$ rpki-client -vvf repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.mft File: E44D4DE701D932713536A084F76894A6B0473F5E.mft (raw, json) Hash identifier: k5e/WWs2VLICOb3iF1GFjUhizkY4tTg8b0pqAZRJE80= Subject key identifier: 8C:9D:53:2D:8E:99:F6:F0:2C:91:1F:77:7F:53:18:EE:01:83:36:06 Authority key identifier: E4:4D:4D:E7:01:D9:32:71:35:36:A0:84:F7:68:94:A6:B0:47:3F:5E Certificate issuer: /CN=E44D4DE701D932713536A084F76894A6B0473F5E Certificate serial: 3D659C76DEBA7E784BC55458FECB3420216FDC9B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E44D4DE701D932713536A084F76894A6B0473F5E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.mft Manifest number: 028A Signing time: Tue 24 Mar 2026 10:32:28 +0000 Manifest this update: Tue 24 Mar 2026 10:27:28 +0000 Manifest next update: Fri 27 Mar 2026 11:32:28 +0000 Files and hashes: 1: E44D4DE701D932713536A084F76894A6B0473F5E.crl (hash: wGx4l0xi4TJo486fQ4Kmc/Q17RILdK+bsG9cHZUYFDE=) 2: 3130332e3136322e3232332e302f32342d3234203d3e20313431363635.roa (hash: 7QCopDe7hDkeVtB42/2nmhBi3ICh26qKFWh8viPiuG0=) 3: 3130332e3136322e3232322e302f32342d3234203d3e203438343635.roa (hash: bl/n5bigRNUdzOdSRBMJ4xavg1ElwqsMKJXdZov+BBc=) 4: 3130332e3136322e3232322e302f32332d3233203d3e20313431363635.roa (hash: W4u8P1SQQa3NmSN5ZCqGSVGNmCx4edXu6e4flVOIf2c=) 5: 3130332e3136322e3232322e302f32342d3234203d3e20313431363635.roa (hash: otSYaOpWUX7/R5silYI2qFwHrea2Nhn73//fdSkzDls=) 6: 3130332e3136322e3232332e302f32342d3234203d3e203438343635.roa (hash: 4c0IK//t9QV9eDZcRuS2szDSLoJBAnWIV4hCGmSoEiE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.crl rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E44D4DE701D932713536A084F76894A6B0473F5E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 11:32:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:65:9c:76:de:ba:7e:78:4b:c5:54:58:fe:cb:34:20:21:6f:dc:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E44D4DE701D932713536A084F76894A6B0473F5E Validity Not Before: Mar 24 10:27:28 2026 GMT Not After : Mar 27 11:32:28 2026 GMT Subject: CN=8C9D532D8E99F6F02C911F777F5318EE01833606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:5a:d3:89:af:2a:9c:17:4d:f1:ec:62:9d:df: c7:b2:29:a0:ff:54:92:95:b2:12:f4:c6:bc:b2:36: ed:25:a3:bf:05:d4:dd:91:03:93:a4:96:6b:85:2b: 3c:6f:38:71:ea:3b:01:51:8c:41:44:e3:7b:e0:d9: 8d:8b:36:54:b5:73:32:ca:2f:b9:86:04:c5:0b:c6: 46:f6:31:48:97:ca:99:22:4a:36:32:1f:38:c3:8a: cd:49:52:f1:0d:7b:fb:d8:fc:68:10:89:1e:0f:a2: 25:da:ed:48:ec:c4:b0:7b:0b:ec:78:07:56:4d:79: 25:d2:d5:1f:5d:9f:bd:b3:29:a9:7c:e0:c3:da:ff: 54:c9:e3:11:7b:00:a1:77:41:55:dd:07:ee:4c:64: 93:26:71:da:d0:bb:e1:8c:20:11:6c:1f:ff:63:07: d3:cd:71:ae:34:1b:8a:5c:ae:3d:28:21:13:94:2a: 7c:d5:16:8d:f2:53:f8:26:3e:bb:fe:19:08:52:a2: 10:9f:96:07:eb:75:70:41:fc:70:80:78:bb:6f:a1: 73:35:43:2c:ed:b0:c8:51:4f:96:67:d3:0d:a8:d3: 34:db:ca:ef:c3:1c:d8:60:45:38:d4:ab:eb:e9:49: e6:bc:be:00:66:d1:71:a9:96:5a:b1:04:a5:4a:3f: ca:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:9D:53:2D:8E:99:F6:F0:2C:91:1F:77:7F:53:18:EE:01:83:36:06 X509v3 Authority Key Identifier: keyid:E4:4D:4D:E7:01:D9:32:71:35:36:A0:84:F7:68:94:A6:B0:47:3F:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E44D4DE701D932713536A084F76894A6B0473F5E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:bc:6b:9f:3a:c8:45:d6:f5:3e:55:ec:9e:1f:35:3c:0b:cf: 44:8c:3a:53:61:3c:c3:e9:d2:29:5c:9c:9a:0d:94:45:8e:5b: 46:7b:95:01:31:f4:6a:af:ba:a0:93:15:4a:95:4e:38:75:7f: f5:3b:82:c4:5f:b4:19:8c:a4:36:b9:14:98:05:7e:27:bb:fd: 67:92:10:92:32:94:58:0f:21:8c:79:bc:e8:cf:a4:67:cf:32: 12:b8:41:3f:e9:c1:7c:9b:70:5e:41:e2:ce:da:63:93:16:36: 65:7f:7d:59:50:e9:9b:97:32:b2:4b:28:8d:21:9d:17:06:79: 7a:62:a3:e2:bc:a9:6c:cc:31:b6:2b:7e:9f:e2:f5:70:29:4c: d6:bf:d5:48:4d:4b:b6:a8:aa:42:1c:8c:74:a2:21:01:5e:9a: 82:cd:af:71:7d:35:0b:13:cd:b8:0d:39:70:64:ca:a6:a6:64: 33:aa:9b:21:df:17:bb:bf:1d:cd:87:b2:67:e3:1d:2d:07:cf: 0d:4e:8b:59:94:7f:1f:e9:43:92:98:2f:91:6b:bf:d1:79:37: b1:8b:b0:90:e4:06:14:aa:07:59:b0:df:e7:71:fd:bc:54:24: 24:03:8e:13:e4:3d:fd:2f:1b:40:a4:f6:c5:6d:4f:49:9e:d4: 99:d5:0e:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPWWcdt66fnhLxVRY/ss0ICFv3JswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ0RDRERTcwMUQ5MzI3MTM1MzZBMDg0Rjc2ODk0QTZC MDQ3M0Y1RTAeFw0yNjAzMjQxMDI3MjhaFw0yNjAzMjcxMTMyMjhaMDMxMTAvBgNV BAMTKDhDOUQ1MzJEOEU5OUY2RjAyQzkxMUY3NzdGNTMxOEVFMDE4MzM2MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmWtOJryqcF03x7GKd38eyKaD/ VJKVshL0xryyNu0lo78F1N2RA5OklmuFKzxvOHHqOwFRjEFE43vg2Y2LNlS1czLK L7mGBMULxkb2MUiXypkiSjYyHzjDis1JUvENe/vY/GgQiR4PoiXa7UjsxLB7C+x4 B1ZNeSXS1R9dn72zKal84MPa/1TJ4xF7AKF3QVXdB+5MZJMmcdrQu+GMIBFsH/9j B9PNca40G4pcrj0oIROUKnzVFo3yU/gmPrv+GQhSohCflgfrdXBB/HCAeLtvoXM1 QyztsMhRT5Zn0w2o0zTbyu/DHNhgRTjUq+vpSea8vgBm0XGpllqxBKVKP8ovAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjJ1TLY6Z9vAskR93f1MY7gGDNgYwHwYDVR0j BBgwFoAU5E1N5wHZMnE1NqCE92iUprBHP14wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjRmMGZmYS1lMDMxLTRlZTEtYmYwZi02NGJhY2ZjZjI5NDIvMC9FNDRENERFNzAx RDkzMjcxMzUzNkEwODRGNzY4OTRBNkIwNDczRjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQ0RDRERTcwMUQ5MzI3MTM1MzZBMDg0Rjc2ODk0QTZCMDQ3 M0Y1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY0ZjBmZmEtZTAzMS00ZWUxLWJm MGYtNjRiYWNmY2YyOTQyLzAvRTQ0RDRERTcwMUQ5MzI3MTM1MzZBMDg0Rjc2ODk0 QTZCMDQ3M0Y1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABa8a586yEXW9T5V7J4fNTwLz0SMOlNhPMPp 0ilcnJoNlEWOW0Z7lQEx9GqvuqCTFUqVTjh1f/U7gsRftBmMpDa5FJgFfie7/WeS EJIylFgPIYx5vOjPpGfPMhK4QT/pwXybcF5B4s7aY5MWNmV/fVlQ6ZuXMrJLKI0h nRcGeXpio+K8qWzMMbYrfp/i9XApTNa/1UhNS7aoqkIcjHSiIQFemoLNr3F9NQsT zbgNOXBkyqamZDOqmyHfF7u/Hc2HsmfjHS0Hzw1Oi1mUfx/pQ5KYL5Frv9F5N7GL sJDkBhSqB1mw3+dx/bxUJCQDjhPkPf0vG0Ck9sVtT0me1JnVDqc= -----END CERTIFICATE-----Generated at Thu Mar 26 07:28:47 2026 by rpki-client