$ rpki-client -vvf repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft File: CD93E5B741D83CA78E83C5AD92156B086BC05233.mft (raw, json) Hash identifier: VQ75565Eu93fz9xRqVS9JhwZA6fX+poaZQIfHsMi8W8= Subject key identifier: 88:11:0C:D6:26:B9:E5:B2:41:ED:89:5D:F3:1D:D1:A9:35:D4:1F:C9 Authority key identifier: CD:93:E5:B7:41:D8:3C:A7:8E:83:C5:AD:92:15:6B:08:6B:C0:52:33 Certificate issuer: /CN=CD93E5B741D83CA78E83C5AD92156B086BC05233 Certificate serial: 5E5FD42DAC8057E30515310D6EE671B043318F58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD93E5B741D83CA78E83C5AD92156B086BC05233.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft Manifest number: 02F7 Signing time: Tue 24 Mar 2026 11:02:31 +0000 Manifest this update: Tue 24 Mar 2026 10:57:31 +0000 Manifest next update: Fri 27 Mar 2026 11:41:31 +0000 Files and hashes: 1: CD93E5B741D83CA78E83C5AD92156B086BC05233.crl (hash: EqoDAklVZB4b8C0aZPyYNW++svRKbUyyMGdWt+7wV0A=) 2: 3130332e3135382e3139362e302f32342d3234203d3e20313431313333.roa (hash: veFUUZaHhHDpj6KmBcnJnR41ugvnsdBmWkSb2+LTSCU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.crl rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD93E5B741D83CA78E83C5AD92156B086BC05233.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 11:41:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:5f:d4:2d:ac:80:57:e3:05:15:31:0d:6e:e6:71:b0:43:31:8f:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD93E5B741D83CA78E83C5AD92156B086BC05233 Validity Not Before: Mar 24 10:57:31 2026 GMT Not After : Mar 27 11:41:31 2026 GMT Subject: CN=88110CD626B9E5B241ED895DF31DD1A935D41FC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b1:8e:8d:81:cf:65:b6:76:b8:7c:fa:aa:20: 24:ff:f7:15:69:4c:80:a5:d0:fa:8c:76:fb:84:f2: 24:e1:e1:8b:81:ac:85:b7:89:a6:18:78:26:9e:68: 3b:99:4f:b0:a2:c9:35:19:7f:3b:65:81:7e:58:e2: c3:b8:f1:1d:c4:cd:c9:02:55:4b:dd:23:97:8b:06: ae:42:d8:6e:1a:2e:73:78:31:a3:eb:b6:1b:44:81: 37:a6:7e:7a:b3:ba:79:76:4b:bc:4a:7f:df:48:13: 82:24:d3:4e:0e:ee:6e:73:ba:de:bd:bc:00:8d:4f: f5:98:5c:96:7e:8b:8c:1d:0a:74:92:43:d2:2c:dc: 67:d9:22:1e:3a:7f:fb:c0:fb:bf:27:fb:9e:11:48: db:d4:5d:d1:d7:c3:13:d6:ce:44:38:f0:11:ce:e6: 3b:4b:23:95:23:72:7b:37:dd:b1:a2:e1:04:61:a5: a7:4f:59:73:dc:68:84:6f:3b:51:93:a0:9f:3d:d8: 80:8a:50:1b:a0:7e:13:24:d8:55:cc:9e:13:ba:3a: c7:cd:b9:f8:5f:c8:a1:9e:5b:42:76:92:7a:25:34: 20:39:10:01:07:ef:58:de:47:73:c2:e4:91:a2:1f: c3:33:6d:8a:8d:07:e7:e8:ae:08:47:62:13:3b:0e: 00:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:11:0C:D6:26:B9:E5:B2:41:ED:89:5D:F3:1D:D1:A9:35:D4:1F:C9 X509v3 Authority Key Identifier: keyid:CD:93:E5:B7:41:D8:3C:A7:8E:83:C5:AD:92:15:6B:08:6B:C0:52:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD93E5B741D83CA78E83C5AD92156B086BC05233.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:85:a3:a6:4e:ab:87:a2:e4:96:ad:d3:d2:86:0f:47:6d:a7: bc:96:99:46:29:8c:e9:f9:19:cf:e0:01:b2:4c:5a:a4:d7:a3: 3a:09:00:99:3a:9d:b9:8e:e1:e2:59:2e:51:6a:95:88:d1:e3: 3c:05:ca:8c:a2:3c:8e:4b:7f:59:fb:29:1a:f6:ad:aa:e9:c2: fc:f7:1c:d5:fb:8a:cf:9f:50:0a:89:a6:a9:3c:44:a6:d2:07: 83:c2:6d:fa:27:4e:2d:46:cc:8d:e9:a0:78:57:d2:2b:8c:bb: fe:c8:b1:bf:52:a8:89:1b:13:c8:cd:18:0d:df:03:e1:7e:90: 0b:af:7f:18:55:c6:0e:ca:be:4d:12:c6:35:da:0a:d1:41:79: c7:d4:37:48:4e:1e:5e:79:f6:bc:ff:ea:b6:a9:3c:50:5a:57: a1:eb:96:cc:f7:7b:e6:a1:94:ba:b0:9c:66:ab:00:70:30:84: 35:ff:d8:f5:9e:89:59:d9:7b:21:3c:5c:1c:42:8a:b8:e6:15: 48:d0:bc:0a:3b:7b:39:8e:f3:ef:3d:a9:bb:dc:01:b0:ed:fe: 28:2c:b4:3c:22:10:9c:47:f5:a9:c8:9d:ed:c1:79:fd:c9:d6: 12:23:9f:ad:1b:a9:15:ed:d7:1c:78:7a:91:db:47:9c:85:60: d9:6b:36:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXl/ULayAV+MFFTENbuZxsEMxj1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q5M0U1Qjc0MUQ4M0NBNzhFODNDNUFEOTIxNTZCMDg2 QkMwNTIzMzAeFw0yNjAzMjQxMDU3MzFaFw0yNjAzMjcxMTQxMzFaMDMxMTAvBgNV BAMTKDg4MTEwQ0Q2MjZCOUU1QjI0MUVEODk1REYzMUREMUE5MzVENDFGQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpsY6Ngc9ltna4fPqqICT/9xVp TICl0PqMdvuE8iTh4YuBrIW3iaYYeCaeaDuZT7CiyTUZfztlgX5Y4sO48R3EzckC VUvdI5eLBq5C2G4aLnN4MaPrthtEgTemfnqzunl2S7xKf99IE4Ik004O7m5zut69 vACNT/WYXJZ+i4wdCnSSQ9Is3GfZIh46f/vA+78n+54RSNvUXdHXwxPWzkQ48BHO 5jtLI5Ujcns33bGi4QRhpadPWXPcaIRvO1GToJ892ICKUBugfhMk2FXMnhO6OsfN ufhfyKGeW0J2knolNCA5EAEH71jeR3PC5JGiH8MzbYqNB+forghHYhM7DgC/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiBEM1ia55bJB7Yld8x3RqTXUH8kwHwYDVR0j BBgwFoAUzZPlt0HYPKeOg8WtkhVrCGvAUjMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmRkY2I0Yi02ZDhlLTQ1OWItOGFhMi05OWE2MDg4NjI1NmEvMC9DRDkzRTVCNzQx RDgzQ0E3OEU4M0M1QUQ5MjE1NkIwODZCQzA1MjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q5M0U1Qjc0MUQ4M0NBNzhFODNDNUFEOTIxNTZCMDg2QkMw NTIzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZkZGNiNGItNmQ4ZS00NTliLThh YTItOTlhNjA4ODYyNTZhLzAvQ0Q5M0U1Qjc0MUQ4M0NBNzhFODNDNUFEOTIxNTZC MDg2QkMwNTIzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIKFo6ZOq4ei5Jat09KGD0dtp7yWmUYpjOn5 Gc/gAbJMWqTXozoJAJk6nbmO4eJZLlFqlYjR4zwFyoyiPI5Lf1n7KRr2rarpwvz3 HNX7is+fUAqJpqk8RKbSB4PCbfonTi1GzI3poHhX0iuMu/7Isb9SqIkbE8jNGA3f A+F+kAuvfxhVxg7Kvk0SxjXaCtFBecfUN0hOHl559rz/6rapPFBaV6Hrlsz3e+ah lLqwnGarAHAwhDX/2PWeiVnZeyE8XBxCirjmFUjQvAo7ezmO8+89qbvcAbDt/igs tDwiEJxH9anIne3Bef3J1hIjn60bqRXt1xx4epHbR5yFYNlrNio= -----END CERTIFICATE-----Generated at Thu Mar 26 11:58:30 2026 by rpki-client