$ rpki-client -vvf repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft File: 1678828C849BDE3472FE846308767F54ED7F8232.mft (raw, json) Hash identifier: /i0i+nIdX0bmM4cNi0xT3GmC3JeD////F8HQ0WYTSGs= Subject key identifier: EE:F8:3F:84:E8:40:91:CE:F7:7D:21:AF:B1:94:F1:F8:1F:06:30:01 Authority key identifier: 16:78:82:8C:84:9B:DE:34:72:FE:84:63:08:76:7F:54:ED:7F:82:32 Certificate issuer: /CN=1678828C849BDE3472FE846308767F54ED7F8232 Certificate serial: 040D68314CE815AA4148CC1206A88567F1FA9CC0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft Manifest number: 026B Signing time: Thu 26 Mar 2026 09:10:55 +0000 Manifest this update: Thu 26 Mar 2026 09:05:55 +0000 Manifest next update: Sun 29 Mar 2026 13:19:55 +0000 Files and hashes: 1: 3130332e3138342e3138312e302f32342d3234203d3e20313339333831.roa (hash: amwDD/Sw1ZMDPleCIfQ45Yvn4tCtR3QQCTma/8S3s6A=) 2: 1678828C849BDE3472FE846308767F54ED7F8232.crl (hash: /UhwrM1XXPNybw6eg8/DJuNSBNScCPG1UGDbclLh0uw=) 3: 3130332e3138342e3138312e302f32342d3234203d3e203435333035.roa (hash: +6suBy02VBYIADpzrjVT+EfPKFC0O5f32zxYKkvXd28=) 4: 3130332e3138342e3138302e302f32342d3234203d3e203435333035.roa (hash: bd57lftDDk/LNoDF2KUhmKXFCa0cbwtrVskfNqH8nl0=) 5: 3130332e3138342e3138302e302f32342d3234203d3e20313339333831.roa (hash: oyydVMYyKXkpYDIFM7y9X8uh6d+LkiuOE6srFgEvka0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.crl rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 13:19:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:0d:68:31:4c:e8:15:aa:41:48:cc:12:06:a8:85:67:f1:fa:9c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1678828C849BDE3472FE846308767F54ED7F8232 Validity Not Before: Mar 26 09:05:55 2026 GMT Not After : Mar 29 13:19:55 2026 GMT Subject: CN=EEF83F84E84091CEF77D21AFB194F1F81F063001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:30:ad:3c:68:64:99:5a:4a:d3:6f:72:b0:58: 36:bd:e3:1f:37:db:2c:ab:ca:f9:d6:85:e1:28:65: 04:a3:f5:96:0c:10:ec:33:24:63:b3:53:fa:b0:8f: 16:dc:ec:9a:35:3a:fd:63:98:0f:ff:9f:fb:ec:ec: dd:21:f9:b8:ba:bd:5a:37:6e:a9:23:9b:08:3a:d3: b4:cd:e2:88:e4:b6:3a:8a:18:7f:05:01:90:b0:2a: 1c:8c:d4:51:d7:67:70:bb:01:73:da:2f:c9:d7:cf: 05:00:70:62:b1:1f:95:2c:8c:f2:08:c2:6c:e4:51: a7:a8:1f:e2:d1:f5:0b:6e:21:ef:3e:48:87:9a:e0: 02:07:91:bb:b8:d3:71:ff:39:10:8b:81:21:92:7c: 63:ba:df:95:12:11:e6:e4:3b:2d:da:fd:29:12:04: 8b:7c:1f:5a:e8:ff:32:2f:1e:33:1c:e1:1e:95:e0: 12:40:73:98:e2:63:31:b5:e6:16:99:70:33:7b:0e: e6:ba:ee:9c:4c:e9:51:bc:81:53:a3:62:81:56:6c: df:0e:4b:5d:ba:23:ef:22:06:12:80:ed:18:d5:f0: 67:54:d4:86:66:fe:65:61:4a:4c:98:10:44:28:21: c5:3c:20:6d:64:6d:a3:45:f6:54:74:ad:be:5e:2e: b5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:F8:3F:84:E8:40:91:CE:F7:7D:21:AF:B1:94:F1:F8:1F:06:30:01 X509v3 Authority Key Identifier: keyid:16:78:82:8C:84:9B:DE:34:72:FE:84:63:08:76:7F:54:ED:7F:82:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:db:5f:05:74:8c:4d:2a:73:7f:3c:ae:e4:fd:da:9e:08:e4: 22:d8:03:dc:e7:1f:a5:cc:2d:aa:18:88:2b:45:38:04:45:78: 2d:f3:c1:7b:0d:c4:95:bc:04:ef:5f:2b:7f:f2:0a:16:90:3d: 4a:a8:68:0d:59:40:ce:13:ea:b9:7c:6a:5a:36:dd:98:6b:54: 12:a8:04:a7:25:31:ed:ed:0b:34:05:e6:ff:cd:2a:e6:b2:ac: 43:98:e1:6c:8e:f0:95:84:a5:05:d2:e3:f2:69:27:a6:ff:e6: 14:f4:41:90:0f:7b:ef:f2:ea:14:25:20:76:32:cc:e6:86:5b: 34:c2:8c:24:15:53:be:32:80:fe:08:0b:80:eb:c5:57:23:96: 6a:e9:1b:c2:ea:dc:5f:52:ec:4d:e7:94:37:25:fc:e7:56:b9: 3f:e7:c5:1b:57:90:86:fd:dc:2e:d8:4d:54:c4:5c:8a:d2:e6: 8a:f9:98:04:52:7b:07:e9:a8:a7:d3:a2:d9:72:7a:fa:15:b5: 51:ac:c5:9e:4f:9b:2d:7e:b6:6e:2f:9e:02:2c:55:69:b3:8e: d9:78:0b:27:2e:d8:b8:5c:82:f1:a4:21:d1:fa:b4:b9:9a:c4: a8:c0:21:ae:30:5d:db:5f:37:df:29:91:bd:f7:e3:40:9a:66: f7:35:f1:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBA1oMUzoFapBSMwSBqiFZ/H6nMAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdGNTRF RDdGODIzMjAeFw0yNjAzMjYwOTA1NTVaFw0yNjAzMjkxMzE5NTVaMDMxMTAvBgNV BAMTKEVFRjgzRjg0RTg0MDkxQ0VGNzdEMjFBRkIxOTRGMUY4MUYwNjMwMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKMK08aGSZWkrTb3KwWDa94x83 2yyryvnWheEoZQSj9ZYMEOwzJGOzU/qwjxbc7Jo1Ov1jmA//n/vs7N0h+bi6vVo3 bqkjmwg607TN4ojktjqKGH8FAZCwKhyM1FHXZ3C7AXPaL8nXzwUAcGKxH5UsjPII wmzkUaeoH+LR9QtuIe8+SIea4AIHkbu403H/ORCLgSGSfGO635USEebkOy3a/SkS BIt8H1ro/zIvHjMc4R6V4BJAc5jiYzG15haZcDN7Dua67pxM6VG8gVOjYoFWbN8O S126I+8iBhKA7RjV8GdU1IZm/mVhSkyYEEQoIcU8IG1kbaNF9lR0rb5eLrU1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7vg/hOhAkc73fSGvsZTx+B8GMAEwHwYDVR0j BBgwFoAUFniCjISb3jRy/oRjCHZ/VO1/gjIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTU3OTkxYS0xNTZkLTRiNTUtOTBjYi03OWI4NzZjZjZhNGEvMC8xNjc4ODI4Qzg0 OUJERTM0NzJGRTg0NjMwODc2N0Y1NEVEN0Y4MjMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdGNTRFRDdG ODIzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU1Nzk5MWEtMTU2ZC00YjU1LTkw Y2ItNzliODc2Y2Y2YTRhLzAvMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdG NTRFRDdGODIzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIrbXwV0jE0qc388ruT92p4I5CLYA9znH6XM LaoYiCtFOARFeC3zwXsNxJW8BO9fK3/yChaQPUqoaA1ZQM4T6rl8alo23ZhrVBKo BKclMe3tCzQF5v/NKuayrEOY4WyO8JWEpQXS4/JpJ6b/5hT0QZAPe+/y6hQlIHYy zOaGWzTCjCQVU74ygP4IC4DrxVcjlmrpG8Lq3F9S7E3nlDcl/OdWuT/nxRtXkIb9 3C7YTVTEXIrS5or5mARSewfpqKfTotlyevoVtVGsxZ5Pmy1+tm4vngIsVWmzjtl4 Cycu2LhcgvGkIdH6tLmaxKjAIa4wXdtfN98pkb3340CaZvc18TY= -----END CERTIFICATE-----Generated at Thu Mar 26 17:24:57 2026 by rpki-client