$ rpki-client -vvf repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft File: D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft (raw, json) Hash identifier: obYkIVYY9aJxwl4V+kzBVbsdWblmWlJtDRfLhLbkelc= Subject key identifier: 34:D6:4C:2C:2D:B7:99:E6:C7:AB:92:67:AA:71:F7:3C:6B:C5:C0:91 Authority key identifier: D7:6C:F6:4B:32:F2:3D:8C:4E:BF:A0:28:11:D0:B0:8A:78:C6:12:D0 Certificate issuer: /CN=D76CF64B32F23D8C4EBFA02811D0B08A78C612D0 Certificate serial: 6F80BB1ADB11ACEF0622FD17E730B3E6F07A2F57 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft Manifest number: 023B Signing time: Tue 24 Mar 2026 12:11:57 +0000 Manifest this update: Tue 24 Mar 2026 12:06:57 +0000 Manifest next update: Fri 27 Mar 2026 17:17:57 +0000 Files and hashes: 1: D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.crl (hash: sj93ZuUqiAb5sHYl8D9ffvTR03v4uym1TH/graVliZc=) 2: 3130332e3136392e362e302f32332d3234203d3e20313431313037.roa (hash: wlhhz4T86+ShRU2p6Up+KvbeI0BWxilrsa27X54ni/4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.crl rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 17:17:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:80:bb:1a:db:11:ac:ef:06:22:fd:17:e7:30:b3:e6:f0:7a:2f:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D76CF64B32F23D8C4EBFA02811D0B08A78C612D0 Validity Not Before: Mar 24 12:06:57 2026 GMT Not After : Mar 27 17:17:57 2026 GMT Subject: CN=34D64C2C2DB799E6C7AB9267AA71F73C6BC5C091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:cd:c5:3b:11:63:87:c4:8a:96:09:68:5c:91: 8e:88:75:b3:88:b7:0c:71:de:e4:ae:e2:d6:df:c4: 9c:47:7a:cb:e6:5c:ae:01:6a:99:ba:9f:f1:46:88: 4e:e8:63:34:81:b1:20:d8:b8:d0:aa:25:a1:88:fd: 99:d8:4b:34:99:66:f5:8c:9c:d8:a9:6e:a2:7a:88: 6b:50:f2:9e:e9:e2:0d:81:3b:c3:8b:c7:44:31:b7: 18:ee:3e:5c:dd:12:46:e4:c1:cc:38:73:c6:5a:30: f1:ef:17:08:37:f3:77:70:d2:b5:e0:9a:26:70:b8: 1d:82:4c:ee:03:07:5a:e3:fa:c9:98:fa:5c:5d:8b: b2:65:f4:f9:0a:3a:6e:f5:41:ab:7e:6a:12:fb:10: b9:a1:3a:08:1b:3f:e1:b5:59:37:c1:df:74:55:9c: 27:c9:90:5c:86:8d:d6:71:a5:15:59:3f:2d:81:dd: 9f:46:7f:c3:af:4a:b4:94:c3:ce:f5:be:4b:8e:f5: 8e:06:0d:fd:f5:92:27:16:26:71:0d:27:d9:c5:3f: 50:3d:8e:a4:6f:07:21:35:cf:db:6f:48:ea:2a:87: 83:f9:b6:25:49:65:94:da:19:c1:2c:60:1f:dc:f6: 57:78:50:9f:44:a3:4f:e8:fd:0f:b9:1c:b3:c5:20: 20:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D6:4C:2C:2D:B7:99:E6:C7:AB:92:67:AA:71:F7:3C:6B:C5:C0:91 X509v3 Authority Key Identifier: keyid:D7:6C:F6:4B:32:F2:3D:8C:4E:BF:A0:28:11:D0:B0:8A:78:C6:12:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:67:4e:c0:cb:83:51:3d:0b:ec:6c:52:e3:17:c9:89:9c:a1: c7:a7:82:f9:cf:f1:a7:89:08:19:67:2c:3d:05:58:74:bf:88: 61:1f:d7:59:36:df:d2:12:f9:c4:eb:96:25:2e:32:67:5e:75: 5f:47:e7:96:71:fa:b1:8e:48:56:f9:94:b5:f5:3f:19:7c:f5: 94:0e:66:fc:e4:a1:26:94:2f:da:39:d2:a3:8b:92:7c:54:46: 51:3f:cb:39:f1:71:84:e6:64:5f:47:9e:a5:e0:21:06:61:34: e7:c1:5b:00:04:38:ae:0c:bf:6a:4a:7f:9d:6f:fe:60:4f:cd: c8:b5:9e:31:a4:9b:9c:ab:3f:4a:53:b9:26:47:c0:92:84:e5: 79:af:14:b4:a2:5e:58:c8:0d:a7:58:67:86:e9:40:58:80:01: 87:8c:bd:73:21:e8:ea:60:a7:d0:0a:8c:e2:6e:e5:32:2b:2a: 56:9c:83:7e:00:b1:a2:07:35:f8:58:a5:0a:a5:4b:0a:5f:25: 34:4d:03:ea:84:84:a6:6f:63:a4:19:87:16:b4:cf:5a:4b:51: 12:cb:c3:7e:32:d5:91:f0:07:3a:75:b9:df:72:82:60:1a:05: 5c:84:3e:1a:fe:e4:87:d0:1f:02:ef:4f:c8:75:87:bf:7f:2d: 27:bb:43:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb4C7GtsRrO8GIv0X5zCz5vB6L1cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc2Q0Y2NEIzMkYyM0Q4QzRFQkZBMDI4MTFEMEIwOEE3 OEM2MTJEMDAeFw0yNjAzMjQxMjA2NTdaFw0yNjAzMjcxNzE3NTdaMDMxMTAvBgNV BAMTKDM0RDY0QzJDMkRCNzk5RTZDN0FCOTI2N0FBNzFGNzNDNkJDNUMwOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfzcU7EWOHxIqWCWhckY6IdbOI twxx3uSu4tbfxJxHesvmXK4Bapm6n/FGiE7oYzSBsSDYuNCqJaGI/ZnYSzSZZvWM nNipbqJ6iGtQ8p7p4g2BO8OLx0QxtxjuPlzdEkbkwcw4c8ZaMPHvFwg383dw0rXg miZwuB2CTO4DB1rj+smY+lxdi7Jl9PkKOm71Qat+ahL7ELmhOggbP+G1WTfB33RV nCfJkFyGjdZxpRVZPy2B3Z9Gf8OvSrSUw871vkuO9Y4GDf31kicWJnENJ9nFP1A9 jqRvByE1z9tvSOoqh4P5tiVJZZTaGcEsYB/c9ld4UJ9Eo0/o/Q+5HLPFICDlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNNZMLC23mebHq5JnqnH3PGvFwJEwHwYDVR0j BBgwFoAU12z2SzLyPYxOv6AoEdCwinjGEtAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTNlNGFmNS1hYWY1LTQ2Y2UtYjExOS1kN2U3NmRhZTIwYjgvMC9ENzZDRjY0QjMy RjIzRDhDNEVCRkEwMjgxMUQwQjA4QTc4QzYxMkQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDc2Q0Y2NEIzMkYyM0Q4QzRFQkZBMDI4MTFEMEIwOEE3OEM2 MTJEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDUzZTRhZjUtYWFmNS00NmNlLWIx MTktZDdlNzZkYWUyMGI4LzAvRDc2Q0Y2NEIzMkYyM0Q4QzRFQkZBMDI4MTFEMEIw OEE3OEM2MTJEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFhnTsDLg1E9C+xsUuMXyYmcocengvnP8aeJ CBlnLD0FWHS/iGEf11k239IS+cTrliUuMmdedV9H55Zx+rGOSFb5lLX1Pxl89ZQO ZvzkoSaUL9o50qOLknxURlE/yznxcYTmZF9HnqXgIQZhNOfBWwAEOK4Mv2pKf51v /mBPzci1njGkm5yrP0pTuSZHwJKE5XmvFLSiXljIDadYZ4bpQFiAAYeMvXMh6Opg p9AKjOJu5TIrKlacg34AsaIHNfhYpQqlSwpfJTRNA+qEhKZvY6QZhxa0z1pLURLL w34y1ZHwBzp1ud9ygmAaBVyEPhr+5IfQHwLvT8h1h79/LSe7Q8A= -----END CERTIFICATE-----Generated at Wed Mar 25 04:36:17 2026 by rpki-client