$ rpki-client -vvf repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft File: D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft (raw, json) Hash identifier: K76NK02gcUCvc03beHRG2WULvkw37G8HBSXtFYHoB7Y= Subject key identifier: FB:54:58:77:26:C1:C2:85:0E:D3:7F:9E:D4:8F:4C:2D:09:32:49:96 Authority key identifier: D3:91:7D:15:F8:73:32:C5:0B:FC:11:65:A8:82:EF:EA:7D:8B:61:62 Certificate issuer: /CN=D3917D15F87332C50BFC1165A882EFEA7D8B6162 Certificate serial: 2A41C0A08010BD6334B12CCF96567DB72EBCB65C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3917D15F87332C50BFC1165A882EFEA7D8B6162.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft Manifest number: 014E Signing time: Tue 17 Mar 2026 09:12:36 +0000 Manifest this update: Tue 17 Mar 2026 09:07:36 +0000 Manifest next update: Fri 20 Mar 2026 15:52:36 +0000 Files and hashes: 1: 3130332e31352e3235312e302f32342d3234203d3e20313331373337.roa (hash: 7Oi5j12RVi3qx9bBfzHfHE0vUABfTWWODw/d5Ig7GBE=) 2: D3917D15F87332C50BFC1165A882EFEA7D8B6162.crl (hash: RQxfEXXDtu/IZzaEK5oyN+zA+a8909lAJUn5vY2MuHo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.crl rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3917D15F87332C50BFC1165A882EFEA7D8B6162.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 15:52:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:41:c0:a0:80:10:bd:63:34:b1:2c:cf:96:56:7d:b7:2e:bc:b6:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3917D15F87332C50BFC1165A882EFEA7D8B6162 Validity Not Before: Mar 17 09:07:36 2026 GMT Not After : Mar 20 15:52:36 2026 GMT Subject: CN=FB54587726C1C2850ED37F9ED48F4C2D09324996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ac:96:97:a4:d5:7c:4e:e9:de:98:b6:7d:c9: 0f:a2:d7:4a:06:1f:89:47:12:35:b2:cb:bd:37:2f: 5e:23:11:91:2f:0b:20:17:95:d0:87:a2:b1:33:79: 77:f3:a3:f8:52:d7:99:db:47:91:1e:43:df:55:be: 60:71:0b:68:86:f3:7e:9c:16:81:90:fb:8d:64:47: 4b:19:e0:14:77:b5:06:c1:f3:a7:5c:33:7a:92:23: 90:7b:bc:1c:15:34:42:a8:ef:46:06:d1:04:e1:ae: 23:b9:fb:e3:b0:a0:d9:24:20:b1:72:25:64:08:9f: 50:5c:3f:17:ac:32:d2:da:43:62:82:77:a6:11:f4: 66:7b:b8:1c:41:e3:51:e0:a7:ed:2b:1e:9e:d0:69: 1c:98:30:4a:d7:6c:a7:90:14:9b:a7:8a:fe:60:77: b0:55:ba:ac:eb:cc:2a:31:74:d5:d1:39:c0:8e:10: 1b:03:91:9f:54:3b:92:b0:18:88:bb:25:49:cd:12: bf:00:e5:0d:66:ae:9c:13:65:ac:61:2d:69:11:7d: c7:4e:cd:9d:96:cf:de:01:94:77:3c:5d:af:1e:d1: 53:89:88:e2:24:12:42:54:81:79:45:1e:a5:cd:ab: 52:41:c9:0b:de:2c:ad:d2:e4:76:32:ab:92:ac:b9: 48:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:54:58:77:26:C1:C2:85:0E:D3:7F:9E:D4:8F:4C:2D:09:32:49:96 X509v3 Authority Key Identifier: keyid:D3:91:7D:15:F8:73:32:C5:0B:FC:11:65:A8:82:EF:EA:7D:8B:61:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3917D15F87332C50BFC1165A882EFEA7D8B6162.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:e9:41:bc:81:68:61:3b:2d:d7:5d:10:83:c3:ca:bc:52:05: ed:d9:d1:6b:e9:8b:44:f3:bd:e6:b7:e4:a0:87:ad:92:0c:e8: d1:fa:db:b2:2f:ab:2a:71:17:9a:23:35:0e:10:f0:88:9c:8a: 1b:fa:5c:e6:28:6e:23:a3:e8:ef:c3:cd:33:58:c1:aa:b5:d8: 18:ae:e1:dd:86:20:03:97:fc:cf:c8:e6:dd:e1:43:17:88:cc: 38:d8:95:68:52:0f:db:56:eb:95:7b:67:d0:bc:18:e9:14:f1: b3:5e:11:a6:e7:c3:52:bc:09:cc:71:4f:7a:41:fd:c0:4d:54: 62:a0:cd:ec:c0:5e:a1:dc:74:4a:df:c3:e2:74:5d:2a:ab:f4: 74:c8:56:42:41:3a:9d:7e:6f:46:9d:0a:6a:3f:37:1a:31:93: 18:77:03:1f:54:3b:3d:0d:a1:17:a1:fa:22:3f:f7:8c:5e:42: 6a:52:a5:5b:4d:6d:58:b0:05:f8:3a:40:8b:2e:f9:a7:5e:12: fc:1b:29:aa:2f:7e:46:2c:9e:14:af:62:a3:69:46:60:54:94: d8:cc:c8:f2:c8:3b:12:e6:6a:b4:0a:e5:b2:46:c7:da:c5:bb: 57:6c:d4:15:c0:42:98:b7:ed:4d:a9:e2:65:46:d1:78:01:14: 7f:32:00:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKkHAoIAQvWM0sSzPllZ9ty68tlwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM5MTdEMTVGODczMzJDNTBCRkMxMTY1QTg4MkVGRUE3 RDhCNjE2MjAeFw0yNjAzMTcwOTA3MzZaFw0yNjAzMjAxNTUyMzZaMDMxMTAvBgNV BAMTKEZCNTQ1ODc3MjZDMUMyODUwRUQzN0Y5RUQ0OEY0QzJEMDkzMjQ5OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCrJaXpNV8TunemLZ9yQ+i10oG H4lHEjWyy703L14jEZEvCyAXldCHorEzeXfzo/hS15nbR5EeQ99VvmBxC2iG836c FoGQ+41kR0sZ4BR3tQbB86dcM3qSI5B7vBwVNEKo70YG0QThriO5++OwoNkkILFy JWQIn1BcPxesMtLaQ2KCd6YR9GZ7uBxB41Hgp+0rHp7QaRyYMErXbKeQFJuniv5g d7BVuqzrzCoxdNXROcCOEBsDkZ9UO5KwGIi7JUnNEr8A5Q1mrpwTZaxhLWkRfcdO zZ2Wz94BlHc8Xa8e0VOJiOIkEkJUgXlFHqXNq1JByQveLK3S5HYyq5KsuUhhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+1RYdybBwoUO03+e1I9MLQkySZYwHwYDVR0j BBgwFoAU05F9FfhzMsUL/BFlqILv6n2LYWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 Y2RmZDhlYi04YTQwLTRlOGItYTllMC05Mjc4Y2QwNGZhNDMvMC9EMzkxN0QxNUY4 NzMzMkM1MEJGQzExNjVBODgyRUZFQTdEOEI2MTYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDM5MTdEMTVGODczMzJDNTBCRkMxMTY1QTg4MkVGRUE3RDhC NjE2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmNkZmQ4ZWItOGE0MC00ZThiLWE5 ZTAtOTI3OGNkMDRmYTQzLzAvRDM5MTdEMTVGODczMzJDNTBCRkMxMTY1QTg4MkVG RUE3RDhCNjE2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG/pQbyBaGE7LdddEIPDyrxSBe3Z0Wvpi0Tz vea35KCHrZIM6NH627IvqypxF5ojNQ4Q8Iicihv6XOYobiOj6O/DzTNYwaq12Biu 4d2GIAOX/M/I5t3hQxeIzDjYlWhSD9tW65V7Z9C8GOkU8bNeEabnw1K8CcxxT3pB /cBNVGKgzezAXqHcdErfw+J0XSqr9HTIVkJBOp1+b0adCmo/Nxoxkxh3Ax9UOz0N oReh+iI/94xeQmpSpVtNbViwBfg6QIsu+adeEvwbKaovfkYsnhSvYqNpRmBUlNjM yPLIOxLmarQK5bJGx9rFu1ds1BXAQpi37U2p4mVG0XgBFH8yAGk= -----END CERTIFICATE-----Generated at Thu Mar 19 09:28:14 2026 by rpki-client