$ rpki-client -vvf repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft File: 687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft (raw, json) Hash identifier: /Td8wH4va8ldmOpHMpOoyC+1dyqi3T+vrSbxmxvjcVs= Subject key identifier: 45:D8:98:A3:1A:C2:52:76:24:93:46:87:E5:50:42:10:62:F2:54:95 Authority key identifier: 68:72:47:CE:80:E6:2A:D4:B4:0F:0B:99:15:A1:B6:F3:02:0F:68:4C Certificate issuer: /CN=687247CE80E62AD4B40F0B9915A1B6F3020F684C Certificate serial: 48C7EE113DC523F66D1FAF67E266DFAE8BB3E3D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft Manifest number: 03DD Signing time: Mon 23 Mar 2026 08:31:44 +0000 Manifest this update: Mon 23 Mar 2026 08:26:44 +0000 Manifest next update: Thu 26 Mar 2026 14:37:44 +0000 Files and hashes: 1: 687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl (hash: +NXseW7aY5YnPb5kMHjHWAva4dTXeCO/EZswq28cRzg=) 2: 3130332e3136352e3235342e302f32332d3234203d3e203137393935.roa (hash: I5vk4CZVaOAQSTZi+mpaPTk3GaYie2KrNjsP/ZfsCsY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Mar 2026 09:57:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:c7:ee:11:3d:c5:23:f6:6d:1f:af:67:e2:66:df:ae:8b:b3:e3:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=687247CE80E62AD4B40F0B9915A1B6F3020F684C Validity Not Before: Mar 23 08:26:44 2026 GMT Not After : Mar 26 14:37:44 2026 GMT Subject: CN=45D898A31AC2527624934687E550421062F25495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:df:5d:39:48:fc:69:14:11:9f:33:84:13:da: 04:f0:b5:a5:83:24:85:13:25:45:79:c3:30:fe:5c: 2d:45:c8:c9:ea:f6:cb:5a:a7:f6:6b:a3:55:c2:00: 56:d4:cd:7d:fd:e5:c1:49:15:1f:3f:41:c7:73:52: 9f:4f:ca:6c:cb:b0:e3:fc:fb:3f:75:d2:d3:6b:33: 04:3e:b4:bc:2d:3c:1e:41:fe:81:83:2a:22:3d:41: 41:57:73:98:15:35:a7:5b:cc:f6:72:d0:af:1e:e6: 43:6d:08:ec:a7:19:35:a5:e6:40:5d:99:c9:d0:8c: 97:52:1c:93:5c:41:db:c6:35:55:d6:b5:eb:43:fa: 02:0e:70:a5:82:ab:9d:07:46:45:d7:c1:3a:f2:2f: 45:c0:81:b5:93:84:e5:8d:ba:f6:38:c0:59:6a:eb: 5e:08:2f:43:93:b9:e4:61:3c:1c:1a:1d:3f:87:47: ff:b7:eb:55:c2:fb:fe:23:a0:60:54:37:3e:e3:15: 27:fd:6d:3e:87:a3:1a:c2:4a:e8:fe:56:99:89:c8: 26:d7:7a:d2:62:04:54:9e:b6:8c:8d:13:c9:24:f9: 1a:4e:97:f9:b8:a3:f0:ea:97:05:bc:ed:83:0d:08: b1:cf:91:7e:d7:b7:61:c1:b3:1c:15:51:02:83:cc: ae:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D8:98:A3:1A:C2:52:76:24:93:46:87:E5:50:42:10:62:F2:54:95 X509v3 Authority Key Identifier: keyid:68:72:47:CE:80:E6:2A:D4:B4:0F:0B:99:15:A1:B6:F3:02:0F:68:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:3b:55:8d:91:53:ef:a1:86:e4:86:b3:f4:d9:75:0c:61:9e: 39:e0:c6:1d:ac:6d:86:34:4c:23:f4:f8:5c:54:9b:f7:b6:c7: 86:cf:3c:de:25:c9:60:b8:f5:8e:a5:65:49:9a:f5:77:fa:f7: 40:db:3d:2e:d3:c3:f3:d7:97:fc:be:01:68:18:56:22:4b:0d: 39:5c:bc:67:5e:cc:eb:6b:11:76:99:83:ca:ef:88:41:ea:bb: 2b:6a:05:da:9f:34:a8:fb:06:c0:89:d4:ab:1c:1f:cb:53:e2: b8:8a:b4:5a:83:c1:80:f8:a1:d1:7d:92:16:eb:66:58:0e:e3: f6:ba:1c:ae:45:01:44:49:40:d8:61:e7:0f:1f:c2:38:c9:74: 8b:73:61:9b:2f:31:1c:cf:92:4f:81:31:3c:65:c7:87:7f:05: 1e:b1:5a:a1:2c:e0:a0:45:92:ad:b5:57:7c:23:98:47:6f:44: 05:aa:a2:5e:82:f4:bd:04:af:02:c2:99:ca:8c:f9:95:b7:f4: 95:65:00:a3:42:1a:d4:9a:01:0c:ee:f8:d7:f6:be:ed:9b:b5: a0:bb:58:37:e5:a0:ae:66:6a:11:71:80:cc:82:26:30:c7:bb: 2c:24:19:ad:f7:1d:2f:5f:bb:c2:71:fd:bc:88:a4:91:06:2f: 6f:3f:6f:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSMfuET3FI/ZtH69n4mbfrouz49EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg3MjQ3Q0U4MEU2MkFENEI0MEYwQjk5MTVBMUI2RjMw MjBGNjg0QzAeFw0yNjAzMjMwODI2NDRaFw0yNjAzMjYxNDM3NDRaMDMxMTAvBgNV BAMTKDQ1RDg5OEEzMUFDMjUyNzYyNDkzNDY4N0U1NTA0MjEwNjJGMjU0OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl3105SPxpFBGfM4QT2gTwtaWD JIUTJUV5wzD+XC1FyMnq9stap/Zro1XCAFbUzX395cFJFR8/QcdzUp9PymzLsOP8 +z910tNrMwQ+tLwtPB5B/oGDKiI9QUFXc5gVNadbzPZy0K8e5kNtCOynGTWl5kBd mcnQjJdSHJNcQdvGNVXWtetD+gIOcKWCq50HRkXXwTryL0XAgbWThOWNuvY4wFlq 614IL0OTueRhPBwaHT+HR/+361XC+/4joGBUNz7jFSf9bT6HoxrCSuj+VpmJyCbX etJiBFSetoyNE8kk+RpOl/m4o/DqlwW87YMNCLHPkX7Xt2HBsxwVUQKDzK7/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURdiYoxrCUnYkk0aH5VBCEGLyVJUwHwYDVR0j BBgwFoAUaHJHzoDmKtS0DwuZFaG28wIPaEwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWU1NDY4Yy0wYWM3LTQ0YTktODgyMS0yODI1N2M1YTg2MDcvMC82ODcyNDdDRTgw RTYyQUQ0QjQwRjBCOTkxNUExQjZGMzAyMEY2ODRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg3MjQ3Q0U4MEU2MkFENEI0MEYwQjk5MTVBMUI2RjMwMjBG Njg0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzVlNTQ2OGMtMGFjNy00NGE5LTg4 MjEtMjgyNTdjNWE4NjA3LzAvNjg3MjQ3Q0U4MEU2MkFENEI0MEYwQjk5MTVBMUI2 RjMwMjBGNjg0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACY7VY2RU++hhuSGs/TZdQxhnjngxh2sbYY0 TCP0+FxUm/e2x4bPPN4lyWC49Y6lZUma9Xf690DbPS7Tw/PXl/y+AWgYViJLDTlc vGdezOtrEXaZg8rviEHquytqBdqfNKj7BsCJ1KscH8tT4riKtFqDwYD4odF9khbr ZlgO4/a6HK5FAURJQNhh5w8fwjjJdItzYZsvMRzPkk+BMTxlx4d/BR6xWqEs4KBF kq21V3wjmEdvRAWqol6C9L0ErwLCmcqM+ZW39JVlAKNCGtSaAQzu+Nf2vu2btaC7 WDfloK5mahFxgMyCJjDHuywkGa33HS9fu8Jx/byIpJEGL28/b38= -----END CERTIFICATE-----Generated at Tue Mar 24 01:50:03 2026 by rpki-client