$ rpki-client -vvf repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft File: D065D2A0A105660C70D0A89385A33A61750ED7E8.mft (raw, json) Hash identifier: fUlrVNrZ3JcWMkJYvqL7BqtWgm5lP7rz/WHW13vamuA= Subject key identifier: 3B:7B:59:44:D8:82:6E:8B:15:BF:90:7A:B2:42:79:92:31:3D:B8:A2 Authority key identifier: D0:65:D2:A0:A1:05:66:0C:70:D0:A8:93:85:A3:3A:61:75:0E:D7:E8 Certificate issuer: /CN=D065D2A0A105660C70D0A89385A33A61750ED7E8 Certificate serial: 2E3903A69ACCC7650D976F85045F2A906CDE249F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D065D2A0A105660C70D0A89385A33A61750ED7E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft Manifest number: 0231 Signing time: Wed 25 Mar 2026 13:22:39 +0000 Manifest this update: Wed 25 Mar 2026 13:17:39 +0000 Manifest next update: Sat 28 Mar 2026 18:12:39 +0000 Files and hashes: 1: D065D2A0A105660C70D0A89385A33A61750ED7E8.crl (hash: MK3GdpVLCRzcpSmkVXuhD0h3Nfc2OCYWnj+zbKM+3/o=) 2: 3130332e3137342e36362e302f32342d3234203d3e20313431363138.roa (hash: 65bteXTuBMFNNSxBrNIPuupUb/Qq8/iDZ5KY9jeNgbQ=) 3: 3130332e3136312e3130392e302f32342d3234203d3e20313431363138.roa (hash: o2bQvGOl23Ff/IhGDb/Bx0WpnGHktg20JirSu+NaGU4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.crl rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D065D2A0A105660C70D0A89385A33A61750ED7E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 18:12:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:39:03:a6:9a:cc:c7:65:0d:97:6f:85:04:5f:2a:90:6c:de:24:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D065D2A0A105660C70D0A89385A33A61750ED7E8 Validity Not Before: Mar 25 13:17:39 2026 GMT Not After : Mar 28 18:12:39 2026 GMT Subject: CN=3B7B5944D8826E8B15BF907AB2427992313DB8A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:fe:1a:9c:1c:84:0b:85:0f:91:2d:f0:2a:04: 7f:cd:05:52:d0:a1:b5:b7:0f:b4:54:39:bd:1e:8f: 70:cb:75:98:fd:47:42:eb:65:4e:17:12:44:52:87: 2c:99:b5:e4:ba:c8:ac:86:99:61:91:79:c7:26:b5: 52:df:6e:99:5e:a8:3e:78:c1:90:fd:2f:c9:f6:83: bf:c3:8e:89:80:49:b4:71:f5:9d:2c:01:11:3a:67: cd:b9:07:34:e3:83:c2:25:f8:2b:15:90:22:9f:8d: 24:40:74:fa:5e:55:78:d5:96:0a:23:02:c3:c9:99: b0:32:2a:0a:6e:90:38:02:d8:b6:79:81:5f:2f:d2: c2:d3:a7:f9:bc:a5:3a:79:8e:53:df:17:f2:cd:38: d2:5b:c0:94:73:bb:81:c8:4f:69:2e:05:b5:ed:90: 69:7b:00:aa:82:d6:2f:3c:59:66:33:ec:f5:48:aa: 6d:7b:9b:01:48:49:ae:d7:55:a6:45:82:b7:3b:36: 97:67:93:07:80:93:e5:60:1d:1a:82:e2:78:e6:71: 5c:95:f6:bd:51:72:94:13:fd:1a:ac:e2:69:3c:79: e7:27:e9:ac:ae:6c:3c:e9:89:9a:84:72:98:6c:69: fc:77:88:19:09:7b:e7:87:76:b3:d5:5d:ff:3a:af: 7a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:7B:59:44:D8:82:6E:8B:15:BF:90:7A:B2:42:79:92:31:3D:B8:A2 X509v3 Authority Key Identifier: keyid:D0:65:D2:A0:A1:05:66:0C:70:D0:A8:93:85:A3:3A:61:75:0E:D7:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D065D2A0A105660C70D0A89385A33A61750ED7E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:f0:1d:dc:03:df:85:0f:e4:27:c1:7f:7e:ba:33:e8:97:33: 4b:77:b0:d1:dc:66:b3:f4:95:b5:ab:48:c4:37:06:59:a3:fe: fe:23:84:20:f2:35:31:f3:fb:4f:9e:ee:f2:cf:92:2e:74:fb: 5a:56:9a:ad:a9:63:79:ed:d2:85:99:cf:10:86:b1:93:0d:fe: 54:6d:25:06:d8:e2:48:2f:08:74:00:d0:0c:13:a6:05:52:fa: 1f:c2:91:c0:44:e3:35:50:8d:59:9d:1d:a1:74:7f:fd:55:47: 0d:54:d0:3e:46:5f:02:17:99:5f:57:17:36:f3:82:cf:40:b9: 49:25:29:56:d1:76:87:c2:96:58:2b:e4:39:14:4d:c0:b8:02: cf:6f:60:b3:c8:97:17:e5:50:e2:9c:a6:a2:0f:60:7d:e4:9f: d8:61:c1:67:66:f0:d4:29:1a:b5:96:a3:5c:0c:64:8e:b3:f8: 1d:cb:8a:81:6d:43:76:59:6b:76:d8:74:38:14:83:a2:ea:c2: 95:52:04:45:28:0c:97:b9:ab:71:6a:a0:03:81:d6:57:51:b6: 14:9e:a3:2a:e1:86:f4:31:7b:bf:f4:36:1c:8b:0b:20:33:17: 46:23:6a:b1:fe:6a:2c:11:08:f6:49:df:9f:98:c3:38:32:71: 15:2d:9e:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULjkDpprMx2UNl2+FBF8qkGzeJJ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA2NUQyQTBBMTA1NjYwQzcwRDBBODkzODVBMzNBNjE3 NTBFRDdFODAeFw0yNjAzMjUxMzE3MzlaFw0yNjAzMjgxODEyMzlaMDMxMTAvBgNV BAMTKDNCN0I1OTQ0RDg4MjZFOEIxNUJGOTA3QUIyNDI3OTkyMzEzREI4QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq/hqcHIQLhQ+RLfAqBH/NBVLQ obW3D7RUOb0ej3DLdZj9R0LrZU4XEkRShyyZteS6yKyGmWGReccmtVLfbpleqD54 wZD9L8n2g7/DjomASbRx9Z0sARE6Z825BzTjg8Il+CsVkCKfjSRAdPpeVXjVlgoj AsPJmbAyKgpukDgC2LZ5gV8v0sLTp/m8pTp5jlPfF/LNONJbwJRzu4HIT2kuBbXt kGl7AKqC1i88WWYz7PVIqm17mwFISa7XVaZFgrc7NpdnkweAk+VgHRqC4njmcVyV 9r1RcpQT/Rqs4mk8eecn6ayubDzpiZqEcphsafx3iBkJe+eHdrPVXf86r3odAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO3tZRNiCbosVv5B6skJ5kjE9uKIwHwYDVR0j BBgwFoAU0GXSoKEFZgxw0KiThaM6YXUO1+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MGJhOTdlZi03YmM4LTQ1YjgtODJhYi1mODU1MzNjYWVkZjQvMC9EMDY1RDJBMEEx MDU2NjBDNzBEMEE4OTM4NUEzM0E2MTc1MEVEN0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDA2NUQyQTBBMTA1NjYwQzcwRDBBODkzODVBMzNBNjE3NTBF RDdFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTBiYTk3ZWYtN2JjOC00NWI4LTgy YWItZjg1NTMzY2FlZGY0LzAvRDA2NUQyQTBBMTA1NjYwQzcwRDBBODkzODVBMzNB NjE3NTBFRDdFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACLwHdwD34UP5CfBf366M+iXM0t3sNHcZrP0 lbWrSMQ3Blmj/v4jhCDyNTHz+0+e7vLPki50+1pWmq2pY3nt0oWZzxCGsZMN/lRt JQbY4kgvCHQA0AwTpgVS+h/CkcBE4zVQjVmdHaF0f/1VRw1U0D5GXwIXmV9XFzbz gs9AuUklKVbRdofCllgr5DkUTcC4As9vYLPIlxflUOKcpqIPYH3kn9hhwWdm8NQp GrWWo1wMZI6z+B3LioFtQ3ZZa3bYdDgUg6LqwpVSBEUoDJe5q3FqoAOB1ldRthSe oyrhhvQxe7/0NhyLCyAzF0YjarH+aiwRCPZJ35+YwzgycRUtnqU= -----END CERTIFICATE-----Generated at Thu Mar 26 16:45:35 2026 by rpki-client