$ rpki-client -vvf repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft File: E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft (raw, json) Hash identifier: E69F+sMSCQbRqrcwMbKqEd2fRjir+vCxbg6FB2V0guo= Subject key identifier: F5:C0:00:00:34:FA:E1:D6:97:D6:31:48:B6:DA:9A:FE:99:A3:90:A5 Authority key identifier: E4:75:A8:B0:18:BA:E5:84:48:DD:E5:5D:94:87:44:2B:3B:D3:1D:1D Certificate issuer: /CN=E475A8B018BAE58448DDE55D9487442B3BD31D1D Certificate serial: 367F5B1595BBFE008448EBE35FE659D083725CCE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft Manifest number: 03ED Signing time: Wed 25 Mar 2026 14:50:46 +0000 Manifest this update: Wed 25 Mar 2026 14:45:46 +0000 Manifest next update: Sun 29 Mar 2026 02:40:46 +0000 Files and hashes: 1: 3230332e37392e32392e302f32342d3234203d3e203435373138.roa (hash: yAg9m7pF+iYdNCy/yrXz8NRtzJrusflXAmCndUFdC8g=) 2: 3130332e33312e3230342e302f32332d3234203d3e203435373138.roa (hash: BxXiGZiZ0RhEjv39QYMG93IThYVCN/N1iK7U2fft/Rc=) 3: 323030313a6466303a62333a3a2f34382d3438203d3e203435373138.roa (hash: goKqtOANx7qYkuYC16JMyOMD7wMXtPJ41zk+xa8C7PI=) 4: 3130332e3139382e39332e302f32342d3234203d3e203435373138.roa (hash: rGHSmtnO8YlcwKux+iU+plREJhdzVU0+yTBDbs6kXto=) 5: 3130332e33312e3230362e302f32342d3234203d3e203435373138.roa (hash: jM1dJ3YR7TzVljwojJa4q/EeDXXOpsBTj/prM8KE7fc=) 6: 3131372e3130332e36362e302f32332d3234203d3e203435373138.roa (hash: 804HXnC9WlBS21d4SfuHgFOcruO6kfwM3PJgXEA5PHA=) 7: E475A8B018BAE58448DDE55D9487442B3BD31D1D.crl (hash: d0xm8pV5dvoZX5kEOeiy5jxscw8IIV4j+Yjr0fXFo7w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.crl rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 02:40:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:7f:5b:15:95:bb:fe:00:84:48:eb:e3:5f:e6:59:d0:83:72:5c:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E475A8B018BAE58448DDE55D9487442B3BD31D1D Validity Not Before: Mar 25 14:45:46 2026 GMT Not After : Mar 29 02:40:46 2026 GMT Subject: CN=F5C0000034FAE1D697D63148B6DA9AFE99A390A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:97:bd:2b:4a:8e:42:c8:b1:92:e7:54:02:d6: a6:aa:14:83:d9:2a:0d:68:02:d5:a5:8e:62:31:ec: 81:a5:e7:02:2b:fb:cf:8f:a8:47:3e:3c:c6:11:bb: 9d:48:78:5e:14:70:b7:6b:fd:a8:dc:89:34:b7:bb: 42:ac:67:35:63:3d:0e:44:73:f5:39:01:ed:14:a8: 2d:b6:a1:ca:f0:44:2a:03:d5:36:7d:20:e5:a1:08: 49:09:95:0f:a8:f9:da:e2:f6:30:01:6c:07:df:80: 27:09:ee:cd:4e:ee:de:7d:34:20:bd:3c:0e:d6:61: 44:e8:24:01:f4:e3:b4:4a:19:60:3c:14:d8:1b:28: 3f:3f:30:32:f1:1a:aa:80:8d:e5:63:09:6b:fe:3b: a8:ee:7b:11:f0:b7:1c:db:03:7b:92:29:5a:e7:34: 66:54:72:4d:1b:af:7c:2a:ff:ae:44:6b:d5:d3:89: 9d:89:34:a1:a2:67:27:75:47:a2:bd:d4:94:a1:5f: 35:7d:94:df:79:15:e9:15:8d:c4:b7:4e:a6:1c:f4: f8:72:31:a0:31:cd:30:41:4b:72:08:35:b9:4a:32: 4a:19:9a:5e:12:0b:f4:99:d1:69:a1:04:be:09:66: ed:b9:5f:e8:b8:e9:2d:7e:0f:69:89:a8:a7:d9:52: 45:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:C0:00:00:34:FA:E1:D6:97:D6:31:48:B6:DA:9A:FE:99:A3:90:A5 X509v3 Authority Key Identifier: keyid:E4:75:A8:B0:18:BA:E5:84:48:DD:E5:5D:94:87:44:2B:3B:D3:1D:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:bf:a6:7d:c7:63:1b:b6:94:d3:43:ee:44:e6:0b:2d:86:02: 6a:a4:ce:41:ab:3c:a5:f5:9f:bf:b9:cf:0e:35:64:f3:b1:1e: 5c:4f:70:71:ac:df:b2:b6:14:bb:14:0d:61:fd:fc:ab:d9:cd: 9d:35:22:08:6c:48:84:f2:7e:fa:00:2f:f4:c3:bd:18:1f:74: 78:52:17:25:d5:26:d2:23:79:9f:32:d4:5e:1f:c9:ba:e2:03: 22:fb:09:e8:a2:37:db:bb:61:3c:1c:d7:6f:e6:3b:68:db:16: 9f:fa:e8:4d:85:31:38:1b:60:6c:c4:59:ee:dd:b0:12:9d:33: 98:1e:1b:cc:f7:bf:54:08:3b:9c:43:02:19:ad:6b:89:22:cf: 22:94:ae:9a:17:a6:74:4d:f1:fe:db:0b:89:30:53:22:a4:e0: 4a:ad:fb:5f:55:6d:35:b6:18:23:af:91:ac:b3:69:c5:9b:42: 54:d9:08:ad:9d:13:b1:6b:c8:f2:4a:28:82:0b:b1:9c:1d:6e: 5a:b6:49:0d:21:55:c3:b2:21:e3:54:56:65:f7:f2:87:d8:b9: 6f:50:f3:f3:ef:b0:9a:46:a4:2f:88:c6:ca:fb:7a:d3:aa:2a: fe:3d:ab:e5:96:d1:8a:37:0b:6e:8e:d4:66:d7:f7:ab:43:dc: 90:93:a1:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNn9bFZW7/gCESOvjX+ZZ0INyXM4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ3NUE4QjAxOEJBRTU4NDQ4RERFNTVEOTQ4NzQ0MkIz QkQzMUQxRDAeFw0yNjAzMjUxNDQ1NDZaFw0yNjAzMjkwMjQwNDZaMDMxMTAvBgNV BAMTKEY1QzAwMDAwMzRGQUUxRDY5N0Q2MzE0OEI2REE5QUZFOTlBMzkwQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCql70rSo5CyLGS51QC1qaqFIPZ Kg1oAtWljmIx7IGl5wIr+8+PqEc+PMYRu51IeF4UcLdr/ajciTS3u0KsZzVjPQ5E c/U5Ae0UqC22ocrwRCoD1TZ9IOWhCEkJlQ+o+dri9jABbAffgCcJ7s1O7t59NCC9 PA7WYUToJAH047RKGWA8FNgbKD8/MDLxGqqAjeVjCWv+O6juexHwtxzbA3uSKVrn NGZUck0br3wq/65Ea9XTiZ2JNKGiZyd1R6K91JShXzV9lN95FekVjcS3TqYc9Phy MaAxzTBBS3IINblKMkoZml4SC/SZ0WmhBL4JZu25X+i46S1+D2mJqKfZUkWxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9cAAADT64daX1jFIttqa/pmjkKUwHwYDVR0j BBgwFoAU5HWosBi65YRI3eVdlIdEKzvTHR0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDQ5YzIxMC1mMzY1LTQzMmYtYTdjYS0wYjVlYjg2YjAxYzYvMC9FNDc1QThCMDE4 QkFFNTg0NDhEREU1NUQ5NDg3NDQyQjNCRDMxRDFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQ3NUE4QjAxOEJBRTU4NDQ4RERFNTVEOTQ4NzQ0MkIzQkQz MUQxRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjA0OWMyMTAtZjM2NS00MzJmLWE3 Y2EtMGI1ZWI4NmIwMWM2LzAvRTQ3NUE4QjAxOEJBRTU4NDQ4RERFNTVEOTQ4NzQ0 MkIzQkQzMUQxRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALS/pn3HYxu2lNND7kTmCy2GAmqkzkGrPKX1 n7+5zw41ZPOxHlxPcHGs37K2FLsUDWH9/KvZzZ01IghsSITyfvoAL/TDvRgfdHhS FyXVJtIjeZ8y1F4fybriAyL7CeiiN9u7YTwc12/mO2jbFp/66E2FMTgbYGzEWe7d sBKdM5geG8z3v1QIO5xDAhmta4kizyKUrpoXpnRN8f7bC4kwUyKk4Eqt+19VbTW2 GCOvkayzacWbQlTZCK2dE7FryPJKKIILsZwdblq2SQ0hVcOyIeNUVmX38ofYuW9Q 8/PvsJpGpC+Ixsr7etOqKv49q+WW0Yo3C26O1GbX96tD3JCToY4= -----END CERTIFICATE-----Generated at Thu Mar 26 21:57:30 2026 by rpki-client