$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft File: 917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft (raw, json) Hash identifier: rPRmM4amA21eRV6oIc7kDumirAy8rekl3KFxCFNfmfs= Subject key identifier: 3A:7C:05:92:B1:F6:38:25:A2:D5:8A:08:0B:45:34:D4:F4:BB:34:30 Authority key identifier: 91:7A:9D:24:BF:1E:AD:6F:A4:A1:F8:FD:81:D5:31:37:EF:52:E7:84 Certificate issuer: /CN=917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784 Certificate serial: 6E150E020DE427B41B7EADA3F6E2DC0114F55319 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft Manifest number: 02A1 Signing time: Fri 27 Mar 2026 00:30:45 +0000 Manifest this update: Fri 27 Mar 2026 00:25:45 +0000 Manifest next update: Mon 30 Mar 2026 02:21:45 +0000 Files and hashes: 1: 3130332e3136342e31322e302f32332d3234203d3e20313431383938.roa (hash: +et6XAZaJYtUR6Dc2zidlhc9nlrgtLBlWzalZZGRqM4=) 2: 323430303a346265303a3a2f33322d3438203d3e20313431383938.roa (hash: cViD++tff+X7xq1z33jmPNpr3W6MqEIUFSVqOeIQ0V4=) 3: 917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl (hash: UqNZ57Nda+pQBzvZtllkI6zi/U2qBSf92xnV3nGPSVY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Mar 2026 02:21:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:15:0e:02:0d:e4:27:b4:1b:7e:ad:a3:f6:e2:dc:01:14:f5:53:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784 Validity Not Before: Mar 27 00:25:45 2026 GMT Not After : Mar 30 02:21:45 2026 GMT Subject: CN=3A7C0592B1F63825A2D58A080B4534D4F4BB3430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d3:68:58:a7:0b:08:09:a5:79:66:ce:28:91: 42:70:8c:20:b9:37:5f:45:9a:0a:6f:4c:1a:16:7f: 90:eb:ba:39:9c:02:99:49:47:91:43:e6:f8:1a:cc: c3:5a:50:5f:51:ab:e6:28:90:7c:d6:0f:e9:e2:ac: 46:cc:47:55:47:11:60:02:4e:4b:1a:57:04:9c:80: a5:b4:47:14:45:17:17:29:cc:bc:64:fc:a3:a9:51: 37:ce:03:3a:b6:ab:11:d9:b1:81:a0:00:7c:10:dc: 2b:cb:05:61:25:ae:e9:8f:f7:25:3d:76:62:39:83: fd:3b:0e:86:25:b1:ee:1c:9f:b3:de:a5:db:63:36: 6d:f0:e6:9e:04:61:7e:8f:92:5c:b2:c4:28:b8:b4: 81:f9:b1:65:d4:12:0c:5f:3c:97:71:64:8f:e9:33: 19:75:6f:9b:69:32:82:76:b8:85:3a:99:f4:6f:20: 16:b1:1e:4a:e8:09:c5:5a:66:48:2a:36:76:22:c1: 0f:04:2b:10:1f:47:57:c0:a0:06:58:6e:10:88:50: 5b:ae:ea:07:fd:02:ea:44:18:99:9d:0e:e2:fd:ef: a2:d7:c3:d1:f3:c2:a9:f8:fb:c1:d5:10:f5:98:e2: 80:d7:86:d0:3f:3b:64:c1:bf:95:1c:3a:28:9b:84: 5b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:7C:05:92:B1:F6:38:25:A2:D5:8A:08:0B:45:34:D4:F4:BB:34:30 X509v3 Authority Key Identifier: keyid:91:7A:9D:24:BF:1E:AD:6F:A4:A1:F8:FD:81:D5:31:37:EF:52:E7:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:be:24:44:8b:fa:a3:28:19:79:4c:c7:6a:f0:02:e8:52:c4: 60:c9:db:c8:5c:cd:1d:92:13:e5:95:f7:8c:af:73:a1:8f:f0: 4b:d3:74:a1:dd:0a:2f:f6:ac:d6:39:ec:e7:d3:db:8c:7f:3d: 57:09:eb:6d:82:ad:66:85:9a:f0:7f:1d:8d:d0:01:8a:d3:8e: 78:56:76:b9:41:be:84:b5:70:a0:59:f7:45:6f:84:37:60:b0: 1b:91:ab:4a:48:be:9b:ef:06:c0:eb:2a:7c:44:9a:f7:22:b8: 81:66:63:30:d9:67:37:3b:9b:75:6e:90:ba:bd:80:ce:b7:3d: 12:b1:f5:eb:d3:99:1d:a3:3a:c7:5f:c7:31:1b:b7:15:29:54: ca:d6:49:75:5f:4e:b2:08:bd:04:f0:f2:14:30:11:50:e9:36: 70:b1:40:5f:e1:b7:45:dd:c5:b2:ed:7d:22:cd:82:22:e4:ec: 4a:0d:de:3f:4c:f5:ac:be:96:c8:2e:f1:9d:4a:f6:1c:98:f5: ee:f2:0a:43:33:6f:d2:76:64:1a:c7:8b:40:06:a7:a1:9b:1e: d9:11:40:74:c8:b5:24:42:75:da:0f:95:d3:ea:a1:d2:a3:a1: 1e:bc:16:e1:e4:7c:73:cc:f2:55:63:31:8e:a2:fa:52:3f:7f: ea:eb:0e:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbhUOAg3kJ7Qbfq2j9uLcART1UxkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMxMzdF RjUyRTc4NDAeFw0yNjAzMjcwMDI1NDVaFw0yNjAzMzAwMjIxNDVaMDMxMTAvBgNV BAMTKDNBN0MwNTkyQjFGNjM4MjVBMkQ1OEEwODBCNDUzNEQ0RjRCQjM0MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC602hYpwsICaV5Zs4okUJwjCC5 N19FmgpvTBoWf5DrujmcAplJR5FD5vgazMNaUF9Rq+YokHzWD+nirEbMR1VHEWAC TksaVwScgKW0RxRFFxcpzLxk/KOpUTfOAzq2qxHZsYGgAHwQ3CvLBWElrumP9yU9 dmI5g/07DoYlse4cn7PepdtjNm3w5p4EYX6PklyyxCi4tIH5sWXUEgxfPJdxZI/p Mxl1b5tpMoJ2uIU6mfRvIBaxHkroCcVaZkgqNnYiwQ8EKxAfR1fAoAZYbhCIUFuu 6gf9AupEGJmdDuL976LXw9Hzwqn4+8HVEPWY4oDXhtA/O2TBv5UcOiibhFtLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOnwFkrH2OCWi1YoIC0U01PS7NDAwHwYDVR0j BBgwFoAUkXqdJL8erW+kofj9gdUxN+9S54QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRmZjgxOS0yYmFkLTQ4M2QtOWZhOC1iNmViYzQ4NDAzMWEvMC85MTdBOUQyNEJG MUVBRDZGQTRBMUY4RkQ4MUQ1MzEzN0VGNTJFNzg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMxMzdFRjUy RTc4NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkZmY4MTktMmJhZC00ODNkLTlm YTgtYjZlYmM0ODQwMzFhLzAvOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMx MzdFRjUyRTc4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFy+JESL+qMoGXlMx2rwAuhSxGDJ28hczR2S E+WV94yvc6GP8EvTdKHdCi/2rNY57OfT24x/PVcJ622CrWaFmvB/HY3QAYrTjnhW drlBvoS1cKBZ90VvhDdgsBuRq0pIvpvvBsDrKnxEmvciuIFmYzDZZzc7m3VukLq9 gM63PRKx9evTmR2jOsdfxzEbtxUpVMrWSXVfTrIIvQTw8hQwEVDpNnCxQF/ht0Xd xbLtfSLNgiLk7EoN3j9M9ay+lsgu8Z1K9hyY9e7yCkMzb9J2ZBrHi0AGp6GbHtkR QHTItSRCddoPldPqodKjoR68FuHkfHPM8lVjMY6i+lI/f+rrDjc= -----END CERTIFICATE-----Generated at Sat Mar 28 06:51:11 2026 by rpki-client