$ rpki-client -vvf repo-rpki.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.mft File: 179284A2BF606F69A6FF340CD3D6460BE9BF26DD.mft (raw, json) Hash identifier: ajrJBtfiRXDwZZH+qpTYI6uRmTeUCUpx8V5yTwmJEhA= Subject key identifier: 35:44:79:85:5B:81:13:8D:A8:B8:BB:EF:18:14:2A:E1:D7:16:EA:70 Authority key identifier: 17:92:84:A2:BF:60:6F:69:A6:FF:34:0C:D3:D6:46:0B:E9:BF:26:DD Certificate issuer: /CN=179284A2BF606F69A6FF340CD3D6460BE9BF26DD Certificate serial: 64FD6C217D412159A93F104E1E95524CBF5F7B66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.mft Manifest number: 01E9 Signing time: Wed 25 Mar 2026 10:10:02 +0000 Manifest this update: Wed 25 Mar 2026 10:05:02 +0000 Manifest next update: Sat 28 Mar 2026 15:09:02 +0000 Files and hashes: 1: 3130332e3234322e3233332e302f32342d3234203d3e203538383234.roa (hash: 8FTUTVLO/YGnLimJUKup/f1xejq/xLXEMBRhc3g7tzY=) 2: 179284A2BF606F69A6FF340CD3D6460BE9BF26DD.crl (hash: Ztwn4wt8rMb71NgtwNHeiQEaC6Kmvynq3z4mLJwZ2bU=) 3: 3130332e35342e3137322e302f32342d3234203d3e203538383234.roa (hash: D6F/qXvTagav5C+UFGj1J0YnYrb7zXMv0EIdRkxHrvI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.crl rsync://repo-rpki.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 15:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:fd:6c:21:7d:41:21:59:a9:3f:10:4e:1e:95:52:4c:bf:5f:7b:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=179284A2BF606F69A6FF340CD3D6460BE9BF26DD Validity Not Before: Mar 25 10:05:02 2026 GMT Not After : Mar 28 15:09:02 2026 GMT Subject: CN=354479855B81138DA8B8BBEF18142AE1D716EA70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5c:8f:b2:c2:1e:7d:2d:df:30:a0:57:dc:21: 08:6d:59:e5:df:a4:ec:e2:a2:84:c6:73:ce:2f:c6: 18:7c:fe:21:af:97:18:3b:bd:18:54:46:ad:da:f6: e0:cc:03:08:fb:7d:e7:67:77:b5:48:7c:d3:45:a2: e8:28:b5:c5:88:aa:4b:6b:d7:30:e5:80:58:73:4e: 4e:02:c8:0a:e3:9e:3d:e1:fa:0c:6b:77:13:01:68: 36:a7:cf:c2:09:c8:48:f4:c0:7f:d8:d7:2e:75:5d: c1:66:a5:8b:42:bd:75:d4:db:3c:34:a3:a4:45:de: 11:80:b8:78:d6:b6:ac:a2:4e:e9:65:00:d7:0f:9e: b9:aa:65:05:87:dd:af:df:b8:aa:67:f4:17:78:87: 65:f2:f6:45:7a:a4:5c:fc:54:29:23:2a:e3:19:b6: 92:e0:5d:cb:ae:b3:0b:03:42:c9:6c:fb:91:c4:89: 19:9e:56:11:01:29:51:a7:74:c9:c2:0c:13:4b:00: 9a:19:f9:43:45:c1:27:f5:c5:46:e8:ea:58:fb:d1: 03:5a:11:ae:75:fd:39:aa:6b:5c:bb:b6:ea:8b:f6: 35:6e:92:f0:42:ad:40:9f:3b:22:34:e5:e9:45:54: 1d:97:09:ec:57:30:b3:a9:14:a2:4c:77:79:1c:04: 06:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:44:79:85:5B:81:13:8D:A8:B8:BB:EF:18:14:2A:E1:D7:16:EA:70 X509v3 Authority Key Identifier: keyid:17:92:84:A2:BF:60:6F:69:A6:FF:34:0C:D3:D6:46:0B:E9:BF:26:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:60:27:c5:54:c3:ce:e3:db:cd:dc:b8:cf:3a:42:a9:2c:bf: 25:a9:a4:00:56:ea:81:95:89:68:5a:67:69:da:19:26:7f:77: 30:c8:6e:c7:50:d7:92:e6:32:91:3a:81:92:4b:ab:dc:44:8e: 03:a8:b1:c2:70:af:c2:2a:e9:b6:18:bf:09:d9:f0:67:85:81: b5:c9:b4:a7:18:53:62:56:95:eb:5d:4c:8c:2c:e4:7e:fa:7c: 40:a4:68:c5:4e:bf:25:ca:8d:7b:64:73:73:44:40:11:67:7a: b7:78:55:03:d9:c8:f1:9a:23:76:ee:dd:4c:95:89:c6:82:76: cd:25:59:4f:c6:37:1c:f1:77:1d:25:2d:e3:80:0c:d7:65:c4: 22:6b:16:4b:d8:51:85:49:6f:f5:13:4d:df:31:8e:90:b4:e7: a5:bd:d9:c8:40:86:9a:23:d6:c9:c7:36:57:60:b0:cc:f5:9c: b0:fb:53:06:ca:67:25:9e:59:47:be:c5:61:d8:09:40:9f:7e: 5b:1b:9d:05:fc:5d:13:04:f3:d7:c5:19:a1:f8:71:39:16:af: 2b:cd:b2:70:cd:ae:af:14:43:93:b3:a9:5b:40:de:5b:d5:ee: 4d:b0:02:c0:58:4a:b4:60:40:e1:35:ab:f9:61:7d:d7:cb:ad: 63:76:bf:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZP1sIX1BIVmpPxBOHpVSTL9fe2YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTc5Mjg0QTJCRjYwNkY2OUE2RkYzNDBDRDNENjQ2MEJF OUJGMjZERDAeFw0yNjAzMjUxMDA1MDJaFw0yNjAzMjgxNTA5MDJaMDMxMTAvBgNV BAMTKDM1NDQ3OTg1NUI4MTEzOERBOEI4QkJFRjE4MTQyQUUxRDcxNkVBNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaXI+ywh59Ld8woFfcIQhtWeXf pOziooTGc84vxhh8/iGvlxg7vRhURq3a9uDMAwj7fednd7VIfNNFougotcWIqktr 1zDlgFhzTk4CyArjnj3h+gxrdxMBaDanz8IJyEj0wH/Y1y51XcFmpYtCvXXU2zw0 o6RF3hGAuHjWtqyiTullANcPnrmqZQWH3a/fuKpn9Bd4h2Xy9kV6pFz8VCkjKuMZ tpLgXcuuswsDQsls+5HEiRmeVhEBKVGndMnCDBNLAJoZ+UNFwSf1xUbo6lj70QNa Ea51/Tmqa1y7tuqL9jVukvBCrUCfOyI05elFVB2XCexXMLOpFKJMd3kcBAbzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNUR5hVuBE42ouLvvGBQq4dcW6nAwHwYDVR0j BBgwFoAUF5KEor9gb2mm/zQM09ZGC+m/Jt0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l N2UwZmFmMC03ODhkLTQ5NWItYWM5OC1mMzUxNjE5NWRiNjAvMC8xNzkyODRBMkJG NjA2RjY5QTZGRjM0MENEM0Q2NDYwQkU5QkYyNkRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTc5Mjg0QTJCRjYwNkY2OUE2RkYzNDBDRDNENjQ2MEJFOUJG MjZERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTdlMGZhZjAtNzg4ZC00OTViLWFj OTgtZjM1MTYxOTVkYjYwLzAvMTc5Mjg0QTJCRjYwNkY2OUE2RkYzNDBDRDNENjQ2 MEJFOUJGMjZERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGdgJ8VUw87j283cuM86QqksvyWppABW6oGV iWhaZ2naGSZ/dzDIbsdQ15LmMpE6gZJLq9xEjgOoscJwr8Iq6bYYvwnZ8GeFgbXJ tKcYU2JWletdTIws5H76fECkaMVOvyXKjXtkc3NEQBFnerd4VQPZyPGaI3bu3UyV icaCds0lWU/GNxzxdx0lLeOADNdlxCJrFkvYUYVJb/UTTd8xjpC056W92chAhpoj 1snHNldgsMz1nLD7UwbKZyWeWUe+xWHYCUCfflsbnQX8XRME89fFGaH4cTkWryvN snDNrq8UQ5OzqVtA3lvV7k2wAsBYSrRgQOE1q/lhfdfLrWN2vy8= -----END CERTIFICATE-----Generated at Thu Mar 26 18:36:51 2026 by rpki-client