$ rpki-client -vvf repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft File: 6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft (raw, json) Hash identifier: sSx/U5erQB1qNpCfUNrJ0OlkKCx5ls+TypmzEy5RYt4= Subject key identifier: 09:39:02:48:36:75:F1:D7:17:DD:1D:E7:B2:9E:1C:87:71:EC:5F:3E Authority key identifier: 64:28:36:15:22:97:7E:C7:4F:A3:D4:EC:B6:00:9C:CF:78:C9:BC:28 Certificate issuer: /CN=6428361522977EC74FA3D4ECB6009CCF78C9BC28 Certificate serial: 7DBE4FCAD111A21CB62094E5E2276E7372D4D1DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6428361522977EC74FA3D4ECB6009CCF78C9BC28.cer Subject info access: rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft Manifest number: 0111 Signing time: Fri 06 Mar 2026 02:12:21 +0000 Manifest this update: Fri 06 Mar 2026 02:07:21 +0000 Manifest next update: Mon 09 Mar 2026 09:55:21 +0000 Files and hashes: 1: 3135372e36362e31382e302f32342d3234203d3e20313532343431.roa (hash: HY612DFm89Ly6o4e92rrpvg8mrv7ex72DLbVFNfFY0s=) 2: 6428361522977EC74FA3D4ECB6009CCF78C9BC28.crl (hash: SUPH8q0b/KBEGhtBvQ2/N+EWBYkXAb7sWb3BR2rgC/E=) 3: 3135372e36362e31392e302f32342d3234203d3e20313532343431.roa (hash: S3VXhgYtvhONpM//oPKshJPEJR4sGwHoBTyv1ewhA6c=) 4: 3135372e36362e31382e302f32332d3233203d3e20313532343431.roa (hash: RZavabWdjUisE5dZEMsjEGsR8uhGqkdjSJ50UHfdWw8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.crl rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6428361522977EC74FA3D4ECB6009CCF78C9BC28.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:be:4f:ca:d1:11:a2:1c:b6:20:94:e5:e2:27:6e:73:72:d4:d1:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6428361522977EC74FA3D4ECB6009CCF78C9BC28 Validity Not Before: Mar 6 02:07:21 2026 GMT Not After : Mar 9 09:55:21 2026 GMT Subject: CN=093902483675F1D717DD1DE7B29E1C8771EC5F3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0d:af:b5:f6:d0:21:68:ab:4a:d9:ad:69:65: ea:df:a7:3a:ed:f5:0a:68:74:83:f1:21:06:07:46: 39:68:f0:3e:85:19:15:db:80:f5:80:9b:fe:27:5e: e7:52:cf:54:88:26:72:47:34:60:d7:b8:12:c7:63: 8e:69:75:b3:6f:e7:06:7b:16:50:f6:d1:8c:22:af: 1d:85:7e:48:7c:a2:12:52:a4:c1:53:c3:fd:ab:79: 56:5a:8f:04:6b:ac:3c:e1:75:1c:5b:7d:28:0d:a8: f5:9d:5a:8d:c8:f2:51:bb:bc:ae:39:67:d6:4e:a8: 12:3d:2b:10:4c:63:3a:13:2a:d1:13:8c:fa:e5:73: 27:d9:91:ff:46:42:a4:a4:83:c1:76:25:23:86:16: 5d:cf:6b:f0:7a:89:c2:3b:06:7e:87:0e:7e:05:ba: 14:3e:3d:fc:86:1c:d0:d0:ad:95:93:fa:ec:e8:52: b8:57:80:39:a9:74:aa:ec:86:c5:74:b0:ca:cc:38: 53:a8:4a:f9:26:c3:44:17:c9:90:ed:a5:95:29:fa: f7:5a:38:bd:b7:18:4f:44:d9:60:7f:21:47:37:ea: e3:c3:1b:ec:73:19:c2:f9:46:ca:0b:aa:21:73:98: 2d:b5:e7:4c:90:45:47:46:22:30:68:e5:00:c7:02: 6f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:39:02:48:36:75:F1:D7:17:DD:1D:E7:B2:9E:1C:87:71:EC:5F:3E X509v3 Authority Key Identifier: keyid:64:28:36:15:22:97:7E:C7:4F:A3:D4:EC:B6:00:9C:CF:78:C9:BC:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6428361522977EC74FA3D4ECB6009CCF78C9BC28.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:1e:49:07:f1:b8:08:09:59:2a:f7:be:02:8e:98:e9:50:11: 08:d1:75:d4:14:5b:5b:3c:9f:29:fd:63:8e:3d:d8:f2:6e:4f: 7d:91:76:11:d5:96:bf:0b:7f:64:0d:a2:86:bc:52:7e:8d:b6: c2:0b:e0:c1:cf:21:58:90:7c:b8:fc:6a:ae:81:2c:61:8a:28: c0:73:7f:0b:31:20:4a:15:69:27:83:da:4a:98:14:02:f6:7f: f8:3d:2d:96:43:aa:0a:f4:89:03:96:90:e8:d1:39:71:cc:9c: 9a:ce:48:cb:74:c4:60:2b:fc:dd:35:1c:02:62:ff:3c:b2:02: 59:f3:e1:e7:d2:f0:45:26:2d:40:97:de:7f:2d:d4:3f:c2:34: 36:6b:4c:5f:9b:26:42:19:a8:50:46:ec:c7:32:2d:88:81:f0: 13:cf:34:ce:5c:29:0b:b8:b8:de:b4:c6:b3:a4:d2:c2:8d:f1: 10:52:8c:44:f2:e9:49:fc:a7:f3:a0:4f:be:b1:f6:ac:29:cd: a9:d8:a5:bd:11:6e:10:c6:ff:74:19:e2:e2:22:a9:2d:10:0f: 66:5c:f7:b8:51:2a:12:c1:25:65:58:6f:0a:c5:56:90:a7:2a: 80:c2:12:c3:e9:61:f6:96:3f:c3:0b:ce:a5:c3:31:a7:9a:65: cb:2a:ce:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfb5PytERohy2IJTl4iduc3LU0d0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQyODM2MTUyMjk3N0VDNzRGQTNENEVDQjYwMDlDQ0Y3 OEM5QkMyODAeFw0yNjAzMDYwMjA3MjFaFw0yNjAzMDkwOTU1MjFaMDMxMTAvBgNV BAMTKDA5MzkwMjQ4MzY3NUYxRDcxN0REMURFN0IyOUUxQzg3NzFFQzVGM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Da+19tAhaKtK2a1pZerfpzrt 9QpodIPxIQYHRjlo8D6FGRXbgPWAm/4nXudSz1SIJnJHNGDXuBLHY45pdbNv5wZ7 FlD20Ywirx2Ffkh8ohJSpMFTw/2reVZajwRrrDzhdRxbfSgNqPWdWo3I8lG7vK45 Z9ZOqBI9KxBMYzoTKtETjPrlcyfZkf9GQqSkg8F2JSOGFl3Pa/B6icI7Bn6HDn4F uhQ+PfyGHNDQrZWT+uzoUrhXgDmpdKrshsV0sMrMOFOoSvkmw0QXyZDtpZUp+vda OL23GE9E2WB/IUc36uPDG+xzGcL5RsoLqiFzmC2150yQRUdGIjBo5QDHAm/9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCTkCSDZ18dcX3R3nsp4ch3HsXz4wHwYDVR0j BBgwFoAUZCg2FSKXfsdPo9TstgCcz3jJvCgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzQ0NjU2My0wOWJjLTQ5MWItOGZiOS1mZDM5ZjA5MTY2OWQvMC82NDI4MzYxNTIy OTc3RUM3NEZBM0Q0RUNCNjAwOUNDRjc4QzlCQzI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjQyODM2MTUyMjk3N0VDNzRGQTNENEVDQjYwMDlDQ0Y3OEM5 QkMyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzc0NDY1NjMtMDliYy00OTFiLThm YjktZmQzOWYwOTE2NjlkLzAvNjQyODM2MTUyMjk3N0VDNzRGQTNENEVDQjYwMDlD Q0Y3OEM5QkMyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACIeSQfxuAgJWSr3vgKOmOlQEQjRddQUW1s8 nyn9Y4492PJuT32RdhHVlr8Lf2QNooa8Un6NtsIL4MHPIViQfLj8aq6BLGGKKMBz fwsxIEoVaSeD2kqYFAL2f/g9LZZDqgr0iQOWkOjROXHMnJrOSMt0xGAr/N01HAJi /zyyAlnz4efS8EUmLUCX3n8t1D/CNDZrTF+bJkIZqFBG7McyLYiB8BPPNM5cKQu4 uN60xrOk0sKN8RBSjETy6Un8p/OgT76x9qwpzanYpb0RbhDG/3QZ4uIiqS0QD2Zc 97hRKhLBJWVYbwrFVpCnKoDCEsPpYfaWP8MLzqXDMaeaZcsqzrk= -----END CERTIFICATE-----Generated at Sat Mar 7 17:52:18 2026 by rpki-client