$ rpki-client -vvf repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.mft File: E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.mft (raw, json) Hash identifier: iXVvOwGfq4tQXYvOWCFY1ZVchZQiRWf6sx2Dnn6VdO0= Subject key identifier: 6A:23:E4:3A:B8:27:D5:4A:AF:65:6C:62:A3:23:A7:C7:4F:C3:F0:F3 Authority key identifier: E9:31:43:07:AD:14:30:2D:F4:0D:E1:A8:ED:0B:5D:48:D6:F7:3F:AF Certificate issuer: /CN=E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF Certificate serial: 3D24E25431C080D2D89005CB85FC72B19EFB555B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.mft Manifest number: 0224 Signing time: Tue 24 Mar 2026 12:40:01 +0000 Manifest this update: Tue 24 Mar 2026 12:35:01 +0000 Manifest next update: Fri 27 Mar 2026 21:38:01 +0000 Files and hashes: 1: 3130332e3138312e3234362e302f32332d3234203d3e20313439333935.roa (hash: f+QBOOF3ku4fnd+hE7xgl+gv5MnJPh+aT9iEef7iDl8=) 2: 3130332e3138312e3234372e302f32342d3234203d3e20313439333935.roa (hash: ykDDbErsTEyYEAWcxIDo6kykbUOZgrgxzipcqNdNSTc=) 3: E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.crl (hash: dLZxId9FjcBoSgvexpcknHD63+IdN2OoAn3CMgTXG9I=) 4: 323030313a6466303a376263303a3a2f34382d3438203d3e20313439333935.roa (hash: k8Mluks9NLDeIH36Z86fJ5gozvV2Rw7S1TNUUAWYhlE=) 5: 3130332e3138312e3234362e302f32342d3234203d3e20313439333935.roa (hash: GXjT7wgYQoqsV9FwN2D35bHHkEGQ5XElgoRdLgqO+WM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.crl rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 21:38:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:24:e2:54:31:c0:80:d2:d8:90:05:cb:85:fc:72:b1:9e:fb:55:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF Validity Not Before: Mar 24 12:35:01 2026 GMT Not After : Mar 27 21:38:01 2026 GMT Subject: CN=6A23E43AB827D54AAF656C62A323A7C74FC3F0F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2c:7e:de:67:8b:f4:c1:e5:84:cf:ae:f4:b5: 82:41:55:a8:b1:d2:ed:77:df:86:c0:1e:19:f3:a5: ce:27:ec:22:9b:dc:cd:33:39:93:38:2c:5f:7f:7e: 80:bb:d5:2e:43:b7:82:d5:27:eb:d4:75:d2:fb:15: c1:8f:e7:6e:30:17:05:a0:26:74:01:78:56:85:72: 59:e5:13:f2:9e:37:46:d2:37:99:66:6b:ed:67:ef: 05:f7:3d:4d:f0:9c:5c:b3:95:b6:79:2b:e2:33:27: e6:76:eb:15:57:79:5c:36:b1:1a:83:16:b0:31:0d: 61:f3:50:1f:b0:a5:9e:54:4d:62:9b:be:7b:b3:bb: 5b:c0:f2:69:6e:40:c7:8c:db:61:35:32:e1:03:2f: db:c4:78:30:30:18:a6:ca:6c:f0:a3:a1:b4:a0:66: 7e:91:d1:ba:31:6c:56:c3:87:e6:e3:ae:1a:13:c2: b1:3b:47:0a:b0:ff:4f:19:5a:26:19:9e:85:ee:81: b8:c4:44:1b:9e:5d:25:0e:7d:ba:ed:4e:d0:90:48: 40:c6:66:5e:a1:47:8f:79:35:4a:65:d9:29:ed:1f: 90:bb:f2:2a:d1:2a:e0:66:2c:21:29:0a:a8:fc:91: f4:6c:39:a0:f6:f0:a9:54:dc:0f:f2:22:ea:f8:77: 72:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:23:E4:3A:B8:27:D5:4A:AF:65:6C:62:A3:23:A7:C7:4F:C3:F0:F3 X509v3 Authority Key Identifier: keyid:E9:31:43:07:AD:14:30:2D:F4:0D:E1:A8:ED:0B:5D:48:D6:F7:3F:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:cb:40:d3:1a:8d:14:8e:ce:be:bf:73:0a:98:89:23:ea:ec: 50:f9:89:6a:2f:55:c8:66:6c:45:0c:4b:1b:90:64:f7:d3:a6: 1d:f0:c2:70:b2:7d:94:6a:d1:8c:90:c5:3a:6d:ef:e1:f3:25: 1b:79:0d:73:24:33:21:13:c2:91:64:cb:1b:c0:c3:d6:71:9d: 91:40:c5:92:22:5b:ed:8c:00:26:eb:ec:91:19:c2:61:51:48: 02:f3:68:0f:e1:64:9d:58:7a:9b:c7:91:44:03:a8:25:e2:f8: 34:f9:ce:82:a2:d1:73:0b:11:a1:32:b2:0b:3d:3a:2b:51:5a: 55:84:6b:54:c1:a8:9c:2c:8b:52:85:b9:22:6f:2c:dd:7a:df: 2a:dc:8d:43:ac:71:4d:71:09:1e:3f:78:1b:1f:f4:e7:01:f3: ed:d0:44:ed:15:0f:e2:ef:0a:46:db:79:5b:0b:13:05:78:7b: 4b:41:d5:84:79:f3:21:e8:4d:2b:ce:56:64:7e:eb:3a:80:ab: b5:22:4b:49:2b:25:22:2f:49:66:34:3d:df:26:53:b5:2b:05: 2d:96:2e:e2:90:23:f1:da:2c:1a:32:ee:c5:77:c6:86:29:69: 5c:d7:65:e3:c0:ef:57:29:36:ed:2c:0c:1d:3f:a5:60:25:ac: 59:cb:ca:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPSTiVDHAgNLYkAXLhfxysZ77VVswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTkzMTQzMDdBRDE0MzAyREY0MERFMUE4RUQwQjVENDhE NkY3M0ZBRjAeFw0yNjAzMjQxMjM1MDFaFw0yNjAzMjcyMTM4MDFaMDMxMTAvBgNV BAMTKDZBMjNFNDNBQjgyN0Q1NEFBRjY1NkM2MkEzMjNBN0M3NEZDM0YwRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCLH7eZ4v0weWEz670tYJBVaix 0u1334bAHhnzpc4n7CKb3M0zOZM4LF9/foC71S5Dt4LVJ+vUddL7FcGP524wFwWg JnQBeFaFclnlE/KeN0bSN5lma+1n7wX3PU3wnFyzlbZ5K+IzJ+Z26xVXeVw2sRqD FrAxDWHzUB+wpZ5UTWKbvnuzu1vA8mluQMeM22E1MuEDL9vEeDAwGKbKbPCjobSg Zn6R0boxbFbDh+bjrhoTwrE7Rwqw/08ZWiYZnoXugbjERBueXSUOfbrtTtCQSEDG Zl6hR495NUpl2SntH5C78irRKuBmLCEpCqj8kfRsOaD28KlU3A/yIur4d3JrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaiPkOrgn1UqvZWxioyOnx0/D8PMwHwYDVR0j BBgwFoAU6TFDB60UMC30DeGo7QtdSNb3P68wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDFlMDhlZi0zYWU2LTRiOTAtYjQ3Ny0wZTkxNDBkMDQzODAvMC9FOTMxNDMwN0FE MTQzMDJERjQwREUxQThFRDBCNUQ0OEQ2RjczRkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTkzMTQzMDdBRDE0MzAyREY0MERFMUE4RUQwQjVENDhENkY3 M0ZBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQxZTA4ZWYtM2FlNi00YjkwLWI0 NzctMGU5MTQwZDA0MzgwLzAvRTkzMTQzMDdBRDE0MzAyREY0MERFMUE4RUQwQjVE NDhENkY3M0ZBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFjLQNMajRSOzr6/cwqYiSPq7FD5iWovVchm bEUMSxuQZPfTph3wwnCyfZRq0YyQxTpt7+HzJRt5DXMkMyETwpFkyxvAw9ZxnZFA xZIiW+2MACbr7JEZwmFRSALzaA/hZJ1YepvHkUQDqCXi+DT5zoKi0XMLEaEysgs9 OitRWlWEa1TBqJwsi1KFuSJvLN163yrcjUOscU1xCR4/eBsf9OcB8+3QRO0VD+Lv CkbbeVsLEwV4e0tB1YR58yHoTSvOVmR+6zqAq7UiS0krJSIvSWY0Pd8mU7UrBS2W LuKQI/HaLBoy7sV3xoYpaVzXZePA71cpNu0sDB0/pWAlrFnLygU= -----END CERTIFICATE-----Generated at Thu Mar 26 17:55:57 2026 by rpki-client