$ rpki-client -vvf repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft File: 473225269441779F80E443B1EA516CC99E4ED4DA.mft (raw, json) Hash identifier: D6egMxY2veg/7G2/C9MUnpSJ2Fu5SN7W8TSzpDVXswo= Subject key identifier: E0:90:EE:22:52:ED:EB:3B:B1:F6:6C:4C:09:FE:33:BF:62:3C:CA:F8 Authority key identifier: 47:32:25:26:94:41:77:9F:80:E4:43:B1:EA:51:6C:C9:9E:4E:D4:DA Certificate issuer: /CN=473225269441779F80E443B1EA516CC99E4ED4DA Certificate serial: 52B5C37A1CCCF51E10F82FA76CBE3F144CE43939 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft Manifest number: 01D7 Signing time: Tue 24 Mar 2026 12:02:34 +0000 Manifest this update: Tue 24 Mar 2026 11:57:34 +0000 Manifest next update: Fri 27 Mar 2026 23:49:34 +0000 Files and hashes: 1: 473225269441779F80E443B1EA516CC99E4ED4DA.crl (hash: oMJX4CUe58i5bf7JLoot4R8PKtsH9iSu36vjYpcbk3w=) 2: 3130332e3132312e3138372e302f32342d3234203d3e20313431393039.roa (hash: ICTrr1zawcyGxqE9qaGBu/NO12Zp3KpSJLdHGzxMVFA=) 3: 3130332e3132312e3138362e302f32342d3234203d3e20313431393039.roa (hash: opCF0u3jko4hNWDE/2pVcJdIdU0FHQiXsJlqg5I4v5U=) 4: 3130332e3132312e3138362e302f32332d3233203d3e20313431393039.roa (hash: oAysGbdydhifr7l/UknID+HyQ/T/iVxBHJ4DGeZc8gQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.crl rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 23:49:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:b5:c3:7a:1c:cc:f5:1e:10:f8:2f:a7:6c:be:3f:14:4c:e4:39:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473225269441779F80E443B1EA516CC99E4ED4DA Validity Not Before: Mar 24 11:57:34 2026 GMT Not After : Mar 27 23:49:34 2026 GMT Subject: CN=E090EE2252EDEB3BB1F66C4C09FE33BF623CCAF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:89:54:61:29:0b:d4:22:24:ad:86:39:f7:ed: 80:66:2f:b7:2b:ea:ac:4f:06:83:47:10:7b:a4:c8: d9:87:4c:70:dc:ab:e1:5e:be:80:29:ce:60:91:5a: 07:d8:4d:82:15:de:3e:44:1c:62:c5:ae:fa:3e:8c: 19:29:70:60:eb:c4:a1:e0:11:15:da:8a:d3:08:de: 88:0d:14:42:77:93:0b:a2:d3:86:72:d1:ac:3e:ff: 85:b4:9e:8a:51:e8:09:18:3b:88:68:c7:0c:91:15: 61:94:15:43:f2:98:cf:d5:f6:98:3f:b8:a4:7e:4f: f7:8b:31:28:cc:2e:a7:b0:f8:15:2f:3a:80:2d:fe: 24:9e:19:f0:69:dc:a1:04:79:0d:10:3b:6f:c4:2c: 05:02:2f:8d:11:a6:ef:aa:31:43:26:2d:38:d2:ce: 1b:d0:9f:a1:22:30:fc:7b:0a:00:17:4c:a5:52:5f: ce:9f:1b:3c:3e:18:cf:96:31:dd:8b:3d:54:d4:f4: e6:a9:c1:d9:98:87:f8:b2:af:3b:c1:79:ea:5d:6f: be:07:e2:e4:24:3f:ed:d8:ce:6a:f1:26:0c:ae:92: 82:cb:15:bd:b9:13:5e:b0:a9:b3:37:aa:33:4f:f9: 5b:8b:87:5d:b7:48:bf:8c:52:60:13:65:4b:28:5a: d3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:90:EE:22:52:ED:EB:3B:B1:F6:6C:4C:09:FE:33:BF:62:3C:CA:F8 X509v3 Authority Key Identifier: keyid:47:32:25:26:94:41:77:9F:80:E4:43:B1:EA:51:6C:C9:9E:4E:D4:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:81:a3:2a:11:19:c4:dc:1b:18:97:03:d9:72:c5:02:a1:c5: b8:2b:2d:59:23:ac:61:fe:66:2f:07:b0:e4:85:71:e8:88:57: 0f:50:12:57:57:89:d6:b3:f0:ff:ab:0d:b8:c0:13:0c:55:df: bb:26:87:66:5c:ee:5a:dd:77:9c:49:36:94:26:c4:d4:32:88: b6:77:7b:77:52:03:66:19:79:56:2c:b7:19:e3:65:65:7c:55: f3:c1:63:a5:e9:d7:c7:70:33:69:d6:b5:53:ad:86:92:61:15: 18:e1:a0:59:99:31:7d:e8:a2:f1:94:c6:fd:24:8d:3b:26:03: 09:f8:5f:20:82:73:ed:c4:0a:70:55:e6:93:e5:b3:48:12:3b: 50:9a:b1:dd:8f:01:8a:00:98:84:14:e1:01:bc:3a:35:8d:45: 76:b1:a4:15:25:57:e9:8f:61:2a:b1:a5:c7:8b:42:ee:3b:cd: 01:0b:00:f7:ae:60:d5:41:12:74:82:b3:42:81:f3:ee:34:ff: 20:d5:88:e1:ba:78:30:07:79:be:1f:a2:e4:ab:09:7a:6b:3d: 00:f3:41:f2:1f:0a:bd:39:97:d4:12:be:7e:7c:d2:6d:8d:8a: 50:fd:77:dd:58:9e:c2:85:0f:47:d0:b3:44:bf:ed:cc:a3:54: 4c:11:17:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUrXDehzM9R4Q+C+nbL4/FEzkOTkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDczMjI1MjY5NDQxNzc5RjgwRTQ0M0IxRUE1MTZDQzk5 RTRFRDREQTAeFw0yNjAzMjQxMTU3MzRaFw0yNjAzMjcyMzQ5MzRaMDMxMTAvBgNV BAMTKEUwOTBFRTIyNTJFREVCM0JCMUY2NkM0QzA5RkUzM0JGNjIzQ0NBRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoiVRhKQvUIiSthjn37YBmL7cr 6qxPBoNHEHukyNmHTHDcq+FevoApzmCRWgfYTYIV3j5EHGLFrvo+jBkpcGDrxKHg ERXaitMI3ogNFEJ3kwui04Zy0aw+/4W0nopR6AkYO4hoxwyRFWGUFUPymM/V9pg/ uKR+T/eLMSjMLqew+BUvOoAt/iSeGfBp3KEEeQ0QO2/ELAUCL40Rpu+qMUMmLTjS zhvQn6EiMPx7CgAXTKVSX86fGzw+GM+WMd2LPVTU9OapwdmYh/iyrzvBeepdb74H 4uQkP+3YzmrxJgyukoLLFb25E16wqbM3qjNP+VuLh123SL+MUmATZUsoWtOfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4JDuIlLt6zux9mxMCf4zv2I8yvgwHwYDVR0j BBgwFoAURzIlJpRBd5+A5EOx6lFsyZ5O1NowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MDYyMGNmYy1iNDZjLTQ1N2MtOWZkZS0yOTc3MTBjNTQ2YTkvMC80NzMyMjUyNjk0 NDE3NzlGODBFNDQzQjFFQTUxNkNDOTlFNEVENERBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDczMjI1MjY5NDQxNzc5RjgwRTQ0M0IxRUE1MTZDQzk5RTRF RDREQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTA2MjBjZmMtYjQ2Yy00NTdjLTlm ZGUtMjk3NzEwYzU0NmE5LzAvNDczMjI1MjY5NDQxNzc5RjgwRTQ0M0IxRUE1MTZD Qzk5RTRFRDREQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHqBoyoRGcTcGxiXA9lyxQKhxbgrLVkjrGH+ Zi8HsOSFceiIVw9QEldXidaz8P+rDbjAEwxV37smh2Zc7lrdd5xJNpQmxNQyiLZ3 e3dSA2YZeVYstxnjZWV8VfPBY6Xp18dwM2nWtVOthpJhFRjhoFmZMX3oovGUxv0k jTsmAwn4XyCCc+3ECnBV5pPls0gSO1Casd2PAYoAmIQU4QG8OjWNRXaxpBUlV+mP YSqxpceLQu47zQELAPeuYNVBEnSCs0KB8+40/yDViOG6eDAHeb4fouSrCXprPQDz QfIfCr05l9QSvn580m2NilD9d91YnsKFD0fQs0S/7cyjVEwRF70= -----END CERTIFICATE-----Generated at Thu Mar 26 18:29:11 2026 by rpki-client