$ rpki-client -vvf repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft File: D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft (raw, json) Hash identifier: XOgHklMjtn8OVh8OkzaI7b7Q+huwj82kwweXEX5WWFk= Subject key identifier: 0E:BF:8F:F0:20:DF:AF:73:E9:6C:AD:03:0C:26:A5:3F:1A:FF:A3:6B Authority key identifier: D2:A6:AB:CA:1E:F8:97:25:10:9C:BE:A5:D4:2E:68:3C:95:92:53:12 Certificate issuer: /CN=D2A6ABCA1EF89725109CBEA5D42E683C95925312 Certificate serial: 364B033B10581F95BFD0602B51DCD329BE97E35F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft Manifest number: 0227 Signing time: Tue 24 Mar 2026 09:31:17 +0000 Manifest this update: Tue 24 Mar 2026 09:26:17 +0000 Manifest next update: Fri 27 Mar 2026 09:57:17 +0000 Files and hashes: 1: 32372e3131322e36382e302f32342d3234203d3e203436303633.roa (hash: 6MS+hpY8AAAW2vT3UGxha7ncda+Mv46TSI1kZZNVt4E=) 2: 32372e3131322e36392e302f32342d3234203d3e203436303633.roa (hash: 2I1hpf1XM01hpFE4apAQaCDZ2SJv/6pMmkxZHdmPTWg=) 3: 32372e3131322e36362e302f32342d3234203d3e203436303633.roa (hash: aYHcfPnNR/c6q1Gn6jLMY340l5EssmEBF13l3KbonYA=) 4: 32372e3131322e36372e302f32342d3234203d3e203436303633.roa (hash: YgxXSgVa+uYH+lGkHHbZfilfnfqWJl6PwLSpZ8P3sTU=) 5: D2A6ABCA1EF89725109CBEA5D42E683C95925312.crl (hash: sVW8ky+I8fiAPEEDCYnfl94hwcy8qfEJK0PDsq3b2WQ=) 6: 32372e3131322e37312e302f32342d3234203d3e203436303633.roa (hash: CFppjbu+j9vN8xa/dDTxQelhICtYUCoA83bushfIr2o=) 7: 32372e3131322e36342e302f32342d3234203d3e203436303633.roa (hash: o9JWChuMppyDlwbbP2wl7a1BlqxO7U1pMNyySwQnepQ=) 8: 32372e3131322e37302e302f32342d3234203d3e203436303633.roa (hash: q2HyhqMcqNKr/1kOvWeC7Bv0LZJy34QkHpHUyM3pSpc=) 9: 32372e3131322e36352e302f32342d3234203d3e203436303633.roa (hash: Pkdf7SsfkpbiJuE6kdJ40FkL/ss5mA3yBuB75QVgOO8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.crl rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 09:57:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:4b:03:3b:10:58:1f:95:bf:d0:60:2b:51:dc:d3:29:be:97:e3:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2A6ABCA1EF89725109CBEA5D42E683C95925312 Validity Not Before: Mar 24 09:26:17 2026 GMT Not After : Mar 27 09:57:17 2026 GMT Subject: CN=0EBF8FF020DFAF73E96CAD030C26A53F1AFFA36B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5d:d7:5a:e3:3e:b0:8b:bf:00:22:57:b3:2f: 65:f7:20:76:e2:fc:e5:97:03:f7:4c:aa:4c:88:12: 42:9b:31:bb:52:cb:12:fe:71:3c:27:d5:5b:7d:88: 60:03:11:b7:82:5b:05:b5:04:27:bb:8e:5e:9c:22: 06:f7:42:5f:d9:9b:92:ce:e9:ac:0c:33:58:85:db: 9d:83:70:31:91:7b:a3:69:c6:f1:c3:84:ea:1e:5b: a7:4b:f7:74:34:df:cb:90:af:5e:94:92:2f:23:29: bf:68:83:b5:39:43:c4:b1:ef:b7:2c:b3:d1:3d:26: 36:7c:6d:1c:0c:93:67:83:38:5e:4b:ac:8a:35:f4: b3:68:bf:8a:a9:d1:dd:64:90:08:07:46:1f:7c:79: 5f:7b:7c:69:17:d5:c7:e1:42:0a:26:48:ab:c9:18: dd:24:2a:b2:71:1d:31:01:8a:e4:2c:ed:9b:96:23: e5:d1:9c:94:41:c5:3d:75:07:22:da:40:38:58:52: e9:e4:f2:8c:10:0c:1f:ee:9a:10:82:4e:ba:72:7c: 7d:58:da:f0:5c:03:d6:ec:50:f4:c7:3c:a3:93:d6: 94:3e:37:c3:96:50:47:63:c0:84:fb:3a:ae:be:30: 36:0f:d1:8e:06:14:6c:22:1e:61:d0:b7:a1:75:8d: 85:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:BF:8F:F0:20:DF:AF:73:E9:6C:AD:03:0C:26:A5:3F:1A:FF:A3:6B X509v3 Authority Key Identifier: keyid:D2:A6:AB:CA:1E:F8:97:25:10:9C:BE:A5:D4:2E:68:3C:95:92:53:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:7d:5e:f8:53:e6:15:62:1b:25:01:a3:71:17:89:ae:3c:95: 5c:bd:a8:78:80:bd:be:7c:8b:eb:6d:7e:e5:3e:67:12:62:43: 87:06:ea:90:ab:54:c7:cf:65:92:b4:50:78:b6:f8:f8:f2:5f: 79:6a:df:88:88:b5:a8:7f:bb:d4:2b:43:9d:37:98:c1:d6:9f: 13:f6:13:1b:ec:8f:19:6a:f3:a2:e0:7f:af:be:a4:d1:ed:74: dc:81:f4:9c:2e:3b:8c:3e:d8:a1:aa:20:38:28:53:c6:71:f3: 76:96:e8:62:fe:c4:e8:55:a7:41:8d:87:03:8e:dc:89:a2:bb: 38:be:f7:bd:21:8f:3b:63:8a:ab:a4:98:50:1e:61:51:b7:64: f5:31:0e:2b:12:96:33:d3:a1:dc:2a:75:f2:ef:42:0e:67:95: 95:05:06:38:59:4a:ba:30:5d:78:b7:55:7f:71:63:08:42:42: 97:2f:bc:93:d0:2f:8e:97:6a:76:b3:58:64:19:02:e4:c0:7c: 7b:63:c4:3c:ad:33:1d:dd:d1:9b:fc:f9:59:fe:23:ca:b1:29: 16:c5:e9:1f:ce:8d:4f:61:b4:1f:4b:c7:dc:56:80:ec:a0:96: fc:d5:24:9c:9f:6d:c5:a8:e2:7b:90:d9:82:f8:0d:66:6e:a1: 51:8c:bf:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNksDOxBYH5W/0GArUdzTKb6X418wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJBNkFCQ0ExRUY4OTcyNTEwOUNCRUE1RDQyRTY4M0M5 NTkyNTMxMjAeFw0yNjAzMjQwOTI2MTdaFw0yNjAzMjcwOTU3MTdaMDMxMTAvBgNV BAMTKDBFQkY4RkYwMjBERkFGNzNFOTZDQUQwMzBDMjZBNTNGMUFGRkEzNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqXdda4z6wi78AIlezL2X3IHbi /OWXA/dMqkyIEkKbMbtSyxL+cTwn1Vt9iGADEbeCWwW1BCe7jl6cIgb3Ql/Zm5LO 6awMM1iF252DcDGRe6NpxvHDhOoeW6dL93Q038uQr16Uki8jKb9og7U5Q8Sx77cs s9E9JjZ8bRwMk2eDOF5LrIo19LNov4qp0d1kkAgHRh98eV97fGkX1cfhQgomSKvJ GN0kKrJxHTEBiuQs7ZuWI+XRnJRBxT11ByLaQDhYUunk8owQDB/umhCCTrpyfH1Y 2vBcA9bsUPTHPKOT1pQ+N8OWUEdjwIT7Oq6+MDYP0Y4GFGwiHmHQt6F1jYVvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDr+P8CDfr3PpbK0DDCalPxr/o2swHwYDVR0j BBgwFoAU0qaryh74lyUQnL6l1C5oPJWSUxIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YWQxZTE2YS0wYTRkLTQ0YjEtOTg0NS05YzBjZDdhNmYzOGYvMC9EMkE2QUJDQTFF Rjg5NzI1MTA5Q0JFQTVENDJFNjgzQzk1OTI1MzEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDJBNkFCQ0ExRUY4OTcyNTEwOUNCRUE1RDQyRTY4M0M5NTky NTMxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWFkMWUxNmEtMGE0ZC00NGIxLTk4 NDUtOWMwY2Q3YTZmMzhmLzAvRDJBNkFCQ0ExRUY4OTcyNTEwOUNCRUE1RDQyRTY4 M0M5NTkyNTMxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADl9XvhT5hViGyUBo3EXia48lVy9qHiAvb58 i+ttfuU+ZxJiQ4cG6pCrVMfPZZK0UHi2+PjyX3lq34iItah/u9QrQ503mMHWnxP2 Exvsjxlq86Lgf6++pNHtdNyB9JwuO4w+2KGqIDgoU8Zx83aW6GL+xOhVp0GNhwOO 3Imiuzi+970hjztjiqukmFAeYVG3ZPUxDisSljPTodwqdfLvQg5nlZUFBjhZSrow XXi3VX9xYwhCQpcvvJPQL46XanazWGQZAuTAfHtjxDytMx3d0Zv8+Vn+I8qxKRbF 6R/OjU9htB9Lx9xWgOyglvzVJJyfbcWo4nuQ2YL4DWZuoVGMv6M= -----END CERTIFICATE-----Generated at Thu Mar 26 06:27:42 2026 by rpki-client