$ rpki-client -vvf repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft File: 371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft (raw, json) Hash identifier: kkTn624r4RXKRqhIaYG56F1JSajWYBqp2XelTpcWSjg= Subject key identifier: E4:5A:F4:6C:B8:B1:74:8F:AF:F0:A5:A1:0F:BA:79:92:9D:CA:C7:10 Authority key identifier: 37:19:67:DF:BD:20:3A:2F:D4:4E:88:F7:86:D9:F0:F0:C8:8E:4B:A9 Certificate issuer: /CN=371967DFBD203A2FD44E88F786D9F0F0C88E4BA9 Certificate serial: 20B8DC8523626E3885408603301085BB051CEF2A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft Manifest number: 0386 Signing time: Wed 25 Mar 2026 10:03:50 +0000 Manifest this update: Wed 25 Mar 2026 09:58:50 +0000 Manifest next update: Sat 28 Mar 2026 13:32:50 +0000 Files and hashes: 1: 371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.crl (hash: z4WmOWmoCOcrZEOnBPah8EWnpvfE8Ai4bp52L6z1Gic=) 2: 3230322e382e32382e302f32342d3234203d3e203435373234.roa (hash: mN4kUWey1FjzRsPdo9biO1LPdXh7z4TjPNv+IxlpTMI=) 3: 3130332e3233312e3131322e302f32322d3234203d3e203435373234.roa (hash: B3IC/AW+40oETvGKZUM7eObcGOyNmLTwTu+s/VISsCU=) 4: 3230322e382e32392e302f32342d3234203d3e203435373234.roa (hash: vTpKFtEuSQzd7i6WWufB9z0/u+k/lMjz3IOnInep2vs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.crl rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 13:32:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:b8:dc:85:23:62:6e:38:85:40:86:03:30:10:85:bb:05:1c:ef:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=371967DFBD203A2FD44E88F786D9F0F0C88E4BA9 Validity Not Before: Mar 25 09:58:50 2026 GMT Not After : Mar 28 13:32:50 2026 GMT Subject: CN=E45AF46CB8B1748FAFF0A5A10FBA79929DCAC710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:93:6e:b6:81:cb:f8:bb:a9:3a:8b:77:99:15: 3b:7a:a0:ec:1e:da:14:1b:da:ac:b1:23:74:8c:6c: a6:ed:7b:c7:38:e8:9b:63:73:15:b6:75:f0:b2:d4: 3b:0d:80:3a:bd:e5:2c:89:5a:b4:1b:16:fe:dd:fc: ec:56:ec:71:f2:1c:3f:08:56:42:8b:a8:60:4f:f1: f8:16:aa:87:a7:4e:c7:58:5c:cd:6c:8d:cc:9e:a6: 3a:50:f3:36:89:4d:42:1b:d1:9a:8b:72:46:56:95: b1:3b:f3:e9:a1:4e:ba:c0:72:8b:f5:7f:2d:2c:8e: 88:e7:1c:73:72:dd:3e:22:8b:fa:bc:ab:24:66:a6: b7:81:6b:72:48:03:ad:1c:25:68:f1:2c:df:56:a1: 59:60:42:2a:d3:e0:c5:31:b6:1f:f3:54:8e:d5:f2: 6a:cd:79:a7:45:58:cc:3b:83:1f:c4:6a:7b:10:78: 9b:be:2f:17:a4:31:db:cf:e3:7a:b6:1c:74:50:37: a6:60:09:47:5e:c5:b4:3e:3d:69:20:1b:f6:1f:4d: ff:8c:eb:4e:b7:e3:a5:34:45:e1:08:fa:3a:24:79: 5c:36:ee:15:83:a9:30:a4:8e:6b:c7:94:87:cf:0e: 7b:41:c4:2e:ba:86:0f:11:50:4c:48:a8:48:35:60: e7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:5A:F4:6C:B8:B1:74:8F:AF:F0:A5:A1:0F:BA:79:92:9D:CA:C7:10 X509v3 Authority Key Identifier: keyid:37:19:67:DF:BD:20:3A:2F:D4:4E:88:F7:86:D9:F0:F0:C8:8E:4B:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:70:36:f9:53:22:c4:58:37:d7:56:62:f9:8d:20:5e:98:32: da:ce:bf:3c:97:8f:5d:89:96:99:0d:31:f2:a5:08:65:47:80: cd:d7:df:a5:18:e4:96:69:82:5a:45:6b:ed:18:2a:30:62:10: 2d:03:64:09:fe:25:1a:d0:57:96:70:a0:3d:cf:6e:13:0e:82: 1f:6d:da:b7:9f:c5:00:9a:88:c6:f7:d6:75:14:80:4a:08:7f: bb:c8:83:78:d2:de:22:d1:65:17:a0:a9:bc:29:0b:9f:46:0c: 39:35:32:34:a3:08:d8:22:c0:26:6e:4e:31:ae:54:5c:ee:df: 20:ca:3c:b2:48:42:b6:45:55:91:fa:a1:ee:d7:d0:a1:3d:9e: 89:59:76:46:0d:e9:80:cf:05:65:96:40:7f:e4:28:1a:b9:87: 61:d6:7f:58:90:75:90:a1:58:a6:fb:b9:8a:5e:b5:e4:8e:cb: 51:5f:ad:9f:2c:59:f0:76:af:da:cb:c0:d7:fd:b2:de:62:6f: 7a:92:2b:5b:ed:8d:c9:17:a3:d6:dc:14:d7:7c:39:b4:7c:e1: 0c:6e:55:59:13:65:88:57:87:61:f5:19:83:53:82:60:0c:e9: 8b:39:80:5f:23:33:b4:96:b7:a7:e0:e7:11:32:7c:59:4d:5c: 71:61:4c:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUILjchSNibjiFQIYDMBCFuwUc7yowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzcxOTY3REZCRDIwM0EyRkQ0NEU4OEY3ODZEOUYwRjBD ODhFNEJBOTAeFw0yNjAzMjUwOTU4NTBaFw0yNjAzMjgxMzMyNTBaMDMxMTAvBgNV BAMTKEU0NUFGNDZDQjhCMTc0OEZBRkYwQTVBMTBGQkE3OTkyOURDQUM3MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVk262gcv4u6k6i3eZFTt6oOwe 2hQb2qyxI3SMbKbte8c46JtjcxW2dfCy1DsNgDq95SyJWrQbFv7d/OxW7HHyHD8I VkKLqGBP8fgWqoenTsdYXM1sjcyepjpQ8zaJTUIb0ZqLckZWlbE78+mhTrrAcov1 fy0sjojnHHNy3T4ii/q8qyRmpreBa3JIA60cJWjxLN9WoVlgQirT4MUxth/zVI7V 8mrNeadFWMw7gx/EansQeJu+LxekMdvP43q2HHRQN6ZgCUdexbQ+PWkgG/YfTf+M 606346U0ReEI+jokeVw27hWDqTCkjmvHlIfPDntBxC66hg8RUExIqEg1YOdlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5Fr0bLixdI+v8KWhD7p5kp3KxxAwHwYDVR0j BBgwFoAUNxln370gOi/UToj3htnw8MiOS6kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZWI4Yjg4OS0zYjNkLTRlZjUtYWQ3MC01YjEwNDVlZmYzOTMvMC8zNzE5NjdERkJE MjAzQTJGRDQ0RTg4Rjc4NkQ5RjBGMEM4OEU0QkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzcxOTY3REZCRDIwM0EyRkQ0NEU4OEY3ODZEOUYwRjBDODhF NEJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGViOGI4ODktM2IzZC00ZWY1LWFk NzAtNWIxMDQ1ZWZmMzkzLzAvMzcxOTY3REZCRDIwM0EyRkQ0NEU4OEY3ODZEOUYw RjBDODhFNEJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGRwNvlTIsRYN9dWYvmNIF6YMtrOvzyXj12J lpkNMfKlCGVHgM3X36UY5JZpglpFa+0YKjBiEC0DZAn+JRrQV5ZwoD3PbhMOgh9t 2refxQCaiMb31nUUgEoIf7vIg3jS3iLRZRegqbwpC59GDDk1MjSjCNgiwCZuTjGu VFzu3yDKPLJIQrZFVZH6oe7X0KE9nolZdkYN6YDPBWWWQH/kKBq5h2HWf1iQdZCh WKb7uYpeteSOy1FfrZ8sWfB2r9rLwNf9st5ib3qSK1vtjckXo9bcFNd8ObR84Qxu VVkTZYhXh2H1GYNTgmAM6Ys5gF8jM7SWt6fg5xEyfFlNXHFhTK0= -----END CERTIFICATE-----Generated at Thu Mar 26 07:33:58 2026 by rpki-client