$ rpki-client -vvf repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft File: 8469874AE268E2CD4E9A137EDD5599C748530E9E.mft (raw, json) Hash identifier: 5XBnBoeGpL5DiuUM3yApT4yUFMGRfjEKzYz4OEg7gck= Subject key identifier: 53:11:F5:12:BB:04:6B:17:79:BC:04:36:3E:E1:7F:01:D1:E0:8F:40 Authority key identifier: 84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E Certificate issuer: /CN=8469874AE268E2CD4E9A137EDD5599C748530E9E Certificate serial: 75ED639F7974FD77378671736DFC7856A6174FA0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft Manifest number: 057F Signing time: Tue 24 Mar 2026 18:53:37 +0000 Manifest this update: Tue 24 Mar 2026 18:48:37 +0000 Manifest next update: Fri 27 Mar 2026 20:08:37 +0000 Files and hashes: 1: 3133372e35392e3136302e302f32322d3234203d3e203539323831.roa (hash: iYXHlXOp13oo14EwXL1yMlKhjy+K0NQq6QBKvwru8rQ=) 2: 3133372e35392e3136322e302f32332d3233203d3e203536323432.roa (hash: f5hHen+W1VXCRis0jyLYMREhK7yiYlp/e1Oke9ZJemI=) 3: 3133372e35392e3136332e302f32342d3234203d3e203536323432.roa (hash: QK5c39FnIQ2uH2X95IXAVXSIER8l6LyPkkcgIQHnCc0=) 4: 323430303a636438303a3a2f33322d3438203d3e203536323432.roa (hash: zcYJvgiaLV2GHe09dAoReTJVtccl4TPkiIrfadlJVtM=) 5: 3130332e3232382e3131382e302f32332d3233203d3e203536323432.roa (hash: GokeNGATaaa1i6e8bMHZ+iQ8aT+X+X53HMk8EJYjG4g=) 6: 3130332e3232382e3131362e302f32322d3234203d3e203539323831.roa (hash: x2j2pkxj/5qJxIyLhEm0SjulNd461dE11VB/8v7mZzA=) 7: 3133372e35392e3136312e302f32342d3234203d3e203536323432.roa (hash: Z2sFxHHlHMJ4bRNENtVrztUIDsIoPZKVqMTMzG/+S5w=) 8: 3130332e3232382e3131362e302f32332d3233203d3e203536323432.roa (hash: Qs5YsAFrZGsUg7q3cUMLK3YDrimXUuGrA4ZkrObB+E4=) 9: 8469874AE268E2CD4E9A137EDD5599C748530E9E.crl (hash: xcPQvBHfxPjt4NoGY1yzzFlneCaAvJtfGmGplxuxcQQ=) 10: 3133372e35392e3136322e302f32342d3234203d3e203536323432.roa (hash: 1D1ZlBAXYS6NJNH/ZoxCjjMrhPg+zHK85QsUpRWH8Rk=) 11: 3130332e3232382e3131362e302f32322d3232203d3e203536323432.roa (hash: YeIi/WBRjgP+fXFh6AcMEh9f121AU99tB5OClCgCK+k=) 12: 323430303a636438303a3a2f33322d3438203d3e203539323831.roa (hash: SDDhhLbIPIon66Bn4BSdn8Fj3IQ8y3DGAekRQSKZURg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 20:08:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:ed:63:9f:79:74:fd:77:37:86:71:73:6d:fc:78:56:a6:17:4f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8469874AE268E2CD4E9A137EDD5599C748530E9E Validity Not Before: Mar 24 18:48:37 2026 GMT Not After : Mar 27 20:08:37 2026 GMT Subject: CN=5311F512BB046B1779BC04363EE17F01D1E08F40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1d:2d:b2:53:36:c9:d2:a9:8e:f4:46:24:7a: f1:10:20:ef:eb:e5:92:79:30:60:55:f4:45:97:68: c8:ed:e5:50:dc:94:52:79:fd:53:b3:e6:7d:b8:cf: 7c:71:30:fc:2f:4a:b1:5e:9c:da:e0:20:33:55:0d: 8d:39:8d:29:1f:b0:c6:2f:a6:19:51:d0:29:a0:82: b3:c6:ba:9d:d0:a4:c6:dd:f6:15:9e:5c:2c:ac:e4: 28:e8:f3:d4:aa:ff:f9:74:29:dd:52:a2:a3:69:34: 63:0e:29:94:29:bd:f9:6e:62:de:24:5b:2c:53:9e: c6:19:9a:fe:78:81:4a:af:06:3d:a7:dd:80:62:2a: 44:db:12:bb:46:46:e0:68:51:5b:8f:17:d5:5e:d7: a3:c5:bc:cc:f7:e1:e8:be:19:61:8c:9e:6d:57:e8: b0:12:6f:0e:19:a4:ea:4e:45:3e:c4:ae:3d:99:5b: 55:25:2b:37:a5:9a:4a:2f:7f:14:78:cd:45:e1:a3: 41:6c:0f:96:e6:0b:11:29:a1:c5:fc:ef:53:a2:4c: df:fb:a4:2c:58:24:f6:d3:f8:d6:7c:d1:29:33:c5: e2:a3:b3:0a:21:bd:df:8f:bd:4c:6e:c2:fd:ba:97: 7a:3a:08:8a:79:19:59:3c:d3:77:1d:d0:ec:3a:fc: a2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:11:F5:12:BB:04:6B:17:79:BC:04:36:3E:E1:7F:01:D1:E0:8F:40 X509v3 Authority Key Identifier: keyid:84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:27:03:ce:fe:31:b8:47:10:35:8e:90:12:ff:82:ea:e5:a9: 61:a8:62:b5:8a:9e:5a:9d:f8:e0:4a:83:b6:0b:00:88:96:90: e3:68:7b:3c:78:51:30:cb:ab:48:d1:b2:32:62:eb:09:a7:fe: 6d:de:d0:00:93:1e:e4:9d:93:07:37:b6:6d:19:95:4d:e1:e5: 9f:2e:52:a0:de:8a:99:36:9f:64:6f:3b:9d:51:c9:25:1c:a9: bc:e0:e1:78:34:ea:7e:e6:20:f2:9b:e5:6f:47:df:9f:03:f3: b5:c8:23:56:c0:db:eb:36:f9:6f:71:ef:1a:54:df:f2:56:1b: e3:6d:5f:b2:08:59:ba:e9:b2:22:14:07:06:7e:1b:34:dc:2d: 38:02:35:97:6c:9e:ef:bf:51:bb:c7:f7:05:d0:ba:cd:c0:4e: 00:9e:4c:fd:ed:be:15:37:56:0a:08:58:89:87:4b:36:c4:28: c5:bb:e7:5c:87:39:45:85:8c:50:ef:3b:c9:2d:71:87:a6:98: f6:b3:31:ca:d9:33:23:dc:24:6f:a6:aa:b9:eb:9f:e3:06:a8: 3e:7d:8a:44:8a:bc:6f:74:e0:e1:8c:16:1d:49:33:90:6b:e9: d7:4b:12:5e:ed:91:e5:25:08:ce:b4:89:06:c8:46:a8:af:72: d4:07:f5:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUde1jn3l0/Xc3hnFzbfx4VqYXT6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ2OTg3NEFFMjY4RTJDRDRFOUExMzdFREQ1NTk5Qzc0 ODUzMEU5RTAeFw0yNjAzMjQxODQ4MzdaFw0yNjAzMjcyMDA4MzdaMDMxMTAvBgNV BAMTKDUzMTFGNTEyQkIwNDZCMTc3OUJDMDQzNjNFRTE3RjAxRDFFMDhGNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCHS2yUzbJ0qmO9EYkevEQIO/r 5ZJ5MGBV9EWXaMjt5VDclFJ5/VOz5n24z3xxMPwvSrFenNrgIDNVDY05jSkfsMYv phlR0CmggrPGup3QpMbd9hWeXCys5Cjo89Sq//l0Kd1SoqNpNGMOKZQpvfluYt4k WyxTnsYZmv54gUqvBj2n3YBiKkTbErtGRuBoUVuPF9Ve16PFvMz34ei+GWGMnm1X 6LASbw4ZpOpORT7Erj2ZW1UlKzelmkovfxR4zUXho0FsD5bmCxEpocX871OiTN/7 pCxYJPbT+NZ80SkzxeKjswohvd+PvUxuwv26l3o6CIp5GVk803cd0Ow6/KL7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUxH1ErsEaxd5vAQ2PuF/AdHgj0AwHwYDVR0j BBgwFoAUhGmHSuJo4s1OmhN+3VWZx0hTDp4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2EyZDI1Yi1jYjE4LTQ1YmUtOWZhMS0xNTRjYTE1NzkyMjMvMC84NDY5ODc0QUUy NjhFMkNENEU5QTEzN0VERDU1OTlDNzQ4NTMwRTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ2OTg3NEFFMjY4RTJDRDRFOUExMzdFREQ1NTk5Qzc0ODUz MEU5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTdhMmQyNWItY2IxOC00NWJlLTlm YTEtMTU0Y2ExNTc5MjIzLzAvODQ2OTg3NEFFMjY4RTJDRDRFOUExMzdFREQ1NTk5 Qzc0ODUzMEU5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD4nA87+MbhHEDWOkBL/gurlqWGoYrWKnlqd +OBKg7YLAIiWkONoezx4UTDLq0jRsjJi6wmn/m3e0ACTHuSdkwc3tm0ZlU3h5Z8u UqDeipk2n2RvO51RySUcqbzg4Xg06n7mIPKb5W9H358D87XII1bA2+s2+W9x7xpU 3/JWG+NtX7IIWbrpsiIUBwZ+GzTcLTgCNZdsnu+/UbvH9wXQus3ATgCeTP3tvhU3 VgoIWImHSzbEKMW751yHOUWFjFDvO8ktcYemmPazMcrZMyPcJG+mqrnrn+MGqD59 ikSKvG904OGMFh1JM5Br6ddLEl7tkeUlCM60iQbIRqivctQH9R8= -----END CERTIFICATE-----Generated at Thu Mar 26 16:26:21 2026 by rpki-client