$ rpki-client -vvf repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft File: D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft (raw, json) Hash identifier: 3+KqcgTmkrF66nkh27wNzBjNHWIX7wCLgINjmgxYEb4= Subject key identifier: E9:41:E0:68:D8:C0:B4:9A:B4:27:C5:77:96:31:72:34:AF:DA:44:80 Authority key identifier: D4:68:8B:55:FB:8C:00:F6:AE:C2:84:E5:BC:B8:1E:22:7C:51:2D:ED Certificate issuer: /CN=D4688B55FB8C00F6AEC284E5BCB81E227C512DED Certificate serial: 1BF791541CF7F0CA61DBC3D0B70D9CBCE17A91CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft Manifest number: D6 Signing time: Tue 24 Mar 2026 11:01:35 +0000 Manifest this update: Tue 24 Mar 2026 10:56:35 +0000 Manifest next update: Fri 27 Mar 2026 21:06:35 +0000 Files and hashes: 1: D4688B55FB8C00F6AEC284E5BCB81E227C512DED.crl (hash: Gb7oWliwJwx4dDfkWOkxkXaXd6oJREJmW3QvRAUKidA=) 2: 3135372e32302e3133322e302f32342d3234203d3e20313532343033.roa (hash: NWPdpnzjvUkWFT639EpYBF/gai4l8goVCGsjws+hbv0=) 3: 3135372e32302e3133322e302f32332d3233203d3e20313532343033.roa (hash: amumi/WYE2A4FB3wGrZMgKCqFZMIGROo7mRPUcV+x9E=) 4: 3135372e32302e3133332e302f32342d3234203d3e20313532343033.roa (hash: j2jeNWrMnOWA3HVjk7O9Qz3LOhi+j72z4nmZQhM1gNs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.crl rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 21:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:f7:91:54:1c:f7:f0:ca:61:db:c3:d0:b7:0d:9c:bc:e1:7a:91:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4688B55FB8C00F6AEC284E5BCB81E227C512DED Validity Not Before: Mar 24 10:56:35 2026 GMT Not After : Mar 27 21:06:35 2026 GMT Subject: CN=E941E068D8C0B49AB427C57796317234AFDA4480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3e:e2:a2:40:e9:9e:52:c4:73:3a:95:98:d1: 09:52:eb:8e:a9:ec:c7:c1:41:f8:6a:cf:5d:fc:c7: 08:f4:29:2e:de:a5:cf:14:35:c1:f3:1a:8b:66:20: 5a:45:53:ae:d1:96:ca:3b:f8:a8:60:65:1a:d2:29: 43:06:a3:7c:7b:b4:26:55:ac:c7:e3:93:75:bc:27: 95:0f:da:10:c2:af:79:e3:94:13:8c:6f:7a:60:4b: 82:33:82:6e:dd:0c:3e:f9:66:d7:a6:d3:a3:d8:dc: 88:98:33:ea:f4:4d:0a:13:81:2e:26:91:53:e2:80: 95:bd:30:b8:fe:43:5a:dc:bd:33:17:e6:5c:41:a3: 7e:a4:0b:36:7f:8d:09:84:1c:a0:fa:04:26:fa:01: 15:44:ff:7b:60:30:ea:3a:e2:4f:f2:c6:b2:73:ca: d8:b0:37:65:4e:d3:61:b2:34:00:13:40:a7:10:9d: dc:0a:4d:fd:d6:26:21:b6:ef:6b:0d:f2:b9:9b:55: 5d:8a:5f:40:a8:5a:22:7c:4e:37:6e:00:7e:94:12: 79:7d:59:c4:72:ec:24:31:ec:cd:0a:9c:8e:00:45: a2:6e:6b:54:ab:25:b7:d7:4f:fc:0f:1c:10:dc:60: 36:6b:98:35:13:b9:c3:b9:1d:e6:6f:28:96:8c:25: 07:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:41:E0:68:D8:C0:B4:9A:B4:27:C5:77:96:31:72:34:AF:DA:44:80 X509v3 Authority Key Identifier: keyid:D4:68:8B:55:FB:8C:00:F6:AE:C2:84:E5:BC:B8:1E:22:7C:51:2D:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:1f:e6:d0:2b:53:3e:97:7b:8c:16:42:55:61:2d:26:2c:32: 67:2f:cc:0b:3e:74:55:cf:32:91:82:be:a3:20:a7:ff:33:d5: ae:0b:1a:ea:a2:ea:53:26:9f:07:a7:03:6a:21:34:c4:c1:4c: 30:e0:cb:06:da:95:af:24:22:bc:c4:79:c2:ea:ba:27:96:49: d6:83:3d:71:6a:7f:fa:6e:c5:76:52:19:df:4c:53:4d:83:9b: 67:58:04:f2:eb:8a:85:14:d5:e7:7a:94:9b:15:6d:d0:7a:99: ab:8e:93:83:b1:13:5f:25:e3:a3:0c:12:8b:f0:29:1b:bf:46: 01:6e:b8:c9:0e:ab:bd:b1:fd:26:51:7a:fb:85:03:03:a2:55: 05:74:66:0e:a6:0d:12:9d:0f:ff:bc:51:ae:e2:12:11:e0:50: 32:97:0f:d0:11:75:4b:dd:17:a2:3a:11:7a:49:f9:62:f7:60: 8c:cb:09:58:95:38:e1:12:51:42:89:fe:0a:87:32:e3:75:ca: fc:ce:f5:f1:fd:0f:f4:c1:3b:99:f7:2f:7c:e2:d6:ab:f7:b4: 7e:23:ce:8e:ee:2a:75:2c:5f:bb:a7:28:90:7c:f3:9a:62:cb: 15:d4:50:52:57:d1:ec:19:59:ea:5b:cd:66:b1:0a:81:5e:bc: f5:68:e8:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG/eRVBz38Mph28PQtw2cvOF6kc0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ2ODhCNTVGQjhDMDBGNkFFQzI4NEU1QkNCODFFMjI3 QzUxMkRFRDAeFw0yNjAzMjQxMDU2MzVaFw0yNjAzMjcyMTA2MzVaMDMxMTAvBgNV BAMTKEU5NDFFMDY4RDhDMEI0OUFCNDI3QzU3Nzk2MzE3MjM0QUZEQTQ0ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJPuKiQOmeUsRzOpWY0QlS646p 7MfBQfhqz138xwj0KS7epc8UNcHzGotmIFpFU67Rlso7+KhgZRrSKUMGo3x7tCZV rMfjk3W8J5UP2hDCr3njlBOMb3pgS4Izgm7dDD75Ztem06PY3IiYM+r0TQoTgS4m kVPigJW9MLj+Q1rcvTMX5lxBo36kCzZ/jQmEHKD6BCb6ARVE/3tgMOo64k/yxrJz ytiwN2VO02GyNAATQKcQndwKTf3WJiG272sN8rmbVV2KX0CoWiJ8TjduAH6UEnl9 WcRy7CQx7M0KnI4ARaJua1SrJbfXT/wPHBDcYDZrmDUTucO5HeZvKJaMJQdjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6UHgaNjAtJq0J8V3ljFyNK/aRIAwHwYDVR0j BBgwFoAU1GiLVfuMAPauwoTlvLgeInxRLe0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OWMxNWI3OC0yMDcxLTQ0ZDEtOWExZC1hZDZlYjA5ZmFlMDgvMC9ENDY4OEI1NUZC OEMwMEY2QUVDMjg0RTVCQ0I4MUUyMjdDNTEyREVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDQ2ODhCNTVGQjhDMDBGNkFFQzI4NEU1QkNCODFFMjI3QzUx MkRFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTljMTViNzgtMjA3MS00NGQxLTlh MWQtYWQ2ZWIwOWZhZTA4LzAvRDQ2ODhCNTVGQjhDMDBGNkFFQzI4NEU1QkNCODFF MjI3QzUxMkRFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFwf5tArUz6Xe4wWQlVhLSYsMmcvzAs+dFXP MpGCvqMgp/8z1a4LGuqi6lMmnwenA2ohNMTBTDDgywbala8kIrzEecLquieWSdaD PXFqf/puxXZSGd9MU02Dm2dYBPLrioUU1ed6lJsVbdB6mauOk4OxE18l46MMEovw KRu/RgFuuMkOq72x/SZRevuFAwOiVQV0Zg6mDRKdD/+8Ua7iEhHgUDKXD9ARdUvd F6I6EXpJ+WL3YIzLCViVOOESUUKJ/gqHMuN1yvzO9fH9D/TBO5n3L3zi1qv3tH4j zo7uKnUsX7unKJB885piyxXUUFJX0ewZWepbzWaxCoFevPVo6C0= -----END CERTIFICATE-----Generated at Thu Mar 26 14:37:41 2026 by rpki-client