$ rpki-client -vvf repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft File: E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft (raw, json) Hash identifier: tvhZLD5y0VQZlt7sISPdSjkvcddPXC2HLEE1AIt7ZBE= Subject key identifier: 23:46:FE:AB:93:32:82:D0:4E:8F:22:C6:14:F3:A5:28:3E:C4:89:7E Authority key identifier: E5:30:A7:B4:3C:0C:79:FD:87:07:00:70:80:E2:F7:AE:A4:78:FD:1C Certificate issuer: /CN=E530A7B43C0C79FD8707007080E2F7AEA478FD1C Certificate serial: 20C5E012CCB97027A078562C583CA083BBAAA0DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft Manifest number: 055E Signing time: Tue 24 Mar 2026 17:40:00 +0000 Manifest this update: Tue 24 Mar 2026 17:35:00 +0000 Manifest next update: Fri 27 Mar 2026 19:16:00 +0000 Files and hashes: 1: E530A7B43C0C79FD8707007080E2F7AEA478FD1C.crl (hash: YZN4w2HXYgRGZiA/FNX9FoYnqNQE/dj85ypNNiBgpjU=) 2: 323430323a613630303a3a2f33322d3332203d3e203137393936.roa (hash: mhHbC7IIWFFORZdV/WAdZvBGn0b08EabDQByz7GAvr4=) 3: 3230322e3136322e33322e302f32302d3234203d3e203137393936.roa (hash: 7t1UfL5E/ZJwSEO7orDivflRDFpoQvNkURGau+OZ9WE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.crl rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 19:16:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:c5:e0:12:cc:b9:70:27:a0:78:56:2c:58:3c:a0:83:bb:aa:a0:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E530A7B43C0C79FD8707007080E2F7AEA478FD1C Validity Not Before: Mar 24 17:35:00 2026 GMT Not After : Mar 27 19:16:00 2026 GMT Subject: CN=2346FEAB933282D04E8F22C614F3A5283EC4897E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0a:59:cf:8e:d9:97:58:d8:70:c9:62:76:00: 25:6f:17:f5:fa:ac:38:8f:5e:68:7c:2a:9f:2f:41: 65:9a:b3:8e:08:7e:89:8a:07:cf:7a:03:67:fe:94: 86:9c:e5:b8:dc:27:13:82:e9:46:ff:8e:16:8c:ab: 95:2d:bd:b3:e2:7f:19:37:4e:aa:62:76:69:1a:e7: 45:81:a3:31:86:8b:51:fc:1a:3e:8c:85:da:8c:e2: db:3f:9b:24:a5:73:56:8d:e2:cb:c5:75:29:bf:b8: 46:0e:db:e7:eb:6b:56:88:5d:b1:4e:0a:b9:dd:3c: db:8d:bb:b2:a0:fe:e6:66:b9:89:fb:a4:58:00:27: d0:22:28:e5:85:09:db:25:7d:58:9a:22:11:1b:de: 37:7e:aa:53:a6:80:21:2a:48:0e:b6:89:fd:6e:88: ba:fd:a1:71:30:39:f3:5e:d4:22:0e:13:c3:88:a3: 60:6e:e2:0d:77:e8:68:3c:82:d6:e1:d9:5e:9e:e4: 0f:69:8c:63:29:64:5b:05:69:33:f9:67:cc:a9:3c: 71:a1:98:7c:48:33:fd:a1:86:73:df:e1:6c:e0:81: 1b:6e:16:bc:ee:68:dc:b9:c9:bf:81:21:43:e3:06: f8:0a:14:c3:06:d3:e3:9a:66:36:5b:9e:a9:11:62: 0b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:46:FE:AB:93:32:82:D0:4E:8F:22:C6:14:F3:A5:28:3E:C4:89:7E X509v3 Authority Key Identifier: keyid:E5:30:A7:B4:3C:0C:79:FD:87:07:00:70:80:E2:F7:AE:A4:78:FD:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:66:72:53:6f:14:71:ff:12:c5:fa:07:21:8b:f4:6a:69:74: 2b:6b:76:9d:62:ee:ba:ae:3a:17:b3:3a:2f:4e:80:a3:c5:18: d0:ea:d0:03:fa:43:2f:49:82:90:42:0e:1e:c7:6d:e0:46:74: c6:90:76:c1:0a:a3:97:64:19:1d:53:1b:a0:76:9b:d1:01:90: 79:f1:cf:90:fd:cb:57:68:9e:49:76:9f:4d:b3:38:42:29:4f: 7c:1a:35:43:02:ff:cc:05:c9:b4:49:ee:df:4f:60:be:06:5a: 96:ae:b8:51:96:3d:6b:f8:9b:6d:34:b5:17:ab:06:f1:16:f1: a6:37:b3:13:d9:d7:79:f2:66:d0:84:2b:5e:aa:c8:26:4d:5c: b2:8d:c6:80:7b:46:78:64:d0:de:87:c6:e5:f6:7a:43:63:7b: ec:07:23:30:ca:22:87:96:bf:10:34:7c:4f:f6:b0:a0:a4:05: e6:b7:13:16:e4:7b:14:98:35:01:dc:65:04:2b:1e:c8:24:e9: 25:69:f3:a9:75:51:0c:a6:6d:e6:65:7d:32:13:e0:d3:9c:b9: 74:d4:6a:24:fc:9a:36:e0:1e:a1:11:a6:d2:61:3e:24:23:d0: 44:f5:b8:57:6c:14:98:49:0f:5c:e3:8f:43:86:16:22:55:1f: 62:4c:a3:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIMXgEsy5cCegeFYsWDygg7uqoN4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTUzMEE3QjQzQzBDNzlGRDg3MDcwMDcwODBFMkY3QUVB NDc4RkQxQzAeFw0yNjAzMjQxNzM1MDBaFw0yNjAzMjcxOTE2MDBaMDMxMTAvBgNV BAMTKDIzNDZGRUFCOTMzMjgyRDA0RThGMjJDNjE0RjNBNTI4M0VDNDg5N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEClnPjtmXWNhwyWJ2ACVvF/X6 rDiPXmh8Kp8vQWWas44IfomKB896A2f+lIac5bjcJxOC6Ub/jhaMq5UtvbPifxk3 Tqpidmka50WBozGGi1H8Gj6MhdqM4ts/mySlc1aN4svFdSm/uEYO2+fra1aIXbFO CrndPNuNu7Kg/uZmuYn7pFgAJ9AiKOWFCdslfViaIhEb3jd+qlOmgCEqSA62if1u iLr9oXEwOfNe1CIOE8OIo2Bu4g136Gg8gtbh2V6e5A9pjGMpZFsFaTP5Z8ypPHGh mHxIM/2hhnPf4WzggRtuFrzuaNy5yb+BIUPjBvgKFMMG0+OaZjZbnqkRYgt9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI0b+q5MygtBOjyLGFPOlKD7EiX4wHwYDVR0j BBgwFoAU5TCntDwMef2HBwBwgOL3rqR4/RwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2QyZjJmOC0zNTEyLTQzZTUtYmUxNy1iMTFiNThmOTYwODMvMC9FNTMwQTdCNDND MEM3OUZEODcwNzAwNzA4MEUyRjdBRUE0NzhGRDFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTUzMEE3QjQzQzBDNzlGRDg3MDcwMDcwODBFMkY3QUVBNDc4 RkQxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNkMmYyZjgtMzUxMi00M2U1LWJl MTctYjExYjU4Zjk2MDgzLzAvRTUzMEE3QjQzQzBDNzlGRDg3MDcwMDcwODBFMkY3 QUVBNDc4RkQxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAxmclNvFHH/EsX6ByGL9GppdCtrdp1i7rqu OhezOi9OgKPFGNDq0AP6Qy9JgpBCDh7HbeBGdMaQdsEKo5dkGR1TG6B2m9EBkHnx z5D9y1donkl2n02zOEIpT3waNUMC/8wFybRJ7t9PYL4GWpauuFGWPWv4m200tRer BvEW8aY3sxPZ13nyZtCEK16qyCZNXLKNxoB7Rnhk0N6HxuX2ekNje+wHIzDKIoeW vxA0fE/2sKCkBea3ExbkexSYNQHcZQQrHsgk6SVp86l1UQymbeZlfTIT4NOcuXTU aiT8mjbgHqERptJhPiQj0ET1uFdsFJhJD1zjj0OGFiJVH2JMo18= -----END CERTIFICATE-----Generated at Thu Mar 26 07:36:23 2026 by rpki-client