$ rpki-client -vvf repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft File: DF3717861F6521730921F11365C5A826CFF24DAA.mft (raw, json) Hash identifier: FJMo9KbY5st1nyJURa8gw/qm4IpjIfnnFZwN0R7X+ZI= Subject key identifier: 6B:D6:57:11:18:C4:9E:FD:44:B1:9C:2B:21:83:BD:81:A1:B2:AA:EF Authority key identifier: DF:37:17:86:1F:65:21:73:09:21:F1:13:65:C5:A8:26:CF:F2:4D:AA Certificate issuer: /CN=DF3717861F6521730921F11365C5A826CFF24DAA Certificate serial: 22E0B6D89F5BA65E454E6F8119E76637613B00EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft Manifest number: 0168 Signing time: Tue 24 Mar 2026 21:30:00 +0000 Manifest this update: Tue 24 Mar 2026 21:25:00 +0000 Manifest next update: Sat 28 Mar 2026 08:33:00 +0000 Files and hashes: 1: 323030313a6466333a356263303a3a2f34382d3438203d3e20313532303832.roa (hash: xala12s6NGlWdt+lWB7nCyXhpdJkrQpRN4xo94j8YNU=) 2: DF3717861F6521730921F11365C5A826CFF24DAA.crl (hash: SwmlxwiWkwaVIC/BjUm+wQezUd/OmE0mMCocDOrLhuw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.crl rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 08:33:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:e0:b6:d8:9f:5b:a6:5e:45:4e:6f:81:19:e7:66:37:61:3b:00:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF3717861F6521730921F11365C5A826CFF24DAA Validity Not Before: Mar 24 21:25:00 2026 GMT Not After : Mar 28 08:33:00 2026 GMT Subject: CN=6BD6571118C49EFD44B19C2B2183BD81A1B2AAEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:dd:b2:a3:ae:76:91:a4:fa:f7:78:6e:68:a7: e0:0b:5e:a8:f1:a7:9c:b6:bc:08:ec:43:6f:b1:6b: 40:ba:e6:43:ec:1f:a6:68:51:86:c2:85:65:84:69: 5b:ff:04:ee:c1:86:2e:7b:30:6a:b9:81:ef:ce:9e: 05:5b:fb:98:e3:d3:cb:13:91:5b:65:5f:fb:7e:4b: a5:85:29:3a:88:c3:25:f4:e6:dc:4f:93:b2:fb:67: 66:20:62:c0:44:95:ed:41:20:31:5d:2a:25:0d:af: 5e:d2:68:2d:af:bd:b5:9e:9b:a4:7e:b8:83:19:1e: a0:62:d1:52:ff:b9:85:d8:44:90:74:ba:c1:85:2c: 72:2d:f2:ff:01:cc:44:81:b2:68:df:b9:3e:58:8a: 05:e1:4f:26:f1:13:ef:2d:02:e9:e0:8c:32:1c:4a: 91:0b:80:41:b3:31:a9:05:b8:4e:5a:03:b0:7a:84: 5c:e0:1a:3a:7d:ac:0e:ff:29:6b:b0:9f:1c:35:35: c3:0d:40:57:61:b1:ac:3c:90:75:f4:e5:b7:1d:1a: 2f:a8:0e:e6:52:c8:00:95:0d:11:ad:f0:c4:ba:28: 67:b0:c9:31:dc:52:c1:e6:19:76:e4:7a:8c:d8:73: 34:36:d6:4b:af:cc:38:85:f4:0b:33:8b:b0:9d:e6: a7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:D6:57:11:18:C4:9E:FD:44:B1:9C:2B:21:83:BD:81:A1:B2:AA:EF X509v3 Authority Key Identifier: keyid:DF:37:17:86:1F:65:21:73:09:21:F1:13:65:C5:A8:26:CF:F2:4D:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:14:ad:fa:55:4e:28:9f:05:2a:30:8b:3f:6c:b8:23:d4:31: 82:6e:0a:a9:94:74:a5:59:17:3d:df:25:95:18:51:fd:9f:cc: be:7a:04:1e:99:dd:54:60:bf:3a:bd:21:8b:1d:88:99:83:ed: 83:df:0d:e6:8c:9c:32:60:e0:30:8a:3b:38:5c:44:01:b6:ac: 82:cf:6e:60:3d:50:5e:44:22:79:46:22:0e:46:95:3b:36:2c: bc:05:b1:28:5a:86:c9:94:3b:c9:a5:86:bf:45:9d:2c:e7:75: 88:90:16:48:74:8c:e6:83:31:c7:a3:0d:46:db:c9:6c:1c:ca: 39:62:0e:06:e2:1c:4d:47:66:58:91:47:1c:fb:e4:2d:0b:f2: d1:e8:9e:c2:93:25:6f:d5:c0:af:ad:32:f7:ca:13:c1:7a:70: 4c:97:e5:8c:1f:68:55:f1:48:95:3f:4c:6d:f8:b9:42:0b:8a: fb:7e:4b:c6:02:15:3d:e8:84:e6:f5:8f:f1:c8:55:b0:80:6d: f3:26:2b:60:4a:eb:b9:2a:23:e4:ab:f0:b9:d1:0c:73:e2:7d: 73:06:d6:70:b3:f2:2f:9b:87:30:13:e5:a0:53:1b:69:1d:ec: 11:60:1e:c7:bf:22:87:bd:9c:b9:58:2a:0c:e4:b6:51:46:4e: aa:2a:24:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIuC22J9bpl5FTm+BGedmN2E7AO4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4MjZD RkYyNERBQTAeFw0yNjAzMjQyMTI1MDBaFw0yNjAzMjgwODMzMDBaMDMxMTAvBgNV BAMTKDZCRDY1NzExMThDNDlFRkQ0NEIxOUMyQjIxODNCRDgxQTFCMkFBRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt3bKjrnaRpPr3eG5op+ALXqjx p5y2vAjsQ2+xa0C65kPsH6ZoUYbChWWEaVv/BO7Bhi57MGq5ge/OngVb+5jj08sT kVtlX/t+S6WFKTqIwyX05txPk7L7Z2YgYsBEle1BIDFdKiUNr17SaC2vvbWem6R+ uIMZHqBi0VL/uYXYRJB0usGFLHIt8v8BzESBsmjfuT5YigXhTybxE+8tAungjDIc SpELgEGzMakFuE5aA7B6hFzgGjp9rA7/KWuwnxw1NcMNQFdhsaw8kHX05bcdGi+o DuZSyACVDRGt8MS6KGewyTHcUsHmGXbkeozYczQ21kuvzDiF9Aszi7Cd5qcJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa9ZXERjEnv1EsZwrIYO9gaGyqu8wHwYDVR0j BBgwFoAU3zcXhh9lIXMJIfETZcWoJs/yTaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NDdjZDVhMi1hNzQyLTQ1MGMtYjE5MC01MDBlNzU0NTIwZGUvMS9ERjM3MTc4NjFG NjUyMTczMDkyMUYxMTM2NUM1QTgyNkNGRjI0REFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4MjZDRkYy NERBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTQ3Y2Q1YTItYTc0Mi00NTBjLWIx OTAtNTAwZTc1NDUyMGRlLzEvREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4 MjZDRkYyNERBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIQUrfpVTiifBSowiz9suCPUMYJuCqmUdKVZ Fz3fJZUYUf2fzL56BB6Z3VRgvzq9IYsdiJmD7YPfDeaMnDJg4DCKOzhcRAG2rILP bmA9UF5EInlGIg5GlTs2LLwFsShahsmUO8mlhr9FnSzndYiQFkh0jOaDMcejDUbb yWwcyjliDgbiHE1HZliRRxz75C0L8tHonsKTJW/VwK+tMvfKE8F6cEyX5YwfaFXx SJU/TG34uUILivt+S8YCFT3ohOb1j/HIVbCAbfMmK2BK67kqI+Sr8LnRDHPifXMG 1nCz8i+bhzAT5aBTG2kd7BFgHse/Ioe9nLlYKgzktlFGTqoqJEs= -----END CERTIFICATE-----Generated at Thu Mar 26 12:24:07 2026 by rpki-client