$ rpki-client -vvf repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft File: D0DE430E423B23AB634EBCF0195F1126B44A525E.mft (raw, json) Hash identifier: cC9LHuL2LGDIC6vOkWaf0m0soa9rR3puLyahtE5SqdQ= Subject key identifier: 2B:97:2E:BE:60:8E:28:C4:3A:5D:09:8A:1C:46:27:E8:11:75:F9:62 Authority key identifier: D0:DE:43:0E:42:3B:23:AB:63:4E:BC:F0:19:5F:11:26:B4:4A:52:5E Certificate issuer: /CN=D0DE430E423B23AB634EBCF0195F1126B44A525E Certificate serial: 42A17DC5EBCDFA004EBD58116753E832365F8F03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0DE430E423B23AB634EBCF0195F1126B44A525E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft Manifest number: 017E Signing time: Wed 25 Mar 2026 09:22:12 +0000 Manifest this update: Wed 25 Mar 2026 09:17:12 +0000 Manifest next update: Sat 28 Mar 2026 16:46:12 +0000 Files and hashes: 1: 34352e3132332e3134322e302f32342d3234203d3e20313532303236.roa (hash: VvHLmuXRMUHqTPfrpSgqTa3OVr8h9pb8S/5kTj+y7+8=) 2: D0DE430E423B23AB634EBCF0195F1126B44A525E.crl (hash: h8sknpF4VbxyHqzO1y+4XqPRCTwXkwEaRlY4BypksE8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.crl rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0DE430E423B23AB634EBCF0195F1126B44A525E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 16:46:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:a1:7d:c5:eb:cd:fa:00:4e:bd:58:11:67:53:e8:32:36:5f:8f:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0DE430E423B23AB634EBCF0195F1126B44A525E Validity Not Before: Mar 25 09:17:12 2026 GMT Not After : Mar 28 16:46:12 2026 GMT Subject: CN=2B972EBE608E28C43A5D098A1C4627E81175F962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:de:10:17:a1:47:75:43:14:eb:74:76:d8:d5: 08:1f:5a:9e:42:30:da:a2:f8:a8:a8:1c:2e:60:17: 88:cb:7e:dd:89:21:05:9f:10:fe:d1:fc:7a:50:ac: 44:38:84:24:a5:4f:75:3e:29:76:f5:dc:c5:b0:74: e6:82:4e:ff:cd:bd:64:6e:82:b2:87:7c:b9:31:25: ce:2c:71:05:4f:bc:11:08:bf:b1:10:a0:3d:37:52: d1:dc:f0:69:c0:a1:ba:54:d2:3a:ac:79:a2:0b:f5: 15:97:1d:34:90:2b:1d:3c:d8:5c:57:5c:af:8b:41: 38:70:33:ea:ce:fe:31:28:89:67:b2:09:fd:9a:ad: 25:a6:2e:8e:5a:28:90:21:db:ed:67:77:0b:7c:77: 44:9c:8e:b6:06:53:17:7e:97:2b:d3:ca:39:a6:c9: 99:a7:b6:b2:2e:42:aa:c6:4b:e8:db:41:71:fc:40: 61:56:a0:8e:9a:7e:75:71:62:8f:c6:1b:48:0e:6f: 08:5d:54:e6:f4:18:13:9f:33:c7:f5:29:f5:76:2c: 89:6d:56:fd:4f:4c:1a:f4:0d:07:5a:ff:8b:77:df: 9f:b1:45:f6:a5:91:d3:a3:1d:f7:50:9f:cd:08:ae: 80:29:f7:65:a3:dc:dc:bf:60:ff:d1:bc:3f:5f:38: 22:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:97:2E:BE:60:8E:28:C4:3A:5D:09:8A:1C:46:27:E8:11:75:F9:62 X509v3 Authority Key Identifier: keyid:D0:DE:43:0E:42:3B:23:AB:63:4E:BC:F0:19:5F:11:26:B4:4A:52:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0DE430E423B23AB634EBCF0195F1126B44A525E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:6b:8c:a1:2d:72:c1:1d:f8:1f:e1:77:f6:2e:03:2c:b1:94: 66:73:4f:0f:43:af:dd:ed:84:b7:0f:78:c4:09:39:ab:e0:fe: 54:99:d5:14:48:f2:d6:21:14:fe:f0:a5:3a:8a:96:10:d3:85: c2:e1:2e:73:5b:2e:90:f4:5e:7d:f5:36:63:0c:a6:e6:63:fd: 7b:9a:03:df:2f:1a:0f:ca:23:8f:b7:93:3f:e7:7c:26:f1:7f: 91:3e:c0:10:26:5d:1b:5d:3c:77:1d:c5:5a:76:dd:f6:8b:fd: 57:55:28:d8:07:15:0e:1d:6b:6b:92:0a:50:28:ca:f7:da:7c: 03:10:0a:08:9d:14:66:02:42:0b:f7:2a:ea:e7:c7:47:ed:dc: a2:87:1b:46:0c:dc:2a:7d:b3:34:b5:1b:f2:9d:1f:c1:29:3c: 21:62:48:16:47:ec:ed:e4:5f:ee:99:1c:c2:d4:fb:73:a5:bf: 57:87:eb:16:0f:46:1c:ca:a9:32:16:95:ca:f7:8e:82:40:b9: 3f:d9:68:63:8d:6e:4c:fe:ee:2e:f3:c2:ce:10:fe:88:28:b7: 16:dc:85:e3:7e:c3:b2:74:ce:c3:e7:91:96:9c:5c:0d:19:00: a4:bf:17:f3:d1:a4:65:8c:77:8c:9d:6a:13:3f:9e:77:27:b5: 27:81:87:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQqF9xevN+gBOvVgRZ1PoMjZfjwMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBERTQzMEU0MjNCMjNBQjYzNEVCQ0YwMTk1RjExMjZC NDRBNTI1RTAeFw0yNjAzMjUwOTE3MTJaFw0yNjAzMjgxNjQ2MTJaMDMxMTAvBgNV BAMTKDJCOTcyRUJFNjA4RTI4QzQzQTVEMDk4QTFDNDYyN0U4MTE3NUY5NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD13hAXoUd1QxTrdHbY1QgfWp5C MNqi+KioHC5gF4jLft2JIQWfEP7R/HpQrEQ4hCSlT3U+KXb13MWwdOaCTv/NvWRu grKHfLkxJc4scQVPvBEIv7EQoD03UtHc8GnAobpU0jqseaIL9RWXHTSQKx082FxX XK+LQThwM+rO/jEoiWeyCf2arSWmLo5aKJAh2+1ndwt8d0ScjrYGUxd+lyvTyjmm yZmntrIuQqrGS+jbQXH8QGFWoI6afnVxYo/GG0gObwhdVOb0GBOfM8f1KfV2LIlt Vv1PTBr0DQda/4t335+xRfalkdOjHfdQn80IroAp92Wj3Ny/YP/RvD9fOCITAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK5cuvmCOKMQ6XQmKHEYn6BF1+WIwHwYDVR0j BBgwFoAU0N5DDkI7I6tjTrzwGV8RJrRKUl4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzRhMTUyNy01YzhlLTRiZDMtYTFjNy05ZDFlZDJkMjNlMTQvMC9EMERFNDMwRTQy M0IyM0FCNjM0RUJDRjAxOTVGMTEyNkI0NEE1MjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBERTQzMEU0MjNCMjNBQjYzNEVCQ0YwMTk1RjExMjZCNDRB NTI1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDc0YTE1MjctNWM4ZS00YmQzLWEx YzctOWQxZWQyZDIzZTE0LzAvRDBERTQzMEU0MjNCMjNBQjYzNEVCQ0YwMTk1RjEx MjZCNDRBNTI1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACFrjKEtcsEd+B/hd/YuAyyxlGZzTw9Dr93t hLcPeMQJOavg/lSZ1RRI8tYhFP7wpTqKlhDThcLhLnNbLpD0Xn31NmMMpuZj/Xua A98vGg/KI4+3kz/nfCbxf5E+wBAmXRtdPHcdxVp23faL/VdVKNgHFQ4da2uSClAo yvfafAMQCgidFGYCQgv3Kurnx0ft3KKHG0YM3Cp9szS1G/KdH8EpPCFiSBZH7O3k X+6ZHMLU+3Olv1eH6xYPRhzKqTIWlcr3joJAuT/ZaGONbkz+7i7zws4Q/ogotxbc heN+w7J0zsPnkZacXA0ZAKS/F/PRpGWMd4ydahM/nncntSeBhxw= -----END CERTIFICATE-----Generated at Thu Mar 26 21:33:33 2026 by rpki-client