$ rpki-client -vvf repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft File: D77C7D38397FCDE17250AA403BF110EC387F7C02.mft (raw, json) Hash identifier: Co19aZG2HUoUrr/J/cnbKFnMATN+KZhCTy7Un615iVM= Subject key identifier: 36:57:85:C9:4F:C5:98:DC:A4:E7:BA:DA:39:3A:96:8F:BB:F2:43:59 Authority key identifier: D7:7C:7D:38:39:7F:CD:E1:72:50:AA:40:3B:F1:10:EC:38:7F:7C:02 Certificate issuer: /CN=D77C7D38397FCDE17250AA403BF110EC387F7C02 Certificate serial: 3F6E562A05C6BC7742481139D34A819882279EA3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D77C7D38397FCDE17250AA403BF110EC387F7C02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft Manifest number: 018D Signing time: Tue 24 Mar 2026 10:51:37 +0000 Manifest this update: Tue 24 Mar 2026 10:46:37 +0000 Manifest next update: Fri 27 Mar 2026 19:29:37 +0000 Files and hashes: 1: 3130332e3233342e33342e302f32342d3234203d3e20313531353231.roa (hash: aAQ3gTdw9Ba4EyqO5leg/m+5A85FY5W+Vc3itSgQl30=) 2: 3130332e3233342e33352e302f32342d3234203d3e20313531353231.roa (hash: AZoj+0FC7tr+2ZKJboWJyczOYWAwC/zNvBvRBqK06eM=) 3: D77C7D38397FCDE17250AA403BF110EC387F7C02.crl (hash: S2p1A20KvuGFWoe+4vRSw/nESnIdcliVj1H2fnkyHSA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.crl rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D77C7D38397FCDE17250AA403BF110EC387F7C02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 19:29:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:6e:56:2a:05:c6:bc:77:42:48:11:39:d3:4a:81:98:82:27:9e:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D77C7D38397FCDE17250AA403BF110EC387F7C02 Validity Not Before: Mar 24 10:46:37 2026 GMT Not After : Mar 27 19:29:37 2026 GMT Subject: CN=365785C94FC598DCA4E7BADA393A968FBBF24359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e3:d4:b5:53:cd:e3:91:85:e0:a6:e6:58:37: 11:58:1e:b4:82:83:2a:08:e6:4c:6d:04:21:a2:c7: 33:0b:0c:91:5c:de:43:89:10:19:b4:a8:ef:d5:21: 9c:67:d2:c6:85:33:87:4c:d5:6e:a4:5b:02:37:36: b3:1f:0a:ff:17:67:78:c4:50:17:56:48:23:c2:ec: fc:85:12:01:ff:5d:d1:56:43:60:ee:df:d3:bb:df: 6f:af:34:91:31:89:31:64:c7:d3:09:b9:26:23:33: d6:b1:c9:44:a7:cc:29:28:60:1c:4c:60:65:93:d0: 36:c1:92:3d:12:9c:2c:a8:40:87:24:22:4f:b1:45: 9c:ea:9c:fa:48:41:f4:e1:7b:d8:73:f1:e8:fb:21: f6:51:6b:c8:ce:60:63:d9:63:bb:ce:b7:3d:b9:12: 92:64:fe:c2:41:30:56:0f:44:c8:a7:f7:b5:99:5e: 5a:62:69:de:79:49:11:10:a0:15:3d:89:19:7d:92: 21:ad:fc:18:6a:7f:d4:f1:82:3c:99:99:c9:76:57: 54:ff:15:75:8a:de:77:94:d0:88:b3:e7:fa:4b:e1: 0c:e3:23:e6:6e:0b:0f:fd:19:70:ad:b3:d5:b2:1f: 9c:66:bf:74:41:68:73:1f:0b:7e:52:c0:ff:47:43: b7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:57:85:C9:4F:C5:98:DC:A4:E7:BA:DA:39:3A:96:8F:BB:F2:43:59 X509v3 Authority Key Identifier: keyid:D7:7C:7D:38:39:7F:CD:E1:72:50:AA:40:3B:F1:10:EC:38:7F:7C:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D77C7D38397FCDE17250AA403BF110EC387F7C02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:3b:51:8b:1c:ea:3a:33:52:05:b4:40:ac:b1:94:4b:4e:b8: f8:e9:ad:31:2d:fc:45:97:2d:73:d9:8a:47:ce:cb:95:51:62: 8c:bb:d1:34:54:8f:c2:ca:2a:58:b0:5d:de:a5:2a:ce:27:e0: 95:2d:05:55:cb:fb:91:d3:be:c8:d1:3e:de:65:99:c0:a5:5a: e2:54:0e:6c:37:57:c5:d5:36:92:7e:9b:28:55:0f:84:99:81: c9:cc:ce:b2:0e:12:be:10:15:1d:ca:9b:b2:90:64:78:d9:47: c2:70:39:d4:59:2c:cb:70:06:9e:53:be:7e:1d:ea:73:5a:d8: ce:31:68:4d:eb:ed:9d:ea:1b:8e:27:d0:60:9e:f7:5c:a7:dd: 9b:6c:1f:68:26:b0:52:f6:b7:58:0e:08:73:d3:b2:76:44:16: d0:17:b7:4d:a0:91:80:77:6d:dd:fb:ff:2e:cd:f9:1b:73:88: 1b:46:61:b7:06:9d:3f:13:9e:04:27:94:ab:21:bb:b2:40:2e: ff:76:93:e1:a7:7d:e0:12:f0:5c:6e:d0:ef:a0:de:b9:5e:95: 70:c2:77:2e:2d:5c:94:1d:8a:d1:8c:7f:53:e4:2c:81:37:dd: b7:6c:5b:6e:6b:f0:cd:7c:65:2f:90:fe:f1:46:e2:03:c0:b3: ed:18:ee:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP25WKgXGvHdCSBE500qBmIInnqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc3QzdEMzgzOTdGQ0RFMTcyNTBBQTQwM0JGMTEwRUMz ODdGN0MwMjAeFw0yNjAzMjQxMDQ2MzdaFw0yNjAzMjcxOTI5MzdaMDMxMTAvBgNV BAMTKDM2NTc4NUM5NEZDNTk4RENBNEU3QkFEQTM5M0E5NjhGQkJGMjQzNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF49S1U83jkYXgpuZYNxFYHrSC gyoI5kxtBCGixzMLDJFc3kOJEBm0qO/VIZxn0saFM4dM1W6kWwI3NrMfCv8XZ3jE UBdWSCPC7PyFEgH/XdFWQ2Du39O732+vNJExiTFkx9MJuSYjM9axyUSnzCkoYBxM YGWT0DbBkj0SnCyoQIckIk+xRZzqnPpIQfThe9hz8ej7IfZRa8jOYGPZY7vOtz25 EpJk/sJBMFYPRMin97WZXlpiad55SREQoBU9iRl9kiGt/Bhqf9TxgjyZmcl2V1T/ FXWK3neU0Iiz5/pL4QzjI+ZuCw/9GXCts9WyH5xmv3RBaHMfC35SwP9HQ7ftAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNleFyU/FmNyk57raOTqWj7vyQ1kwHwYDVR0j BBgwFoAU13x9ODl/zeFyUKpAO/EQ7Dh/fAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2E2YjIzYi1jNDFlLTQ0NDktYTE0OS1iYzBjNmM4YjAxMWIvMC9ENzdDN0QzODM5 N0ZDREUxNzI1MEFBNDAzQkYxMTBFQzM4N0Y3QzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDc3QzdEMzgzOTdGQ0RFMTcyNTBBQTQwM0JGMTEwRUMzODdG N0MwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdhNmIyM2ItYzQxZS00NDQ5LWEx NDktYmMwYzZjOGIwMTFiLzAvRDc3QzdEMzgzOTdGQ0RFMTcyNTBBQTQwM0JGMTEw RUMzODdGN0MwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG47UYsc6jozUgW0QKyxlEtOuPjprTEt/EWX LXPZikfOy5VRYoy70TRUj8LKKliwXd6lKs4n4JUtBVXL+5HTvsjRPt5lmcClWuJU Dmw3V8XVNpJ+myhVD4SZgcnMzrIOEr4QFR3Km7KQZHjZR8JwOdRZLMtwBp5Tvn4d 6nNa2M4xaE3r7Z3qG44n0GCe91yn3ZtsH2gmsFL2t1gOCHPTsnZEFtAXt02gkYB3 bd37/y7N+RtziBtGYbcGnT8TngQnlKshu7JALv92k+GnfeAS8Fxu0O+g3rlelXDC dy4tXJQditGMf1PkLIE33bdsW25r8M18ZS+Q/vFG4gPAs+0Y7oA= -----END CERTIFICATE-----Generated at Thu Mar 26 14:28:18 2026 by rpki-client