$ rpki-client -vvf repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft File: 415543D423E0BD035D612DEA9BF060290E5552D2.mft (raw, json) Hash identifier: sqDMK1AsQT58aHMlyarjDZ8dtKr8/7uisU4ShvV1asA= Subject key identifier: 2E:5C:7F:E4:9A:D2:8F:B7:93:CC:E2:E5:44:CA:E2:64:4C:F6:C2:33 Authority key identifier: 41:55:43:D4:23:E0:BD:03:5D:61:2D:EA:9B:F0:60:29:0E:55:52:D2 Certificate issuer: /CN=415543D423E0BD035D612DEA9BF060290E5552D2 Certificate serial: 7A2F5D03BB26D4E88EA11EFB469027EE1D6FB578 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft Manifest number: 0294 Signing time: Wed 25 Mar 2026 16:11:25 +0000 Manifest this update: Wed 25 Mar 2026 16:06:25 +0000 Manifest next update: Sun 29 Mar 2026 00:25:25 +0000 Files and hashes: 1: 415543D423E0BD035D612DEA9BF060290E5552D2.crl (hash: 20ge9h6iHvm6MiuHvycp1ndQNoLaZIYz3/KOr4Mokko=) 2: 3130332e39352e392e302f32342d3234203d3e20313335343838.roa (hash: qH4fRHR0W4MFKh1E1105QryHXU3lSEp8fpTQZ+gmPmA=) 3: 3130332e39352e382e302f32322d3232203d3e20313335343838.roa (hash: AtVHs5kAJBkQyj2u1rc3FvQOLg6GUIRmBQO2EJLX0+Y=) 4: 3130332e39352e31312e302f32342d3234203d3e20313335343838.roa (hash: /Lar0zoBB4XPY+wQ2ITKPZI23ikh0KXVF/LsaIxKVs8=) 5: 3130332e39352e31302e302f32342d3234203d3e20313335343838.roa (hash: TPGP1WPLeZbCaltrlkU8mbWIgtWk0gBSa5ZHqBY62UE=) 6: 3130332e39352e382e302f32342d3234203d3e20313335343838.roa (hash: AA52rkzyrvi9rx6IuPvoxChCUlojIckMTzbSuJyQ2Ps=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.crl rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 00:25:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:2f:5d:03:bb:26:d4:e8:8e:a1:1e:fb:46:90:27:ee:1d:6f:b5:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=415543D423E0BD035D612DEA9BF060290E5552D2 Validity Not Before: Mar 25 16:06:25 2026 GMT Not After : Mar 29 00:25:25 2026 GMT Subject: CN=2E5C7FE49AD28FB793CCE2E544CAE2644CF6C233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1c:17:54:d2:7c:5d:c6:3a:3d:ff:a9:f9:c8: 27:6d:20:66:65:50:8d:34:9d:6d:70:e6:21:b0:f8: 7c:e0:74:e9:0d:67:61:00:6f:38:0c:2d:05:f2:0f: c6:e8:60:08:11:70:87:9e:11:d8:14:93:c5:67:af: 14:97:04:72:7c:1f:55:93:b7:0e:ff:2d:5e:cd:77: b1:59:2e:44:f6:b8:e1:af:06:a4:00:11:10:0c:6e: 72:d6:c8:c0:94:42:02:9e:61:29:aa:95:bc:71:8c: e6:ea:50:d3:42:21:2b:5f:a2:e2:41:1f:54:7f:44: 47:ee:19:56:9c:53:64:b9:75:1c:ed:3a:08:3a:48: 85:c6:a0:23:c5:8b:67:ad:98:cd:fe:32:ef:8d:73: e1:c0:96:d6:a2:e1:92:10:98:e7:a0:6c:4b:c5:49: 5a:b3:3a:8d:5b:1d:c3:56:31:ed:d6:a4:d5:11:6c: 4e:5a:6e:a9:a0:10:24:15:2a:f8:b1:9b:ab:62:e4: dc:1e:2f:39:41:a8:be:d0:24:05:ca:aa:46:87:1d: 51:2a:76:dc:f5:69:46:1f:84:1b:d1:04:9d:5a:9b: 08:01:46:30:74:1d:c2:58:31:4f:65:79:ba:2d:d4: 4e:84:ee:c7:4a:8a:c3:c1:41:5f:8c:b6:fe:0a:70: f3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:5C:7F:E4:9A:D2:8F:B7:93:CC:E2:E5:44:CA:E2:64:4C:F6:C2:33 X509v3 Authority Key Identifier: keyid:41:55:43:D4:23:E0:BD:03:5D:61:2D:EA:9B:F0:60:29:0E:55:52:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:97:f1:c6:87:dc:d5:e7:f7:5b:d8:5f:60:ad:88:7d:f6:83: 9a:e3:18:b8:80:02:d5:b2:fd:73:a3:47:66:5c:12:1c:e2:d4: 76:b4:33:c6:29:c5:2e:63:34:ad:a4:c3:e6:43:32:e1:5f:c5: eb:52:ac:18:4c:11:60:a2:30:6e:35:a1:3f:af:43:ac:f0:c5: e8:7b:8f:7b:a5:89:63:f7:74:6c:72:5f:e3:e2:77:ae:ca:4d: 4c:9b:ab:ea:c1:b4:16:7e:7c:77:0f:6a:a3:f1:a7:28:64:c2: cb:0e:23:38:b2:60:69:03:74:60:bc:b2:55:a1:20:0e:ba:df: 8a:21:a4:9c:2c:70:73:3f:53:58:10:32:d7:56:38:f7:34:a8: ac:74:41:7e:bf:67:d5:10:17:7e:8a:3b:22:73:41:b2:4c:1e: d4:d5:60:bf:79:0c:c3:7e:4c:76:81:51:52:b8:9d:d0:c0:c3: 86:4a:e5:0b:95:9a:e2:87:2f:7d:6c:82:1a:a3:e7:2b:5c:57: 43:1e:77:41:fa:d6:f4:7d:75:82:3e:cd:a0:d0:67:0c:e4:17: 3c:34:d4:ca:72:d4:5c:46:56:82:d0:fd:97:3c:23:78:87:15: 6f:c5:bd:2b:db:62:b8:f1:b9:ad:71:c6:a5:bb:91:04:52:af: d8:02:29:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUei9dA7sm1OiOoR77RpAn7h1vtXgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDE1NTQzRDQyM0UwQkQwMzVENjEyREVBOUJGMDYwMjkw RTU1NTJEMjAeFw0yNjAzMjUxNjA2MjVaFw0yNjAzMjkwMDI1MjVaMDMxMTAvBgNV BAMTKDJFNUM3RkU0OUFEMjhGQjc5M0NDRTJFNTQ0Q0FFMjY0NENGNkMyMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkHBdU0nxdxjo9/6n5yCdtIGZl UI00nW1w5iGw+HzgdOkNZ2EAbzgMLQXyD8boYAgRcIeeEdgUk8VnrxSXBHJ8H1WT tw7/LV7Nd7FZLkT2uOGvBqQAERAMbnLWyMCUQgKeYSmqlbxxjObqUNNCIStfouJB H1R/REfuGVacU2S5dRztOgg6SIXGoCPFi2etmM3+Mu+Nc+HAltai4ZIQmOegbEvF SVqzOo1bHcNWMe3WpNURbE5abqmgECQVKvixm6ti5NweLzlBqL7QJAXKqkaHHVEq dtz1aUYfhBvRBJ1amwgBRjB0HcJYMU9lebot1E6E7sdKisPBQV+Mtv4KcPNjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULlx/5JrSj7eTzOLlRMriZEz2wjMwHwYDVR0j BBgwFoAUQVVD1CPgvQNdYS3qm/BgKQ5VUtIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzY0NjVlYy05MTYwLTQ1OWItOGQxMS05NDhmYzI2ZGExYzAvMC80MTU1NDNENDIz RTBCRDAzNUQ2MTJERUE5QkYwNjAyOTBFNTU1MkQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDE1NTQzRDQyM0UwQkQwMzVENjEyREVBOUJGMDYwMjkwRTU1 NTJEMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM2NDY1ZWMtOTE2MC00NTliLThk MTEtOTQ4ZmMyNmRhMWMwLzAvNDE1NTQzRDQyM0UwQkQwMzVENjEyREVBOUJGMDYw MjkwRTU1NTJEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALKX8caH3NXn91vYX2CtiH32g5rjGLiAAtWy /XOjR2ZcEhzi1Ha0M8YpxS5jNK2kw+ZDMuFfxetSrBhMEWCiMG41oT+vQ6zwxeh7 j3uliWP3dGxyX+Pid67KTUybq+rBtBZ+fHcPaqPxpyhkwssOIziyYGkDdGC8slWh IA6634ohpJwscHM/U1gQMtdWOPc0qKx0QX6/Z9UQF36KOyJzQbJMHtTVYL95DMN+ THaBUVK4ndDAw4ZK5QuVmuKHL31sghqj5ytcV0Med0H61vR9dYI+zaDQZwzkFzw0 1Mpy1FxGVoLQ/Zc8I3iHFW/FvSvbYrjxua1xxqW7kQRSr9gCKUM= -----END CERTIFICATE-----Generated at Thu Mar 26 19:17:17 2026 by rpki-client