$ rpki-client -vvf repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft File: E74A2346929DE84143E5DF0DD921764C285B01A2.mft (raw, json) Hash identifier: RLa1OQQe7aUYnTVg/AxGf60mFqgXKqGWSOrc+AIYMuM= Subject key identifier: 52:1C:C7:92:C9:2A:C0:A3:4C:93:77:84:96:AC:41:44:48:55:89:DE Authority key identifier: E7:4A:23:46:92:9D:E8:41:43:E5:DF:0D:D9:21:76:4C:28:5B:01:A2 Certificate issuer: /CN=E74A2346929DE84143E5DF0DD921764C285B01A2 Certificate serial: 4526F2DE4D3AE83A6D6C3B4AD662BDAA0F15F93A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E74A2346929DE84143E5DF0DD921764C285B01A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft Manifest number: 010B Signing time: Wed 25 Mar 2026 01:01:27 +0000 Manifest this update: Wed 25 Mar 2026 00:56:27 +0000 Manifest next update: Sat 28 Mar 2026 01:13:27 +0000 Files and hashes: 1: E74A2346929DE84143E5DF0DD921764C285B01A2.crl (hash: lbaz0Y0lbrPtYi2dp0TUZh82pIypWyzilt9mTwbBSJU=) 2: 3130332e3131302e3130302e302f32332d3233203d3e20313530393337.roa (hash: QWlvcWw+MqtfsyLo2e2j057MAyn4Zw7MQ10D6boTyYA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.crl rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E74A2346929DE84143E5DF0DD921764C285B01A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 01:13:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:26:f2:de:4d:3a:e8:3a:6d:6c:3b:4a:d6:62:bd:aa:0f:15:f9:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E74A2346929DE84143E5DF0DD921764C285B01A2 Validity Not Before: Mar 25 00:56:27 2026 GMT Not After : Mar 28 01:13:27 2026 GMT Subject: CN=521CC792C92AC0A34C93778496AC4144485589DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6b:4e:a0:e8:67:ba:a0:4f:01:fb:b7:d4:c1: db:3f:b3:75:6e:04:d6:a9:fb:f7:5c:b1:5c:65:90: f9:59:30:6a:c7:d1:db:40:e2:ec:c2:15:f9:b8:03: 82:0d:4a:2c:d2:67:ea:1b:7c:c2:a3:82:5a:5f:19: 9a:5e:1b:b2:8e:b9:22:1c:b8:55:af:89:0d:95:9f: 2e:c6:24:c4:c7:c2:90:9b:d8:1c:dc:34:67:5f:7a: fc:d1:dd:80:5b:ce:2f:f0:96:b1:69:5b:7a:31:86: 92:a6:48:92:6a:92:ed:06:58:fc:83:27:0d:e5:9e: 15:82:8a:54:f7:ef:b1:9d:cf:58:c6:2f:e2:93:a6: 36:64:36:18:1f:5b:72:e7:55:75:62:99:c9:6d:ca: 37:7e:34:7a:50:94:85:50:70:be:20:07:c4:92:7a: d2:4d:df:99:dd:a9:c3:0b:44:7c:21:eb:c9:3f:ee: 37:0f:fb:9a:73:e2:89:f4:43:88:59:46:39:fc:15: 29:ef:a6:61:5f:85:07:07:52:a5:a1:0e:9b:8b:b6: e1:c9:57:d1:64:8c:ba:ce:5b:bb:c0:8a:0b:c5:15: 7b:ac:d0:68:02:d4:56:14:23:c8:98:ee:7d:d0:7f: 91:04:bb:32:d9:be:d4:2f:07:3b:cc:d9:6a:6b:de: 83:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:1C:C7:92:C9:2A:C0:A3:4C:93:77:84:96:AC:41:44:48:55:89:DE X509v3 Authority Key Identifier: keyid:E7:4A:23:46:92:9D:E8:41:43:E5:DF:0D:D9:21:76:4C:28:5B:01:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E74A2346929DE84143E5DF0DD921764C285B01A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:00:5e:42:57:32:fb:27:f0:aa:e0:db:cb:a9:d2:20:03:26: 44:43:f3:26:cb:f2:99:e4:e3:98:c9:7f:03:2c:90:76:52:fc: 95:cd:6a:3b:d0:e5:4c:44:5b:d4:6f:eb:e1:85:58:0a:45:13: 82:9e:76:8c:52:4b:1d:3f:9a:96:9e:2c:34:06:d9:b5:b9:5c: 64:7c:9a:35:a0:5f:8c:18:df:fd:bd:50:28:05:f3:2b:27:8e: a0:33:9d:39:98:f8:90:5a:d2:30:7e:6c:41:ca:b2:55:a1:1a: 5d:da:72:46:0d:0a:ba:0f:68:ce:41:30:09:52:f7:86:67:bc: 4e:4b:f7:b6:51:01:bf:29:50:da:66:c8:3d:68:ab:75:d9:d5: 91:ed:f2:0d:3c:42:62:ad:06:82:c9:dc:31:ac:57:06:fb:e8: 37:57:35:77:cb:9c:a4:e5:98:dd:2c:69:b7:ab:12:8b:9c:7f: b1:58:e9:ba:20:ed:12:d6:e0:51:0c:43:43:bf:c8:28:6c:50: 6d:a4:4e:30:ab:4c:96:d5:d8:1e:5b:f8:1e:dc:34:80:b1:d7: c1:d5:c4:4f:65:22:c6:c6:f2:04:ed:72:37:5e:67:f3:ea:49: 8d:81:5c:94:07:05:3e:85:77:b0:d5:d0:fb:ce:d8:b5:06:7e: 86:1a:6b:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURSby3k066DptbDtK1mK9qg8V+TowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTc0QTIzNDY5MjlERTg0MTQzRTVERjBERDkyMTc2NEMy ODVCMDFBMjAeFw0yNjAzMjUwMDU2MjdaFw0yNjAzMjgwMTEzMjdaMDMxMTAvBgNV BAMTKDUyMUNDNzkyQzkyQUMwQTM0QzkzNzc4NDk2QUM0MTQ0NDg1NTg5REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoa06g6Ge6oE8B+7fUwds/s3Vu BNap+/dcsVxlkPlZMGrH0dtA4uzCFfm4A4INSizSZ+obfMKjglpfGZpeG7KOuSIc uFWviQ2Vny7GJMTHwpCb2BzcNGdfevzR3YBbzi/wlrFpW3oxhpKmSJJqku0GWPyD Jw3lnhWCilT377Gdz1jGL+KTpjZkNhgfW3LnVXVimcltyjd+NHpQlIVQcL4gB8SS etJN35ndqcMLRHwh68k/7jcP+5pz4on0Q4hZRjn8FSnvpmFfhQcHUqWhDpuLtuHJ V9FkjLrOW7vAigvFFXus0GgC1FYUI8iY7n3Qf5EEuzLZvtQvBzvM2Wpr3oP5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUhzHkskqwKNMk3eElqxBREhVid4wHwYDVR0j BBgwFoAU50ojRpKd6EFD5d8N2SF2TChbAaIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 M2RlNTAzNS04NGUxLTQ0YzYtOWNmOS00ZWEwYmJhYTA5M2YvMC9FNzRBMjM0Njky OURFODQxNDNFNURGMEREOTIxNzY0QzI4NUIwMUEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTc0QTIzNDY5MjlERTg0MTQzRTVERjBERDkyMTc2NEMyODVC MDFBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTNkZTUwMzUtODRlMS00NGM2LTlj ZjktNGVhMGJiYWEwOTNmLzAvRTc0QTIzNDY5MjlERTg0MTQzRTVERjBERDkyMTc2 NEMyODVCMDFBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGEAXkJXMvsn8Krg28up0iADJkRD8ybL8pnk 45jJfwMskHZS/JXNajvQ5UxEW9Rv6+GFWApFE4KedoxSSx0/mpaeLDQG2bW5XGR8 mjWgX4wY3/29UCgF8ysnjqAznTmY+JBa0jB+bEHKslWhGl3ackYNCroPaM5BMAlS 94ZnvE5L97ZRAb8pUNpmyD1oq3XZ1ZHt8g08QmKtBoLJ3DGsVwb76DdXNXfLnKTl mN0saberEoucf7FY6bog7RLW4FEMQ0O/yChsUG2kTjCrTJbV2B5b+B7cNICx18HV xE9lIsbG8gTtcjdeZ/PqSY2BXJQHBT6Fd7DV0PvO2LUGfoYaazE= -----END CERTIFICATE-----Generated at Thu Mar 26 15:43:06 2026 by rpki-client