$ rpki-client -vvf repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft File: 0433DC81885AA9736198E4B13311013B6539B05D.mft (raw, json) Hash identifier: fA7nIaz18oSuopnrqCVT0++8IKf6tqX9JX2zbCzDO6o= Subject key identifier: A9:F6:AA:81:E2:38:B9:AE:D3:A9:45:21:F6:95:29:06:52:C3:E3:13 Authority key identifier: 04:33:DC:81:88:5A:A9:73:61:98:E4:B1:33:11:01:3B:65:39:B0:5D Certificate issuer: /CN=0433DC81885AA9736198E4B13311013B6539B05D Certificate serial: 0BA5DCD3F2EC548BE2F2F1A81D79A46758623960 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft Manifest number: 01DC Signing time: Wed 18 Mar 2026 16:51:52 +0000 Manifest this update: Wed 18 Mar 2026 16:46:52 +0000 Manifest next update: Sun 22 Mar 2026 00:45:52 +0000 Files and hashes: 1: 3130332e3138372e38372e302f32342d3234203d3e20313439373138.roa (hash: thtf3QdtQWO4Jp41Gq1rhKlrwJiL9JV02YjBNx9ONMU=) 2: 3130332e3138372e38362e302f32332d3234203d3e20313439373138.roa (hash: S+hQR8ube7o6csT9Rv22n/U07yHPrGgGLfGsncAQhYA=) 3: 0433DC81885AA9736198E4B13311013B6539B05D.crl (hash: 3Yi0nH3VdHSf3yvzuwevTQU3wTlunheD7J5mp3ZmCC8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.crl rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 00:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:a5:dc:d3:f2:ec:54:8b:e2:f2:f1:a8:1d:79:a4:67:58:62:39:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0433DC81885AA9736198E4B13311013B6539B05D Validity Not Before: Mar 18 16:46:52 2026 GMT Not After : Mar 22 00:45:52 2026 GMT Subject: CN=A9F6AA81E238B9AED3A94521F695290652C3E313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:19:c9:7a:95:49:94:6a:08:c4:d7:da:1d:a3: 18:9d:5f:80:b3:d1:b6:0f:ca:e3:23:03:95:8b:84: 15:87:08:d2:93:9e:15:cb:81:e2:dd:6c:f7:5b:2b: 9b:2f:20:2d:83:6b:20:8c:86:47:3c:99:3e:96:e6: 64:81:c0:75:e7:98:39:c9:61:e6:53:ab:ba:fd:fc: 2b:3f:95:d6:0d:91:3c:9b:87:4e:f4:1b:4f:48:09: 4b:c0:00:28:e2:42:72:7f:fb:33:66:dd:6d:f4:b4: a1:d3:9b:06:33:d2:5f:b5:33:06:35:cf:04:c8:cf: ff:9a:11:99:8d:0c:8a:c9:77:99:d0:ad:cd:be:d4: d0:1e:39:1e:45:e3:f0:35:82:94:bf:c3:35:92:a3: 24:3c:69:d5:d7:49:37:e3:a1:8e:d2:c9:7b:ff:ca: 92:d3:86:2e:fd:be:1b:2b:f3:e3:e5:bb:fc:6f:6d: 8f:0f:5c:60:93:3f:f2:dc:ae:4f:30:69:d9:1f:2f: 14:ee:21:2e:11:df:3e:b5:b6:cf:a2:61:b2:17:ef: 5e:14:dc:26:0a:d7:84:92:b5:62:9b:f8:08:d6:f4: 5a:de:d5:0f:f7:23:8c:52:3b:aa:7b:95:16:ab:07: 7d:d1:b5:0e:63:29:e0:ac:43:5c:c8:e2:98:3b:e9: a9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F6:AA:81:E2:38:B9:AE:D3:A9:45:21:F6:95:29:06:52:C3:E3:13 X509v3 Authority Key Identifier: keyid:04:33:DC:81:88:5A:A9:73:61:98:E4:B1:33:11:01:3B:65:39:B0:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:cd:8e:72:50:ab:0f:e8:7c:af:50:05:d4:7e:0f:a7:ee:75: 3c:24:17:b5:57:19:71:8e:85:cb:a9:3e:9e:08:d5:d3:af:b5: a2:52:1a:8e:f7:35:11:5c:33:74:67:50:60:7d:2d:bb:21:ce: c1:4b:d6:90:24:32:de:c6:66:79:0b:18:6c:4a:01:be:58:bb: 12:8a:3a:dc:cb:ff:42:e1:48:8a:61:99:bb:f8:9a:78:94:95: ee:13:fc:c5:de:0e:8e:ff:17:80:fc:c5:f4:ac:45:34:08:c1: 1e:08:0b:9e:ec:df:6c:f3:08:e8:a5:d4:9e:ff:40:4b:de:78: 02:fb:72:a5:f5:ae:9e:c2:5e:ed:47:02:b0:43:40:da:da:7f: 18:0b:60:5c:9d:99:63:52:b4:8d:79:aa:1f:7c:e2:a9:42:6a: 21:71:b4:ab:4b:b1:d7:e5:b0:51:e8:11:00:db:cf:0c:fc:a0: 12:45:4a:85:62:fe:61:48:37:30:55:13:cc:66:2a:a2:48:e2: 19:f1:f9:8b:e7:3c:1b:4c:f3:33:b9:2b:f5:c0:ca:5e:45:1f: 81:f2:8f:84:7b:99:7d:56:1a:a8:d8:ba:70:31:d2:84:af:f1: 99:41:90:c1:5e:20:1c:19:53:ee:1e:b7:0b:8d:e5:1a:da:73: e1:73:2e:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC6Xc0/LsVIvi8vGoHXmkZ1hiOWAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQzM0RDODE4ODVBQTk3MzYxOThFNEIxMzMxMTAxM0I2 NTM5QjA1RDAeFw0yNjAzMTgxNjQ2NTJaFw0yNjAzMjIwMDQ1NTJaMDMxMTAvBgNV BAMTKEE5RjZBQTgxRTIzOEI5QUVEM0E5NDUyMUY2OTUyOTA2NTJDM0UzMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcGcl6lUmUagjE19odoxidX4Cz 0bYPyuMjA5WLhBWHCNKTnhXLgeLdbPdbK5svIC2DayCMhkc8mT6W5mSBwHXnmDnJ YeZTq7r9/Cs/ldYNkTybh070G09ICUvAACjiQnJ/+zNm3W30tKHTmwYz0l+1MwY1 zwTIz/+aEZmNDIrJd5nQrc2+1NAeOR5F4/A1gpS/wzWSoyQ8adXXSTfjoY7SyXv/ ypLThi79vhsr8+Plu/xvbY8PXGCTP/Lcrk8wadkfLxTuIS4R3z61ts+iYbIX714U 3CYK14SStWKb+AjW9Fre1Q/3I4xSO6p7lRarB33RtQ5jKeCsQ1zI4pg76alfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqfaqgeI4ua7TqUUh9pUpBlLD4xMwHwYDVR0j BBgwFoAUBDPcgYhaqXNhmOSxMxEBO2U5sF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjdlZjUxNS04NTY0LTQxZTgtOWQyMC0yZDMzZDQ1Y2NiZDYvMC8wNDMzREM4MTg4 NUFBOTczNjE5OEU0QjEzMzExMDEzQjY1MzlCMDVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDQzM0RDODE4ODVBQTk3MzYxOThFNEIxMzMxMTAxM0I2NTM5 QjA1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I3ZWY1MTUtODU2NC00MWU4LTlk MjAtMmQzM2Q0NWNjYmQ2LzAvMDQzM0RDODE4ODVBQTk3MzYxOThFNEIxMzMxMTAx M0I2NTM5QjA1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJLNjnJQqw/ofK9QBdR+D6fudTwkF7VXGXGO hcupPp4I1dOvtaJSGo73NRFcM3RnUGB9LbshzsFL1pAkMt7GZnkLGGxKAb5YuxKK OtzL/0LhSIphmbv4mniUle4T/MXeDo7/F4D8xfSsRTQIwR4IC57s32zzCOil1J7/ QEveeAL7cqX1rp7CXu1HArBDQNrafxgLYFydmWNStI15qh984qlCaiFxtKtLsdfl sFHoEQDbzwz8oBJFSoVi/mFINzBVE8xmKqJI4hnx+YvnPBtM8zO5K/XAyl5FH4Hy j4R7mX1WGqjYunAx0oSv8ZlBkMFeIBwZU+4etwuN5Rrac+FzLm4= -----END CERTIFICATE-----Generated at Fri Mar 20 18:43:19 2026 by rpki-client