$ rpki-client -vvf repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft File: 2370B87417B78EB4410F4394F29FB327D1401F0D.mft (raw, json) Hash identifier: 5oK+bI0odo5EBjpcxUlThsB05tmnfl+1qF2RYUqC+is= Subject key identifier: 81:4A:7A:A8:43:27:93:8B:0D:C0:11:48:4B:D7:9C:AC:2B:27:38:6D Authority key identifier: 23:70:B8:74:17:B7:8E:B4:41:0F:43:94:F2:9F:B3:27:D1:40:1F:0D Certificate issuer: /CN=2370B87417B78EB4410F4394F29FB327D1401F0D Certificate serial: 53076CF5424317ABC4F15F1B130E9716A14A2E2F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft Manifest number: 0224 Signing time: Wed 25 Mar 2026 17:42:00 +0000 Manifest this update: Wed 25 Mar 2026 17:37:00 +0000 Manifest next update: Sat 28 Mar 2026 19:31:00 +0000 Files and hashes: 1: 2370B87417B78EB4410F4394F29FB327D1401F0D.crl (hash: 8w4oiE8UhaUIjrSRHEGl2vWvm1DmHabl/8tu9apHnG8=) 2: 3130332e32362e3137362e302f32332d3234203d3e203538383231.roa (hash: ZMf4hqz32o6JWeuknkypuSEYiicMrl6BzPzDdk4JbqY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.crl rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 19:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:07:6c:f5:42:43:17:ab:c4:f1:5f:1b:13:0e:97:16:a1:4a:2e:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2370B87417B78EB4410F4394F29FB327D1401F0D Validity Not Before: Mar 25 17:37:00 2026 GMT Not After : Mar 28 19:31:00 2026 GMT Subject: CN=814A7AA84327938B0DC011484BD79CAC2B27386D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0e:49:71:df:a5:51:7a:e2:51:86:f4:9c:bf: 58:9d:52:b1:95:9c:08:00:d9:38:63:21:ab:f2:3d: 25:fa:44:f6:48:75:92:70:6f:79:54:af:90:19:09: e1:18:bd:d9:c1:cd:6a:b3:b2:11:06:6a:d6:43:24: 50:9f:64:08:36:16:ef:ea:76:58:fa:19:15:ca:16: 15:64:7f:83:53:d1:85:87:0c:f6:72:14:bd:25:03: 8a:e9:3d:a5:d6:25:d3:7a:df:4f:13:fd:bc:fc:31: 3d:1f:6e:64:ec:d2:81:08:20:87:48:c4:ce:6d:34: 46:99:4c:74:99:a2:1a:fe:72:1f:d3:a7:c8:8e:9b: 12:b6:82:43:c9:18:88:8b:03:34:d2:ff:b9:dd:10: 9d:76:50:a2:5b:5e:98:46:18:7b:07:25:14:d7:67: 5e:21:94:c1:c2:2b:05:3e:04:71:d6:2b:42:f9:42: 1e:8a:2b:0d:bb:30:65:bb:3c:fe:ed:f0:26:f4:fc: c6:9f:ba:c7:4e:3f:2b:75:04:98:2b:23:d9:f9:a1: 6d:58:1a:69:b7:b1:e0:3f:3b:94:7f:8a:35:67:d1: 1b:6b:9c:ba:11:53:d3:f4:1e:24:f3:fb:96:dd:28: 71:42:44:12:de:04:a1:49:c0:55:3b:2d:c6:2d:0f: c5:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:4A:7A:A8:43:27:93:8B:0D:C0:11:48:4B:D7:9C:AC:2B:27:38:6D X509v3 Authority Key Identifier: keyid:23:70:B8:74:17:B7:8E:B4:41:0F:43:94:F2:9F:B3:27:D1:40:1F:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:fd:0e:94:31:25:60:76:a1:b1:25:3b:14:70:e2:67:45:bc: c3:f7:3f:d5:33:e1:4f:b7:ec:b9:bc:bf:6b:e2:5f:89:92:47: 62:61:69:af:36:ae:23:01:1e:32:7d:d2:7f:c7:2a:83:ff:96: 8a:0a:b6:48:1f:8f:59:8a:6e:e0:f6:f7:5d:41:79:eb:65:ab: 14:01:92:06:32:5c:a6:bf:1e:71:9f:af:f1:85:eb:cc:2b:14: fb:8f:f7:dd:b0:dd:9e:0b:80:b9:72:8f:95:cb:04:bb:75:75: a8:eb:36:f3:ff:b2:a9:b7:5a:cb:21:16:c3:92:a1:d1:eb:a3: 85:75:64:d0:cd:1f:2d:2a:bb:c5:bb:e2:d9:e1:b0:0b:4c:1a: 17:e2:7a:a0:30:6f:4e:3c:2d:dd:9f:ee:aa:02:ac:5c:af:8e: 5c:b1:e5:dc:fb:1d:4d:dd:de:fe:3d:c5:04:a4:dc:eb:b4:0c: 47:04:72:02:3c:6a:31:d2:12:11:dc:35:1a:ab:5d:83:29:41: f6:89:16:65:e4:77:fb:d6:7a:4e:4f:df:5e:3a:cd:de:99:85: 07:0c:34:4a:16:d4:91:61:64:7e:cb:da:62:f2:3f:92:fb:0e: f7:bf:fa:42:9a:ce:6d:a1:99:c7:34:2f:24:eb:b8:13:d6:4c: 35:ee:e3:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUwds9UJDF6vE8V8bEw6XFqFKLi8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIzMjdE MTQwMUYwRDAeFw0yNjAzMjUxNzM3MDBaFw0yNjAzMjgxOTMxMDBaMDMxMTAvBgNV BAMTKDgxNEE3QUE4NDMyNzkzOEIwREMwMTE0ODRCRDc5Q0FDMkIyNzM4NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtDklx36VReuJRhvScv1idUrGV nAgA2ThjIavyPSX6RPZIdZJwb3lUr5AZCeEYvdnBzWqzshEGatZDJFCfZAg2Fu/q dlj6GRXKFhVkf4NT0YWHDPZyFL0lA4rpPaXWJdN6308T/bz8MT0fbmTs0oEIIIdI xM5tNEaZTHSZohr+ch/Tp8iOmxK2gkPJGIiLAzTS/7ndEJ12UKJbXphGGHsHJRTX Z14hlMHCKwU+BHHWK0L5Qh6KKw27MGW7PP7t8Cb0/MafusdOPyt1BJgrI9n5oW1Y Gmm3seA/O5R/ijVn0RtrnLoRU9P0HiTz+5bdKHFCRBLeBKFJwFU7LcYtD8U3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgUp6qEMnk4sNwBFIS9ecrCsnOG0wHwYDVR0j BBgwFoAUI3C4dBe3jrRBD0OU8p+zJ9FAHw0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NzRkMGJmOS1jYzlhLTQyYTMtODMwYS03NmY2ZDMyYjJmNDUvMC8yMzcwQjg3NDE3 Qjc4RUI0NDEwRjQzOTRGMjlGQjMyN0QxNDAxRjBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIzMjdEMTQw MUYwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTc0ZDBiZjktY2M5YS00MmEzLTgz MGEtNzZmNmQzMmIyZjQ1LzAvMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIz MjdEMTQwMUYwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHH9DpQxJWB2obElOxRw4mdFvMP3P9Uz4U+3 7Lm8v2viX4mSR2Jhaa82riMBHjJ90n/HKoP/looKtkgfj1mKbuD2911BeetlqxQB kgYyXKa/HnGfr/GF68wrFPuP992w3Z4LgLlyj5XLBLt1dajrNvP/sqm3WsshFsOS odHro4V1ZNDNHy0qu8W74tnhsAtMGhfieqAwb048Ld2f7qoCrFyvjlyx5dz7HU3d 3v49xQSk3Ou0DEcEcgI8ajHSEhHcNRqrXYMpQfaJFmXkd/vWek5P3146zd6ZhQcM NEoW1JFhZH7L2mLyP5L7Dve/+kKazm2hmcc0LyTruBPWTDXu42E= -----END CERTIFICATE-----Generated at Thu Mar 26 17:23:06 2026 by rpki-client