$ rpki-client -vvf repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft File: D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft (raw, json) Hash identifier: 3FynfbZR3TFhJ1nCTYTHkDd42T8WRI/1sC+BEe/5vV8= Subject key identifier: D2:7B:C0:65:B2:3A:86:8B:69:3B:C1:A2:74:CE:44:EF:B6:3D:24:8C Authority key identifier: D5:C9:29:9A:E0:0F:00:35:70:4B:10:A8:43:10:B3:C3:DA:D9:BE:19 Certificate issuer: /CN=D5C9299AE00F0035704B10A84310B3C3DAD9BE19 Certificate serial: 2AC751F69AB2A49F91B22D512ACF64F57243A930 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft Manifest number: 012A Signing time: Sat 07 Mar 2026 19:02:37 +0000 Manifest this update: Sat 07 Mar 2026 18:57:37 +0000 Manifest next update: Tue 10 Mar 2026 19:56:37 +0000 Files and hashes: 1: D5C9299AE00F0035704B10A84310B3C3DAD9BE19.crl (hash: SB1FsG+0eXl8hR536W3AR9bFOavsDudTRXXTOzwWSh4=) 2: 3130332e3136302e3230312e302f32342d3234203d3e20313431363030.roa (hash: K3ZH6ZIWAcw45r2g/qdIM9HAVNibF7452ItmA+/7HTE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.crl rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 22:43:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:c7:51:f6:9a:b2:a4:9f:91:b2:2d:51:2a:cf:64:f5:72:43:a9:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5C9299AE00F0035704B10A84310B3C3DAD9BE19 Validity Not Before: Mar 7 18:57:37 2026 GMT Not After : Mar 10 19:56:37 2026 GMT Subject: CN=D27BC065B23A868B693BC1A274CE44EFB63D248C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:33:75:b2:3a:93:92:08:f8:34:fe:38:fc:17: 18:c2:1d:cb:61:01:b9:1a:f3:90:59:6b:72:ad:73: 6e:95:c0:8a:b3:08:88:c0:46:04:5d:7f:c5:9e:f1: bd:96:c3:2f:52:73:65:4e:37:ad:68:36:85:b9:10: 41:1f:4a:25:7d:cc:f6:e2:b1:53:4a:8e:2d:5f:92: 48:b6:79:16:06:c3:64:a5:23:2d:44:4d:38:e3:e4: 6a:40:f9:e7:e0:b2:04:55:be:9a:c6:56:da:02:45: 78:11:cc:ec:73:84:19:2a:eb:5a:9e:ef:04:c9:c0: fc:58:aa:43:9d:2b:26:6d:d4:cb:9f:66:a5:6a:73: 87:77:c1:47:8b:17:09:4f:d1:ba:43:5f:83:a0:f2: 66:1b:87:f7:d5:32:06:3f:55:b3:f1:ea:97:be:a4: 6e:04:f8:a6:cf:82:b8:3a:d8:cf:ed:ac:2b:aa:18: 29:e2:36:a0:6e:72:4f:d2:98:8f:ac:92:17:d5:6e: d2:4c:35:b3:f3:40:02:84:a6:98:0e:03:91:2f:48: 40:bb:fa:64:84:a8:12:ef:41:b0:69:77:64:66:7c: 9a:8e:54:f7:9e:b8:3d:e0:ef:c6:ea:69:2f:6a:6f: 99:27:1b:99:8d:28:6f:ef:4d:3c:5b:77:cc:54:07: 53:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:7B:C0:65:B2:3A:86:8B:69:3B:C1:A2:74:CE:44:EF:B6:3D:24:8C X509v3 Authority Key Identifier: keyid:D5:C9:29:9A:E0:0F:00:35:70:4B:10:A8:43:10:B3:C3:DA:D9:BE:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:17:61:25:2f:37:1a:ea:26:78:4b:c8:2b:88:8c:64:07:2d: 52:9b:a2:a5:7d:86:b4:db:c7:1f:51:4d:4a:fa:6f:32:4f:59: 5f:89:a5:02:94:49:20:eb:2d:16:0c:a5:bb:ef:1e:1d:1c:fe: 2e:e6:ab:50:f6:55:d3:c4:37:64:4e:ec:85:b9:9c:64:0c:4e: f7:6b:ae:19:87:24:e7:e4:ba:f4:5e:b6:ff:46:d4:78:e3:d1: 9a:c8:a9:89:a3:f0:44:b8:d3:8e:a6:b2:eb:db:e5:52:11:01: e5:cb:70:03:05:5c:89:fb:78:8e:61:23:62:d3:f7:ca:d6:f4: f4:d7:b5:51:73:d8:9d:77:30:27:b0:a9:e6:71:19:4a:dd:bb: b1:9e:6e:76:d3:02:47:b4:0d:98:ef:8c:d3:27:26:54:12:d0: 31:62:2e:5f:de:87:e0:20:84:b3:0e:d8:63:21:cf:b8:f4:f9: 21:db:3c:ac:25:4b:45:52:35:7f:7f:d1:20:e7:40:49:79:6a: 35:4d:10:78:d7:d7:76:4e:91:52:40:da:cf:21:25:43:0f:11: 0c:97:76:03:e4:d1:3f:24:f2:c4:a7:96:e6:0c:60:e5:c8:50: 79:c4:77:b3:7d:a7:4b:13:16:70:60:92:bf:63:39:1e:7b:ff: 14:ac:11:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKsdR9pqypJ+Rsi1RKs9k9XJDqTAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVDOTI5OUFFMDBGMDAzNTcwNEIxMEE4NDMxMEIzQzNE QUQ5QkUxOTAeFw0yNjAzMDcxODU3MzdaFw0yNjAzMTAxOTU2MzdaMDMxMTAvBgNV BAMTKEQyN0JDMDY1QjIzQTg2OEI2OTNCQzFBMjc0Q0U0NEVGQjYzRDI0OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/M3WyOpOSCPg0/jj8FxjCHcth Abka85BZa3Ktc26VwIqzCIjARgRdf8We8b2Wwy9Sc2VON61oNoW5EEEfSiV9zPbi sVNKji1fkki2eRYGw2SlIy1ETTjj5GpA+efgsgRVvprGVtoCRXgRzOxzhBkq61qe 7wTJwPxYqkOdKyZt1MufZqVqc4d3wUeLFwlP0bpDX4Og8mYbh/fVMgY/VbPx6pe+ pG4E+KbPgrg62M/trCuqGCniNqBuck/SmI+skhfVbtJMNbPzQAKEppgOA5EvSEC7 +mSEqBLvQbBpd2RmfJqOVPeeuD3g78bqaS9qb5knG5mNKG/vTTxbd8xUB1PtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0nvAZbI6hotpO8GidM5E77Y9JIwwHwYDVR0j BBgwFoAU1ckpmuAPADVwSxCoQxCzw9rZvhkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTQ0ZDk3YS1lM2ZiLTRmZmMtYjdmNy1mN2I4YjY2NTlhYzQvMS9ENUM5Mjk5QUUw MEYwMDM1NzA0QjEwQTg0MzEwQjNDM0RBRDlCRTE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDVDOTI5OUFFMDBGMDAzNTcwNEIxMEE4NDMxMEIzQzNEQUQ5 QkUxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE0NGQ5N2EtZTNmYi00ZmZjLWI3 ZjctZjdiOGI2NjU5YWM0LzEvRDVDOTI5OUFFMDBGMDAzNTcwNEIxMEE4NDMxMEIz QzNEQUQ5QkUxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAsXYSUvNxrqJnhLyCuIjGQHLVKboqV9hrTb xx9RTUr6bzJPWV+JpQKUSSDrLRYMpbvvHh0c/i7mq1D2VdPEN2RO7IW5nGQMTvdr rhmHJOfkuvRetv9G1Hjj0ZrIqYmj8ES4046msuvb5VIRAeXLcAMFXIn7eI5hI2LT 98rW9PTXtVFz2J13MCewqeZxGUrdu7GebnbTAke0DZjvjNMnJlQS0DFiLl/eh+Ag hLMO2GMhz7j0+SHbPKwlS0VSNX9/0SDnQEl5ajVNEHjX13ZOkVJA2s8hJUMPEQyX dgPk0T8k8sSnluYMYOXIUHnEd7N9p0sTFnBgkr9jOR57/xSsEXA= -----END CERTIFICATE-----Generated at Sun Mar 8 00:38:24 2026 by rpki-client