$ rpki-client -vvf repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft File: D8D82E797873C8877988A42E5C473D1919238C2A.mft (raw, json) Hash identifier: Y01kcshutj4znPzAiJ2IryEk3b6Pwa5VhQZYeUlZTYQ= Subject key identifier: 09:D3:D4:E3:1E:D9:13:EE:DA:05:D1:13:19:53:EA:62:BA:E3:7E:5F Authority key identifier: D8:D8:2E:79:78:73:C8:87:79:88:A4:2E:5C:47:3D:19:19:23:8C:2A Certificate issuer: /CN=D8D82E797873C8877988A42E5C473D1919238C2A Certificate serial: 9377AB8AB4BCACDDDA3D331B663DA26F49A4DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D8D82E797873C8877988A42E5C473D1919238C2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft Manifest number: 0163 Signing time: Thu 26 Mar 2026 08:31:00 +0000 Manifest this update: Thu 26 Mar 2026 08:26:00 +0000 Manifest next update: Sun 29 Mar 2026 11:50:00 +0000 Files and hashes: 1: D8D82E797873C8877988A42E5C473D1919238C2A.crl (hash: m7iQQahyjxkb55olHGj0WrocVUzgOH/E9sbd0la6d2s=) 2: 3135372e31352e34322e302f32342d3234203d3e20313532333635.roa (hash: D8V9Ti1MiqCoDzJ7ekoPuNqjW7Yshnj+Rr7KMkTOEU8=) 3: 3135372e31352e34332e302f32342d3234203d3e20313532333635.roa (hash: Dw31EdkkqE44eq1AnUHix9Mf5h38woQtP6BC5QCkZuA=) 4: 3135372e31352e34322e302f32332d3234203d3e20313532333635.roa (hash: qbymQcWrHfUJL/+zfay4GCgmn2N2MJnny8eN/n0IMAk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.crl rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D8D82E797873C8877988A42E5C473D1919238C2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 11:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93:77:ab:8a:b4:bc:ac:dd:da:3d:33:1b:66:3d:a2:6f:49:a4:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8D82E797873C8877988A42E5C473D1919238C2A Validity Not Before: Mar 26 08:26:00 2026 GMT Not After : Mar 29 11:50:00 2026 GMT Subject: CN=09D3D4E31ED913EEDA05D1131953EA62BAE37E5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d3:ca:2f:c6:cf:81:dd:9f:03:f9:27:73:ba: bb:ec:41:20:69:73:b6:fa:3c:1a:68:7f:38:e9:3c: 56:bb:ea:a2:4a:56:bc:bf:1a:d3:90:e1:f8:68:b1: 80:b6:4d:3b:05:e9:48:e3:46:80:86:0a:06:79:bd: d2:4a:92:33:7a:cf:c0:78:2c:5e:c7:e4:77:5d:78: 62:7c:b7:52:bd:b7:75:28:d5:1b:7a:8f:70:74:b6: c4:c4:cf:32:9c:aa:4e:95:57:18:e2:67:f7:0c:f9: cc:ab:a2:39:77:60:7d:25:b2:b9:0f:7a:fb:6c:56: c7:5e:64:b0:8f:98:83:33:fb:84:b8:20:10:b7:8e: e5:ae:87:16:ee:a3:aa:cd:32:82:60:f6:08:cf:16: 47:1f:67:05:49:06:2b:c3:a7:2c:7c:21:03:d6:10: 1e:58:84:02:6e:bf:e3:ff:f7:96:f4:2b:86:9a:7d: 5d:41:e4:cc:a7:fc:74:75:e5:ac:bb:75:da:0e:ba: 4e:a6:75:03:63:2d:5f:76:2c:82:2e:73:48:c0:84: b5:d5:42:ac:51:45:d1:e7:20:1c:a0:f2:d1:af:74: 66:74:05:15:d9:89:2c:6b:6b:97:b5:e9:62:21:5e: 1d:49:32:05:8a:8b:07:4c:93:a3:99:b7:95:18:39: 44:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:D3:D4:E3:1E:D9:13:EE:DA:05:D1:13:19:53:EA:62:BA:E3:7E:5F X509v3 Authority Key Identifier: keyid:D8:D8:2E:79:78:73:C8:87:79:88:A4:2E:5C:47:3D:19:19:23:8C:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D8D82E797873C8877988A42E5C473D1919238C2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:b9:1a:81:7a:ef:36:20:ce:45:4f:f3:62:5f:31:5f:a5:47: 78:1a:1d:47:20:70:e9:40:9d:f0:d6:10:05:a0:6d:92:14:ff: ac:eb:27:13:bc:4e:80:2d:62:11:09:d2:a2:82:81:2b:45:80: e8:4e:f9:19:d6:76:10:e0:37:0b:d6:b0:32:c0:f1:6c:ad:bc: f4:9e:73:26:31:42:9d:3d:35:f8:03:70:ac:24:ba:46:64:78: aa:f5:37:6c:e0:b9:5d:5b:c2:1a:ec:3a:df:74:62:20:67:04: 30:77:f0:a1:fd:6a:88:65:a5:6e:14:d9:fe:63:b0:7f:72:44: df:53:da:66:d4:eb:d3:d2:89:8b:ac:6f:ce:5b:48:29:41:b6: 7c:3b:43:f7:49:68:15:4b:3c:7e:d2:88:5c:08:ad:7b:b0:ae: e2:53:35:61:39:10:19:c6:3f:b9:b1:06:48:bf:d3:89:0b:08: 91:27:2f:c5:1e:fd:64:bf:9b:1a:4a:48:fc:32:f0:bf:71:48: 8e:11:9b:69:ec:22:4d:35:a5:62:c8:f5:ec:0c:42:08:55:21: 5f:24:c3:f2:99:cb:10:a9:f1:43:78:97:da:57:92:25:c8:99: 75:0e:fa:da:40:96:2b:46:d4:23:c2:40:02:32:11:11:af:1a: 8f:b9:9a:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAJN3q4q0vKzd2j0zG2Y9om9JpN0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhEODJFNzk3ODczQzg4Nzc5ODhBNDJFNUM0NzNEMTkx OTIzOEMyQTAeFw0yNjAzMjYwODI2MDBaFw0yNjAzMjkxMTUwMDBaMDMxMTAvBgNV BAMTKDA5RDNENEUzMUVEOTEzRUVEQTA1RDExMzE5NTNFQTYyQkFFMzdFNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx08ovxs+B3Z8D+SdzurvsQSBp c7b6PBpofzjpPFa76qJKVry/GtOQ4fhosYC2TTsF6UjjRoCGCgZ5vdJKkjN6z8B4 LF7H5HddeGJ8t1K9t3Uo1Rt6j3B0tsTEzzKcqk6VVxjiZ/cM+cyrojl3YH0lsrkP evtsVsdeZLCPmIMz+4S4IBC3juWuhxbuo6rNMoJg9gjPFkcfZwVJBivDpyx8IQPW EB5YhAJuv+P/95b0K4aafV1B5Myn/HR15ay7ddoOuk6mdQNjLV92LIIuc0jAhLXV QqxRRdHnIByg8tGvdGZ0BRXZiSxra5e16WIhXh1JMgWKiwdMk6OZt5UYOUSXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCdPU4x7ZE+7aBdETGVPqYrrjfl8wHwYDVR0j BBgwFoAU2NgueXhzyId5iKQuXEc9GRkjjCowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NWRlNzFhYy03ZjlmLTQ3ZDQtOTUzMy05ZGY4MmFmYzU5NzMvMC9EOEQ4MkU3OTc4 NzNDODg3Nzk4OEE0MkU1QzQ3M0QxOTE5MjM4QzJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDhEODJFNzk3ODczQzg4Nzc5ODhBNDJFNUM0NzNEMTkxOTIz OEMyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTVkZTcxYWMtN2Y5Zi00N2Q0LTk1 MzMtOWRmODJhZmM1OTczLzAvRDhEODJFNzk3ODczQzg4Nzc5ODhBNDJFNUM0NzNE MTkxOTIzOEMyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACy5GoF67zYgzkVP82JfMV+lR3gaHUcgcOlA nfDWEAWgbZIU/6zrJxO8ToAtYhEJ0qKCgStFgOhO+RnWdhDgNwvWsDLA8WytvPSe cyYxQp09NfgDcKwkukZkeKr1N2zguV1bwhrsOt90YiBnBDB38KH9aohlpW4U2f5j sH9yRN9T2mbU69PSiYusb85bSClBtnw7Q/dJaBVLPH7SiFwIrXuwruJTNWE5EBnG P7mxBki/04kLCJEnL8Ue/WS/mxpKSPwy8L9xSI4Rm2nsIk01pWLI9ewMQghVIV8k w/KZyxCp8UN4l9pXkiXImXUO+tpAlitG1CPCQAIyERGvGo+5mnc= -----END CERTIFICATE-----Generated at Thu Mar 26 16:31:38 2026 by rpki-client