$ rpki-client -vvf repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft File: 2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft (raw, json) Hash identifier: TA+zYTZAaYDsxs4ezHhWlc0KKwgBoGZY2wbFmxGAn3c= Subject key identifier: 19:3C:5D:2B:F8:4B:D4:90:F1:8C:F8:C9:D1:0E:73:39:6B:02:16:1C Authority key identifier: 25:52:24:0E:FF:EE:2F:60:F5:68:4D:D0:3E:DE:49:37:2E:BD:2A:17 Certificate issuer: /CN=2552240EFFEE2F60F5684DD03EDE49372EBD2A17 Certificate serial: 642B945B366B3ECCCBDDBFFCDB40A8EC90FF90D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft Manifest number: 0519 Signing time: Tue 24 Mar 2026 08:03:10 +0000 Manifest this update: Tue 24 Mar 2026 07:58:10 +0000 Manifest next update: Fri 27 Mar 2026 11:42:10 +0000 Files and hashes: 1: 3130332e3134352e31342e302f32332d3234203d3e20313339343338.roa (hash: 1I55HZV9ASBX91G1gmKkN8XsoZ52BjLH6TscAGFfb1w=) 2: 3130332e3134352e31352e302f32342d3234203d3e20313339343338.roa (hash: VKvXvb3BP6384nLUH1LdjT/mbF098hu6bIg7H4DeDLk=) 3: 2552240EFFEE2F60F5684DD03EDE49372EBD2A17.crl (hash: ZKPU5uzQZ8GOdsmVG2hhRXEsr4TZvsp/qHoNacRYtFQ=) 4: 3130332e3134352e31342e302f32342d3234203d3e20313339343338.roa (hash: voGeHKK4ikA3uaKs2J+WeJLtpIfTnr3JdLSLAJpRJmc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.crl rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 11:42:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:2b:94:5b:36:6b:3e:cc:cb:dd:bf:fc:db:40:a8:ec:90:ff:90:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2552240EFFEE2F60F5684DD03EDE49372EBD2A17 Validity Not Before: Mar 24 07:58:10 2026 GMT Not After : Mar 27 11:42:10 2026 GMT Subject: CN=193C5D2BF84BD490F18CF8C9D10E73396B02161C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:db:68:01:5c:69:b9:3c:bd:96:8c:c6:6c:87: b2:14:1e:c2:2e:49:ba:d6:0b:3a:e1:ff:ce:a7:be: 06:06:1e:b7:12:c9:31:ac:86:2c:b6:36:6b:aa:46: 26:fd:d4:96:51:c9:97:4a:fe:b1:39:56:c0:eb:e1: f7:19:44:b8:e6:06:4e:0f:e7:c9:be:eb:d4:eb:a7: 27:57:71:0c:c5:1a:63:c8:c3:d7:ba:0b:42:45:e6: 6b:4b:b2:c4:a2:d7:eb:9f:af:7f:d5:a2:38:18:e6: 1c:8b:d6:18:3a:aa:1b:27:b8:f9:32:03:5c:b8:94: c4:c9:6c:ce:55:5d:d0:d4:da:9e:4b:5f:ce:85:c6: b0:cb:80:86:00:c8:c3:1a:ec:06:66:08:40:a2:1b: 6e:f3:21:df:f9:3a:93:89:eb:5e:c8:ef:c2:3f:6e: 83:25:74:4a:40:c1:97:ab:e5:68:ec:c9:89:b3:06: 1b:b9:94:54:a2:09:86:de:f9:fe:3a:bc:04:0b:58: 84:ae:16:dc:52:87:3b:04:30:5f:e8:7c:2f:2b:6d: 27:91:a8:16:60:85:06:4f:dc:c9:4e:1b:50:e3:a7: ba:d3:fd:be:18:10:da:05:a0:9d:dc:9e:cc:16:01: 32:5b:7a:53:2a:2d:3b:46:21:5b:cd:04:60:fa:3d: 6e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:3C:5D:2B:F8:4B:D4:90:F1:8C:F8:C9:D1:0E:73:39:6B:02:16:1C X509v3 Authority Key Identifier: keyid:25:52:24:0E:FF:EE:2F:60:F5:68:4D:D0:3E:DE:49:37:2E:BD:2A:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:09:68:1c:2b:5d:c8:3c:2a:91:fe:a3:75:27:2c:62:5e:17: ce:4e:18:5b:3c:22:64:f5:f2:b3:6d:36:59:f5:6f:a7:4f:c2: 4f:bd:34:a4:ad:59:4e:1a:bc:dc:f0:97:27:21:d1:c8:a0:24: 92:17:fa:1e:11:4d:8e:a1:20:2a:42:82:5e:dc:4a:7c:67:40: 14:08:f3:b5:98:32:d4:63:40:b0:45:16:d9:6e:a9:30:aa:e6: 94:70:53:1b:60:2f:ea:ee:95:d6:2a:14:8c:d0:2a:cd:f0:b8: 6c:70:60:25:c6:24:c0:8c:cc:3d:fa:92:cb:b5:35:5c:4d:57: f3:26:30:c9:e7:0e:43:cf:c1:3d:7c:20:4f:3f:e1:8f:36:f1: 50:82:6a:b6:35:d9:ca:5b:a5:eb:d7:b5:be:25:ca:60:5b:86: 80:f9:75:92:55:c2:2e:9e:8c:5d:1e:bd:c4:7e:ab:b4:1f:54: 9c:b9:a3:0a:8e:88:f4:83:ae:91:d3:f4:03:41:5a:22:c4:bb: c2:43:8f:77:c0:40:69:71:0d:a2:0f:4b:54:a5:1d:f4:dc:2a: 8f:4a:b5:ed:a4:3c:9e:b7:d5:da:04:f2:73:d3:70:e1:5a:78: da:81:fc:91:09:0e:d7:82:5c:c4:1a:fc:7f:1d:59:67:b0:17: 65:80:76:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZCuUWzZrPszL3b/820Co7JD/kNcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU1MjI0MEVGRkVFMkY2MEY1Njg0REQwM0VERTQ5Mzcy RUJEMkExNzAeFw0yNjAzMjQwNzU4MTBaFw0yNjAzMjcxMTQyMTBaMDMxMTAvBgNV BAMTKDE5M0M1RDJCRjg0QkQ0OTBGMThDRjhDOUQxMEU3MzM5NkIwMjE2MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/22gBXGm5PL2WjMZsh7IUHsIu SbrWCzrh/86nvgYGHrcSyTGshiy2NmuqRib91JZRyZdK/rE5VsDr4fcZRLjmBk4P 58m+69TrpydXcQzFGmPIw9e6C0JF5mtLssSi1+ufr3/VojgY5hyL1hg6qhsnuPky A1y4lMTJbM5VXdDU2p5LX86FxrDLgIYAyMMa7AZmCECiG27zId/5OpOJ617I78I/ boMldEpAwZer5WjsyYmzBhu5lFSiCYbe+f46vAQLWISuFtxShzsEMF/ofC8rbSeR qBZghQZP3MlOG1Djp7rT/b4YENoFoJ3cnswWATJbelMqLTtGIVvNBGD6PW6vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGTxdK/hL1JDxjPjJ0Q5zOWsCFhwwHwYDVR0j BBgwFoAUJVIkDv/uL2D1aE3QPt5JNy69KhcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDA0MjMzZi1iYjJjLTQ3ZDctOTAxYy1lM2M4MmY4ZDQyM2MvMC8yNTUyMjQwRUZG RUUyRjYwRjU2ODRERDAzRURFNDkzNzJFQkQyQTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU1MjI0MEVGRkVFMkY2MEY1Njg0REQwM0VERTQ5MzcyRUJE MkExNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAwNDIzM2YtYmIyYy00N2Q3LTkw MWMtZTNjODJmOGQ0MjNjLzAvMjU1MjI0MEVGRkVFMkY2MEY1Njg0REQwM0VERTQ5 MzcyRUJEMkExNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACAJaBwrXcg8KpH+o3UnLGJeF85OGFs8ImT1 8rNtNln1b6dPwk+9NKStWU4avNzwlych0cigJJIX+h4RTY6hICpCgl7cSnxnQBQI 87WYMtRjQLBFFtluqTCq5pRwUxtgL+ruldYqFIzQKs3wuGxwYCXGJMCMzD36ksu1 NVxNV/MmMMnnDkPPwT18IE8/4Y828VCCarY12cpbpevXtb4lymBbhoD5dZJVwi6e jF0evcR+q7QfVJy5owqOiPSDrpHT9ANBWiLEu8JDj3fAQGlxDaIPS1SlHfTcKo9K te2kPJ631doE8nPTcOFaeNqB/JEJDteCXMQa/H8dWWewF2WAdno= -----END CERTIFICATE-----Generated at Thu Mar 26 08:54:09 2026 by rpki-client