$ rpki-client -vvf repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft File: E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft (raw, json) Hash identifier: +dBuT2BUw0ia7t9e5TSAUTORNueINCT5wRV8vDGi3Ak= Subject key identifier: FB:80:0A:72:A4:0F:0C:0D:3F:2A:EF:C1:A9:C2:AC:01:9D:27:4F:28 Authority key identifier: E0:14:E6:ED:03:53:7E:45:35:65:D0:6E:7B:8A:31:AA:8A:05:25:A1 Certificate issuer: /CN=E014E6ED03537E453565D06E7B8A31AA8A0525A1 Certificate serial: 53F3CAD937120AA948519237AAE5CE5FD10D3BA8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft Manifest number: 0327 Signing time: Tue 24 Mar 2026 20:42:38 +0000 Manifest this update: Tue 24 Mar 2026 20:37:38 +0000 Manifest next update: Fri 27 Mar 2026 22:36:38 +0000 Files and hashes: 1: 3130332e3137352e33382e302f32342d3234203d3e20313534343130.roa (hash: 6lkF35ri6uYPakCCX2pr0zjkUKU+eMFqvXgf24o+vlE=) 2: 3130332e3137352e33392e302f32342d3234203d3e20323135373237.roa (hash: uShV8vRhK/SDVf3Twj+hPuhHAzUhqQGJIQPtkavd13M=) 3: E014E6ED03537E453565D06E7B8A31AA8A0525A1.crl (hash: zagVXIFPLpx1hFYjwh2ggJkuAInvrsvOyV9IfylLq5o=) 4: 3130332e3137352e33382e302f32332d3233203d3e20323135373237.roa (hash: joRtsTzluk9HUnqI3+6HvaybpCq3OAhZ2eSjEhqFFeA=) 5: 3130332e3137352e33382e302f32332d3234203d3e20313437313038.roa (hash: JG72NXt605ww3XbVNf9DT18KzObGZzgsJOiqL+ceVSI=) 6: 3130332e3137352e33382e302f32342d3234203d3e20323135373237.roa (hash: UUOaSFdZB1gNgfcBiLfpj8+sysFmMb8lGgAOYylAanI=) 7: 3130332e3137352e33392e302f32342d3234203d3e20313534343130.roa (hash: r3WK8CrHgCN8V7Zn9QuD1b2cQJfP1EGB1oRF8Yw67HM=) 8: 3130332e3137352e33382e302f32332d3233203d3e20313534343130.roa (hash: CguEl+Lysn/5KkRoQJibPhJwVyvdrOOvzPigdqH+W1o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.crl rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 22:36:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:f3:ca:d9:37:12:0a:a9:48:51:92:37:aa:e5:ce:5f:d1:0d:3b:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E014E6ED03537E453565D06E7B8A31AA8A0525A1 Validity Not Before: Mar 24 20:37:38 2026 GMT Not After : Mar 27 22:36:38 2026 GMT Subject: CN=FB800A72A40F0C0D3F2AEFC1A9C2AC019D274F28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b5:70:ca:37:71:4e:17:bd:53:1b:0b:16:14: b5:ad:6d:1a:ef:b7:ac:c4:98:d6:ef:ca:6c:f6:ba: 7b:1c:a3:3e:c0:de:28:22:43:80:c6:c3:3f:db:d7: 85:5f:ef:4d:8b:71:82:14:58:9a:ed:58:be:c1:db: 9d:91:35:5b:80:1f:7b:0d:34:98:7b:8b:0a:9b:ec: 91:16:ff:3e:d0:40:0b:a5:28:75:1d:a0:0e:b9:30: d3:13:0c:90:a8:de:08:ee:b9:f1:59:40:ed:10:05: f3:55:56:95:2a:43:89:c8:a5:b8:b8:61:60:58:ce: 96:ea:64:a3:b4:bd:c1:69:31:f4:0f:eb:60:4a:20: ef:a2:99:3c:ab:35:dc:47:9a:d9:20:c7:99:ce:6a: 09:93:1a:ed:da:f2:8e:98:78:af:e0:61:c7:23:88: 34:ab:99:70:2c:96:87:99:de:8f:fa:f9:69:31:c4: 74:a3:0e:71:0c:fb:ae:2c:0a:4d:dd:0a:13:fb:fd: 3a:d3:30:1a:ce:d0:53:36:a6:0d:76:61:ea:a3:6f: eb:2f:99:b0:15:00:21:90:f3:29:60:38:b7:b2:89: a8:59:52:64:50:0f:e2:1f:de:36:26:50:46:b2:f9: ab:97:30:f5:87:b9:ad:08:73:26:cf:05:14:bc:c5: 08:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:80:0A:72:A4:0F:0C:0D:3F:2A:EF:C1:A9:C2:AC:01:9D:27:4F:28 X509v3 Authority Key Identifier: keyid:E0:14:E6:ED:03:53:7E:45:35:65:D0:6E:7B:8A:31:AA:8A:05:25:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:61:eb:9c:3c:55:ba:88:51:1c:b0:7d:d0:a7:3f:2f:9e:c2: 07:5b:73:1f:58:44:62:ee:f7:b3:57:d3:64:b6:60:46:5f:c5: 79:5c:46:58:5e:c2:29:94:bd:6e:fd:2b:c8:28:6e:5e:9d:d1: e2:b1:a6:c2:7b:d3:28:f9:a6:37:ef:41:3b:ce:bd:4a:5b:1d: 3d:2c:d1:db:e2:45:bc:bd:1c:4f:ea:36:3b:39:31:64:d1:55: 20:27:6a:37:38:c2:9a:de:5a:9f:9f:89:1f:02:a0:a9:e8:d3: 6f:6d:3b:89:5a:d2:3a:49:06:33:dc:0d:85:f5:96:e9:39:d3: 0a:29:e0:cc:45:95:a6:ca:d9:f2:0e:60:59:11:08:38:b6:63: c4:b4:48:95:b7:e4:06:bd:0c:9f:ca:ed:7b:d5:b2:83:97:e1: c5:2b:ee:a8:3b:be:29:20:3d:7b:af:a7:83:5f:57:a5:61:f2: 66:1d:dc:8f:51:6c:13:18:76:b4:e8:79:7a:43:f7:64:de:51: f6:ae:6b:0e:54:38:69:03:0e:dc:44:a3:f3:ef:73:6b:01:96: 99:cd:80:cd:2f:25:30:08:08:ba:81:1d:cd:d1:1b:77:cc:00: 5b:23:81:c2:3a:8d:bd:fb:27:f4:da:1d:88:24:23:f3:10:aa: e4:44:67:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU/PK2TcSCqlIUZI3quXOX9ENO6gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTAxNEU2RUQwMzUzN0U0NTM1NjVEMDZFN0I4QTMxQUE4 QTA1MjVBMTAeFw0yNjAzMjQyMDM3MzhaFw0yNjAzMjcyMjM2MzhaMDMxMTAvBgNV BAMTKEZCODAwQTcyQTQwRjBDMEQzRjJBRUZDMUE5QzJBQzAxOUQyNzRGMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhtXDKN3FOF71TGwsWFLWtbRrv t6zEmNbvymz2unscoz7A3igiQ4DGwz/b14Vf702LcYIUWJrtWL7B252RNVuAH3sN NJh7iwqb7JEW/z7QQAulKHUdoA65MNMTDJCo3gjuufFZQO0QBfNVVpUqQ4nIpbi4 YWBYzpbqZKO0vcFpMfQP62BKIO+imTyrNdxHmtkgx5nOagmTGu3a8o6YeK/gYccj iDSrmXAsloeZ3o/6+WkxxHSjDnEM+64sCk3dChP7/TrTMBrO0FM2pg12Yeqjb+sv mbAVACGQ8ylgOLeyiahZUmRQD+If3jYmUEay+auXMPWHua0IcybPBRS8xQjNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+4AKcqQPDA0/Ku/BqcKsAZ0nTygwHwYDVR0j BBgwFoAU4BTm7QNTfkU1ZdBue4oxqooFJaEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YmIyOTM3OC00NWYwLTQ5ZDMtYTZhZi01NzNiZTdkY2E2ZDAvMC9FMDE0RTZFRDAz NTM3RTQ1MzU2NUQwNkU3QjhBMzFBQThBMDUyNUExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTAxNEU2RUQwMzUzN0U0NTM1NjVEMDZFN0I4QTMxQUE4QTA1 MjVBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGJiMjkzNzgtNDVmMC00OWQzLWE2 YWYtNTczYmU3ZGNhNmQwLzAvRTAxNEU2RUQwMzUzN0U0NTM1NjVEMDZFN0I4QTMx QUE4QTA1MjVBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH1h65w8VbqIURywfdCnPy+ewgdbcx9YRGLu 97NX02S2YEZfxXlcRlhewimUvW79K8gobl6d0eKxpsJ70yj5pjfvQTvOvUpbHT0s 0dviRby9HE/qNjs5MWTRVSAnajc4wpreWp+fiR8CoKno029tO4la0jpJBjPcDYX1 luk50wop4MxFlabK2fIOYFkRCDi2Y8S0SJW35Aa9DJ/K7XvVsoOX4cUr7qg7vikg PXuvp4NfV6Vh8mYd3I9RbBMYdrToeXpD92TeUfauaw5UOGkDDtxEo/Pvc2sBlpnN gM0vJTAICLqBHc3RG3fMAFsjgcI6jb37J/TaHYgkI/MQquREZ0o= -----END CERTIFICATE-----Generated at Thu Mar 26 18:56:43 2026 by rpki-client