$ rpki-client -vvf repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft File: E7D91E7B841DB274E77E823084312F8B78A5C951.mft (raw, json) Hash identifier: Vw3ronFDbzZuPE2y09qTc+/F8jMZSPAZmi1O5P4Oyiw= Subject key identifier: 63:CF:BD:3F:8F:0F:6B:65:9A:9B:B4:AE:9B:99:EB:E0:97:09:68:56 Authority key identifier: E7:D9:1E:7B:84:1D:B2:74:E7:7E:82:30:84:31:2F:8B:78:A5:C9:51 Certificate issuer: /CN=E7D91E7B841DB274E77E823084312F8B78A5C951 Certificate serial: 02184EC3125D58C9FB2FB7ECFC2B90DC074EBF8B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7D91E7B841DB274E77E823084312F8B78A5C951.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft Manifest number: 0523 Signing time: Tue 24 Mar 2026 22:51:45 +0000 Manifest this update: Tue 24 Mar 2026 22:46:45 +0000 Manifest next update: Sat 28 Mar 2026 00:15:45 +0000 Files and hashes: 1: 3130332e3134312e3233382e302f32332d3234203d3e20313339333637.roa (hash: Q8AiVS513YZaJstY9RUzjxicepMe2vYlP+usoxO41hE=) 2: 323030313a6466313a316338303a3a2f34382d3438203d3e20313339333637.roa (hash: FLALrXW88OdyfJgNAdKbgu+otxNBlGdrwAiQnaIoTaE=) 3: E7D91E7B841DB274E77E823084312F8B78A5C951.crl (hash: fde3hWmiK+8ktabf/8fWBiPWmI52vnEMMtad4fxd4AE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.crl rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7D91E7B841DB274E77E823084312F8B78A5C951.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 00:15:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:18:4e:c3:12:5d:58:c9:fb:2f:b7:ec:fc:2b:90:dc:07:4e:bf:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7D91E7B841DB274E77E823084312F8B78A5C951 Validity Not Before: Mar 24 22:46:45 2026 GMT Not After : Mar 28 00:15:45 2026 GMT Subject: CN=63CFBD3F8F0F6B659A9BB4AE9B99EBE097096856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5b:19:c3:3e:81:a6:de:57:74:0e:15:c1:f2: e1:06:18:46:fb:3a:4e:7c:46:35:18:bc:36:ab:b7: 4f:63:33:8b:12:c8:6a:02:d5:a1:ff:29:fe:65:75: ce:27:2e:6e:e1:71:a5:94:66:e3:38:62:df:05:df: ea:1b:3e:37:21:db:48:37:e2:6c:8c:5f:9f:8f:10: c6:01:15:f9:8d:e6:23:40:c6:2e:c3:94:8c:34:c9: 6e:63:04:eb:88:c8:da:c5:c6:fe:0b:00:66:43:82: 5c:20:fe:6e:cb:9a:cb:09:55:42:70:1e:f1:6c:b9: d3:56:01:de:50:d0:c9:95:4b:6b:6b:71:a2:ff:c5: b2:b9:cc:6d:dc:46:26:1e:08:cd:07:20:c6:3c:7c: 8d:60:bc:cb:9a:51:7a:ce:03:b0:ad:44:5b:ac:fe: 25:64:81:51:b3:11:ac:7a:2c:cb:6c:da:e4:59:4d: f8:3c:fc:8a:ff:a4:a5:1d:39:d5:b5:cc:18:90:20: 5e:e0:e2:d3:9c:09:8d:11:95:f6:cb:0e:91:fd:54: c7:b9:40:e9:ee:b6:2e:32:18:cb:14:a5:46:f7:87: 98:f8:94:a7:99:3f:a2:4e:77:72:6f:3a:74:d3:9b: dc:03:0a:99:14:1c:d4:f8:f1:a3:b0:d4:7b:de:69: ad:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:CF:BD:3F:8F:0F:6B:65:9A:9B:B4:AE:9B:99:EB:E0:97:09:68:56 X509v3 Authority Key Identifier: keyid:E7:D9:1E:7B:84:1D:B2:74:E7:7E:82:30:84:31:2F:8B:78:A5:C9:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7D91E7B841DB274E77E823084312F8B78A5C951.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:12:0f:32:1d:b4:9c:83:2f:0f:4d:5e:7c:1a:fa:29:67:87: 88:5d:7c:f4:57:91:b5:ab:a5:5c:d4:3d:a1:04:e3:ea:c1:f6: 9f:24:a2:35:0f:c8:9a:12:1d:6a:b2:1e:e2:15:c0:fe:31:2f: 0e:47:f4:b7:75:71:07:3d:7f:a2:5c:89:06:35:df:1a:64:5a: a5:69:7e:52:0f:7e:5b:e8:22:42:af:43:54:b1:cf:a5:01:c4: 2c:7f:a2:43:6b:22:4d:35:0a:a1:a9:ed:99:32:a0:5d:a3:d5: 3e:23:92:a7:44:48:12:76:4b:02:23:ae:c4:2e:33:16:55:47: d1:da:98:82:dd:94:5b:05:88:e6:63:84:be:ed:6e:30:aa:95: 64:11:ac:a1:40:d5:ad:d0:60:9a:0e:ca:1b:3f:ce:1e:df:ce: 81:f2:9a:4d:df:9d:a4:d3:79:e1:c4:c9:ff:f6:47:77:ee:76: d4:39:01:99:44:e6:01:ce:92:3b:62:b1:c2:fe:59:3d:73:d6: 75:89:2d:1a:03:18:bf:2f:85:d4:0f:df:1d:80:7c:45:1a:02: cf:40:61:1c:3c:b0:b7:a9:fb:91:ac:ed:12:f4:06:f5:5e:82: 9c:49:98:82:c6:28:16:c9:76:c3:16:09:8d:da:c6:75:e2:a4: 91:dc:d3:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAhhOwxJdWMn7L7fs/CuQ3AdOv4swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTdEOTFFN0I4NDFEQjI3NEU3N0U4MjMwODQzMTJGOEI3 OEE1Qzk1MTAeFw0yNjAzMjQyMjQ2NDVaFw0yNjAzMjgwMDE1NDVaMDMxMTAvBgNV BAMTKDYzQ0ZCRDNGOEYwRjZCNjU5QTlCQjRBRTlCOTlFQkUwOTcwOTY4NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUWxnDPoGm3ld0DhXB8uEGGEb7 Ok58RjUYvDart09jM4sSyGoC1aH/Kf5ldc4nLm7hcaWUZuM4Yt8F3+obPjch20g3 4myMX5+PEMYBFfmN5iNAxi7DlIw0yW5jBOuIyNrFxv4LAGZDglwg/m7LmssJVUJw HvFsudNWAd5Q0MmVS2trcaL/xbK5zG3cRiYeCM0HIMY8fI1gvMuaUXrOA7CtRFus /iVkgVGzEax6LMts2uRZTfg8/Ir/pKUdOdW1zBiQIF7g4tOcCY0RlfbLDpH9VMe5 QOnuti4yGMsUpUb3h5j4lKeZP6JOd3JvOnTTm9wDCpkUHNT48aOw1Hveaa3hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY8+9P48Pa2Wam7Sum5nr4JcJaFYwHwYDVR0j BBgwFoAU59kee4QdsnTnfoIwhDEvi3ilyVEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTcwODNhYi0yNzBhLTRiMGEtOGU1NS1hNDVlMWNmMWFmZDUvMC9FN0Q5MUU3Qjg0 MURCMjc0RTc3RTgyMzA4NDMxMkY4Qjc4QTVDOTUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTdEOTFFN0I4NDFEQjI3NEU3N0U4MjMwODQzMTJGOEI3OEE1 Qzk1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE3MDgzYWItMjcwYS00YjBhLThl NTUtYTQ1ZTFjZjFhZmQ1LzAvRTdEOTFFN0I4NDFEQjI3NEU3N0U4MjMwODQzMTJG OEI3OEE1Qzk1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGQSDzIdtJyDLw9NXnwa+ilnh4hdfPRXkbWr pVzUPaEE4+rB9p8kojUPyJoSHWqyHuIVwP4xLw5H9Ld1cQc9f6JciQY13xpkWqVp flIPflvoIkKvQ1Sxz6UBxCx/okNrIk01CqGp7ZkyoF2j1T4jkqdESBJ2SwIjrsQu MxZVR9HamILdlFsFiOZjhL7tbjCqlWQRrKFA1a3QYJoOyhs/zh7fzoHymk3fnaTT eeHEyf/2R3fudtQ5AZlE5gHOkjtiscL+WT1z1nWJLRoDGL8vhdQP3x2AfEUaAs9A YRw8sLep+5Gs7RL0BvVegpxJmILGKBbJdsMWCY3axnXipJHc0+w= -----END CERTIFICATE-----Generated at Thu Mar 26 16:57:03 2026 by rpki-client