$ rpki-client -vvf repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft File: 1472DDF3B8546A8B201733914AFB7036FC6742F3.mft (raw, json) Hash identifier: t6O8SdFQGpZLY91h0KqDSUtxy9eQwXYqd0M0fXd82B4= Subject key identifier: D4:D1:A7:5C:B2:6D:50:AD:69:C7:F0:BE:86:6D:F4:F4:E2:5B:62:2A Authority key identifier: 14:72:DD:F3:B8:54:6A:8B:20:17:33:91:4A:FB:70:36:FC:67:42:F3 Certificate issuer: /CN=1472DDF3B8546A8B201733914AFB7036FC6742F3 Certificate serial: 21AB68D7AD1D3F53E320ED10D570578EBAD3C2B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft Manifest number: 03CE Signing time: Sun 22 Mar 2026 02:01:55 +0000 Manifest this update: Sun 22 Mar 2026 01:56:55 +0000 Manifest next update: Wed 25 Mar 2026 02:46:55 +0000 Files and hashes: 1: 3130332e3137302e3139362e302f32332d3234203d3e203137393935.roa (hash: Kb0M/Ho3VT/nqDiJsvCx89Y+HDOUAdoV9jho+WllLB8=) 2: 1472DDF3B8546A8B201733914AFB7036FC6742F3.crl (hash: CJSdxDUXGaCjwmSh7ZCoESf8eBE68udjdKQBiVMOl1Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.crl rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Mar 2026 02:46:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:ab:68:d7:ad:1d:3f:53:e3:20:ed:10:d5:70:57:8e:ba:d3:c2:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1472DDF3B8546A8B201733914AFB7036FC6742F3 Validity Not Before: Mar 22 01:56:55 2026 GMT Not After : Mar 25 02:46:55 2026 GMT Subject: CN=D4D1A75CB26D50AD69C7F0BE866DF4F4E25B622A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ad:0f:11:ee:bf:73:f9:9f:9a:f3:f2:29:de: 43:d4:04:af:4f:c8:fb:1b:af:f4:cc:cd:14:d2:09: 52:1c:6b:08:2d:7e:ca:d6:6d:68:b8:0b:97:30:17: 76:01:49:d5:84:2f:57:e5:4a:1b:4a:a1:26:a1:ac: 92:af:5f:17:34:5c:fc:e5:71:a9:47:85:74:4e:69: ab:91:28:63:a6:5b:44:be:1f:d2:98:f0:0b:30:8e: ac:e0:2e:b2:5e:ee:30:f4:c3:fb:8f:b2:52:86:8d: 0c:03:9f:31:93:77:eb:a8:e2:30:8b:56:14:3d:70: da:45:71:ec:b3:e5:0f:92:af:6c:45:21:4a:14:13: c8:d1:ad:29:80:c3:c4:2c:0e:ef:5e:1a:38:f0:88: 9a:77:e2:c8:6b:e8:d5:00:0c:36:72:fc:f8:73:56: f9:58:eb:5c:24:29:ee:8b:7b:93:91:c8:e6:1b:b1: 58:8b:c1:96:57:0d:86:71:21:75:6a:d5:36:fb:a9: 21:9e:9b:a9:0d:c7:64:ce:ac:6d:52:5c:11:88:e5: 9f:fe:0f:2f:6e:96:48:a8:ba:65:ec:91:ee:17:72: b7:b4:a3:d4:ac:19:93:2a:4f:e3:0e:ff:b2:31:41: 9c:42:61:6d:3c:3a:15:38:5b:59:6d:29:5d:34:87: 8f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D1:A7:5C:B2:6D:50:AD:69:C7:F0:BE:86:6D:F4:F4:E2:5B:62:2A X509v3 Authority Key Identifier: keyid:14:72:DD:F3:B8:54:6A:8B:20:17:33:91:4A:FB:70:36:FC:67:42:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:1d:8d:85:da:0c:a2:d1:55:2a:e0:7e:76:1e:19:e5:cc:e2: 73:33:ef:dc:55:21:f6:e1:15:ba:e2:d3:18:29:fd:82:a5:2f: 2f:5f:b8:9b:78:4a:53:0d:39:a9:9c:7b:bc:09:d0:99:32:dd: 70:ca:bd:26:d9:c5:bf:44:a8:f1:9a:5a:55:33:21:a9:fe:0e: 27:06:7a:ec:c1:bf:e1:89:46:3a:5c:17:64:f7:e7:34:ac:04: 74:10:dc:57:3d:97:9e:90:f1:8d:31:fd:35:20:14:05:0d:d2: 3b:73:e6:9d:46:ef:04:54:05:39:88:a0:94:04:10:96:5c:15: 82:05:16:8f:84:7b:c4:f1:de:57:af:5b:66:0d:56:f6:5c:73: 4e:67:f4:bf:3a:69:9e:b5:6c:af:dc:ea:1c:57:ef:04:e2:84: 0c:80:94:68:7d:1c:ab:42:23:2a:c0:90:24:6c:53:02:f0:4e: 4d:cd:26:0b:f9:4c:ba:ac:2e:79:0d:34:1b:b0:b9:4b:73:c5: d2:1b:74:38:dd:f5:5a:60:a5:6a:d1:89:8c:57:93:2c:12:15: d8:6f:fe:0e:0f:25:3b:8f:ca:1e:c2:dc:24:e9:d0:d8:48:39: 1b:5a:e3:ff:75:4c:d9:64:1a:82:4a:df:26:83:13:02:92:81: 52:a7:ce:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIato160dP1PjIO0Q1XBXjrrTwrgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ3MkRERjNCODU0NkE4QjIwMTczMzkxNEFGQjcwMzZG QzY3NDJGMzAeFw0yNjAzMjIwMTU2NTVaFw0yNjAzMjUwMjQ2NTVaMDMxMTAvBgNV BAMTKEQ0RDFBNzVDQjI2RDUwQUQ2OUM3RjBCRTg2NkRGNEY0RTI1QjYyMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3rQ8R7r9z+Z+a8/Ip3kPUBK9P yPsbr/TMzRTSCVIcawgtfsrWbWi4C5cwF3YBSdWEL1flShtKoSahrJKvXxc0XPzl calHhXROaauRKGOmW0S+H9KY8AswjqzgLrJe7jD0w/uPslKGjQwDnzGTd+uo4jCL VhQ9cNpFceyz5Q+Sr2xFIUoUE8jRrSmAw8QsDu9eGjjwiJp34shr6NUADDZy/Phz VvlY61wkKe6Le5ORyOYbsViLwZZXDYZxIXVq1Tb7qSGem6kNx2TOrG1SXBGI5Z/+ Dy9ulkioumXske4Xcre0o9SsGZMqT+MO/7IxQZxCYW08OhU4W1ltKV00h4/JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1NGnXLJtUK1px/C+hm309OJbYiowHwYDVR0j BBgwFoAUFHLd87hUaosgFzORSvtwNvxnQvMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTFhNzQ2ZS01M2UzLTRjMjMtYjllNS1mNjRmM2VmM2QxMzYvMC8xNDcyRERGM0I4 NTQ2QThCMjAxNzMzOTE0QUZCNzAzNkZDNjc0MkYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQ3MkRERjNCODU0NkE4QjIwMTczMzkxNEFGQjcwMzZGQzY3 NDJGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTExYTc0NmUtNTNlMy00YzIzLWI5 ZTUtZjY0ZjNlZjNkMTM2LzAvMTQ3MkRERjNCODU0NkE4QjIwMTczMzkxNEFGQjcw MzZGQzY3NDJGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ8djYXaDKLRVSrgfnYeGeXM4nMz79xVIfbh Fbri0xgp/YKlLy9fuJt4SlMNOamce7wJ0Jky3XDKvSbZxb9EqPGaWlUzIan+DicG euzBv+GJRjpcF2T35zSsBHQQ3Fc9l56Q8Y0x/TUgFAUN0jtz5p1G7wRUBTmIoJQE EJZcFYIFFo+Ee8Tx3levW2YNVvZcc05n9L86aZ61bK/c6hxX7wTihAyAlGh9HKtC IyrAkCRsUwLwTk3NJgv5TLqsLnkNNBuwuUtzxdIbdDjd9VpgpWrRiYxXkywSFdhv /g4PJTuPyh7C3CTp0NhIORta4/91TNlkGoJK3yaDEwKSgVKnzvw= -----END CERTIFICATE-----Generated at Tue Mar 24 01:50:17 2026 by rpki-client