$ rpki-client -vvf repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.mft File: 04EE3BC3691732E069DF0D9D29DE360611CCF0DB.mft (raw, json) Hash identifier: AcZreinmfjbsxeavCK4Uc6qS+ehI16Ab/lWLTNKgv64= Subject key identifier: C5:18:73:7A:0B:77:80:E5:E8:53:57:0A:21:22:5F:14:32:08:55:F0 Authority key identifier: 04:EE:3B:C3:69:17:32:E0:69:DF:0D:9D:29:DE:36:06:11:CC:F0:DB Certificate issuer: /CN=04EE3BC3691732E069DF0D9D29DE360611CCF0DB Certificate serial: 6BBFED5DB7DA6914ABAC46A3FCB717E52A538307 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.mft Manifest number: 0231 Signing time: Tue 24 Mar 2026 00:31:55 +0000 Manifest this update: Tue 24 Mar 2026 00:26:54 +0000 Manifest next update: Fri 27 Mar 2026 11:13:54 +0000 Files and hashes: 1: 04EE3BC3691732E069DF0D9D29DE360611CCF0DB.crl (hash: w0OdHXBdr61RGtAP/3OQsi+Rg001Uqh5fj1veB2Lls4=) 2: 3130332e38382e39302e302f32332d3234203d3e20313530323232.roa (hash: RICXQj6rsugNHVh/wSozR+ATp/7OAGFCxt5pyTwldyU=) 3: 3130332e38382e39302e302f32342d3234203d3e20313530323232.roa (hash: c8FIGaCU0t2/B828bx0ZmZOFxlHPrYIwjNCfoYq4Eck=) 4: 3130332e38382e39312e302f32342d3234203d3e20313530323232.roa (hash: 16WvPyi38t5aKz8ZyY3F0kSDSMJ8HK1h7g9RnFd2LL0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.crl rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 11:13:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:bf:ed:5d:b7:da:69:14:ab:ac:46:a3:fc:b7:17:e5:2a:53:83:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04EE3BC3691732E069DF0D9D29DE360611CCF0DB Validity Not Before: Mar 24 00:26:54 2026 GMT Not After : Mar 27 11:13:54 2026 GMT Subject: CN=C518737A0B7780E5E853570A21225F14320855F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cf:d6:54:7d:40:af:bf:2a:21:cf:65:86:31: 8a:17:7f:38:2a:57:76:b1:69:98:f5:86:c4:43:95: 1c:1f:7a:7a:31:ed:ca:3a:33:e3:a3:cd:9f:62:ee: d4:06:77:d4:24:92:4f:42:79:a1:ed:79:47:e7:ce: 30:5d:38:7b:db:7c:c8:39:ef:78:04:f9:ad:1a:b7: f0:17:e3:e6:35:86:5a:1a:cc:f5:a1:0b:66:92:99: 92:84:0e:5f:15:55:76:98:8f:38:c2:ff:a5:df:55: 72:eb:70:3d:20:66:cf:81:b1:7d:52:ff:78:87:a5: ad:ee:fb:7f:f2:f3:5d:4d:9c:a6:5a:bb:a9:6c:5e: 77:b0:88:36:f3:46:2d:d3:b5:e5:0c:bb:1e:54:f9: e0:50:40:e2:fd:92:ee:73:79:33:74:00:7a:e5:ef: b4:ad:0c:4b:ca:24:c4:36:0d:20:a0:c6:19:96:70: ed:1f:84:c3:98:fc:e9:65:47:3a:8b:e4:7f:85:e5: c1:e8:48:8f:73:3a:e1:07:9e:77:a5:78:21:70:97: 12:07:71:03:7e:41:cf:bc:3d:55:89:c7:08:f1:63: 80:3b:ce:26:9f:29:f1:c8:57:22:6a:47:d5:2a:12: fa:8a:f1:f5:c8:d0:f8:99:22:b4:a9:c5:09:ee:c4: dc:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:18:73:7A:0B:77:80:E5:E8:53:57:0A:21:22:5F:14:32:08:55:F0 X509v3 Authority Key Identifier: keyid:04:EE:3B:C3:69:17:32:E0:69:DF:0D:9D:29:DE:36:06:11:CC:F0:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:e0:f5:f5:ef:28:d0:8f:a3:8c:a8:7c:54:3c:1a:41:01:db: f0:f3:3b:09:81:27:88:43:41:c0:da:6b:4e:43:19:7c:57:19: c0:50:b9:60:c1:41:83:2d:ad:22:8d:1e:d8:38:66:cd:b1:e4: af:f8:50:8c:83:73:5f:0e:22:7c:a1:b7:7c:54:79:48:5e:34: 12:53:b1:5d:1c:af:6b:5d:27:60:f4:05:f1:78:30:22:a2:ee: 71:ae:1d:e3:97:c0:47:70:88:4c:01:1a:f7:3b:ce:de:10:29: f1:a8:68:30:9d:70:88:59:48:91:c5:c3:45:d3:d4:41:87:6d: 99:04:83:1a:c5:f2:ea:3b:24:80:9d:62:44:52:a9:f2:e7:f5: 3a:81:b3:f5:e7:2d:01:5c:5f:44:12:bd:14:f6:87:76:84:62: 85:2d:76:f5:d0:e8:43:96:c7:3a:c1:61:0f:bd:10:5e:28:47: be:f5:18:91:7c:dc:b0:e2:cd:07:5b:70:85:f2:52:a9:c4:01: 92:97:19:d7:e7:2e:ad:ce:38:14:7f:b2:e0:3d:34:d8:dd:01: b3:a6:bc:28:d8:0e:be:af:39:e4:fc:e2:ab:2e:59:9f:14:39: 9e:5d:a7:11:b2:a2:4f:fc:54:64:3c:8f:99:7d:22:5c:75:3c: 71:15:36:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa7/tXbfaaRSrrEaj/LcX5SpTgwcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDRFRTNCQzM2OTE3MzJFMDY5REYwRDlEMjlERTM2MDYx MUNDRjBEQjAeFw0yNjAzMjQwMDI2NTRaFw0yNjAzMjcxMTEzNTRaMDMxMTAvBgNV BAMTKEM1MTg3MzdBMEI3NzgwRTVFODUzNTcwQTIxMjI1RjE0MzIwODU1RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOz9ZUfUCvvyohz2WGMYoXfzgq V3axaZj1hsRDlRwfenox7co6M+OjzZ9i7tQGd9Qkkk9CeaHteUfnzjBdOHvbfMg5 73gE+a0at/AX4+Y1hloazPWhC2aSmZKEDl8VVXaYjzjC/6XfVXLrcD0gZs+BsX1S /3iHpa3u+3/y811NnKZau6lsXnewiDbzRi3TteUMux5U+eBQQOL9ku5zeTN0AHrl 77StDEvKJMQ2DSCgxhmWcO0fhMOY/OllRzqL5H+F5cHoSI9zOuEHnneleCFwlxIH cQN+Qc+8PVWJxwjxY4A7ziafKfHIVyJqR9UqEvqK8fXI0PiZIrSpxQnuxNx/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxRhzegt3gOXoU1cKISJfFDIIVfAwHwYDVR0j BBgwFoAUBO47w2kXMuBp3w2dKd42BhHM8NswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTkxODA5ZS1kZDQ5LTRjNTItYjExZi0yYTUxOGMzYWE4NTYvMC8wNEVFM0JDMzY5 MTczMkUwNjlERjBEOUQyOURFMzYwNjExQ0NGMERCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDRFRTNCQzM2OTE3MzJFMDY5REYwRDlEMjlERTM2MDYxMUND RjBEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U5MTgwOWUtZGQ0OS00YzUyLWIx MWYtMmE1MThjM2FhODU2LzAvMDRFRTNCQzM2OTE3MzJFMDY5REYwRDlEMjlERTM2 MDYxMUNDRjBEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAng9fXvKNCPo4yofFQ8GkEB2/DzOwmBJ4hD QcDaa05DGXxXGcBQuWDBQYMtrSKNHtg4Zs2x5K/4UIyDc18OInyht3xUeUheNBJT sV0cr2tdJ2D0BfF4MCKi7nGuHeOXwEdwiEwBGvc7zt4QKfGoaDCdcIhZSJHFw0XT 1EGHbZkEgxrF8uo7JICdYkRSqfLn9TqBs/XnLQFcX0QSvRT2h3aEYoUtdvXQ6EOW xzrBYQ+9EF4oR771GJF83LDizQdbcIXyUqnEAZKXGdfnLq3OOBR/suA9NNjdAbOm vCjYDr6vOeT84qsuWZ8UOZ5dpxGyok/8VGQ8j5l9Ilx1PHEVNoY= -----END CERTIFICATE-----Generated at Thu Mar 26 07:28:58 2026 by rpki-client