$ rpki-client -vvf repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.mft File: E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.mft (raw, json) Hash identifier: 4RyFr6ZEi+rF4832qD/68IHYP+MYoBDNeC7aHCeYWvs= Subject key identifier: AD:48:49:E8:99:46:49:4D:DC:85:F1:42:E3:5E:50:13:17:9A:8C:9F Authority key identifier: E7:DC:BB:5E:91:2C:56:AB:C8:9C:BB:C8:FA:42:B5:E6:3D:15:2A:F4 Certificate issuer: /CN=E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4 Certificate serial: 311C64CBB75C093AC409F82AB32BD5F35A121395 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.mft Manifest number: 0563 Signing time: Wed 25 Mar 2026 06:52:45 +0000 Manifest this update: Wed 25 Mar 2026 06:47:45 +0000 Manifest next update: Sat 28 Mar 2026 09:35:45 +0000 Files and hashes: 1: E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.crl (hash: F39KuM8KsNCpaYqoD2pxAYfcvv5Rjh0L/h/Z7eWTLBc=) 2: 3130332e3133392e3138362e302f32342d3234203d3e20313338383634.roa (hash: hCqKQAmBft8A8taUBcT8sOYve7SjkWXpgzjj9NA6B/s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.crl rsync://repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 09:35:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:1c:64:cb:b7:5c:09:3a:c4:09:f8:2a:b3:2b:d5:f3:5a:12:13:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4 Validity Not Before: Mar 25 06:47:45 2026 GMT Not After : Mar 28 09:35:45 2026 GMT Subject: CN=AD4849E89946494DDC85F142E35E5013179A8C9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:50:bf:37:92:6c:2c:2b:2a:ae:de:9c:99:c1: 53:84:68:ad:1e:24:52:ad:ca:b8:0b:07:77:48:fb: 0f:d0:ef:a7:1e:4a:9c:51:97:88:2a:81:50:8c:04: 31:12:15:7c:eb:e0:40:44:53:10:b5:1b:d9:ca:1e: 50:be:13:17:4b:b6:44:d4:be:e2:3a:3d:42:12:3a: 79:ce:81:71:37:bf:c2:b9:75:ed:e6:f1:1d:90:62: 8a:6f:b5:44:a6:15:d8:ff:9e:38:74:7e:78:02:6d: e8:40:01:9b:42:9e:c7:00:c3:b6:86:c9:da:05:1c: bd:e7:cc:d3:07:6e:d2:5b:f0:84:f4:36:91:de:a7: 21:6b:ac:e3:67:b1:f7:87:42:c6:67:76:04:b7:49: 21:a4:7c:79:4d:76:69:3c:8b:fa:e0:2d:e8:60:12: 18:bf:d0:ad:9f:6d:3a:2a:b6:2b:56:02:71:7a:1f: 13:a3:12:fe:81:93:d1:5b:6e:f9:79:cc:ad:c7:5e: 6e:4e:dd:99:e1:12:90:1c:ba:44:79:43:7e:01:6f: e3:3f:f5:36:8c:c4:5e:2b:ff:82:7d:78:3c:71:bb: 65:d6:02:b0:74:e4:b5:2c:8b:52:7b:1c:f9:63:80: 7a:72:e4:d5:5a:0f:ed:55:19:6a:9b:02:27:8e:3d: 7b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:48:49:E8:99:46:49:4D:DC:85:F1:42:E3:5E:50:13:17:9A:8C:9F X509v3 Authority Key Identifier: keyid:E7:DC:BB:5E:91:2C:56:AB:C8:9C:BB:C8:FA:42:B5:E6:3D:15:2A:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:a5:1a:99:85:59:2a:36:4b:bf:08:c8:ea:e3:16:b3:fe:c1: 51:8a:50:46:6c:76:da:44:24:73:de:c7:66:00:44:e0:95:5a: 31:a5:fc:ed:df:76:0a:cb:52:16:f7:bf:b4:b8:18:03:dd:f7: 69:8d:05:c2:85:a1:95:76:da:6c:9e:e2:12:6e:b7:71:48:ab: fe:00:d9:dc:3c:c2:d0:8e:60:64:67:c4:0d:f1:d7:bb:3a:18: 5e:c3:64:04:61:f1:00:90:26:44:7b:f7:09:68:15:1c:8c:76: 84:86:c1:03:7f:cc:51:f4:67:2b:54:71:80:87:e0:0a:a6:a0: b2:9e:43:32:6d:f8:47:f4:0c:76:56:c8:7e:a7:55:36:e2:dd: 7d:bf:bc:b9:4c:25:67:b4:23:54:e0:80:2b:77:ea:43:b2:99: bd:c6:b2:e3:9f:60:2d:89:92:ca:c3:70:f2:29:3e:20:9a:89: 23:c1:b9:67:47:73:48:49:bb:a2:66:1c:60:ad:4a:0f:fa:8d: 66:09:60:ee:58:cf:01:22:ea:9e:88:bf:37:39:af:dc:13:7d: fc:e6:35:2e:68:85:b4:1b:2e:04:98:1e:96:5b:67:4d:0e:99: 46:4a:57:11:25:aa:5e:4f:d9:d2:1d:6b:36:fc:82:14:fe:42: fb:95:01:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMRxky7dcCTrECfgqsyvV81oSE5UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTdEQ0JCNUU5MTJDNTZBQkM4OUNCQkM4RkE0MkI1RTYz RDE1MkFGNDAeFw0yNjAzMjUwNjQ3NDVaFw0yNjAzMjgwOTM1NDVaMDMxMTAvBgNV BAMTKEFENDg0OUU4OTk0NjQ5NEREQzg1RjE0MkUzNUU1MDEzMTc5QThDOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8UL83kmwsKyqu3pyZwVOEaK0e JFKtyrgLB3dI+w/Q76ceSpxRl4gqgVCMBDESFXzr4EBEUxC1G9nKHlC+ExdLtkTU vuI6PUISOnnOgXE3v8K5de3m8R2QYopvtUSmFdj/njh0fngCbehAAZtCnscAw7aG ydoFHL3nzNMHbtJb8IT0NpHepyFrrONnsfeHQsZndgS3SSGkfHlNdmk8i/rgLehg Ehi/0K2fbToqtitWAnF6HxOjEv6Bk9Fbbvl5zK3HXm5O3ZnhEpAcukR5Q34Bb+M/ 9TaMxF4r/4J9eDxxu2XWArB05LUsi1J7HPljgHpy5NVaD+1VGWqbAieOPXvlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrUhJ6JlGSU3chfFC415QExeajJ8wHwYDVR0j BBgwFoAU59y7XpEsVqvInLvI+kK15j0VKvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDM1OGIwMC0zMWNkLTQxYTMtOTUzNi1kYmIxOTNlN2Y0ZDAvMC9FN0RDQkI1RTkx MkM1NkFCQzg5Q0JCQzhGQTQyQjVFNjNEMTUyQUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTdEQ0JCNUU5MTJDNTZBQkM4OUNCQkM4RkE0MkI1RTYzRDE1 MkFGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQzNThiMDAtMzFjZC00MWEzLTk1 MzYtZGJiMTkzZTdmNGQwLzAvRTdEQ0JCNUU5MTJDNTZBQkM4OUNCQkM4RkE0MkI1 RTYzRDE1MkFGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFulGpmFWSo2S78IyOrjFrP+wVGKUEZsdtpE JHPex2YAROCVWjGl/O3fdgrLUhb3v7S4GAPd92mNBcKFoZV22mye4hJut3FIq/4A 2dw8wtCOYGRnxA3x17s6GF7DZARh8QCQJkR79wloFRyMdoSGwQN/zFH0ZytUcYCH 4AqmoLKeQzJt+Ef0DHZWyH6nVTbi3X2/vLlMJWe0I1TggCt36kOymb3GsuOfYC2J ksrDcPIpPiCaiSPBuWdHc0hJu6JmHGCtSg/6jWYJYO5YzwEi6p6Ivzc5r9wTffzm NS5ohbQbLgSYHpZbZ00OmUZKVxElql5P2dIdazb8ghT+QvuVAQU= -----END CERTIFICATE-----Generated at Thu Mar 26 12:03:42 2026 by rpki-client