$ rpki-client -vvf repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft File: 0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft (raw, json) Hash identifier: ygV1icynnDbb9m0op3ggP+zQaHhRnG5PmXGaajIl0AY= Subject key identifier: 37:70:E3:82:A3:B7:9C:ED:A5:8B:27:9C:2B:98:40:D0:95:58:6D:5C Authority key identifier: 0E:86:37:C2:3F:D7:FD:1A:BF:91:B0:25:E4:80:40:90:97:97:EA:6C Certificate issuer: /CN=0E8637C23FD7FD1ABF91B025E48040909797EA6C Certificate serial: 23DD37FC0D7DC2D63F0D51F91071D1A159AF85F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft Manifest number: 0565 Signing time: Thu 26 Mar 2026 05:21:27 +0000 Manifest this update: Thu 26 Mar 2026 05:16:27 +0000 Manifest next update: Sun 29 Mar 2026 13:23:27 +0000 Files and hashes: 1: 323430373a396338303a3a2f33322d3438203d3e20313335343834.roa (hash: PjdoU1IlaOBuAqcQYAfTUBsBWxQvsuLv55cXKjpLDcw=) 2: 3130332e37372e3135382e302f32342d3234203d3e20313530393432.roa (hash: t8s5ystlDMfZCpSFPrSjj+O0ZGC5ZqPSgcrBHxoO7nw=) 3: 3130332e37372e3135392e302f32342d3234203d3e20313437313435.roa (hash: mGAHC8BdMgBmjZL5jFtAJNkqoin6EENRYsub4ulTi+U=) 4: 0E8637C23FD7FD1ABF91B025E48040909797EA6C.crl (hash: IBNld/8B/7umCHlIctRegWcJvDkt95sleAITOep9UD4=) 5: 3130332e37372e3135362e302f32322d3234203d3e20313530393432.roa (hash: xsKvhGKuMBIEnxPyQJ6c1MbwsbCuaDw/dOSB6iinnF8=) 6: 3130332e37372e3135362e302f32342d3234203d3e20313530393432.roa (hash: mutFIy9cyMdV34tHn/8oq/u/DLJVfOqwJjG4+C2iVbI=) 7: 3130332e37372e3135372e302f32342d3234203d3e20313530393432.roa (hash: 3IbW6k7SAGrr4pbFBGvz2rrnQK3BJBcsh2+owUjptuk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.crl rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 13:23:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:dd:37:fc:0d:7d:c2:d6:3f:0d:51:f9:10:71:d1:a1:59:af:85:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E8637C23FD7FD1ABF91B025E48040909797EA6C Validity Not Before: Mar 26 05:16:27 2026 GMT Not After : Mar 29 13:23:27 2026 GMT Subject: CN=3770E382A3B79CEDA58B279C2B9840D095586D5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:74:08:6c:f6:23:1a:8b:f0:d6:ea:c0:01:79: 8f:af:ad:d6:2a:db:38:17:b1:fc:14:69:ea:b2:d9: f0:39:ca:cf:cd:80:b5:21:a3:77:8a:f7:35:10:8b: bc:75:8d:91:6b:70:23:3f:a5:bb:2d:c2:f8:5a:74: e6:62:5a:e4:a4:d0:89:d7:b2:4b:71:6c:cb:ef:30: 3f:ff:4e:1f:d6:4f:55:47:13:41:d6:9f:9d:5e:74: ff:d9:cd:e8:39:95:ad:54:82:4d:98:60:c6:40:44: 7c:c7:e5:26:17:d7:0c:4a:95:78:3f:8b:3f:0a:3e: 77:1b:39:7f:5f:eb:10:81:fe:d7:ce:8b:c1:36:72: 7b:af:eb:46:7d:94:aa:0b:f7:75:dd:17:9e:86:86: e5:10:2a:9e:ea:1e:bc:47:19:b8:d5:5e:08:8e:f0: 95:2c:ea:76:03:c2:97:89:5a:ea:ef:50:cc:02:3c: 2d:0f:32:a6:91:bb:08:6b:5b:10:9a:a4:2a:2d:54: 56:a8:04:32:eb:2b:5f:a8:2f:5a:0b:69:9b:23:21: 73:e1:66:55:2f:41:dd:b3:9c:2a:c7:d1:85:4f:5e: aa:96:0f:4f:d2:35:01:7d:92:33:00:42:e8:70:8b: 62:0b:c0:24:56:09:1f:87:71:fc:ae:9c:7c:42:12: 63:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:70:E3:82:A3:B7:9C:ED:A5:8B:27:9C:2B:98:40:D0:95:58:6D:5C X509v3 Authority Key Identifier: keyid:0E:86:37:C2:3F:D7:FD:1A:BF:91:B0:25:E4:80:40:90:97:97:EA:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:49:f4:22:08:80:e2:58:fc:0c:b5:32:04:29:75:2d:89:21: 79:e7:48:06:4f:fd:6f:b2:8b:71:0b:b2:39:39:93:af:82:f0: bd:ca:05:5e:cb:71:01:f8:b0:da:7f:e9:6b:3f:f3:6e:05:3c: ec:5c:a9:d7:52:3d:de:19:e9:08:d3:b8:b9:6e:f9:2e:da:35: ef:1c:b1:30:81:94:e1:d9:03:1c:8a:fa:50:8d:f7:9e:76:e5: b2:58:96:af:a9:31:7d:2b:b2:6c:a5:54:b2:1b:cb:dc:20:32: 9a:74:57:fd:9f:29:59:3f:2b:56:7c:b1:99:24:4e:94:70:36: 79:6a:05:69:f9:92:6a:b4:b1:13:da:3a:30:b4:aa:54:cf:15: 81:37:2e:af:ad:9f:e1:b5:1a:49:16:0b:e8:54:2a:12:23:cf: bb:59:81:41:ad:b6:ba:9e:b9:ae:f7:bc:f5:d1:1c:5b:dc:1e: 2d:63:7d:06:6b:e2:a5:b2:00:4a:56:6c:6e:be:94:3a:6d:62: fc:9e:d9:b8:b6:75:7d:10:76:57:ae:2a:1c:40:7c:b6:a7:05: 89:52:fb:0c:99:e5:8d:a9:c3:e3:21:c2:4c:ed:7a:a2:58:a0: e5:82:0b:d6:38:41:d1:ec:88:6d:6b:cd:15:25:2a:9b:1c:3a: 57:aa:26:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI903/A19wtY/DVH5EHHRoVmvhfkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU4NjM3QzIzRkQ3RkQxQUJGOTFCMDI1RTQ4MDQwOTA5 Nzk3RUE2QzAeFw0yNjAzMjYwNTE2MjdaFw0yNjAzMjkxMzIzMjdaMDMxMTAvBgNV BAMTKDM3NzBFMzgyQTNCNzlDRURBNThCMjc5QzJCOTg0MEQwOTU1ODZENUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3dAhs9iMai/DW6sABeY+vrdYq 2zgXsfwUaeqy2fA5ys/NgLUho3eK9zUQi7x1jZFrcCM/pbstwvhadOZiWuSk0InX sktxbMvvMD//Th/WT1VHE0HWn51edP/Zzeg5la1Ugk2YYMZARHzH5SYX1wxKlXg/ iz8KPncbOX9f6xCB/tfOi8E2cnuv60Z9lKoL93XdF56GhuUQKp7qHrxHGbjVXgiO 8JUs6nYDwpeJWurvUMwCPC0PMqaRuwhrWxCapCotVFaoBDLrK1+oL1oLaZsjIXPh ZlUvQd2znCrH0YVPXqqWD0/SNQF9kjMAQuhwi2ILwCRWCR+HcfyunHxCEmPdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN3DjgqO3nO2liyecK5hA0JVYbVwwHwYDVR0j BBgwFoAUDoY3wj/X/Rq/kbAl5IBAkJeX6mwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YzNmMjI4OC04OGNmLTRkMmItYmJhNi1hMDNkZDVmODM3NjEvMC8wRTg2MzdDMjNG RDdGRDFBQkY5MUIwMjVFNDgwNDA5MDk3OTdFQTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEU4NjM3QzIzRkQ3RkQxQUJGOTFCMDI1RTQ4MDQwOTA5Nzk3 RUE2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWMzZjIyODgtODhjZi00ZDJiLWJi YTYtYTAzZGQ1ZjgzNzYxLzAvMEU4NjM3QzIzRkQ3RkQxQUJGOTFCMDI1RTQ4MDQw OTA5Nzk3RUE2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIJJ9CIIgOJY/Ay1MgQpdS2JIXnnSAZP/W+y i3ELsjk5k6+C8L3KBV7LcQH4sNp/6Ws/824FPOxcqddSPd4Z6QjTuLlu+S7aNe8c sTCBlOHZAxyK+lCN95525bJYlq+pMX0rsmylVLIby9wgMpp0V/2fKVk/K1Z8sZkk TpRwNnlqBWn5kmq0sRPaOjC0qlTPFYE3Lq+tn+G1GkkWC+hUKhIjz7tZgUGttrqe ua73vPXRHFvcHi1jfQZr4qWyAEpWbG6+lDptYvye2bi2dX0QdleuKhxAfLanBYlS +wyZ5Y2pw+MhwkzteqJYoOWCC9Y4QdHsiG1rzRUlKpscOleqJrY= -----END CERTIFICATE-----Generated at Thu Mar 26 16:03:24 2026 by rpki-client