$ rpki-client -vvf repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft File: D296B71263A794DB76A99329A0A6CD91F03F997C.mft (raw, json) Hash identifier: SpzhlsVbenGg93l17/UdHuIUANEDvORTw2VVB4GZRIQ= Subject key identifier: BD:42:A6:72:B0:CC:CF:09:DF:44:D6:BF:8A:7F:B0:55:81:D6:51:F4 Authority key identifier: D2:96:B7:12:63:A7:94:DB:76:A9:93:29:A0:A6:CD:91:F0:3F:99:7C Certificate issuer: /CN=D296B71263A794DB76A99329A0A6CD91F03F997C Certificate serial: 2EFFD40E018A6921325B86C7F4BA9C3E9856E2D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft Manifest number: 055C Signing time: Sun 22 Mar 2026 13:10:04 +0000 Manifest this update: Sun 22 Mar 2026 13:05:04 +0000 Manifest next update: Wed 25 Mar 2026 19:04:04 +0000 Files and hashes: 1: 3230332e3230372e35322e302f32322d3234203d3e203138333531.roa (hash: GkkNG9FcAuiztsaFs7LArOPHFVmugjMRyr9b42+liyc=) 2: D296B71263A794DB76A99329A0A6CD91F03F997C.crl (hash: 3CyA8103k7qF80gaKuYkIHFhrKRSD+pU3HASA5jq9bc=) 3: 3130332e3233312e3130382e302f32322d3234203d3e203138333531.roa (hash: H/9gUkMoKOxaM6bJMIhdfazqxPd02FQG7yEvZqg/6f4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.crl rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Mar 2026 19:04:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:ff:d4:0e:01:8a:69:21:32:5b:86:c7:f4:ba:9c:3e:98:56:e2:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D296B71263A794DB76A99329A0A6CD91F03F997C Validity Not Before: Mar 22 13:05:04 2026 GMT Not After : Mar 25 19:04:04 2026 GMT Subject: CN=BD42A672B0CCCF09DF44D6BF8A7FB05581D651F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2b:29:dd:e6:55:a4:76:fb:94:ca:73:dd:b5: e2:6c:a8:86:c6:a9:a9:75:5d:a8:87:e0:ba:ec:c9: d3:17:ae:d1:f3:7a:4e:82:e3:37:a7:76:4b:3d:d9: de:2b:c2:81:b5:ab:d4:21:3d:3f:2e:56:30:5b:7e: c0:4b:d7:c9:27:a5:73:55:3d:1d:f9:76:b9:f5:68: cb:bf:60:3b:1f:a6:81:93:66:aa:1b:65:3c:9a:10: 5a:ef:95:a0:d5:d5:99:1f:b0:1e:65:4a:7c:48:42: 45:7a:29:fe:43:9e:95:9a:82:fb:62:e8:09:e0:69: 96:71:d7:d4:7a:e7:b0:07:09:2c:39:96:84:f6:02: 71:89:61:71:8a:e4:1f:a7:a0:6a:2c:61:39:fc:0b: 91:eb:8a:46:85:42:05:b2:09:37:0a:24:44:b4:c5: 93:fa:ef:fc:87:9a:6c:e5:44:a6:12:be:39:1d:7c: b5:da:6b:ef:a8:13:ad:18:2a:ae:ce:75:f4:4e:7e: 94:23:3c:c4:24:6c:63:2c:16:80:81:52:6c:df:c6: 05:1a:22:47:c8:40:d2:46:5c:7a:57:84:cf:49:b4: 00:bf:d2:a8:52:88:79:6d:5d:d2:92:cb:0c:50:2f: 7d:8c:c1:f3:09:a7:71:2a:a2:c8:ee:d8:7e:6e:f2: 26:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:42:A6:72:B0:CC:CF:09:DF:44:D6:BF:8A:7F:B0:55:81:D6:51:F4 X509v3 Authority Key Identifier: keyid:D2:96:B7:12:63:A7:94:DB:76:A9:93:29:A0:A6:CD:91:F0:3F:99:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:12:4c:88:2e:fd:b5:38:32:9b:c0:18:e0:69:7c:d9:db:73: 4f:03:4b:6c:41:36:cf:75:ad:1b:50:8e:8b:33:bd:73:93:de: f9:a3:06:00:f4:da:b3:ba:e0:11:07:d0:13:e3:36:53:35:ed: 11:2c:f1:e0:a0:e2:97:d9:08:00:2a:b4:ec:f7:bb:97:28:8a: bb:b7:f2:81:ba:04:99:46:c4:31:76:ca:8a:c9:13:62:f2:1f: 89:3a:b2:f5:e8:74:e3:a6:58:37:f1:0a:b4:a2:dd:a5:e0:a6: f9:d3:3e:a2:6e:64:96:35:b6:80:dd:0a:48:c8:0f:76:99:43: 64:57:4e:88:58:f3:04:49:e4:d9:ca:3d:b1:45:94:0a:a6:6e: c4:b0:f0:5c:ab:b4:1d:ce:70:86:da:77:99:39:41:92:6a:51: f4:48:fc:71:00:10:56:a9:d5:42:bb:0a:b1:f5:ed:d5:e2:6d: 78:0b:31:4c:d8:31:94:ae:a4:d8:d5:16:17:fb:8d:60:74:87: f9:f8:2d:90:61:85:e3:de:67:93:28:88:01:63:9b:81:3b:c2: 17:20:58:de:8d:79:2e:d5:bc:9f:1d:97:36:81:c5:a4:74:e3: 24:3b:ed:4d:93:fa:de:6b:41:f8:8c:5b:d9:69:b4:6b:9e:58: da:af:e5:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULv/UDgGKaSEyW4bH9LqcPphW4tYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI5NkI3MTI2M0E3OTREQjc2QTk5MzI5QTBBNkNEOTFG MDNGOTk3QzAeFw0yNjAzMjIxMzA1MDRaFw0yNjAzMjUxOTA0MDRaMDMxMTAvBgNV BAMTKEJENDJBNjcyQjBDQ0NGMDlERjQ0RDZCRjhBN0ZCMDU1ODFENjUxRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgKynd5lWkdvuUynPdteJsqIbG qal1XaiH4LrsydMXrtHzek6C4zendks92d4rwoG1q9QhPT8uVjBbfsBL18knpXNV PR35drn1aMu/YDsfpoGTZqobZTyaEFrvlaDV1ZkfsB5lSnxIQkV6Kf5DnpWagvti 6AngaZZx19R657AHCSw5loT2AnGJYXGK5B+noGosYTn8C5HrikaFQgWyCTcKJES0 xZP67/yHmmzlRKYSvjkdfLXaa++oE60YKq7OdfROfpQjPMQkbGMsFoCBUmzfxgUa IkfIQNJGXHpXhM9JtAC/0qhSiHltXdKSywxQL32MwfMJp3Eqosju2H5u8iZ1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvUKmcrDMzwnfRNa/in+wVYHWUfQwHwYDVR0j BBgwFoAU0pa3EmOnlNt2qZMpoKbNkfA/mXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 M2Y3NWU5OC0xNGVmLTQ0NTctOTRmMy1lNWI3M2E5MjJmYzUvMC9EMjk2QjcxMjYz QTc5NERCNzZBOTkzMjlBMEE2Q0Q5MUYwM0Y5OTdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI5NkI3MTI2M0E3OTREQjc2QTk5MzI5QTBBNkNEOTFGMDNG OTk3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTNmNzVlOTgtMTRlZi00NDU3LTk0 ZjMtZTViNzNhOTIyZmM1LzAvRDI5NkI3MTI2M0E3OTREQjc2QTk5MzI5QTBBNkNE OTFGMDNGOTk3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAASTIgu/bU4MpvAGOBpfNnbc08DS2xBNs91 rRtQjoszvXOT3vmjBgD02rO64BEH0BPjNlM17REs8eCg4pfZCAAqtOz3u5coiru3 8oG6BJlGxDF2yorJE2LyH4k6svXodOOmWDfxCrSi3aXgpvnTPqJuZJY1toDdCkjI D3aZQ2RXTohY8wRJ5NnKPbFFlAqmbsSw8FyrtB3OcIbad5k5QZJqUfRI/HEAEFap 1UK7CrH17dXibXgLMUzYMZSupNjVFhf7jWB0h/n4LZBhhePeZ5MoiAFjm4E7whcg WN6NeS7VvJ8dlzaBxaR04yQ77U2T+t5rQfiMW9lptGueWNqv5SE= -----END CERTIFICATE-----Generated at Tue Mar 24 08:48:50 2026 by rpki-client