$ rpki-client -vvf repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft File: D1553F19BBD3B70719E720005FDB3145CC910A1F.mft (raw, json) Hash identifier: 5OM28SB9SZT4QJWMfe2GKBAG7jNfBjiKm/eFPQflNc0= Subject key identifier: FD:30:38:A0:71:72:5E:0C:C0:47:38:2C:A2:91:8C:35:F8:CA:2A:EF Authority key identifier: D1:55:3F:19:BB:D3:B7:07:19:E7:20:00:5F:DB:31:45:CC:91:0A:1F Certificate issuer: /CN=D1553F19BBD3B70719E720005FDB3145CC910A1F Certificate serial: 1FC57CC0A7E9698CB20980B37EB5C7155C3D8CAF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft Manifest number: 0291 Signing time: Tue 24 Mar 2026 03:50:43 +0000 Manifest this update: Tue 24 Mar 2026 03:45:43 +0000 Manifest next update: Fri 27 Mar 2026 14:23:43 +0000 Files and hashes: 1: D1553F19BBD3B70719E720005FDB3145CC910A1F.crl (hash: qGZqts6khdJONF5aki7FDAABumQkzsoRzij/uZlXeaY=) 2: 3130332e3138332e35392e302f32342d3234203d3e20313439343039.roa (hash: WjcJ7E0QSWsLWoEbkMd62oz7h2Nk8rjlfX12OFJZZWw=) 3: 3130332e3138332e35382e302f32332d3233203d3e20313439343039.roa (hash: zkfW7G82q4G/1aqENxbcKsFNsfS8k4+ZqlphVmUFO1g=) 4: 3130332e3138332e35382e302f32342d3234203d3e20313439343039.roa (hash: B89ThQDBq7NFEdKxZJ9Go94Cy2gr/9mNFR+AP3UQspo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.crl rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 14:23:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:c5:7c:c0:a7:e9:69:8c:b2:09:80:b3:7e:b5:c7:15:5c:3d:8c:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1553F19BBD3B70719E720005FDB3145CC910A1F Validity Not Before: Mar 24 03:45:43 2026 GMT Not After : Mar 27 14:23:43 2026 GMT Subject: CN=FD3038A071725E0CC047382CA2918C35F8CA2AEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bb:ae:ae:0e:ac:fa:b2:f3:fe:bd:47:e5:a6: d2:26:1d:8a:e6:e7:eb:e3:17:5a:e1:b7:cb:95:39: 97:15:87:5a:3a:6d:fb:ff:42:83:3f:53:04:85:3e: 9e:5b:c6:da:c5:9b:64:68:9f:a1:99:68:ba:58:76: 86:66:7e:4d:a8:2b:6d:0c:3e:47:e4:33:fa:50:37: 1a:d6:1b:f9:18:76:93:ce:bf:95:67:83:fe:b0:0c: 45:92:24:be:40:29:d2:c6:ce:1b:f0:98:0f:de:64: d9:2e:ab:79:9a:87:99:61:e6:f8:35:c1:39:39:01: ae:d9:d5:ce:f0:6f:1b:6a:86:bf:63:67:6b:eb:9d: 86:8a:ac:ae:19:65:70:55:f5:24:f9:57:38:86:2a: bc:76:ee:5d:38:f4:a8:5c:f0:0f:9d:c2:ee:e9:c0: da:93:2f:d6:f0:1a:b7:7d:98:a7:1c:b2:dc:f4:37: fc:86:8a:ca:33:17:f9:24:31:be:37:c7:40:42:67: 2e:78:f6:35:f4:c8:eb:ba:ff:56:ba:65:06:79:ce: bc:1b:29:28:30:2e:1b:2b:89:5b:6b:30:6c:0d:df: 0f:5c:b5:6f:f4:11:25:52:c7:46:e8:f5:ec:3c:df: 9b:36:32:94:e0:38:90:45:f9:22:49:e7:73:aa:c1: c0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:30:38:A0:71:72:5E:0C:C0:47:38:2C:A2:91:8C:35:F8:CA:2A:EF X509v3 Authority Key Identifier: keyid:D1:55:3F:19:BB:D3:B7:07:19:E7:20:00:5F:DB:31:45:CC:91:0A:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:b5:04:53:4d:bf:6d:44:ca:63:75:12:f3:4f:5d:89:5e:84: 0f:53:6e:7d:3b:89:d3:46:dc:4a:9f:ae:fc:16:04:48:a8:5c: 4c:9d:5a:92:dc:39:11:74:70:1f:7a:8d:30:3b:c7:90:f0:98: 1c:cb:94:a4:92:c6:b6:b9:cd:9e:d7:22:0c:e8:db:72:bb:47: 59:65:10:86:d8:fe:c0:4b:a1:18:71:52:70:b8:90:ae:99:60: ed:89:fc:da:e8:7a:2a:22:78:97:f9:de:90:f4:af:8c:b4:7e: 46:50:f3:1a:94:ce:e6:c8:d8:0b:c0:3c:57:d0:20:59:6c:4d: fe:e1:bc:4e:22:05:03:87:5c:e5:42:b8:9d:c8:81:be:d4:ab: 22:bb:56:15:0c:c1:30:4b:6a:fa:a8:65:36:91:da:e4:11:46: d0:4f:5b:2e:37:15:4e:82:32:db:19:93:ec:6a:d5:62:84:29: 93:76:68:82:56:29:6c:92:2c:4b:b4:89:07:72:3b:4e:8c:6a: 90:28:5d:61:91:33:61:01:5e:19:18:b5:3a:a2:27:c8:40:cf: ae:e9:28:6a:a0:51:a7:e4:9f:0e:6d:ac:c9:ce:aa:81:08:82: ac:ad:d6:a0:31:02:95:ee:02:c1:9f:2a:0d:44:ca:99:bf:6d: 05:fa:1f:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH8V8wKfpaYyyCYCzfrXHFVw9jK8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDE1NTNGMTlCQkQzQjcwNzE5RTcyMDAwNUZEQjMxNDVD QzkxMEExRjAeFw0yNjAzMjQwMzQ1NDNaFw0yNjAzMjcxNDIzNDNaMDMxMTAvBgNV BAMTKEZEMzAzOEEwNzE3MjVFMENDMDQ3MzgyQ0EyOTE4QzM1RjhDQTJBRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNu66uDqz6svP+vUflptImHYrm 5+vjF1rht8uVOZcVh1o6bfv/QoM/UwSFPp5bxtrFm2Ron6GZaLpYdoZmfk2oK20M PkfkM/pQNxrWG/kYdpPOv5Vng/6wDEWSJL5AKdLGzhvwmA/eZNkuq3mah5lh5vg1 wTk5Aa7Z1c7wbxtqhr9jZ2vrnYaKrK4ZZXBV9ST5VziGKrx27l049Khc8A+dwu7p wNqTL9bwGrd9mKccstz0N/yGisozF/kkMb43x0BCZy549jX0yOu6/1a6ZQZ5zrwb KSgwLhsriVtrMGwN3w9ctW/0ESVSx0bo9ew835s2MpTgOJBF+SJJ53OqwcAhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/TA4oHFyXgzARzgsopGMNfjKKu8wHwYDVR0j BBgwFoAU0VU/GbvTtwcZ5yAAX9sxRcyRCh8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OTliNjA0Zi0xNTc4LTRhMGItOGY3YS01OGQ5ZjEzYzk3NjkvMC9EMTU1M0YxOUJC RDNCNzA3MTlFNzIwMDA1RkRCMzE0NUNDOTEwQTFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDE1NTNGMTlCQkQzQjcwNzE5RTcyMDAwNUZEQjMxNDVDQzkx MEExRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTk5YjYwNGYtMTU3OC00YTBiLThm N2EtNThkOWYxM2M5NzY5LzAvRDE1NTNGMTlCQkQzQjcwNzE5RTcyMDAwNUZEQjMx NDVDQzkxMEExRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKy1BFNNv21EymN1EvNPXYlehA9Tbn07idNG 3EqfrvwWBEioXEydWpLcORF0cB96jTA7x5DwmBzLlKSSxra5zZ7XIgzo23K7R1ll EIbY/sBLoRhxUnC4kK6ZYO2J/NroeioieJf53pD0r4y0fkZQ8xqUzubI2AvAPFfQ IFlsTf7hvE4iBQOHXOVCuJ3Igb7UqyK7VhUMwTBLavqoZTaR2uQRRtBPWy43FU6C MtsZk+xq1WKEKZN2aIJWKWySLEu0iQdyO06MapAoXWGRM2EBXhkYtTqiJ8hAz67p KGqgUafknw5trMnOqoEIgqyt1qAxApXuAsGfKg1Eypm/bQX6HxA= -----END CERTIFICATE-----Generated at Wed Mar 25 04:27:24 2026 by rpki-client