$ rpki-client -vvf repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft File: D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft (raw, json) Hash identifier: WZbg/sLMChKVXKEsikVx3uLAgVDopZqwPDxpk5d9fk8= Subject key identifier: D1:CB:96:BA:B6:02:8B:5D:F8:1E:33:A9:F5:94:D9:CA:E8:9B:20:3A Authority key identifier: D8:07:B5:A7:71:6C:B5:6D:03:6E:DE:4C:E9:94:63:2C:0D:3A:25:01 Certificate issuer: /CN=D807B5A7716CB56D036EDE4CE994632C0D3A2501 Certificate serial: 6AE339CE4002C49FE0AA00491DBCA00E84C8574F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D807B5A7716CB56D036EDE4CE994632C0D3A2501.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft Manifest number: 020B Signing time: Thu 26 Mar 2026 03:12:25 +0000 Manifest this update: Thu 26 Mar 2026 03:07:25 +0000 Manifest next update: Sun 29 Mar 2026 13:31:25 +0000 Files and hashes: 1: 3130332e3139312e3230302e302f32342d3234203d3e20313432333636.roa (hash: PoHfbIWBTAgg6GV0EgVNoxxVcZmuQWnVjc1te2yrEhM=) 2: D807B5A7716CB56D036EDE4CE994632C0D3A2501.crl (hash: s0M3aEQWBpzXKGmH6g6IPc+1JbX2mYbeSM33j9pmsrc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.crl rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D807B5A7716CB56D036EDE4CE994632C0D3A2501.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 13:31:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:e3:39:ce:40:02:c4:9f:e0:aa:00:49:1d:bc:a0:0e:84:c8:57:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D807B5A7716CB56D036EDE4CE994632C0D3A2501 Validity Not Before: Mar 26 03:07:25 2026 GMT Not After : Mar 29 13:31:25 2026 GMT Subject: CN=D1CB96BAB6028B5DF81E33A9F594D9CAE89B203A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8d:da:7c:aa:99:f1:2b:18:2b:0c:0e:ae:96: 3e:24:e3:c9:d7:6f:a0:32:5e:db:93:24:83:7b:d3: 00:38:19:75:05:f7:fb:d9:3d:54:ca:86:34:b2:24: 00:1d:95:7f:8f:e0:64:d6:46:ea:97:22:ff:a4:6c: a8:d1:6b:5a:3c:0e:e3:8e:14:80:5e:cb:50:80:3f: 8e:6d:eb:29:4a:e7:0c:29:47:79:2d:cb:b1:13:25: dc:95:ac:ac:a6:96:0a:c9:9e:f5:56:72:de:55:7a: 21:f7:92:cf:fa:1e:ca:27:e7:c2:8c:75:00:bc:13: 6e:dc:a2:96:1c:86:9f:c7:7a:dd:3b:d2:04:e6:c2: f3:3b:6c:f8:db:d3:37:f2:09:ab:6e:3b:ee:5c:48: 39:f1:84:d2:f6:4d:09:b4:e9:27:8f:71:92:7c:65: c4:e7:7b:14:96:cc:ca:7a:31:60:80:2b:29:47:90: bd:d1:ea:66:c2:82:f2:20:89:30:d6:35:3a:0c:4c: e5:90:eb:92:b4:6a:10:38:d6:db:54:24:79:57:f7: af:c4:8d:b0:aa:0b:7e:72:c1:38:3b:03:83:e6:18: 5c:0c:55:dc:62:47:c9:0c:6e:45:66:8d:1a:2a:76: 1f:21:b2:ad:c3:33:15:47:03:06:dd:99:e5:12:71: d2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:CB:96:BA:B6:02:8B:5D:F8:1E:33:A9:F5:94:D9:CA:E8:9B:20:3A X509v3 Authority Key Identifier: keyid:D8:07:B5:A7:71:6C:B5:6D:03:6E:DE:4C:E9:94:63:2C:0D:3A:25:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D807B5A7716CB56D036EDE4CE994632C0D3A2501.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:13:8a:5d:60:2f:fb:69:4d:f8:a0:c1:d4:93:33:83:c4:1e: 04:62:04:91:f6:b1:f9:ed:43:7b:dc:c9:97:b7:82:48:10:84: b3:49:9d:a2:76:93:eb:44:f7:20:51:56:87:eb:06:67:c3:b5: 65:f5:2a:8a:ce:e8:3a:71:e9:a1:36:ac:7f:65:fd:ed:07:1b: 76:22:3a:c4:b7:d3:83:44:ac:73:1d:94:1b:1a:e1:2c:e3:f2: 23:a2:fc:c6:6d:6f:3e:5d:22:8f:ca:88:a7:04:fe:0e:58:dd: 11:34:1b:87:23:43:65:6d:39:fc:be:54:59:a4:db:bc:76:e8: 8b:a6:8a:9f:9c:70:48:b5:7e:3c:24:bb:25:80:57:f7:1b:1f: 1e:90:18:57:60:c9:d5:8e:44:77:ef:59:e0:19:a7:6e:cd:e1: cc:bd:b0:b7:a6:23:1d:e8:64:80:93:72:1d:ef:42:83:6c:ae: e8:6a:7f:68:8e:f1:89:5e:e0:0c:5d:57:91:13:ca:12:4c:bc: 69:9b:66:82:7a:86:ef:f6:e1:f0:15:88:2a:e1:97:bc:f9:1c: c2:b5:31:70:01:01:cc:cf:a8:38:c6:b7:c9:4e:29:81:01:84: b2:06:80:65:1b:44:53:98:32:51:6d:c8:1c:9f:f8:92:a4:82: a1:94:fd:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUauM5zkACxJ/gqgBJHbygDoTIV08wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDgwN0I1QTc3MTZDQjU2RDAzNkVERTRDRTk5NDYzMkMw RDNBMjUwMTAeFw0yNjAzMjYwMzA3MjVaFw0yNjAzMjkxMzMxMjVaMDMxMTAvBgNV BAMTKEQxQ0I5NkJBQjYwMjhCNURGODFFMzNBOUY1OTREOUNBRTg5QjIwM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTjdp8qpnxKxgrDA6ulj4k48nX b6AyXtuTJIN70wA4GXUF9/vZPVTKhjSyJAAdlX+P4GTWRuqXIv+kbKjRa1o8DuOO FIBey1CAP45t6ylK5wwpR3kty7ETJdyVrKymlgrJnvVWct5VeiH3ks/6Hson58KM dQC8E27copYchp/Het070gTmwvM7bPjb0zfyCatuO+5cSDnxhNL2TQm06SePcZJ8 ZcTnexSWzMp6MWCAKylHkL3R6mbCgvIgiTDWNToMTOWQ65K0ahA41ttUJHlX96/E jbCqC35ywTg7A4PmGFwMVdxiR8kMbkVmjRoqdh8hsq3DMxVHAwbdmeUScdL1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0cuWurYCi134HjOp9ZTZyuibIDowHwYDVR0j BBgwFoAU2Ae1p3FstW0Dbt5M6ZRjLA06JQEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MDNlNzFmZS1hZDMzLTRkMTItODcyMC00MzE0M2ZmMDFkYmYvMC9EODA3QjVBNzcx NkNCNTZEMDM2RURFNENFOTk0NjMyQzBEM0EyNTAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDgwN0I1QTc3MTZDQjU2RDAzNkVERTRDRTk5NDYzMkMwRDNB MjUwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTAzZTcxZmUtYWQzMy00ZDEyLTg3 MjAtNDMxNDNmZjAxZGJmLzAvRDgwN0I1QTc3MTZDQjU2RDAzNkVERTRDRTk5NDYz MkMwRDNBMjUwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKkTil1gL/tpTfigwdSTM4PEHgRiBJH2sfnt Q3vcyZe3gkgQhLNJnaJ2k+tE9yBRVofrBmfDtWX1KorO6Dpx6aE2rH9l/e0HG3Yi OsS304NErHMdlBsa4Szj8iOi/MZtbz5dIo/KiKcE/g5Y3RE0G4cjQ2VtOfy+VFmk 27x26Iumip+ccEi1fjwkuyWAV/cbHx6QGFdgydWORHfvWeAZp27N4cy9sLemIx3o ZICTch3vQoNsruhqf2iO8Yle4AxdV5ETyhJMvGmbZoJ6hu/24fAViCrhl7z5HMK1 MXABAczPqDjGt8lOKYEBhLIGgGUbRFOYMlFtyByf+JKkgqGU/cQ= -----END CERTIFICATE-----Generated at Thu Mar 26 07:27:37 2026 by rpki-client