$ rpki-client -vvf repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.mft File: E17357E41F3644D13EBC7C4B25B8A2936B91165A.mft (raw, json) Hash identifier: 0CdiKM2gGJbgA4wsyz60UvsEqZlKHn+PPIeNDymDvnQ= Subject key identifier: 42:0A:23:19:37:A6:4E:8B:55:F9:52:35:57:3C:8D:BA:60:64:FF:72 Authority key identifier: E1:73:57:E4:1F:36:44:D1:3E:BC:7C:4B:25:B8:A2:93:6B:91:16:5A Certificate issuer: /CN=E17357E41F3644D13EBC7C4B25B8A2936B91165A Certificate serial: 3130B8919845646EA82D2635AB5FF33BA7C0754D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17357E41F3644D13EBC7C4B25B8A2936B91165A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.mft Manifest number: 04A3 Signing time: Wed 25 Mar 2026 22:31:58 +0000 Manifest this update: Wed 25 Mar 2026 22:26:58 +0000 Manifest next update: Sun 29 Mar 2026 00:31:58 +0000 Files and hashes: 1: 3130332e3134382e32382e302f32342d3234203d3e20313430303132.roa (hash: c+kaUi4De+/vm5rVBRPjrkkr1HTjdZlHY3+0tiasoH8=) 2: 3130332e3134382e32392e302f32342d3234203d3e20313430303132.roa (hash: ftn9K7p77+T5MEgcZnDpxyUXZFHtofZmQssGsi+FEgo=) 3: 323430353a633934303a3a2f33322d3332203d3e20313430303132.roa (hash: 0Ch00VaMiPntZrLpBaDMR1Y+kpCG3oxMGYz3YYRWkbY=) 4: E17357E41F3644D13EBC7C4B25B8A2936B91165A.crl (hash: KYTDG79R9CJVuWTtzt/XH/VwT7F7dcHiRGTw99QoFXo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.crl rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17357E41F3644D13EBC7C4B25B8A2936B91165A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 00:31:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:30:b8:91:98:45:64:6e:a8:2d:26:35:ab:5f:f3:3b:a7:c0:75:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E17357E41F3644D13EBC7C4B25B8A2936B91165A Validity Not Before: Mar 25 22:26:58 2026 GMT Not After : Mar 29 00:31:58 2026 GMT Subject: CN=420A231937A64E8B55F95235573C8DBA6064FF72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d4:4d:bb:bc:3c:1b:32:34:7e:51:32:cc:3a: 90:a4:09:00:18:60:9d:72:82:bb:24:18:44:bf:c8: 4c:5d:10:53:cd:ee:42:dc:09:bd:53:22:e9:3c:d2: cc:e2:0e:5f:67:50:8a:cf:81:6b:a4:df:f7:0e:98: b4:27:40:65:34:87:96:42:47:21:b2:4e:77:a6:23: d5:31:46:0d:d8:ff:de:13:da:31:04:74:50:90:98: 4e:04:d6:8c:a3:eb:15:fb:97:f2:00:ff:f7:df:ec: 1c:9d:fa:00:2d:58:61:9c:ad:a6:8c:c3:5a:a9:86: c6:41:28:e0:60:94:ee:44:f8:f3:f5:4f:00:df:6e: b4:17:0e:7c:7a:7f:e4:2b:2d:5c:59:2f:df:76:40: 87:a9:64:2a:1e:ac:1e:24:d7:b4:a3:f5:60:8c:95: de:7d:ea:37:b6:95:e5:fe:0e:75:e9:07:a1:d3:ac: 24:43:45:be:bf:ec:a9:d9:93:ac:99:83:66:35:9b: 32:0d:24:cf:4d:07:91:cb:af:4a:bd:4b:6c:26:92: ad:68:9a:2a:da:31:eb:ed:6b:50:55:04:0b:2f:45: 62:33:94:42:d8:20:e5:06:6c:84:8c:47:99:a0:7f: 29:22:24:02:ec:04:c1:fd:d8:67:e4:9d:8d:e9:52: 6a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:0A:23:19:37:A6:4E:8B:55:F9:52:35:57:3C:8D:BA:60:64:FF:72 X509v3 Authority Key Identifier: keyid:E1:73:57:E4:1F:36:44:D1:3E:BC:7C:4B:25:B8:A2:93:6B:91:16:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17357E41F3644D13EBC7C4B25B8A2936B91165A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:5a:c5:c7:13:46:8e:12:1e:0c:45:f0:5e:d7:8b:42:48:7d: 96:55:03:a0:b9:d1:46:f9:36:22:15:5c:b1:7f:43:66:8d:67: 3b:eb:19:0d:13:19:40:31:53:c2:39:d8:b5:7a:cf:87:02:aa: c6:fd:7d:d1:c0:96:49:4a:e2:ee:37:48:c1:b8:6b:cb:94:fb: e5:20:5f:31:c5:98:58:6b:88:53:37:d4:23:49:bb:c3:45:83: a4:53:c2:05:d7:7c:da:80:18:ee:ce:e6:e0:5a:7e:35:84:3d: ce:2c:8e:88:db:9e:03:ca:74:d7:fb:eb:08:ae:20:34:04:cb: 48:37:34:06:6b:f5:f8:31:31:ce:ca:62:0b:f0:51:0c:27:c2: 89:60:d1:08:e0:de:bf:45:38:fa:77:e2:60:f1:62:2a:3e:88: 75:1b:e6:85:0e:d4:f7:06:dc:18:82:df:9a:72:9a:82:1f:06: 85:55:39:89:d9:5c:dd:9f:21:30:d9:fa:84:d9:d3:4e:ec:dd: fd:d1:e7:b0:9d:81:48:40:c7:a8:bd:ff:c7:f0:86:42:46:e9: 8d:88:34:6a:c8:70:06:99:26:5e:f9:b4:bb:2a:64:98:dc:f8: 00:b6:44:1e:fd:4d:08:eb:68:6f:52:8a:af:69:5d:38:af:2d: 67:20:b5:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMTC4kZhFZG6oLSY1q1/zO6fAdU0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE3MzU3RTQxRjM2NDREMTNFQkM3QzRCMjVCOEEyOTM2 QjkxMTY1QTAeFw0yNjAzMjUyMjI2NThaFw0yNjAzMjkwMDMxNThaMDMxMTAvBgNV BAMTKDQyMEEyMzE5MzdBNjRFOEI1NUY5NTIzNTU3M0M4REJBNjA2NEZGNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj1E27vDwbMjR+UTLMOpCkCQAY YJ1ygrskGES/yExdEFPN7kLcCb1TIuk80sziDl9nUIrPgWuk3/cOmLQnQGU0h5ZC RyGyTnemI9UxRg3Y/94T2jEEdFCQmE4E1oyj6xX7l/IA//ff7Byd+gAtWGGcraaM w1qphsZBKOBglO5E+PP1TwDfbrQXDnx6f+QrLVxZL992QIepZCoerB4k17Sj9WCM ld596je2leX+DnXpB6HTrCRDRb6/7KnZk6yZg2Y1mzINJM9NB5HLr0q9S2wmkq1o miraMevta1BVBAsvRWIzlELYIOUGbISMR5mgfykiJALsBMH92GfknY3pUmpLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQgojGTemTotV+VI1VzyNumBk/3IwHwYDVR0j BBgwFoAU4XNX5B82RNE+vHxLJbiik2uRFlowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MmFjOWU2My05ODkwLTQyMmUtODhkYy03Y2I2ZGRhYzIyZmEvMC9FMTczNTdFNDFG MzY0NEQxM0VCQzdDNEIyNUI4QTI5MzZCOTExNjVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTE3MzU3RTQxRjM2NDREMTNFQkM3QzRCMjVCOEEyOTM2Qjkx MTY1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTJhYzllNjMtOTg5MC00MjJlLTg4 ZGMtN2NiNmRkYWMyMmZhLzAvRTE3MzU3RTQxRjM2NDREMTNFQkM3QzRCMjVCOEEy OTM2QjkxMTY1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACVaxccTRo4SHgxF8F7Xi0JIfZZVA6C50Ub5 NiIVXLF/Q2aNZzvrGQ0TGUAxU8I52LV6z4cCqsb9fdHAlklK4u43SMG4a8uU++Ug XzHFmFhriFM31CNJu8NFg6RTwgXXfNqAGO7O5uBafjWEPc4sjojbngPKdNf76wiu IDQEy0g3NAZr9fgxMc7KYgvwUQwnwolg0Qjg3r9FOPp34mDxYio+iHUb5oUO1PcG 3BiC35pymoIfBoVVOYnZXN2fITDZ+oTZ007s3f3R57CdgUhAx6i9/8fwhkJG6Y2I NGrIcAaZJl75tLsqZJjc+AC2RB79TQjraG9Siq9pXTivLWcgtcE= -----END CERTIFICATE-----Generated at Thu Mar 26 16:08:35 2026 by rpki-client