$ rpki-client -vvf repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft File: E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft (raw, json) Hash identifier: 9DV4N8TcD5tfJBcabikTzG5k5/SqZ4yjZfNvcY6zDOE= Subject key identifier: DB:5C:0D:D3:9E:25:D4:E2:5A:37:91:AB:00:87:08:CA:47:62:33:EB Authority key identifier: E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52 Certificate issuer: /CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52 Certificate serial: 3CEAA746ACB014349A2C952AA36179D81C063063 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer Subject info access: rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft Manifest number: 055B Signing time: Tue 24 Mar 2026 10:52:23 +0000 Manifest this update: Tue 24 Mar 2026 10:47:23 +0000 Manifest next update: Fri 27 Mar 2026 12:06:23 +0000 Files and hashes: 1: 3130332e3133302e36302e302f32332d3233203d3e20313338303739.roa (hash: t1GlQPTqCX0tSN2oGwnozLwYbWtyVQRe58xqkUEfAuQ=) 2: 3130332e3133302e36322e302f32342d3234203d3e20313338303739.roa (hash: gA/G4KU0S654m0JbYV6SpYNvybqVwcWtbGvUC8YnGdc=) 3: 3130332e3133302e36332e302f32342d3234203d3e20313338303739.roa (hash: BTJyyClQJ2ooNN9EN9agUZZ+ml+xViKf+qFHMjyGIK0=) 4: E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl (hash: NvjaTiXrTy3ZLayD3Z8Zw36M2dscZV9WeLgpzHkgZs0=) 5: 3130332e3133302e36312e302f32342d3234203d3e20313338303739.roa (hash: VmKn4H92OZlUtnRAAPlH3DAWvPgKEL7aXZz1kY1YrQ0=) 6: 3130332e3133302e36302e302f32342d3234203d3e20313338303739.roa (hash: 8GAdTJuNR1Zetl+ziDhBJwBFLCcefBc1zOZpq/utdAc=) 7: 3130332e3133302e36302e302f32322d3232203d3e20313338303739.roa (hash: dr1CQsFDr+grBIANLd3KqKBw7/lJxKh8r7O2jOMsoyE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 12:06:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:ea:a7:46:ac:b0:14:34:9a:2c:95:2a:a3:61:79:d8:1c:06:30:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52 Validity Not Before: Mar 24 10:47:23 2026 GMT Not After : Mar 27 12:06:23 2026 GMT Subject: CN=DB5C0DD39E25D4E25A3791AB008708CA476233EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fb:d7:f0:30:96:0e:97:35:c8:63:f6:f6:3a: 6f:c0:c1:16:25:53:22:55:63:61:b5:c6:5a:2a:28: b1:94:24:0b:3b:e0:06:40:cb:8c:28:e2:9e:07:ab: 93:6f:14:66:04:87:91:29:e6:e9:7c:f5:71:92:d7: cf:11:a8:bd:b6:df:66:1e:d7:5e:5e:1a:8e:27:dc: 7b:43:93:fe:41:6a:6b:4d:aa:67:7a:7a:0e:fa:35: a9:4b:98:0e:80:87:f8:49:e1:2a:d7:1c:f9:75:16: a8:ff:6d:8a:97:11:0f:b8:aa:3b:1f:3b:e4:2d:ff: 70:a4:d6:17:26:80:4b:5f:e9:9b:0f:b9:d9:7c:b0: 62:81:30:9a:cb:ff:a3:62:cb:df:5a:0d:19:f7:94: 50:bd:95:4d:dd:8a:53:d9:9a:77:b2:65:8e:88:ba: 6d:dd:7a:cb:2b:06:33:cb:a3:54:d4:46:0a:ec:4b: ca:a8:5d:b7:a3:aa:ce:76:e5:e7:44:77:d8:c6:cb: 90:4f:46:c3:79:79:82:6d:fe:be:1a:ad:2d:d2:0d: be:b8:22:4d:fc:e2:4c:8f:54:2e:ab:b8:84:e0:fa: 17:1e:96:9c:1e:cc:a8:0d:7d:1d:c8:24:eb:f8:84: b8:31:31:ef:70:36:4c:93:10:71:bc:7d:3e:a1:08: 46:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:5C:0D:D3:9E:25:D4:E2:5A:37:91:AB:00:87:08:CA:47:62:33:EB X509v3 Authority Key Identifier: keyid:E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:3e:7f:7d:cf:12:97:12:15:8b:23:7c:74:c2:94:21:85:bd: 3e:42:9c:ec:ec:4d:2a:49:77:57:0c:9b:ef:68:ca:e8:e7:7d: 6e:79:a2:d4:e0:08:7f:55:6d:a4:40:54:df:c7:c6:56:81:f1: 00:6f:c6:ea:c5:ef:8b:97:06:6e:98:37:37:55:66:62:bb:89: 5b:56:da:58:15:a7:98:1e:79:d2:79:58:aa:e6:69:2a:46:36: fb:d0:77:17:05:23:90:2b:6d:97:14:6e:69:5d:8b:d5:19:dc: 0a:fa:dc:56:3c:19:a0:30:f7:50:8d:43:e0:d4:9d:e8:ce:83: 98:55:1f:37:25:5b:a4:c5:fc:ee:57:59:60:c7:94:40:6a:e9: df:b9:f1:6a:6e:1c:ec:86:e3:a1:52:d2:09:5f:25:c6:39:a4: 07:60:ca:92:3b:6a:c1:f2:c0:f7:b2:4c:69:d2:bc:34:06:ca: d7:1d:cc:ec:2e:ab:d9:e0:1f:76:1a:96:99:6d:c6:43:6a:eb: 29:af:a6:2a:fa:bd:4c:39:84:16:c7:bc:16:6a:23:29:f8:19: 85:19:bd:cf:68:60:35:a0:50:8d:c6:12:41:e2:2a:48:63:04: ed:b9:68:87:26:c1:dd:4e:9e:ac:63:cf:a4:1c:bb:d3:47:ae: 25:5c:72:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPOqnRqywFDSaLJUqo2F52BwGMGMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE3QTVFQjk0MTU2REUyM0ZDREM4RjI5QjIxMEZDREVE Q0YwOEY1MjAeFw0yNjAzMjQxMDQ3MjNaFw0yNjAzMjcxMjA2MjNaMDMxMTAvBgNV BAMTKERCNUMwREQzOUUyNUQ0RTI1QTM3OTFBQjAwODcwOENBNDc2MjMzRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc+9fwMJYOlzXIY/b2Om/AwRYl UyJVY2G1xloqKLGUJAs74AZAy4wo4p4Hq5NvFGYEh5Ep5ul89XGS188RqL2232Ye 115eGo4n3HtDk/5BamtNqmd6eg76NalLmA6Ah/hJ4SrXHPl1Fqj/bYqXEQ+4qjsf O+Qt/3Ck1hcmgEtf6ZsPudl8sGKBMJrL/6Niy99aDRn3lFC9lU3dilPZmneyZY6I um3dessrBjPLo1TURgrsS8qoXbejqs525edEd9jGy5BPRsN5eYJt/r4arS3SDb64 Ik384kyPVC6ruITg+hcelpwezKgNfR3IJOv4hLgxMe9wNkyTEHG8fT6hCEYTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU21wN054l1OJaN5GrAIcIykdiM+swHwYDVR0j BBgwFoAU4XpeuUFW3iP83I8pshD83tzwj1IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTJhM2YyOC04MjczLTRkZDUtODdmYy0xZWYwMGFjYWM5YjYvMC9FMTdBNUVCOTQx NTZERTIzRkNEQzhGMjlCMjEwRkNERURDRjA4RjUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTE3QTVFQjk0MTU2REUyM0ZDREM4RjI5QjIxMEZDREVEQ0Yw OEY1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTEyYTNmMjgtODI3My00ZGQ1LTg3 ZmMtMWVmMDBhY2FjOWI2LzAvRTE3QTVFQjk0MTU2REUyM0ZDREM4RjI5QjIxMEZD REVEQ0YwOEY1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB4+f33PEpcSFYsjfHTClCGFvT5CnOzsTSpJ d1cMm+9oyujnfW55otTgCH9VbaRAVN/HxlaB8QBvxurF74uXBm6YNzdVZmK7iVtW 2lgVp5geedJ5WKrmaSpGNvvQdxcFI5ArbZcUbmldi9UZ3Ar63FY8GaAw91CNQ+DU nejOg5hVHzclW6TF/O5XWWDHlEBq6d+58WpuHOyG46FS0glfJcY5pAdgypI7asHy wPeyTGnSvDQGytcdzOwuq9ngH3YalpltxkNq6ymvpir6vUw5hBbHvBZqIyn4GYUZ vc9oYDWgUI3GEkHiKkhjBO25aIcmwd1Onqxjz6Qcu9NHriVccjs= -----END CERTIFICATE-----Generated at Thu Mar 26 12:46:42 2026 by rpki-client