$ rpki-client -vvf repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft File: D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft (raw, json) Hash identifier: KmledljgjlTm+2O30RMB7wPNQCxTpbmPifKTRth1HZs= Subject key identifier: 24:EE:DA:7B:9F:B5:6C:08:BB:4B:4F:3A:ED:89:53:FE:5D:9A:AE:C3 Authority key identifier: D1:F7:2E:67:DA:9C:CE:09:04:4F:A4:20:4E:A9:93:AE:93:D1:96:D6 Certificate issuer: /CN=D1F72E67DA9CCE09044FA4204EA993AE93D196D6 Certificate serial: 2631D3D18671F1ADC723BBCD7CFB38884A09E55E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft Manifest number: 018F Signing time: Thu 26 Mar 2026 00:31:12 +0000 Manifest this update: Thu 26 Mar 2026 00:26:12 +0000 Manifest next update: Sun 29 Mar 2026 08:26:12 +0000 Files and hashes: 1: 3130332e3138322e37382e302f32342d3234203d3e20313439363635.roa (hash: s6lpSYDLHcgmFHxHmbb72jfjvgtX6lm1gyGqU1Y9OXI=) 2: 3130332e3138322e37382e302f32332d3234203d3e20313439363635.roa (hash: HfCkgcqYe6YVGCjk05IbdJZUy6qogHTICufKiiFTmEk=) 3: 3130332e3138322e37392e302f32342d3234203d3e20313439363635.roa (hash: 6QOkAmqGiGRSbivZx0unIqegpMeo8pm4RaGUZUWR5xc=) 4: D1F72E67DA9CCE09044FA4204EA993AE93D196D6.crl (hash: gHSCFdYMSVf4+l1RuPCbo4sPOLpz8Cn7CL0x2oytfP0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.crl rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 08:26:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:31:d3:d1:86:71:f1:ad:c7:23:bb:cd:7c:fb:38:88:4a:09:e5:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1F72E67DA9CCE09044FA4204EA993AE93D196D6 Validity Not Before: Mar 26 00:26:12 2026 GMT Not After : Mar 29 08:26:12 2026 GMT Subject: CN=24EEDA7B9FB56C08BB4B4F3AED8953FE5D9AAEC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:53:70:c0:1a:c8:01:2b:40:71:5a:78:7b:91: 81:06:61:29:db:37:b8:d3:f2:54:b6:40:c0:62:97: 41:bd:50:33:ba:48:26:0d:02:f0:56:16:4d:03:e4: 70:53:6b:49:6e:13:84:51:e1:0a:d6:6a:c1:24:57: 84:27:f7:8c:d9:45:39:6f:6a:d3:74:d1:0c:65:b8: 14:f7:ce:23:5a:29:5d:fc:4a:ce:01:22:04:83:cd: d5:2b:18:a0:37:83:7b:60:69:d6:38:ac:a6:ee:05: 2c:0e:77:08:fe:f1:c8:90:bd:c1:4e:31:36:eb:19: bd:6a:71:6f:bf:96:8d:00:e6:6b:f6:c3:04:ab:e3: b4:b4:a5:f4:ea:6d:08:e8:29:36:8f:6d:66:28:a3: 2e:0d:cf:76:52:fe:cc:eb:7a:4c:7e:e7:af:ea:63: 15:40:c1:69:13:85:65:cf:61:db:1c:d5:f7:50:2e: 8e:64:bc:44:46:71:97:9d:c9:81:ec:fa:a7:8d:c3: 4b:30:d7:b4:e5:78:ad:2e:78:a2:f3:56:3e:2b:52: 57:ae:6b:45:95:84:91:3e:9c:fe:95:c9:ca:73:e0: c3:bf:14:60:c6:4d:27:6b:c7:f5:9c:71:fb:66:75: a9:d7:d1:22:8d:db:b5:e2:4c:26:c0:20:17:6f:5b: 52:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:EE:DA:7B:9F:B5:6C:08:BB:4B:4F:3A:ED:89:53:FE:5D:9A:AE:C3 X509v3 Authority Key Identifier: keyid:D1:F7:2E:67:DA:9C:CE:09:04:4F:A4:20:4E:A9:93:AE:93:D1:96:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:96:22:09:89:cc:fc:e7:c5:b9:b3:45:c8:fe:18:50:7f:f0: ab:a8:72:69:5c:85:1b:31:bf:7b:ad:19:7e:98:bb:de:34:62: 6a:0f:0d:35:aa:61:24:96:f1:40:37:9c:ae:a5:fa:54:21:dc: 3b:e2:6d:b4:45:5f:67:02:2d:2b:59:bf:82:c4:79:2a:81:39: 2c:c0:29:bb:68:84:bb:a4:96:ba:70:bb:95:77:99:c6:1f:6d: 13:62:c4:82:3e:ed:b6:bd:87:b6:f6:fd:77:42:da:a9:08:de: d5:8a:92:f5:db:b1:a0:c6:0d:af:c3:8e:66:c0:06:29:09:ae: fc:c4:db:be:8c:fc:99:80:68:56:ad:d7:93:57:4f:85:89:a9: 83:d3:fd:d4:c8:9b:e5:8e:de:81:57:84:71:dc:e7:8d:ef:ae: a8:3e:55:87:35:15:e4:14:5a:32:9d:66:3e:87:1a:7d:c9:0a: 95:a8:17:62:92:ac:cb:f3:21:9a:bd:17:3d:54:48:56:06:67: 3f:8c:f3:6a:75:71:60:88:2f:62:46:87:47:bb:6a:21:c5:dd: 68:15:d5:2a:af:84:42:48:f3:e5:c3:79:f4:1d:f4:d8:36:65: 43:59:61:fd:ad:d9:e2:30:45:90:c1:f2:c6:c7:45:de:21:d7: f8:b6:a1:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJjHT0YZx8a3HI7vNfPs4iEoJ5V4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFGNzJFNjdEQTlDQ0UwOTA0NEZBNDIwNEVBOTkzQUU5 M0QxOTZENjAeFw0yNjAzMjYwMDI2MTJaFw0yNjAzMjkwODI2MTJaMDMxMTAvBgNV BAMTKDI0RUVEQTdCOUZCNTZDMDhCQjRCNEYzQUVEODk1M0ZFNUQ5QUFFQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+U3DAGsgBK0BxWnh7kYEGYSnb N7jT8lS2QMBil0G9UDO6SCYNAvBWFk0D5HBTa0luE4RR4QrWasEkV4Qn94zZRTlv atN00QxluBT3ziNaKV38Ss4BIgSDzdUrGKA3g3tgadY4rKbuBSwOdwj+8ciQvcFO MTbrGb1qcW+/lo0A5mv2wwSr47S0pfTqbQjoKTaPbWYooy4Nz3ZS/szrekx+56/q YxVAwWkThWXPYdsc1fdQLo5kvERGcZedyYHs+qeNw0sw17TleK0ueKLzVj4rUleu a0WVhJE+nP6Vycpz4MO/FGDGTSdrx/WccftmdanX0SKN27XiTCbAIBdvW1J3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJO7ae5+1bAi7S0867YlT/l2arsMwHwYDVR0j BBgwFoAU0fcuZ9qczgkET6QgTqmTrpPRltYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzRjMzNiOC05ZDQyLTQyMDgtOGFjNC1mMTcyYTE0NGQ4NjgvMC9EMUY3MkU2N0RB OUNDRTA5MDQ0RkE0MjA0RUE5OTNBRTkzRDE5NkQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFGNzJFNjdEQTlDQ0UwOTA0NEZBNDIwNEVBOTkzQUU5M0Qx OTZENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjM0YzMzYjgtOWQ0Mi00MjA4LThh YzQtZjE3MmExNDRkODY4LzAvRDFGNzJFNjdEQTlDQ0UwOTA0NEZBNDIwNEVBOTkz QUU5M0QxOTZENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABeWIgmJzPznxbmzRcj+GFB/8KuocmlchRsx v3utGX6Yu940YmoPDTWqYSSW8UA3nK6l+lQh3DvibbRFX2cCLStZv4LEeSqBOSzA KbtohLuklrpwu5V3mcYfbRNixII+7ba9h7b2/XdC2qkI3tWKkvXbsaDGDa/DjmbA BikJrvzE276M/JmAaFat15NXT4WJqYPT/dTIm+WO3oFXhHHc543vrqg+VYc1FeQU WjKdZj6HGn3JCpWoF2KSrMvzIZq9Fz1USFYGZz+M82p1cWCIL2JGh0e7aiHF3WgV 1SqvhEJI8+XDefQd9Ng2ZUNZYf2t2eIwRZDB8sbHRd4h1/i2oYA= -----END CERTIFICATE-----Generated at Thu Mar 26 21:25:23 2026 by rpki-client