$ rpki-client -vvf repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft File: E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft (raw, json) Hash identifier: MprWor1Bg5AAuJtM0fu2TGltMvWVSGk5mMDU0VGnmkE= Subject key identifier: D3:63:9A:26:5E:C6:DF:1B:B3:3E:1A:A9:FB:1B:7A:46:5C:B1:AB:72 Authority key identifier: E9:F7:A0:AA:6D:CC:A1:FF:7D:3D:61:46:0D:55:34:A0:04:AB:2C:61 Certificate issuer: /CN=E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61 Certificate serial: 1BB6626CE616B8B9F5CF282C98A6FBBC60060806 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft Manifest number: 055B Signing time: Tue 24 Mar 2026 14:31:52 +0000 Manifest this update: Tue 24 Mar 2026 14:26:52 +0000 Manifest next update: Sat 28 Mar 2026 00:21:52 +0000 Files and hashes: 1: E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.crl (hash: 0eQuwhWzws0h62N7aKcxuoDqtYtEv7wzYKpQoJ948/4=) 2: 3230332e3136302e35362e302f32312d3234203d3e203234353237.roa (hash: P99HVIzqHVCWDBqJ4r8v17rUky9V8VmAdjN3/2RrLPI=) 3: 3130332e3134382e34362e302f32332d3234203d3e203234353237.roa (hash: eQEzsyxVfpTHgHfaMJEWpEAU8ae5FhvdVXRN2kONR8w=) 4: 323430353a366334303a3a2f33322d3438203d3e203234353237.roa (hash: sdUNTLR9jp0dwpPELDIKx4SufivRxg0Tg+/QbjfBOQs=) 5: 3138332e38312e3135322e302f32312d3234203d3e203234353237.roa (hash: HrGCjeL9LpaajCgOCMCFmtzXiHgvf2onAjSq9sq+a5M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.crl rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 00:21:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:b6:62:6c:e6:16:b8:b9:f5:cf:28:2c:98:a6:fb:bc:60:06:08:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61 Validity Not Before: Mar 24 14:26:52 2026 GMT Not After : Mar 28 00:21:52 2026 GMT Subject: CN=D3639A265EC6DF1BB33E1AA9FB1B7A465CB1AB72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:97:b0:dd:82:a0:dc:33:46:08:ed:84:b4:10: fd:11:3a:38:98:2a:74:81:87:03:0d:ca:0c:92:ae: 4c:fe:24:88:d3:c1:54:f9:98:52:95:95:79:88:d0: 38:d8:54:b5:79:8f:06:75:bc:0c:ea:18:5b:02:cc: 95:ec:44:2e:8d:62:8d:39:a1:44:23:76:d5:5e:63: 6f:ed:6c:46:e4:8e:2a:7b:64:64:41:3c:14:0a:af: b5:f5:fa:f9:db:f6:00:0e:5e:22:07:62:7f:a3:db: 87:31:52:26:b2:2b:e9:59:0a:e2:da:70:8a:9e:65: 24:5d:f6:d7:7d:94:53:81:2b:d3:78:9b:41:94:65: fb:67:4a:89:0d:93:26:ae:87:6a:e2:8d:ae:b4:de: 16:09:bb:27:f9:4b:43:08:22:aa:f4:3f:16:d3:04: ae:e7:27:32:5c:11:6b:f7:a1:bc:3c:fc:5f:cd:35: b7:ee:42:01:e8:67:ca:f4:6d:5b:ca:dd:8d:d6:be: da:79:b6:f5:ba:8f:31:8f:3b:c5:95:98:22:fa:a4: 7a:ca:62:12:0d:c7:21:3c:5e:31:95:12:c7:bd:56: 28:9d:20:34:c1:5e:a8:fc:89:5e:ab:be:b7:0e:07: 72:97:e0:34:fc:6f:6e:99:72:a7:af:f0:e9:0d:7c: 10:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:63:9A:26:5E:C6:DF:1B:B3:3E:1A:A9:FB:1B:7A:46:5C:B1:AB:72 X509v3 Authority Key Identifier: keyid:E9:F7:A0:AA:6D:CC:A1:FF:7D:3D:61:46:0D:55:34:A0:04:AB:2C:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:a6:a1:d5:a9:62:a5:58:de:17:a8:84:92:7c:74:c9:a0:02: c4:95:54:dc:42:53:14:59:20:25:b1:3e:2a:96:b5:88:23:3f: e6:f6:65:fb:40:bb:97:81:eb:ef:4b:73:cb:ef:f2:d4:73:70: 33:d9:62:41:81:9b:35:c4:78:b7:a8:87:f9:33:65:dc:62:c4: 1f:f7:6b:83:59:67:01:6f:95:0d:51:21:a5:62:ba:6c:96:92: f9:fe:fd:73:20:7b:3f:84:fb:a5:22:46:5e:2c:b3:8a:7f:89: 38:fe:14:78:f5:a7:8e:25:36:b6:52:6e:12:2a:18:4f:25:9b: df:39:a6:78:7c:58:d7:d0:56:3b:27:e2:56:90:d6:85:ec:ba: c5:7a:f8:55:7e:14:4c:b5:6e:e1:3f:3d:ca:2e:d8:37:2d:1f: 32:aa:bb:a0:f4:ea:3b:19:eb:4e:95:7d:8b:cf:c1:f8:dc:c3: 72:f2:0e:41:ff:a9:e5:95:18:4c:3e:1a:77:89:fc:0a:45:0b: 48:53:ce:c6:1c:8e:f6:ef:11:13:f3:09:a9:17:f7:c6:64:84: 6f:d4:1c:b3:23:80:2c:97:cb:75:cf:1c:bc:86:ce:ee:fe:d3: 3e:ae:0b:5d:9f:75:71:6c:59:76:44:1f:b2:07:48:26:06:61: c2:d6:6d:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG7ZibOYWuLn1zygsmKb7vGAGCAYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlGN0EwQUE2RENDQTFGRjdEM0Q2MTQ2MEQ1NTM0QTAw NEFCMkM2MTAeFw0yNjAzMjQxNDI2NTJaFw0yNjAzMjgwMDIxNTJaMDMxMTAvBgNV BAMTKEQzNjM5QTI2NUVDNkRGMUJCMzNFMUFBOUZCMUI3QTQ2NUNCMUFCNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDll7DdgqDcM0YI7YS0EP0ROjiY KnSBhwMNygySrkz+JIjTwVT5mFKVlXmI0DjYVLV5jwZ1vAzqGFsCzJXsRC6NYo05 oUQjdtVeY2/tbEbkjip7ZGRBPBQKr7X1+vnb9gAOXiIHYn+j24cxUiayK+lZCuLa cIqeZSRd9td9lFOBK9N4m0GUZftnSokNkyauh2rija603hYJuyf5S0MIIqr0PxbT BK7nJzJcEWv3obw8/F/NNbfuQgHoZ8r0bVvK3Y3Wvtp5tvW6jzGPO8WVmCL6pHrK YhINxyE8XjGVEse9ViidIDTBXqj8iV6rvrcOB3KX4DT8b26Zcqev8OkNfBA5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU02OaJl7G3xuzPhqp+xt6Rlyxq3IwHwYDVR0j BBgwFoAU6fegqm3Mof99PWFGDVU0oASrLGEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmI4N2ZlYi0wZmUyLTQxOGEtYTM3YS1iZTNkZDFmMGU2M2MvMC9FOUY3QTBBQTZE Q0NBMUZGN0QzRDYxNDYwRDU1MzRBMDA0QUIyQzYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTlGN0EwQUE2RENDQTFGRjdEM0Q2MTQ2MEQ1NTM0QTAwNEFC MkM2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZiODdmZWItMGZlMi00MThhLWEz N2EtYmUzZGQxZjBlNjNjLzAvRTlGN0EwQUE2RENDQTFGRjdEM0Q2MTQ2MEQ1NTM0 QTAwNEFCMkM2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFmmodWpYqVY3heohJJ8dMmgAsSVVNxCUxRZ ICWxPiqWtYgjP+b2ZftAu5eB6+9Lc8vv8tRzcDPZYkGBmzXEeLeoh/kzZdxixB/3 a4NZZwFvlQ1RIaViumyWkvn+/XMgez+E+6UiRl4ss4p/iTj+FHj1p44lNrZSbhIq GE8lm985pnh8WNfQVjsn4laQ1oXsusV6+FV+FEy1buE/Pcou2DctHzKqu6D06jsZ 606VfYvPwfjcw3LyDkH/qeWVGEw+GneJ/ApFC0hTzsYcjvbvERPzCakX98ZkhG/U HLMjgCyXy3XPHLyGzu7+0z6uC12fdXFsWXZEH7IHSCYGYcLWbVI= -----END CERTIFICATE-----Generated at Thu Mar 26 08:56:55 2026 by rpki-client