$ rpki-client -vvf repo-rpki.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/C69451771D2C519C2269EA17115B3E600E9CF809.mft File: C69451771D2C519C2269EA17115B3E600E9CF809.mft (raw, json) Hash identifier: JMkpJ4ZYFoiyle5+u4YBLBywaFIBRfRtI7pF23qV90o= Subject key identifier: AA:17:5F:A8:E8:65:F6:76:5F:08:2E:D4:30:0A:10:2C:F2:A8:EA:EA Authority key identifier: C6:94:51:77:1D:2C:51:9C:22:69:EA:17:11:5B:3E:60:0E:9C:F8:09 Certificate issuer: /CN=C69451771D2C519C2269EA17115B3E600E9CF809 Certificate serial: 40674DE312CF10B4907C33900701E2F28D132427 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C69451771D2C519C2269EA17115B3E600E9CF809.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/C69451771D2C519C2269EA17115B3E600E9CF809.mft Manifest number: F7 Signing time: Wed 25 Mar 2026 15:12:37 +0000 Manifest this update: Wed 25 Mar 2026 15:07:37 +0000 Manifest next update: Sat 28 Mar 2026 20:23:37 +0000 Files and hashes: 1: C69451771D2C519C2269EA17115B3E600E9CF809.crl (hash: O1QaWsSbtDKj7TbVR8teZRqdy0P1z9/dD/KRXbljUaw=) 2: 3136302e32352e34362e302f32332d3233203d3e20313533303539.roa (hash: 3Bd79FcZzbMku5kiCcswF+pzWGDe5uW4Tc9yOqMC/ZA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/C69451771D2C519C2269EA17115B3E600E9CF809.crl rsync://repo-rpki.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/C69451771D2C519C2269EA17115B3E600E9CF809.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C69451771D2C519C2269EA17115B3E600E9CF809.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 20:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:67:4d:e3:12:cf:10:b4:90:7c:33:90:07:01:e2:f2:8d:13:24:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C69451771D2C519C2269EA17115B3E600E9CF809 Validity Not Before: Mar 25 15:07:37 2026 GMT Not After : Mar 28 20:23:37 2026 GMT Subject: CN=AA175FA8E865F6765F082ED4300A102CF2A8EAEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d3:53:6e:2c:38:4f:2c:ec:3a:dc:70:90:71: 96:46:d2:85:8c:19:da:72:e8:a9:95:f0:39:45:18: 8d:35:cb:42:a5:6e:3b:6b:bd:a3:f0:11:88:75:a5: dc:11:72:3b:df:af:fb:e6:bc:d3:e7:44:20:66:f9: fe:f8:80:83:9b:99:3f:b5:7a:a2:21:f6:d3:cb:54: 06:96:c7:75:0e:3e:74:8b:c6:5b:c9:3e:e2:b6:fb: 49:5a:f0:86:80:da:b2:d0:d2:0a:35:a8:e2:cc:ec: 83:c9:a1:02:d8:e0:d9:a1:11:c3:8c:12:85:5b:23: ba:c3:0a:08:14:f6:76:9d:1a:f8:80:6e:a8:d3:e2: bd:13:6e:3e:c7:d7:2e:5b:fa:be:b6:59:24:a4:c3: 89:f1:f0:d2:f2:c4:e3:9d:e2:68:23:97:fd:b4:96: 08:fe:43:54:87:68:69:e6:55:33:ed:35:f9:f7:1c: 5b:73:a6:fd:04:37:4e:3f:9a:df:b2:07:8f:a9:24: 45:8f:73:ff:a6:52:db:8c:31:0b:b0:97:33:81:5d: aa:1f:25:4f:dc:e1:50:c6:74:44:4d:d5:53:ef:52: cc:b0:c2:4a:13:77:98:9f:8f:46:eb:1d:a8:b8:3a: d9:0d:70:5f:05:c5:7c:60:81:dc:3c:16:be:01:5b: 67:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:17:5F:A8:E8:65:F6:76:5F:08:2E:D4:30:0A:10:2C:F2:A8:EA:EA X509v3 Authority Key Identifier: keyid:C6:94:51:77:1D:2C:51:9C:22:69:EA:17:11:5B:3E:60:0E:9C:F8:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/C69451771D2C519C2269EA17115B3E600E9CF809.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C69451771D2C519C2269EA17115B3E600E9CF809.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/C69451771D2C519C2269EA17115B3E600E9CF809.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:b6:55:a3:cb:bd:55:f4:9b:ad:b6:d7:55:cb:06:ea:b3:e8: 5f:94:e4:53:be:92:7d:0b:24:10:cb:c9:dc:90:1d:dd:aa:5b: e1:1e:40:49:6e:35:46:ac:3c:ba:d6:01:09:04:d0:18:04:b7: 32:d7:0f:32:5e:46:30:8b:4c:a0:ce:c6:1b:e5:05:45:6b:0b: 5c:da:e4:cb:64:44:e0:7c:f5:4b:ec:b9:bd:c8:02:79:e0:0d: 83:b9:e2:62:29:9c:9c:3d:97:c1:ee:c0:c8:28:b5:6e:29:42: cd:6a:c0:e9:1e:70:f4:3e:57:27:fd:c1:d9:08:d4:06:7a:8a: 0a:4e:db:ef:22:33:bf:18:de:ff:f3:da:81:6c:78:3b:ea:75: 50:ad:87:11:5b:1c:3c:14:32:2b:4a:7b:6f:fb:f5:6b:3e:a9: e8:26:eb:ba:2f:d8:a2:5c:32:ab:93:6e:e5:7b:64:91:f9:43: 44:b6:0e:fb:09:0e:a3:d0:46:a9:9b:b4:42:a0:d6:5c:d4:7c: a8:37:5b:cf:62:c8:4c:2d:62:f7:08:dc:1e:63:19:cf:9c:f9: c6:37:9d:00:86:da:2c:27:57:5c:f1:9d:63:96:01:b0:50:97: 6a:9d:9a:2b:5f:cf:cc:17:68:f8:03:22:a5:05:29:32:67:74: 61:4a:86:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQGdN4xLPELSQfDOQBwHi8o0TJCcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzY5NDUxNzcxRDJDNTE5QzIyNjlFQTE3MTE1QjNFNjAw RTlDRjgwOTAeFw0yNjAzMjUxNTA3MzdaFw0yNjAzMjgyMDIzMzdaMDMxMTAvBgNV BAMTKEFBMTc1RkE4RTg2NUY2NzY1RjA4MkVENDMwMEExMDJDRjJBOEVBRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW01NuLDhPLOw63HCQcZZG0oWM Gdpy6KmV8DlFGI01y0KlbjtrvaPwEYh1pdwRcjvfr/vmvNPnRCBm+f74gIObmT+1 eqIh9tPLVAaWx3UOPnSLxlvJPuK2+0la8IaA2rLQ0go1qOLM7IPJoQLY4NmhEcOM EoVbI7rDCggU9nadGviAbqjT4r0Tbj7H1y5b+r62WSSkw4nx8NLyxOOd4mgjl/20 lgj+Q1SHaGnmVTPtNfn3HFtzpv0EN04/mt+yB4+pJEWPc/+mUtuMMQuwlzOBXaof JU/c4VDGdERN1VPvUsywwkoTd5ifj0brHai4OtkNcF8FxXxggdw8Fr4BW2e9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqhdfqOhl9nZfCC7UMAoQLPKo6uowHwYDVR0j BBgwFoAUxpRRdx0sUZwiaeoXEVs+YA6c+AkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTE0M2ExOS0yMTdhLTQ5ZWYtOGNiMS01OTMwMTJkMmI3NTkvMC9DNjk0NTE3NzFE MkM1MTlDMjI2OUVBMTcxMTVCM0U2MDBFOUNGODA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzY5NDUxNzcxRDJDNTE5QzIyNjlFQTE3MTE1QjNFNjAwRTlD RjgwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWExNDNhMTktMjE3YS00OWVmLThj YjEtNTkzMDEyZDJiNzU5LzAvQzY5NDUxNzcxRDJDNTE5QzIyNjlFQTE3MTE1QjNF NjAwRTlDRjgwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAC2VaPLvVX0m62211XLBuqz6F+U5FO+kn0L JBDLydyQHd2qW+EeQEluNUasPLrWAQkE0BgEtzLXDzJeRjCLTKDOxhvlBUVrC1za 5MtkROB89Uvsub3IAnngDYO54mIpnJw9l8HuwMgotW4pQs1qwOkecPQ+Vyf9wdkI 1AZ6igpO2+8iM78Y3v/z2oFseDvqdVCthxFbHDwUMitKe2/79Ws+qegm67ov2KJc MquTbuV7ZJH5Q0S2DvsJDqPQRqmbtEKg1lzUfKg3W89iyEwtYvcI3B5jGc+c+cY3 nQCG2iwnV1zxnWOWAbBQl2qdmitfz8wXaPgDIqUFKTJndGFKhlg= -----END CERTIFICATE-----Generated at Thu Mar 26 19:27:57 2026 by rpki-client