$ rpki-client -vvf repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft File: C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft (raw, json) Hash identifier: vulqIECF5xPRdtZHpKPVWmoKFdvEuBBtP3gYUCD2Fv4= Subject key identifier: 24:A2:6D:0F:83:E2:A0:76:3C:93:91:60:72:45:53:FF:8C:15:38:FF Authority key identifier: C1:73:25:71:81:0C:9D:49:76:CD:1A:47:D5:58:47:26:CF:0C:C7:BD Certificate issuer: /CN=C1732571810C9D4976CD1A47D5584726CF0CC7BD Certificate serial: 4541F5FFFFD0362657D0CC2173CCCC2FB4CA24EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C1732571810C9D4976CD1A47D5584726CF0CC7BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft Manifest number: 0169 Signing time: Sat 07 Mar 2026 15:50:00 +0000 Manifest this update: Sat 07 Mar 2026 15:45:00 +0000 Manifest next update: Wed 11 Mar 2026 01:07:00 +0000 Files and hashes: 1: 3135372e31302e38392e302f32342d3234203d3e20313532303832.roa (hash: tTSkb3LmGeKJ+KOwhCOQc0e57SI0T8wvWexMRiAu1K4=) 2: C1732571810C9D4976CD1A47D5584726CF0CC7BD.crl (hash: o1JMXI3w5TBdXk/cfIGIQhcODDzhbVvz9gL6aSVtcrk=) 3: 3135372e31302e38382e302f32342d3234203d3e20313532303832.roa (hash: o3X95QY7fg1x907JEuK0Tti5YWHdGjRCJ0G2QdlLS9w=) 4: 3135372e31302e38382e302f32332d3233203d3e20313532303832.roa (hash: yHjDD2B7ssz0I97OhqKdQ6IMmUPUkeyrcBf6V6OA9mQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.crl rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C1732571810C9D4976CD1A47D5584726CF0CC7BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:41:f5:ff:ff:d0:36:26:57:d0:cc:21:73:cc:cc:2f:b4:ca:24:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1732571810C9D4976CD1A47D5584726CF0CC7BD Validity Not Before: Mar 7 15:45:00 2026 GMT Not After : Mar 11 01:07:00 2026 GMT Subject: CN=24A26D0F83E2A0763C939160724553FF8C1538FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3a:e4:34:64:b5:c5:e4:f8:bd:8c:df:99:fe: c1:6b:12:6b:64:80:c9:af:9d:dd:08:c2:94:53:84: 88:67:b7:a6:87:2f:ce:51:95:ed:e9:7b:f6:09:95: 56:bc:c3:4e:ac:92:df:75:44:0e:4b:a9:a0:dc:cc: 19:1c:88:47:17:37:86:a8:32:b6:52:1c:03:58:56: d5:35:46:cf:09:16:c2:84:59:b8:00:ab:19:26:9f: 30:bd:8c:9c:0b:fe:f0:96:21:2f:18:33:69:e6:23: ab:8a:2d:df:ac:d0:6f:33:41:16:c9:cd:e5:30:93: 1a:8b:82:f0:f4:a1:d4:3d:b8:ef:5f:b6:f7:78:4b: 0c:2b:28:4e:d4:1d:72:10:56:83:c8:f6:a5:09:a4: 58:f2:bc:52:94:e4:df:e6:0b:68:3d:e5:95:5c:7d: 42:a5:35:89:4d:a6:f3:a0:c8:09:ca:56:26:25:aa: 93:23:50:2b:49:1f:33:37:8d:79:83:a4:3e:e4:6f: 6d:ce:65:50:83:fe:16:76:46:20:27:8b:1c:1d:ae: 2e:e8:72:c2:d9:4b:3a:5a:3a:0b:f0:5c:e7:e6:97: fd:dd:0c:f4:be:c8:50:d3:ba:fe:d8:09:8d:0b:be: 67:77:c7:ec:af:b3:4e:0b:4f:31:06:cd:24:2a:2f: 3d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A2:6D:0F:83:E2:A0:76:3C:93:91:60:72:45:53:FF:8C:15:38:FF X509v3 Authority Key Identifier: keyid:C1:73:25:71:81:0C:9D:49:76:CD:1A:47:D5:58:47:26:CF:0C:C7:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C1732571810C9D4976CD1A47D5584726CF0CC7BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:64:86:ae:1b:39:59:d9:92:d0:18:0b:52:30:d7:73:69:72: fd:9d:18:54:81:90:ec:57:67:da:c7:36:65:7c:f9:10:1f:6b: de:d9:2c:88:d4:07:a4:aa:c6:90:12:c5:86:d7:f4:0e:51:5b: a2:60:e3:5f:b1:68:31:a0:3f:9c:d5:cc:75:bf:a5:c1:53:4f: 08:c9:9d:7a:9d:94:4a:7c:69:4a:35:4d:15:56:46:43:4c:71: 80:ea:55:d2:de:4d:33:88:ee:9b:07:c2:f8:bf:c3:27:6a:6b: 87:ba:11:aa:48:e6:03:de:90:c3:12:6a:8d:d6:9a:37:20:46: 81:dc:1f:d9:ff:72:07:ef:80:b3:a2:a7:56:91:cc:4a:33:df: a2:7b:5c:d4:96:dc:4c:86:5b:2c:6b:01:f8:d1:22:92:50:a9: b8:28:0e:1d:fa:15:14:aa:bf:fe:f9:d8:17:23:63:d6:cb:e0: ae:74:b7:74:1d:d9:3a:2d:4e:14:ac:39:6a:c1:c6:18:78:7b: f1:c7:a3:cd:21:d9:f2:4c:b8:1c:be:d9:ab:97:f9:42:f8:92: 10:57:e9:d5:8c:5b:9a:93:40:0b:6c:60:17:29:88:c0:dc:4e: 3e:cc:8f:a5:a6:8f:ce:88:e5:ba:72:c6:2b:92:6d:ee:f5:22: 65:11:74:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURUH1///QNiZX0Mwhc8zML7TKJOowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE3MzI1NzE4MTBDOUQ0OTc2Q0QxQTQ3RDU1ODQ3MjZD RjBDQzdCRDAeFw0yNjAzMDcxNTQ1MDBaFw0yNjAzMTEwMTA3MDBaMDMxMTAvBgNV BAMTKDI0QTI2RDBGODNFMkEwNzYzQzkzOTE2MDcyNDU1M0ZGOEMxNTM4RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeOuQ0ZLXF5Pi9jN+Z/sFrEmtk gMmvnd0IwpRThIhnt6aHL85Rle3pe/YJlVa8w06skt91RA5LqaDczBkciEcXN4ao MrZSHANYVtU1Rs8JFsKEWbgAqxkmnzC9jJwL/vCWIS8YM2nmI6uKLd+s0G8zQRbJ zeUwkxqLgvD0odQ9uO9ftvd4SwwrKE7UHXIQVoPI9qUJpFjyvFKU5N/mC2g95ZVc fUKlNYlNpvOgyAnKViYlqpMjUCtJHzM3jXmDpD7kb23OZVCD/hZ2RiAnixwdri7o csLZSzpaOgvwXOfml/3dDPS+yFDTuv7YCY0Lvmd3x+yvs04LTzEGzSQqLz29AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJKJtD4PioHY8k5FgckVT/4wVOP8wHwYDVR0j BBgwFoAUwXMlcYEMnUl2zRpH1VhHJs8Mx70wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NDdjZDVhMi1hNzQyLTQ1MGMtYjE5MC01MDBlNzU0NTIwZGUvMC9DMTczMjU3MTgx MEM5RDQ5NzZDRDFBNDdENTU4NDcyNkNGMENDN0JELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzE3MzI1NzE4MTBDOUQ0OTc2Q0QxQTQ3RDU1ODQ3MjZDRjBD QzdCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTQ3Y2Q1YTItYTc0Mi00NTBjLWIx OTAtNTAwZTc1NDUyMGRlLzAvQzE3MzI1NzE4MTBDOUQ0OTc2Q0QxQTQ3RDU1ODQ3 MjZDRjBDQzdCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACpkhq4bOVnZktAYC1Iw13Npcv2dGFSBkOxX Z9rHNmV8+RAfa97ZLIjUB6SqxpASxYbX9A5RW6Jg41+xaDGgP5zVzHW/pcFTTwjJ nXqdlEp8aUo1TRVWRkNMcYDqVdLeTTOI7psHwvi/wydqa4e6EapI5gPekMMSao3W mjcgRoHcH9n/cgfvgLOip1aRzEoz36J7XNSW3EyGWyxrAfjRIpJQqbgoDh36FRSq v/752BcjY9bL4K50t3Qd2TotThSsOWrBxhh4e/HHo80h2fJMuBy+2auX+UL4khBX 6dWMW5qTQAtsYBcpiMDcTj7Mj6Wmj86I5bpyxiuSbe71ImURdEk= -----END CERTIFICATE-----Generated at Sat Mar 7 17:50:30 2026 by rpki-client