$ rpki-client -vvf repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft File: C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft (raw, json) Hash identifier: HIAj0oSPVF4nosPdoMSXSLHRANFNVVuuWWWUONpi1Bw= Subject key identifier: F0:E2:E5:FE:04:F6:76:9C:AA:CF:F7:2B:33:5A:76:60:35:65:60:28 Authority key identifier: C1:73:25:71:81:0C:9D:49:76:CD:1A:47:D5:58:47:26:CF:0C:C7:BD Certificate issuer: /CN=C1732571810C9D4976CD1A47D5584726CF0CC7BD Certificate serial: 6E6092A084360A76C14A076F0D71101DEB9FDA2A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C1732571810C9D4976CD1A47D5584726CF0CC7BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft Manifest number: 0171 Signing time: Wed 25 Mar 2026 23:20:00 +0000 Manifest this update: Wed 25 Mar 2026 23:15:00 +0000 Manifest next update: Sun 29 Mar 2026 06:08:00 +0000 Files and hashes: 1: 3135372e31302e38392e302f32342d3234203d3e20313532303832.roa (hash: tTSkb3LmGeKJ+KOwhCOQc0e57SI0T8wvWexMRiAu1K4=) 2: 3135372e31302e38382e302f32342d3234203d3e20313532303832.roa (hash: o3X95QY7fg1x907JEuK0Tti5YWHdGjRCJ0G2QdlLS9w=) 3: C1732571810C9D4976CD1A47D5584726CF0CC7BD.crl (hash: d6XNWXxIc3KZgeEKsrYhhmofVQ2jq8ihRE89nHPzYy8=) 4: 3135372e31302e38382e302f32332d3233203d3e20313532303832.roa (hash: yHjDD2B7ssz0I97OhqKdQ6IMmUPUkeyrcBf6V6OA9mQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.crl rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C1732571810C9D4976CD1A47D5584726CF0CC7BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 06:08:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:60:92:a0:84:36:0a:76:c1:4a:07:6f:0d:71:10:1d:eb:9f:da:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1732571810C9D4976CD1A47D5584726CF0CC7BD Validity Not Before: Mar 25 23:15:00 2026 GMT Not After : Mar 29 06:08:00 2026 GMT Subject: CN=F0E2E5FE04F6769CAACFF72B335A766035656028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:46:61:de:a3:75:d9:35:04:3b:ff:ba:f8:41: 84:6e:6c:95:93:92:04:82:78:3f:cf:57:24:bd:c7: 11:fd:7a:4a:7c:1f:1e:f1:a7:bd:82:90:00:bd:f6: 42:58:8f:6d:e7:6e:a2:5f:ab:ef:3c:4d:b7:16:e6: 61:24:e8:e8:84:d5:58:6d:65:ce:88:8f:7d:f4:9d: 08:be:82:01:f1:9e:b7:26:ad:b6:e3:77:82:fd:f0: ba:5e:8f:8e:56:63:88:8b:5e:fc:0d:5f:d0:3c:b2: 9f:14:5a:05:53:1a:d5:84:a5:50:4f:1a:08:e9:78: c0:51:ef:b5:39:e2:89:75:1f:f1:b6:89:75:9a:2a: 1b:51:9e:67:cd:3a:d3:8f:d9:86:66:d1:61:d7:d8: 8c:44:45:72:4c:39:5d:d5:b0:3f:11:51:5d:c0:29: c4:8b:b3:ea:d7:ab:54:75:62:80:1a:08:a9:b5:9e: aa:b0:a1:80:3a:c5:58:bb:29:f7:f9:0c:01:b3:d8: de:17:a1:94:e2:f2:60:48:74:27:1a:63:1e:86:cf: c6:19:fc:be:fa:f8:53:c6:a9:13:db:ba:ee:a5:bb: 8a:fa:63:cb:db:36:e8:63:ba:76:d8:5e:ca:8e:3f: 5b:07:c0:38:c0:cb:68:ee:7d:40:83:06:9b:34:ff: 71:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:E2:E5:FE:04:F6:76:9C:AA:CF:F7:2B:33:5A:76:60:35:65:60:28 X509v3 Authority Key Identifier: keyid:C1:73:25:71:81:0C:9D:49:76:CD:1A:47:D5:58:47:26:CF:0C:C7:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C1732571810C9D4976CD1A47D5584726CF0CC7BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:3f:5d:e8:b4:64:29:ec:4f:34:76:87:37:f7:23:33:e1:53: 2d:5b:db:8e:04:62:ae:87:9a:47:13:0e:07:cf:6f:ba:68:23: 4d:02:af:55:b5:26:26:c1:7a:7b:c2:5e:38:e6:35:d0:9e:51: a5:32:fb:3d:ba:c2:0f:d7:03:cf:25:fb:ab:70:a3:ff:2e:61: f1:05:db:69:b8:b6:ec:73:05:d2:09:23:c5:ef:9e:a1:8b:c0: 77:11:26:90:8a:6f:3f:9b:82:00:ee:38:3e:97:65:36:db:f0: a1:d3:09:1a:ba:9e:ce:da:6f:cd:10:80:ff:dc:5f:53:36:1a: bc:2e:20:d8:cb:a4:93:4f:87:f0:2d:cd:58:4e:85:4a:6f:1d: c0:df:d5:69:91:58:2f:32:f1:ff:cd:4b:56:fd:5a:c7:a5:2c: 11:bc:71:d1:57:9e:34:9c:32:26:c6:b7:d9:b9:3a:cd:1b:be: 73:82:4f:db:dc:3a:6c:7a:73:c8:ff:79:b5:98:dd:85:85:3f: d2:48:ec:ca:83:c9:53:e2:07:9f:91:39:ed:be:ce:c2:0c:33: 83:c9:b3:d3:12:5f:cb:2e:ad:b0:8a:76:cd:3d:cb:77:0d:65: fe:5f:00:44:1e:93:0f:eb:0f:33:b5:fc:38:da:d0:cf:1e:ff: 1a:4c:df:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbmCSoIQ2CnbBSgdvDXEQHeuf2iowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE3MzI1NzE4MTBDOUQ0OTc2Q0QxQTQ3RDU1ODQ3MjZD RjBDQzdCRDAeFw0yNjAzMjUyMzE1MDBaFw0yNjAzMjkwNjA4MDBaMDMxMTAvBgNV BAMTKEYwRTJFNUZFMDRGNjc2OUNBQUNGRjcyQjMzNUE3NjYwMzU2NTYwMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIRmHeo3XZNQQ7/7r4QYRubJWT kgSCeD/PVyS9xxH9ekp8Hx7xp72CkAC99kJYj23nbqJfq+88TbcW5mEk6OiE1Vht Zc6Ij330nQi+ggHxnrcmrbbjd4L98Lpej45WY4iLXvwNX9A8sp8UWgVTGtWEpVBP GgjpeMBR77U54ol1H/G2iXWaKhtRnmfNOtOP2YZm0WHX2IxERXJMOV3VsD8RUV3A KcSLs+rXq1R1YoAaCKm1nqqwoYA6xVi7Kff5DAGz2N4XoZTi8mBIdCcaYx6Gz8YZ /L76+FPGqRPbuu6lu4r6Y8vbNuhjunbYXsqOP1sHwDjAy2jufUCDBps0/3GJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8OLl/gT2dpyqz/crM1p2YDVlYCgwHwYDVR0j BBgwFoAUwXMlcYEMnUl2zRpH1VhHJs8Mx70wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NDdjZDVhMi1hNzQyLTQ1MGMtYjE5MC01MDBlNzU0NTIwZGUvMC9DMTczMjU3MTgx MEM5RDQ5NzZDRDFBNDdENTU4NDcyNkNGMENDN0JELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzE3MzI1NzE4MTBDOUQ0OTc2Q0QxQTQ3RDU1ODQ3MjZDRjBD QzdCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTQ3Y2Q1YTItYTc0Mi00NTBjLWIx OTAtNTAwZTc1NDUyMGRlLzAvQzE3MzI1NzE4MTBDOUQ0OTc2Q0QxQTQ3RDU1ODQ3 MjZDRjBDQzdCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALE/Xei0ZCnsTzR2hzf3IzPhUy1b244EYq6H mkcTDgfPb7poI00Cr1W1JibBenvCXjjmNdCeUaUy+z26wg/XA88l+6two/8uYfEF 22m4tuxzBdIJI8XvnqGLwHcRJpCKbz+bggDuOD6XZTbb8KHTCRq6ns7ab80QgP/c X1M2GrwuINjLpJNPh/AtzVhOhUpvHcDf1WmRWC8y8f/NS1b9WselLBG8cdFXnjSc MibGt9m5Os0bvnOCT9vcOmx6c8j/ebWY3YWFP9JI7MqDyVPiB5+ROe2+zsIMM4PJ s9MSX8surbCKds09y3cNZf5fAEQekw/rDzO1/Dja0M8e/xpM36k= -----END CERTIFICATE-----Generated at Thu Mar 26 15:49:45 2026 by rpki-client