b8:29:fd:d8:4f:c2:bb:0c:a1:17:e4:f9:81:c3: 5f:6c:76:fe:4d:5f:f1:70:35:c7:3e:01:15:4c:28:df:43:89: bc:d0:3b:39:79:a2:83:ae:27:f2:85:8d:6b:96:4b:2c:13:b7: c6:4a:ee:55:3b:35:c4:c2:cf:b2:95:6e:b2:60:dd:e3:7c:25: f6:b5:23:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUX/nU3jKJLHh0hrbxxxJ++d6N/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM3QTFFNDdGQjFDQ0UzQjZFNkE5MzY5RURERDg3MERB RTgwRDY2NTAeFw0yNjAzMjUxMTU1NTdaFw0yNjAzMjgxNDIxNTdaMDMxMTAvBgNV BAMTKEM3QzY0ODNGN0QyMEE2OUJCQTg1RUVBRDE1OEZCRTZENTFCRjMxNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr1nTs+QjHTgoQfI+viUSvi1i6 N9B8Y7TxTKK3iZVYrRG9iRx7mpoktYUg/14o5Q5SrMugjXjJbqIrDuTiiyW04Iyc zwvNOdn2ueLNl+M7MwvwGhxDwqtAPndIhxb1e43cowJgDt3J4ESYNUegjRZJZKxg 6nyxf0JWTuBFvKTWV80MwRMOWXATcU7Pmx3b1YFEBB6GXFYMF6Anv58L3qrcF+tN h1PWfTHbW9aqV46gsPDPvCfYM2s2xWqh+RfIvrOkR7wiMmmmtBdic0eX754yhYMj UbtcBoLfxgM4N4qzYOWEmxTvW80KudUUwb8P1tW5gCjbNdvxysTIxmZyK5GzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx8ZIP30gppu6he6tFY++bVG/MV8wHwYDVR0j BBgwFoAUA3oeR/sczjtuapNp7d2HDa6A1mUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGJmYzVjMy1jMzljLTQ1ZWQtYWU4Ny0zODRhNmRjYjc5MzgvMC8wMzdBMUU0N0ZC MUNDRTNCNkU2QTkzNjlFREREODcwREFFODBENjY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM3QTFFNDdGQjFDQ0UzQjZFNkE5MzY5RURERDg3MERBRTgw RDY2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDRiZmM1YzMtYzM5Yy00NWVkLWFl ODctMzg0YTZkY2I3OTM4LzAvMDM3QTFFNDdGQjFDQ0UzQjZFNkE5MzY5RURERDg3 MERBRTgwRDY2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACfOOmub3K842EsOOJgYEii5wOd27jO30rwf hNSnHN7mwBh2L4b9bXDl1IfEGrX+QXDZkcBrKMi5EFVpEFVH2Zq3LMhQ5n5pbuAc j8Wemidh+pgMl04H3Z3iT99wG7tmzpuB631vdhIu2U2G5YM6rZGHFtkyum/kk3Jk k3/yDKRwuNCoO6cjSP/9Kv7qCADxPniH9YtxhPbcBNoEvAydooPjUEBSvr5cxyTk HjIuv/RsCv2Me5KwAdW4Kf3YT8K7DKEX5PmBw19sdv5NX/FwNcc+ARVMKN9DibzQ Ozl5ooOuJ/KFjWuWSywTt8ZK7lU7NcTCz7KVbrJg3eN8Jfa1I0g= -----END CERTIFICATE-----Generated at Thu Mar 26 12:07:22 2026 by rpki-client