$ rpki-client -vvf repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft File: 0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft (raw, json) Hash identifier: 0JKu4LToL1kHfMlxVIRpMl920d2Eohq3lFRtPvCa0cU= Subject key identifier: 4C:E3:3A:C3:D4:8F:0E:77:84:6A:14:AC:11:89:5E:CF:3B:8F:35:8A Authority key identifier: 0E:42:26:A5:F1:76:6A:EA:E7:68:A2:A6:76:C3:E8:B2:CA:EA:DC:96 Certificate issuer: /CN=0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96 Certificate serial: 3F831A77C48BD9BC977BE624365EEE7CEF3155F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft Manifest number: 01D7 Signing time: Wed 25 Mar 2026 13:21:23 +0000 Manifest this update: Wed 25 Mar 2026 13:16:23 +0000 Manifest next update: Sat 28 Mar 2026 17:28:23 +0000 Files and hashes: 1: 3130332e38342e3230392e302f32342d3234203d3e20313336303735.roa (hash: me4Thz++4xDOJptBVD82BSTSCpqoOV6Ns3JSmzTub28=) 2: 3130332e38342e3231312e302f32342d3234203d3e20313336303735.roa (hash: LfOpJuNAFokj2V7rYopo5HcggK0Y2tZWYQ8zCV+kkgI=) 3: 3130332e38342e3231302e302f32342d3234203d3e20313336303735.roa (hash: V7UBWkqs6QKqwFWqiHRbtYPN+2HNCy8jGoSJOuVxEjI=) 4: 323430303a613334303a3a2f33322d3332203d3e20313336303735.roa (hash: 2uzKcYnU72O5Xi/qNWscVRV4Rkx/gN5uCZaKNsBaNU0=) 5: 3130332e38342e3230382e302f32342d3234203d3e20313336303735.roa (hash: Ay9vedxkj9NIxBoHD8ESz9hY10sIn+9uaHhelrAKQ/c=) 6: 0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl (hash: nRTbNmaCRzUh8VGPGT2pBhWOsYH2ROo9k9B08XuUjCA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 17:28:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:83:1a:77:c4:8b:d9:bc:97:7b:e6:24:36:5e:ee:7c:ef:31:55:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96 Validity Not Before: Mar 25 13:16:23 2026 GMT Not After : Mar 28 17:28:23 2026 GMT Subject: CN=4CE33AC3D48F0E77846A14AC11895ECF3B8F358A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:76:a9:6f:6c:80:4d:9f:90:e2:c4:a3:df:0b: 71:e7:b6:88:e0:d9:2f:2c:21:5b:3e:ac:18:7e:85: 5d:7e:d8:ca:64:f7:d1:13:5e:5d:8d:44:1a:6f:e5: 80:69:d9:40:51:71:f9:80:0a:20:6d:5b:85:d1:f2: e7:51:8e:ea:35:9e:12:34:66:85:ef:5e:0d:50:0c: 1e:08:8d:88:2c:af:13:2f:89:4d:44:94:cb:d2:c8: 22:fd:72:89:45:69:37:48:4d:9b:7a:97:3d:a6:26: be:02:cc:f1:d4:05:5c:0f:70:b7:90:a0:93:14:58: 55:d4:9b:ff:47:30:3e:58:e8:b3:10:18:eb:49:a4: 58:ee:25:ff:c6:36:c2:e9:1e:e1:50:0f:74:14:d5: c5:e2:ae:0f:cc:22:53:53:96:81:ff:ed:be:df:29: 42:47:fb:88:47:0f:6a:e1:f7:f5:08:86:bc:54:48: c9:dc:09:86:e8:94:94:4c:10:11:33:1a:11:1b:fa: 73:53:af:9a:34:33:34:4c:07:a9:08:11:5f:74:c7: 77:25:bf:03:c5:b3:42:81:66:8d:80:3b:8f:5b:09: b7:48:e3:7c:6f:b6:96:cf:1a:d9:f6:a6:7f:b7:51: e2:98:79:d6:f6:d4:4e:d4:fa:95:4a:01:82:99:0b: d4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:E3:3A:C3:D4:8F:0E:77:84:6A:14:AC:11:89:5E:CF:3B:8F:35:8A X509v3 Authority Key Identifier: keyid:0E:42:26:A5:F1:76:6A:EA:E7:68:A2:A6:76:C3:E8:B2:CA:EA:DC:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:7c:43:49:89:35:2b:9d:0f:43:fe:15:5d:0c:5d:7a:db:21: a2:5c:a5:9a:12:e3:05:3c:01:19:cd:f2:97:0f:bc:57:65:f5: f0:c8:5d:c7:11:7e:32:5e:94:f8:14:d4:16:09:2a:be:93:e8: 76:fc:36:cf:97:c6:02:8c:26:31:87:75:43:35:03:3e:5a:59: ed:f5:60:69:18:06:17:fd:9b:38:64:6d:61:33:04:cc:c2:df: 3a:de:41:36:93:a2:fc:be:44:45:3a:9b:bb:52:d3:de:1e:ac: b9:20:60:6c:00:63:7a:00:c9:3b:13:08:e6:36:02:f1:00:ad: 28:e8:df:ce:0c:62:64:9b:61:dd:f2:80:c2:be:e0:45:84:fc: 13:95:a8:b4:fd:46:d4:95:3b:bd:89:32:94:38:02:e9:4d:be: 0b:db:43:fd:bf:dd:3a:ea:3c:86:1b:db:4e:af:88:b1:73:20: 65:61:8e:51:e5:f9:72:7e:92:b8:ce:ae:25:3f:df:50:1e:7f: 46:74:ab:7e:48:80:b9:0d:7b:8c:3a:5a:89:e3:c2:ca:96:22: 48:71:d8:60:66:61:a9:da:51:0d:65:35:ba:ec:49:42:3c:09: f8:19:97:91:2f:5c:19:37:b4:a7:cc:01:7a:75:84:e7:f6:04: f6:67:09:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP4Mad8SL2byXe+YkNl7ufO8xVfMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU0MjI2QTVGMTc2NkFFQUU3NjhBMkE2NzZDM0U4QjJD QUVBREM5NjAeFw0yNjAzMjUxMzE2MjNaFw0yNjAzMjgxNzI4MjNaMDMxMTAvBgNV BAMTKDRDRTMzQUMzRDQ4RjBFNzc4NDZBMTRBQzExODk1RUNGM0I4RjM1OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkdqlvbIBNn5DixKPfC3Hntojg 2S8sIVs+rBh+hV1+2Mpk99ETXl2NRBpv5YBp2UBRcfmACiBtW4XR8udRjuo1nhI0 ZoXvXg1QDB4IjYgsrxMviU1ElMvSyCL9colFaTdITZt6lz2mJr4CzPHUBVwPcLeQ oJMUWFXUm/9HMD5Y6LMQGOtJpFjuJf/GNsLpHuFQD3QU1cXirg/MIlNTloH/7b7f KUJH+4hHD2rh9/UIhrxUSMncCYbolJRMEBEzGhEb+nNTr5o0MzRMB6kIEV90x3cl vwPFs0KBZo2AO49bCbdI43xvtpbPGtn2pn+3UeKYedb21E7U+pVKAYKZC9S3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTOM6w9SPDneEahSsEYlezzuPNYowHwYDVR0j BBgwFoAUDkImpfF2aurnaKKmdsPossrq3JYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTBlNWFjMi1iNmJiLTRiZWMtOWRjOS1lNDMwYTY3MzMyMTYvMC8wRTQyMjZBNUYx NzY2QUVBRTc2OEEyQTY3NkMzRThCMkNBRUFEQzk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEU0MjI2QTVGMTc2NkFFQUU3NjhBMkE2NzZDM0U4QjJDQUVB REM5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUwZTVhYzItYjZiYi00YmVjLTlk YzktZTQzMGE2NzMzMjE2LzAvMEU0MjI2QTVGMTc2NkFFQUU3NjhBMkE2NzZDM0U4 QjJDQUVBREM5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFl8Q0mJNSudD0P+FV0MXXrbIaJcpZoS4wU8 ARnN8pcPvFdl9fDIXccRfjJelPgU1BYJKr6T6Hb8Ns+XxgKMJjGHdUM1Az5aWe31 YGkYBhf9mzhkbWEzBMzC3zreQTaTovy+REU6m7tS094erLkgYGwAY3oAyTsTCOY2 AvEArSjo384MYmSbYd3ygMK+4EWE/BOVqLT9RtSVO72JMpQ4AulNvgvbQ/2/3Trq PIYb206viLFzIGVhjlHl+XJ+krjOriU/31Aef0Z0q35IgLkNe4w6WonjwsqWIkhx 2GBmYanaUQ1lNbrsSUI8CfgZl5EvXBk3tKfMAXp1hOf2BPZnCe4= -----END CERTIFICATE-----Generated at Thu Mar 26 05:40:34 2026 by rpki-client