$ rpki-client -vvf repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft File: D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft (raw, json) Hash identifier: L2Q1Ub4lu2BBx8ndcw1eDwXv8mDZBRNfqGtVPmJ7+Jo= Subject key identifier: D2:3D:72:3D:39:73:80:12:39:01:CD:53:97:68:E7:9B:C5:A4:22:66 Authority key identifier: D7:85:2A:F0:5D:FB:B9:7A:CD:46:A3:73:99:F2:0D:EA:19:C2:EF:2C Certificate issuer: /CN=D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C Certificate serial: 3D0721904CA934B1B6FD6D21E890002FB083BF4E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft Manifest number: 0367 Signing time: Wed 18 Mar 2026 16:42:17 +0000 Manifest this update: Wed 18 Mar 2026 16:37:17 +0000 Manifest next update: Sat 21 Mar 2026 20:29:17 +0000 Files and hashes: 1: 3130332e3136342e3137332e302f32342d3234203d3e20313338313331.roa (hash: KhAy9i7rNh+YO2rkl451EFCJ0ALmEvE00mvytErQzRA=) 2: D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl (hash: ACLnUTCxWIeR8C9QnKc7pFUOQL/QHQmLlCemswFO69k=) 3: 3130332e3136342e3137322e302f32342d3234203d3e20313338313331.roa (hash: oLV8DpLz1l+1Ajh0O28O/v5GcjJ/k+/Vq+9P5fe+FMU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 20:29:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:07:21:90:4c:a9:34:b1:b6:fd:6d:21:e8:90:00:2f:b0:83:bf:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C Validity Not Before: Mar 18 16:37:17 2026 GMT Not After : Mar 21 20:29:17 2026 GMT Subject: CN=D23D723D397380123901CD539768E79BC5A42266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c8:8f:12:bd:7b:c5:7a:92:13:fc:8f:f3:d5: 00:70:a6:a6:df:53:6c:1a:a3:09:84:8b:b4:4d:1c: 3c:a1:32:8c:8f:0f:19:33:0b:99:85:0c:68:a9:d9: b3:40:d2:85:f2:dd:aa:fd:41:91:18:34:0c:27:b0: c2:54:c5:18:e8:c1:d5:83:24:72:49:41:89:ec:84: a6:9c:01:90:41:99:a0:e9:8f:16:c6:14:6a:c6:b4: b2:5a:5b:2d:4b:64:e6:a1:13:e1:6e:76:35:04:55: b2:5c:f9:8f:86:73:40:46:65:47:c1:4b:ab:68:c9: 8f:75:80:d5:83:b9:21:af:57:14:41:58:ff:6e:5c: a4:ca:51:aa:bf:ac:85:af:50:bd:51:2f:19:bd:ea: fc:d4:72:d6:7b:d6:31:dd:2c:e4:3b:54:99:f0:0a: 34:18:fe:5b:d1:28:15:1e:10:2f:20:5d:e3:b3:2b: 47:ba:f8:a4:b9:b4:f4:96:44:b6:e4:60:e6:a1:c8: a3:46:61:00:c4:ec:a3:37:ba:20:e3:b7:15:1d:66: f5:54:c3:75:1f:4f:b2:53:22:a2:db:ce:53:7b:44: 6b:e5:08:06:77:e1:c9:bf:5f:7b:26:a8:b7:4f:be: 18:8b:43:13:04:2f:ff:19:ae:2a:34:1d:a1:e2:77: 6a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:3D:72:3D:39:73:80:12:39:01:CD:53:97:68:E7:9B:C5:A4:22:66 X509v3 Authority Key Identifier: keyid:D7:85:2A:F0:5D:FB:B9:7A:CD:46:A3:73:99:F2:0D:EA:19:C2:EF:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:bb:b2:c6:0b:5c:43:cc:4b:8c:69:43:70:b7:53:9c:14:17: 70:49:d1:11:6c:9d:a7:3d:fb:13:88:70:1b:57:0a:4a:eb:5d: c4:c8:fb:66:95:86:74:11:cd:e6:31:5c:4b:d8:9a:4a:b6:53: 2e:2a:39:39:7e:59:42:92:7a:d8:24:a0:6f:e5:af:10:57:b5: 63:ab:fc:3f:57:07:30:68:93:97:8e:6e:4b:7f:a3:e5:e6:82: df:15:cf:b5:ce:a4:f3:67:6c:17:6b:c2:a3:e9:ef:39:39:cd: 17:7f:b0:f5:07:a0:4b:cb:30:d3:bc:60:c1:b2:07:00:8f:43: cc:80:d2:dc:26:bc:b4:60:db:73:58:05:9b:b6:91:97:1a:70: 03:57:ea:c6:dc:bf:08:a7:9f:34:3b:76:ea:7b:da:31:8d:c8: 2b:2f:ea:38:62:a4:cd:90:66:4f:9c:2c:11:df:89:7b:ec:cb: 5b:97:9c:d7:07:c8:3d:65:1a:74:fa:26:01:87:6b:de:2b:a5: a2:32:3d:22:e6:42:e1:df:3f:fc:3f:d4:2a:35:67:78:93:18: 87:34:5b:d0:05:34:51:4c:57:c6:59:e8:dd:42:c7:30:02:b2: b7:73:c9:52:b0:5c:11:b7:a0:f4:b3:bf:5b:96:89:ff:e6:3e: ee:c6:7a:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPQchkEypNLG2/W0h6JAAL7CDv04wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBERUEx OUMyRUYyQzAeFw0yNjAzMTgxNjM3MTdaFw0yNjAzMjEyMDI5MTdaMDMxMTAvBgNV BAMTKEQyM0Q3MjNEMzk3MzgwMTIzOTAxQ0Q1Mzk3NjhFNzlCQzVBNDIyNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIyI8SvXvFepIT/I/z1QBwpqbf U2waowmEi7RNHDyhMoyPDxkzC5mFDGip2bNA0oXy3ar9QZEYNAwnsMJUxRjowdWD JHJJQYnshKacAZBBmaDpjxbGFGrGtLJaWy1LZOahE+FudjUEVbJc+Y+Gc0BGZUfB S6toyY91gNWDuSGvVxRBWP9uXKTKUaq/rIWvUL1RLxm96vzUctZ71jHdLOQ7VJnw CjQY/lvRKBUeEC8gXeOzK0e6+KS5tPSWRLbkYOahyKNGYQDE7KM3uiDjtxUdZvVU w3UfT7JTIqLbzlN7RGvlCAZ34cm/X3smqLdPvhiLQxMEL/8Zrio0HaHid2pbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0j1yPTlzgBI5Ac1Tl2jnm8WkImYwHwYDVR0j BBgwFoAU14Uq8F37uXrNRqNzmfIN6hnC7ywwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTg5ZjFiNC1lZjYzLTQ1MzktODQ1NS05OGM2NzE5OTVjY2YvMC9ENzg1MkFGMDVE RkJCOTdBQ0Q0NkEzNzM5OUYyMERFQTE5QzJFRjJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBERUExOUMy RUYyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU4OWYxYjQtZWY2My00NTM5LTg0 NTUtOThjNjcxOTk1Y2NmLzAvRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBE RUExOUMyRUYyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABG7ssYLXEPMS4xpQ3C3U5wUF3BJ0RFsnac9 +xOIcBtXCkrrXcTI+2aVhnQRzeYxXEvYmkq2Uy4qOTl+WUKSetgkoG/lrxBXtWOr /D9XBzBok5eObkt/o+Xmgt8Vz7XOpPNnbBdrwqPp7zk5zRd/sPUHoEvLMNO8YMGy BwCPQ8yA0twmvLRg23NYBZu2kZcacANX6sbcvwinnzQ7dup72jGNyCsv6jhipM2Q Zk+cLBHfiXvsy1uXnNcHyD1lGnT6JgGHa94rpaIyPSLmQuHfP/w/1Co1Z3iTGIc0 W9AFNFFMV8ZZ6N1CxzACsrdzyVKwXBG3oPSzv1uWif/mPu7Genk= -----END CERTIFICATE-----Generated at Thu Mar 19 09:25:07 2026 by rpki-client