$ rpki-client -vvf repo-rpki.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.mft File: E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.mft (raw, json) Hash identifier: sUUpEUwnQL+/aQA9WQLpJyrMCnL2eYAi3TyFZuxq7/E= Subject key identifier: AD:C1:39:28:8A:04:80:D3:3A:54:62:95:D8:EE:1E:E0:19:22:89:EE Authority key identifier: E4:C5:17:8B:DB:BD:EF:7B:7D:D4:1B:AF:58:EB:3D:25:B2:13:27:71 Certificate issuer: /CN=E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771 Certificate serial: 782A5284DFD0F1A7225845A95E03630832E724B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.mft Manifest number: 0236 Signing time: Tue 24 Mar 2026 11:31:51 +0000 Manifest this update: Tue 24 Mar 2026 11:26:51 +0000 Manifest next update: Fri 27 Mar 2026 22:03:51 +0000 Files and hashes: 1: 3130332e36362e33362e302f32342d3234203d3e20313530323233.roa (hash: ajl2EFm0qBhjAXALIOJlI8I7dBianNhiyu03BfEHE4I=) 2: E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.crl (hash: KN4NPMIL3C8VBbGVzsJvEiu51Ah0rTwWO6Wk72Uhwgc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.crl rsync://repo-rpki.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 22:03:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:2a:52:84:df:d0:f1:a7:22:58:45:a9:5e:03:63:08:32:e7:24:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771 Validity Not Before: Mar 24 11:26:51 2026 GMT Not After : Mar 27 22:03:51 2026 GMT Subject: CN=ADC139288A0480D33A546295D8EE1EE0192289EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b9:b0:06:1e:61:fb:0e:d9:ef:32:bc:16:20: a2:c5:c4:b5:a9:ca:f3:87:a3:1a:90:b0:c7:56:d8: 43:2d:9f:a5:a4:56:3f:6d:ff:8f:78:2d:71:41:0f: 2d:9e:1d:01:50:9c:69:c3:c3:e6:2b:5e:e4:d0:50: 9b:27:79:2f:6c:db:0f:f7:be:7d:35:1b:0c:39:76: fc:3d:04:3e:45:f8:b5:b2:fe:27:a3:a7:ed:fa:5b: 11:6d:e5:6a:3c:3d:a6:9c:47:87:de:11:9d:d2:f7: 98:a7:ab:a1:8c:33:30:4a:81:f6:34:50:36:18:94: d8:5a:06:80:ed:85:63:5b:62:97:7d:51:35:e1:b1: 24:93:b9:cd:60:bf:ed:b4:02:74:4c:0f:33:70:cb: 33:c0:97:2a:c1:21:87:f7:be:bd:41:df:f6:0f:37: b5:f5:41:4e:a8:ae:13:1d:7f:1a:46:29:97:6b:e9: 65:5b:dc:a1:71:62:df:86:72:51:5b:52:20:54:40: 70:0c:a2:5c:96:e4:17:7b:27:10:2d:0a:72:c6:42: 83:f5:57:7f:26:49:9c:44:ab:cf:e3:4a:6e:70:28: af:75:32:e6:9c:2a:f8:67:eb:03:a3:8f:55:68:5b: 57:5f:23:3c:eb:2b:22:37:70:a9:cb:e9:16:74:11: e4:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:C1:39:28:8A:04:80:D3:3A:54:62:95:D8:EE:1E:E0:19:22:89:EE X509v3 Authority Key Identifier: keyid:E4:C5:17:8B:DB:BD:EF:7B:7D:D4:1B:AF:58:EB:3D:25:B2:13:27:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:5b:bd:aa:aa:ba:b4:dc:65:ed:8e:21:b0:f3:81:d1:30:06: a7:f1:7b:b8:94:8b:9a:6c:8d:c1:60:fd:9e:78:fe:d5:9f:95: d5:97:8c:60:3a:2a:c8:c6:d3:05:cc:56:f4:b1:aa:0c:9b:aa: 9e:c6:d6:2a:3e:a6:77:9e:2c:01:ce:32:37:18:55:de:20:ac: d0:e9:08:58:72:83:10:fa:1e:9a:11:66:0e:8f:8c:1b:5f:60: 76:82:37:64:9f:e4:47:54:f3:40:d9:4a:17:b3:7d:b8:cf:59: c2:0f:61:18:85:98:05:bf:85:0e:58:b5:f8:88:06:70:17:84: bd:ad:24:13:fe:16:e7:d0:b1:02:69:b3:1e:53:d1:21:18:55: 09:29:49:3d:c7:6d:be:84:7b:0f:bc:24:42:5a:8e:5e:57:ab: e9:1e:3b:c4:cc:ca:8c:c6:60:18:80:2b:74:da:62:fe:3c:7e: 95:d3:b1:74:4d:ff:d8:7d:5a:f9:0b:3e:8b:95:92:db:0e:42: 3d:d3:96:06:53:44:26:e8:6c:c2:75:46:85:c7:c5:86:64:96: 7e:66:38:5d:c0:1f:66:4f:2a:38:d2:db:88:94:3a:4f:f8:6a: 00:66:00:59:24:ad:6b:72:76:30:51:a2:72:0a:fe:cc:92:5f: 70:5b:25:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeCpShN/Q8aciWEWpXgNjCDLnJLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTRDNTE3OEJEQkJERUY3QjdERDQxQkFGNThFQjNEMjVC MjEzMjc3MTAeFw0yNjAzMjQxMTI2NTFaFw0yNjAzMjcyMjAzNTFaMDMxMTAvBgNV BAMTKEFEQzEzOTI4OEEwNDgwRDMzQTU0NjI5NUQ4RUUxRUUwMTkyMjg5RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfubAGHmH7DtnvMrwWIKLFxLWp yvOHoxqQsMdW2EMtn6WkVj9t/494LXFBDy2eHQFQnGnDw+YrXuTQUJsneS9s2w/3 vn01Gww5dvw9BD5F+LWy/iejp+36WxFt5Wo8PaacR4feEZ3S95inq6GMMzBKgfY0 UDYYlNhaBoDthWNbYpd9UTXhsSSTuc1gv+20AnRMDzNwyzPAlyrBIYf3vr1B3/YP N7X1QU6orhMdfxpGKZdr6WVb3KFxYt+GclFbUiBUQHAMolyW5Bd7JxAtCnLGQoP1 V38mSZxEq8/jSm5wKK91MuacKvhn6wOjj1VoW1dfIzzrKyI3cKnL6RZ0EeTXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrcE5KIoEgNM6VGKV2O4e4Bkiie4wHwYDVR0j BBgwFoAU5MUXi9u973t91BuvWOs9JbITJ3EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmRiZDc4NS02YmNhLTQ5M2ItOGE2NS0zYjUyNzcwMDdmZWQvMC9FNEM1MTc4QkRC QkRFRjdCN0RENDFCQUY1OEVCM0QyNUIyMTMyNzcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTRDNTE3OEJEQkJERUY3QjdERDQxQkFGNThFQjNEMjVCMjEz Mjc3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJkYmQ3ODUtNmJjYS00OTNiLThh NjUtM2I1Mjc3MDA3ZmVkLzAvRTRDNTE3OEJEQkJERUY3QjdERDQxQkFGNThFQjNE MjVCMjEzMjc3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHZbvaqqurTcZe2OIbDzgdEwBqfxe7iUi5ps jcFg/Z54/tWfldWXjGA6KsjG0wXMVvSxqgybqp7G1io+pneeLAHOMjcYVd4grNDp CFhygxD6HpoRZg6PjBtfYHaCN2Sf5EdU80DZShezfbjPWcIPYRiFmAW/hQ5YtfiI BnAXhL2tJBP+FufQsQJpsx5T0SEYVQkpST3Hbb6Eew+8JEJajl5Xq+keO8TMyozG YBiAK3TaYv48fpXTsXRN/9h9WvkLPouVktsOQj3TlgZTRCbobMJ1RoXHxYZkln5m OF3AH2ZPKjjS24iUOk/4agBmAFkkrWtydjBRonIK/sySX3BbJfI= -----END CERTIFICATE-----Generated at Thu Mar 26 08:48:20 2026 by rpki-client