$ rpki-client -vvf repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft File: E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft (raw, json) Hash identifier: 0JQD+T+qbY5Ed12dHHNgQqjUeHtBvAwEUafrhWQAsl0= Subject key identifier: E5:9F:D6:3D:67:63:AE:23:69:5C:8A:58:94:62:18:C5:A7:7D:0B:08 Authority key identifier: E0:96:75:49:EF:32:D8:9E:9F:F1:63:8F:CF:18:34:7A:1A:DA:5D:70 Certificate issuer: /CN=E0967549EF32D89E9FF1638FCF18347A1ADA5D70 Certificate serial: 1F2DDF3BDFEC489B6221FEFCC524D47A755B4554 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft Manifest number: 0283 Signing time: Thu 26 Mar 2026 06:01:06 +0000 Manifest this update: Thu 26 Mar 2026 05:56:06 +0000 Manifest next update: Sun 29 Mar 2026 15:51:06 +0000 Files and hashes: 1: 3130332e3138362e302e302f32332d3234203d3e20313336303532.roa (hash: C86D7uEekeGvTmXVujqb0bxFjg5sWER8alGR0xcQrmY=) 2: E0967549EF32D89E9FF1638FCF18347A1ADA5D70.crl (hash: YTC1goOsoeFBnjmTffRW2IkLOaABs1tSeFB4TDFeWYw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.crl rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 15:51:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:2d:df:3b:df:ec:48:9b:62:21:fe:fc:c5:24:d4:7a:75:5b:45:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0967549EF32D89E9FF1638FCF18347A1ADA5D70 Validity Not Before: Mar 26 05:56:06 2026 GMT Not After : Mar 29 15:51:06 2026 GMT Subject: CN=E59FD63D6763AE23695C8A58946218C5A77D0B08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bd:4d:f7:2e:a8:d6:07:eb:9d:e8:39:e7:9b: e2:3a:28:43:b7:11:8f:d9:ae:58:c5:09:cd:41:fd: e9:53:f9:4e:51:fb:88:c6:16:27:e1:9b:91:f6:37: fb:0e:7e:04:db:cf:92:4a:b4:43:e6:77:5f:b8:37: f6:7d:6d:87:a6:21:ef:e5:50:e0:d7:89:2b:e3:db: 1e:20:67:9b:c5:4a:ed:e1:35:1e:c6:70:51:7d:77: 72:58:3b:e6:c2:96:80:7d:75:f3:08:81:c8:8b:99: ef:19:2a:51:81:81:d3:34:be:6f:b2:90:45:2d:8d: 21:6d:86:62:72:99:cf:a7:44:9f:e4:9b:c9:4a:60: 94:c1:c9:44:a0:44:0d:03:fc:db:43:57:46:e8:b1: aa:d5:5e:60:5c:67:11:8d:9b:da:3e:61:af:c6:57: ee:ec:a3:2b:ab:e7:a3:60:e3:22:20:1e:d5:fb:52: f7:46:21:3b:ee:72:c8:bd:0e:c7:a2:16:c2:a3:b0: c5:a5:cc:86:a5:6c:d4:14:80:47:d6:6d:4d:dd:be: 77:18:2f:7b:ad:85:d6:7d:e9:e4:ba:3b:d7:e7:63: 8b:f8:d3:71:7e:bf:b8:68:e0:cb:41:e3:88:23:5f: 73:ff:5a:29:25:41:d5:a5:01:8a:cb:f2:7f:ad:05: 6d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:9F:D6:3D:67:63:AE:23:69:5C:8A:58:94:62:18:C5:A7:7D:0B:08 X509v3 Authority Key Identifier: keyid:E0:96:75:49:EF:32:D8:9E:9F:F1:63:8F:CF:18:34:7A:1A:DA:5D:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:64:86:6d:cf:9e:f5:d3:ba:54:e5:84:91:75:92:28:43:6e: 2d:c8:c6:fb:dc:94:75:30:88:c8:8d:6a:92:74:bb:3e:76:50: 2c:06:43:81:a1:fe:85:44:7d:dd:fc:bf:13:d5:a7:a2:d4:4e: 75:09:23:34:e8:26:d8:66:02:09:e3:bc:9c:3b:a2:6e:8e:1c: 41:9f:e3:0a:2b:b6:6f:76:30:60:70:f1:1e:00:ac:b4:a9:1f: 93:5f:59:f2:2c:02:40:67:11:7a:7f:bc:07:c2:a6:d9:99:24: a7:79:01:f6:1f:69:65:71:e8:81:92:6e:ca:be:2d:d9:35:fd: 21:37:47:3d:53:1d:94:e4:b6:2d:47:eb:0e:7a:67:c0:78:32: 2a:b7:23:a4:64:80:dd:38:9d:ec:de:01:c0:dd:9c:d2:00:60: 8b:2c:f1:5f:22:ec:2a:8e:77:d0:ec:77:26:3b:e1:20:f2:2b: 16:8c:fe:1b:62:e3:a5:f3:b4:d8:a3:d1:ad:4d:9d:88:5f:97: 18:9a:ac:1f:24:92:48:31:1d:a7:bc:46:4e:df:5f:74:77:92: 59:b8:bf:6d:c2:20:e8:39:49:bd:14:f9:fb:7e:a8:f2:fd:8c: f4:c8:94:cc:0c:d9:e3:43:ab:63:28:b7:3d:a1:01:7c:38:80: df:06:e3:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHy3fO9/sSJtiIf78xSTUenVbRVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTA5Njc1NDlFRjMyRDg5RTlGRjE2MzhGQ0YxODM0N0Ex QURBNUQ3MDAeFw0yNjAzMjYwNTU2MDZaFw0yNjAzMjkxNTUxMDZaMDMxMTAvBgNV BAMTKEU1OUZENjNENjc2M0FFMjM2OTVDOEE1ODk0NjIxOEM1QTc3RDBCMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvvU33LqjWB+ud6Dnnm+I6KEO3 EY/ZrljFCc1B/elT+U5R+4jGFifhm5H2N/sOfgTbz5JKtEPmd1+4N/Z9bYemIe/l UODXiSvj2x4gZ5vFSu3hNR7GcFF9d3JYO+bCloB9dfMIgciLme8ZKlGBgdM0vm+y kEUtjSFthmJymc+nRJ/km8lKYJTByUSgRA0D/NtDV0bosarVXmBcZxGNm9o+Ya/G V+7soyur56Ng4yIgHtX7UvdGITvucsi9DseiFsKjsMWlzIalbNQUgEfWbU3dvncY L3uthdZ96eS6O9fnY4v403F+v7ho4MtB44gjX3P/WiklQdWlAYrL8n+tBW1DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5Z/WPWdjriNpXIpYlGIYxad9CwgwHwYDVR0j BBgwFoAU4JZ1Se8y2J6f8WOPzxg0ehraXXAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MzdhNmRkOC1hODQzLTQ2OTgtYTVmMy0zZWVjNDY4ZDE0YTQvMC9FMDk2NzU0OUVG MzJEODlFOUZGMTYzOEZDRjE4MzQ3QTFBREE1RDcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTA5Njc1NDlFRjMyRDg5RTlGRjE2MzhGQ0YxODM0N0ExQURB NUQ3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODM3YTZkZDgtYTg0My00Njk4LWE1 ZjMtM2VlYzQ2OGQxNGE0LzAvRTA5Njc1NDlFRjMyRDg5RTlGRjE2MzhGQ0YxODM0 N0ExQURBNUQ3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALVkhm3PnvXTulTlhJF1kihDbi3IxvvclHUw iMiNapJ0uz52UCwGQ4Gh/oVEfd38vxPVp6LUTnUJIzToJthmAgnjvJw7om6OHEGf 4wortm92MGBw8R4ArLSpH5NfWfIsAkBnEXp/vAfCptmZJKd5AfYfaWVx6IGSbsq+ Ldk1/SE3Rz1THZTkti1H6w56Z8B4Miq3I6RkgN04nezeAcDdnNIAYIss8V8i7CqO d9DsdyY74SDyKxaM/hti46XztNij0a1NnYhflxiarB8kkkgxHae8Rk7fX3R3klm4 v23CIOg5Sb0U+ft+qPL9jPTIlMwM2eNDq2Motz2hAXw4gN8G4+M= -----END CERTIFICATE-----Generated at Thu Mar 26 19:34:10 2026 by rpki-client