$ rpki-client -vvf repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft File: E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft (raw, json) Hash identifier: 0IYu0GrbVp8TsJRjmL/7tX5OIG3L8xK3xSeIKjTiLn8= Subject key identifier: 2A:9F:A7:FF:58:EB:E9:7D:92:D3:3F:B6:94:EE:90:47:49:DC:CE:E6 Authority key identifier: E7:C9:E4:E5:C8:EA:98:9F:0F:F7:D6:FE:6D:BD:6A:4F:E8:21:2D:DE Certificate issuer: /CN=E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE Certificate serial: 4822EA6305E1A391B014750FABE0D02D6D33309F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft Manifest number: 013C Signing time: Thu 26 Mar 2026 14:02:24 +0000 Manifest this update: Thu 26 Mar 2026 13:57:24 +0000 Manifest next update: Sun 29 Mar 2026 22:24:24 +0000 Files and hashes: 1: 3130332e36302e38382e302f32332d3233203d3e20313531353732.roa (hash: ZC6TgLNk0lzol6BMmLGccC1JZhUEJfXYzEcHnys8G1o=) 2: E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.crl (hash: d8ngHKOcYAwMKgBoTpChUYxkckM4CrF36IDKP6HYKYY=) 3: 3130332e36302e38382e302f32342d3234203d3e20313531353732.roa (hash: IyPHx8aV4XIvWehNSAX5HTGcu8KRFs0fdi9byvOJbdI=) 4: 3130332e36302e38392e302f32342d3234203d3e20313531353732.roa (hash: fD+JsAF5IMBZc8QZtWqpSCsBTsofz/k3tLOOnt504Pc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.crl rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:22:ea:63:05:e1:a3:91:b0:14:75:0f:ab:e0:d0:2d:6d:33:30:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE Validity Not Before: Mar 26 13:57:24 2026 GMT Not After : Mar 29 22:24:24 2026 GMT Subject: CN=2A9FA7FF58EBE97D92D33FB694EE904749DCCEE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:14:ff:de:5b:4a:bb:67:74:81:be:b0:56:ff: 69:56:57:1a:a8:68:57:ef:c4:53:75:de:1a:36:f4: b5:1b:d0:94:4d:29:32:e4:17:1c:2a:4e:17:8f:75: cd:2a:4a:9a:89:33:72:cc:89:b2:b1:a7:01:2a:80: 6e:66:96:88:40:0d:bd:6c:cb:e8:68:db:eb:89:ec: ed:73:f9:b9:43:c9:f7:c6:b3:dd:c2:9d:c8:09:61: 55:ca:e6:ba:29:e5:92:c2:12:9e:92:5a:fa:0f:bc: e5:27:c4:0e:af:d7:56:7f:79:57:be:ab:9b:56:63: bd:c8:8f:bf:41:83:46:2e:9c:5f:e0:f0:fb:67:c4: 1f:55:d3:de:19:43:49:7b:cf:6d:6d:20:cf:32:89: 58:9d:5b:11:93:30:d6:af:18:4a:6e:24:c2:fd:8c: ac:dd:7f:08:ce:f3:f8:d9:3e:dd:82:98:36:28:2e: cd:c3:c9:7c:d4:2c:85:ff:b9:55:f7:d8:cf:fc:63: 13:f8:4b:04:f5:30:c9:b9:81:70:ab:49:ae:90:ef: 57:a5:71:c4:cc:da:24:88:a5:f8:67:c3:85:19:55: 72:7c:f2:0a:d3:85:4e:f7:fd:7e:49:ed:68:36:8e: 7e:02:23:36:71:60:23:ae:2f:28:3b:09:ed:2d:2c: 05:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:9F:A7:FF:58:EB:E9:7D:92:D3:3F:B6:94:EE:90:47:49:DC:CE:E6 X509v3 Authority Key Identifier: keyid:E7:C9:E4:E5:C8:EA:98:9F:0F:F7:D6:FE:6D:BD:6A:4F:E8:21:2D:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:a3:28:1c:c2:da:dd:a8:46:66:5d:b3:1b:2d:42:d1:64:85: e3:fe:1b:1e:01:50:d5:ab:05:2b:fe:47:7a:d6:2c:28:36:66: 51:f0:61:f0:ba:04:8f:c0:95:27:45:88:74:29:b1:df:82:8f: f3:1d:97:3f:fa:05:e9:e3:00:60:ae:50:dc:5d:20:1d:1d:4b: dd:b7:a5:ac:25:e9:e8:46:d1:dc:1f:20:92:dd:fb:4a:24:07: 39:14:4f:0a:81:9d:ee:64:93:18:4f:9a:e9:e5:83:47:2b:5f: ca:ea:b0:95:71:ec:14:71:d8:b3:f5:ec:3a:51:a3:2b:ad:fd: 71:b9:47:01:85:6a:30:a7:8b:58:79:70:6d:e3:2a:41:d6:a1: e9:0c:5c:71:6a:ef:a6:7f:1a:52:d6:ba:b8:33:89:4f:d5:a1: 18:00:c9:e5:ab:1d:d7:11:e4:03:5e:96:8c:58:3d:e3:13:df: 6e:41:05:c2:94:98:6b:d8:0e:e7:9a:d4:79:ba:0f:8b:f0:ff: 90:db:ee:61:9e:8d:47:f1:32:75:40:92:1c:7b:d4:a5:e9:7a: 30:a3:bf:0c:1e:0e:c2:b8:96:1e:5d:72:1a:f7:b1:49:7a:76: 5a:3d:29:f3:d3:e6:d3:20:4f:05:09:cb:bb:32:74:2e:86:2b: c8:4d:0f:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSCLqYwXho5GwFHUPq+DQLW0zMJ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTdDOUU0RTVDOEVBOTg5RjBGRjdENkZFNkRCRDZBNEZF ODIxMkRERTAeFw0yNjAzMjYxMzU3MjRaFw0yNjAzMjkyMjI0MjRaMDMxMTAvBgNV BAMTKDJBOUZBN0ZGNThFQkU5N0Q5MkQzM0ZCNjk0RUU5MDQ3NDlEQ0NFRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVFP/eW0q7Z3SBvrBW/2lWVxqo aFfvxFN13ho29LUb0JRNKTLkFxwqThePdc0qSpqJM3LMibKxpwEqgG5mlohADb1s y+ho2+uJ7O1z+blDyffGs93CncgJYVXK5rop5ZLCEp6SWvoPvOUnxA6v11Z/eVe+ q5tWY73Ij79Bg0YunF/g8PtnxB9V094ZQ0l7z21tIM8yiVidWxGTMNavGEpuJML9 jKzdfwjO8/jZPt2CmDYoLs3DyXzULIX/uVX32M/8YxP4SwT1MMm5gXCrSa6Q71el ccTM2iSIpfhnw4UZVXJ88grThU73/X5J7Wg2jn4CIzZxYCOuLyg7Ce0tLAXnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKp+n/1jr6X2S0z+2lO6QR0nczuYwHwYDVR0j BBgwFoAU58nk5cjqmJ8P99b+bb1qT+ghLd4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzExYWE0Ni1mMjhlLTRjNTUtYjliYS03ZDViZGM5NWI0ZjYvMC9FN0M5RTRFNUM4 RUE5ODlGMEZGN0Q2RkU2REJENkE0RkU4MjEyRERFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTdDOUU0RTVDOEVBOTg5RjBGRjdENkZFNkRCRDZBNEZFODIx MkRERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTcxMWFhNDYtZjI4ZS00YzU1LWI5 YmEtN2Q1YmRjOTViNGY2LzAvRTdDOUU0RTVDOEVBOTg5RjBGRjdENkZFNkRCRDZB NEZFODIxMkRERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALqjKBzC2t2oRmZdsxstQtFkheP+Gx4BUNWr BSv+R3rWLCg2ZlHwYfC6BI/AlSdFiHQpsd+Cj/Mdlz/6BenjAGCuUNxdIB0dS923 pawl6ehG0dwfIJLd+0okBzkUTwqBne5kkxhPmunlg0crX8rqsJVx7BRx2LP17DpR oyut/XG5RwGFajCni1h5cG3jKkHWoekMXHFq76Z/GlLWurgziU/VoRgAyeWrHdcR 5ANeloxYPeMT325BBcKUmGvYDuea1Hm6D4vw/5Db7mGejUfxMnVAkhx71KXpejCj vwweDsK4lh5dchr3sUl6dlo9KfPT5tMgTwUJy7sydC6GK8hND+w= -----END CERTIFICATE-----Generated at Thu Mar 26 17:09:48 2026 by rpki-client