$ rpki-client -vvf repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft File: B392381083372148D0977D0066CFF38FD5A32CDB.mft (raw, json) Hash identifier: TIxEj9x5/7sJDNAcND9RwgtJUU4YwlKo4JuoGxsam+U= Subject key identifier: C9:EA:88:02:FE:49:70:DB:73:C8:79:4A:4B:0E:6B:2E:79:55:25:85 Authority key identifier: B3:92:38:10:83:37:21:48:D0:97:7D:00:66:CF:F3:8F:D5:A3:2C:DB Certificate issuer: /CN=B392381083372148D0977D0066CFF38FD5A32CDB Certificate serial: 44284429F68A8452A176B375C478CA5D203447E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B392381083372148D0977D0066CFF38FD5A32CDB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft Manifest number: 0285 Signing time: Wed 18 Mar 2026 00:12:19 +0000 Manifest this update: Wed 18 Mar 2026 00:07:19 +0000 Manifest next update: Sat 21 Mar 2026 06:54:19 +0000 Files and hashes: 1: B392381083372148D0977D0066CFF38FD5A32CDB.crl (hash: sI+cF677i2GF7dFz2Gb77RblMFEsZxInfcVMHULDxGk=) 2: 3130332e3138352e38322e302f32332d3234203d3e203538383230.roa (hash: KYSy/nRpWJvgJOx3JwwIgJ7/nxfWqKSbFEYRVqxBqWw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.crl rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B392381083372148D0977D0066CFF38FD5A32CDB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 06:54:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:28:44:29:f6:8a:84:52:a1:76:b3:75:c4:78:ca:5d:20:34:47:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B392381083372148D0977D0066CFF38FD5A32CDB Validity Not Before: Mar 18 00:07:19 2026 GMT Not After : Mar 21 06:54:19 2026 GMT Subject: CN=C9EA8802FE4970DB73C8794A4B0E6B2E79552585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:23:89:56:fd:fc:2e:48:49:25:b2:9d:3e:d4: f7:d0:6b:db:96:9f:4d:48:87:22:b2:33:87:1f:55: 0d:a0:06:3a:4d:9b:fd:a9:f6:98:f2:82:ca:48:cf: d4:0f:05:e8:ad:37:47:d1:8b:e5:28:eb:cb:64:b8: 28:a2:2d:e4:80:0a:a2:8c:99:23:91:61:4c:fd:9a: 53:10:75:86:dc:0e:af:b8:6d:00:4b:16:8d:95:50: 79:e8:99:c2:c2:ad:ba:c2:0d:c4:71:4b:1e:d3:9e: 08:6d:81:02:95:cb:43:ee:19:2e:db:ee:ed:51:53: cd:64:d4:7c:87:95:50:2d:8f:41:f5:2a:fb:c2:d8: c4:a3:81:fe:3b:8d:41:8c:c0:79:2b:51:be:2f:d2: 2b:5e:ea:75:8c:27:7d:ec:5a:6c:98:12:d6:7c:6d: e0:cf:53:e7:c2:aa:7f:af:f7:18:1c:2f:37:28:24: 7f:91:2d:61:03:08:3e:51:6e:ba:25:0f:48:e8:ce: 24:3c:f5:77:fc:d7:13:5b:a9:3b:47:2a:7c:ac:05: 18:ff:73:5f:37:ed:39:76:4a:d0:87:44:8e:83:8e: 46:48:47:c0:78:be:31:89:0f:00:8c:67:ff:dc:94: 84:30:31:86:59:8a:60:65:83:39:af:65:39:58:23: 54:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:EA:88:02:FE:49:70:DB:73:C8:79:4A:4B:0E:6B:2E:79:55:25:85 X509v3 Authority Key Identifier: keyid:B3:92:38:10:83:37:21:48:D0:97:7D:00:66:CF:F3:8F:D5:A3:2C:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B392381083372148D0977D0066CFF38FD5A32CDB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:6c:de:32:21:fa:f9:b4:e2:88:47:e2:a8:40:17:b7:01:bb: 82:00:7f:d9:07:ae:35:58:b5:f4:f8:98:a5:76:a8:29:c1:4c: 63:88:f4:65:1b:22:95:39:56:84:38:03:bf:2c:32:82:46:21: 1c:90:8f:7d:21:b4:8a:4c:a9:c1:7a:01:88:f6:8a:12:35:bb: db:2d:2c:62:07:f0:17:0e:7b:fa:ba:17:7b:e9:16:43:8e:f4: fe:a6:c3:41:13:fa:40:ce:bd:7c:44:ae:f2:44:7a:a4:05:22: 22:fd:3d:ac:b9:fe:53:ff:3a:8e:50:11:6a:04:d7:0f:12:c6: 0d:ee:d0:10:6e:61:cc:2f:9a:ea:fe:91:92:87:f2:5b:27:17: 0d:df:91:6e:19:5b:b1:cd:80:c8:c5:58:be:f8:84:99:65:21: 36:9c:2a:18:e3:24:06:d1:22:89:6b:45:ff:29:30:c3:0d:c5: 17:23:5b:1b:a2:b0:ce:ca:bc:4b:ad:3a:f6:a1:19:1d:cc:c2: c5:98:71:fa:ff:7f:69:76:04:07:31:57:dc:7d:cf:90:5e:7e: 09:70:73:39:e0:31:65:43:c6:cd:c2:fe:a5:4a:55:6e:15:cb: 3b:ef:7a:b5:d3:52:2c:59:4b:fc:f7:9c:4b:4b:69:73:cb:74: 82:83:a2:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURChEKfaKhFKhdrN1xHjKXSA0R+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM5MjM4MTA4MzM3MjE0OEQwOTc3RDAwNjZDRkYzOEZE NUEzMkNEQjAeFw0yNjAzMTgwMDA3MTlaFw0yNjAzMjEwNjU0MTlaMDMxMTAvBgNV BAMTKEM5RUE4ODAyRkU0OTcwREI3M0M4Nzk0QTRCMEU2QjJFNzk1NTI1ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLI4lW/fwuSEklsp0+1PfQa9uW n01IhyKyM4cfVQ2gBjpNm/2p9pjygspIz9QPBeitN0fRi+Uo68tkuCiiLeSACqKM mSORYUz9mlMQdYbcDq+4bQBLFo2VUHnomcLCrbrCDcRxSx7TnghtgQKVy0PuGS7b 7u1RU81k1HyHlVAtj0H1KvvC2MSjgf47jUGMwHkrUb4v0ite6nWMJ33sWmyYEtZ8 beDPU+fCqn+v9xgcLzcoJH+RLWEDCD5RbrolD0joziQ89Xf81xNbqTtHKnysBRj/ c1837Tl2StCHRI6DjkZIR8B4vjGJDwCMZ//clIQwMYZZimBlgzmvZTlYI1RdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyeqIAv5JcNtzyHlKSw5rLnlVJYUwHwYDVR0j BBgwFoAUs5I4EIM3IUjQl30AZs/zj9WjLNswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YmYyY2YwMy1mOWY5LTRiY2EtOGMyYy02MDczMjgwZGZlYTgvMC9CMzkyMzgxMDgz MzcyMTQ4RDA5NzdEMDA2NkNGRjM4RkQ1QTMyQ0RCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjM5MjM4MTA4MzM3MjE0OEQwOTc3RDAwNjZDRkYzOEZENUEz MkNEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWJmMmNmMDMtZjlmOS00YmNhLThj MmMtNjA3MzI4MGRmZWE4LzAvQjM5MjM4MTA4MzM3MjE0OEQwOTc3RDAwNjZDRkYz OEZENUEzMkNEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKZs3jIh+vm04ohH4qhAF7cBu4IAf9kHrjVY tfT4mKV2qCnBTGOI9GUbIpU5VoQ4A78sMoJGIRyQj30htIpMqcF6AYj2ihI1u9st LGIH8BcOe/q6F3vpFkOO9P6mw0ET+kDOvXxErvJEeqQFIiL9Pay5/lP/Oo5QEWoE 1w8Sxg3u0BBuYcwvmur+kZKH8lsnFw3fkW4ZW7HNgMjFWL74hJllITacKhjjJAbR IolrRf8pMMMNxRcjWxuisM7KvEutOvahGR3MwsWYcfr/f2l2BAcxV9x9z5Befglw czngMWVDxs3C/qVKVW4VyzvverXTUixZS/z3nEtLaXPLdIKDoks= -----END CERTIFICATE-----Generated at Thu Mar 19 12:33:57 2026 by rpki-client