$ rpki-client -vvf repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.mft File: E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.mft (raw, json) Hash identifier: 00T0ZtdsQcuEPNdEnNwKW3G1+1xJTQ2QaOgi2DW435c= Subject key identifier: B3:07:74:C5:86:F8:51:E7:D7:93:D4:CC:77:43:3E:E4:9E:46:BB:6F Authority key identifier: E5:1A:77:F5:DB:FB:16:B1:60:6D:E1:A4:FF:6D:FD:05:73:42:0E:38 Certificate issuer: /CN=E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38 Certificate serial: 2370DEBE13DDEE91716AB59552B62DDA2F5F5945 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.mft Manifest number: 024A Signing time: Thu 26 Mar 2026 05:11:00 +0000 Manifest this update: Thu 26 Mar 2026 05:06:00 +0000 Manifest next update: Sun 29 Mar 2026 10:17:00 +0000 Files and hashes: 1: 3130332e3139312e37302e302f32332d3233203d3e20313439393134.roa (hash: buLsY1iWxn5uAX/tlzA+XQSdGjGRQVTlyaSVt5UiGA8=) 2: 3130332e3139312e37302e302f32342d3234203d3e20313439393134.roa (hash: LKby0ViyWSUSxyx6by+Sa+3JQIcYE0HMocb+PoIEh0U=) 3: 3130332e3139312e37312e302f32342d3234203d3e20313439393134.roa (hash: wWf96mUt4wCBbqfalQK0TLTz6ApBKN5hLe7UYoC3TzQ=) 4: E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.crl (hash: 5n6b34yz6YbrcEkX5zNFO3u+nus2fS5BkUuxMlUaLSk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.crl rsync://repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 10:17:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:70:de:be:13:dd:ee:91:71:6a:b5:95:52:b6:2d:da:2f:5f:59:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38 Validity Not Before: Mar 26 05:06:00 2026 GMT Not After : Mar 29 10:17:00 2026 GMT Subject: CN=B30774C586F851E7D793D4CC77433EE49E46BB6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:29:fd:33:af:88:01:ec:09:9c:fc:4c:90:39: 79:c1:0a:2e:1f:83:88:ec:45:db:d9:92:2f:1a:7f: 7a:f8:ad:15:3d:e2:b6:bd:5a:f6:81:a7:fc:5a:61: f9:ad:dd:1e:f6:67:32:7e:10:71:52:d0:ab:ca:fa: f5:64:15:d4:e2:cd:58:4c:0c:27:e9:74:88:78:19: eb:be:33:96:d7:27:5e:2f:40:e6:d4:46:1e:e6:38: 28:86:88:64:22:fa:a6:5d:00:ba:79:94:63:5a:fd: 76:1d:60:af:63:b4:d9:30:59:c8:1c:97:34:76:db: e7:9f:54:d3:06:3a:ca:a2:b9:5f:2c:39:f9:4b:d8: 38:da:3e:a5:12:14:84:17:ee:63:03:c1:62:14:63: e0:9f:86:b0:80:c1:64:9c:48:27:7d:d4:a0:76:b3: 70:69:a0:d2:d6:aa:2b:cf:0f:70:f2:9e:6f:c8:16: 11:04:1d:4e:1e:7a:4e:9d:16:ab:83:e5:d3:20:2f: d6:d1:7b:81:03:60:02:be:5d:51:6b:5f:99:5c:a7: c0:13:77:80:b3:17:d9:19:2b:dc:d0:95:80:d6:8b: dc:4a:62:ce:eb:44:62:50:7b:03:a0:81:51:b6:1b: 27:3e:6e:d3:de:eb:36:0b:a4:71:63:b4:fc:4b:5e: be:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:07:74:C5:86:F8:51:E7:D7:93:D4:CC:77:43:3E:E4:9E:46:BB:6F X509v3 Authority Key Identifier: keyid:E5:1A:77:F5:DB:FB:16:B1:60:6D:E1:A4:FF:6D:FD:05:73:42:0E:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:68:a3:53:fa:bb:28:5b:7a:df:e9:4a:35:98:ff:32:a3:9e: b9:cd:16:c6:bf:16:3d:43:2b:3c:93:16:80:b6:9c:50:96:af: 23:00:bb:81:bb:c2:76:fb:1e:70:9f:43:5d:36:33:81:27:c3: 17:cd:6e:e9:a6:19:78:48:9a:1f:de:9b:14:d0:5e:7a:86:73: c6:2c:97:70:8a:bd:7b:d2:be:1b:bd:d4:8d:a5:df:7a:f5:f2: 2e:3f:19:c7:e0:c0:e4:39:bb:5c:da:b0:16:c4:92:c9:a1:76: e7:4e:a7:3c:0f:b6:25:83:e3:a2:b7:45:4c:d4:c6:ab:69:1c: d3:60:87:97:51:2a:0d:f5:70:a7:93:87:dc:e6:39:6b:31:c0: 5f:c2:11:b8:75:33:ba:a4:0d:6a:ff:9e:c2:80:b0:08:6c:f3: 13:18:f1:f5:85:e6:46:f5:4a:11:b9:7c:3c:25:99:a1:e9:22: 35:2c:1d:6b:37:a6:57:0e:e3:91:3e:b5:66:8f:7f:88:fb:b6: 21:d9:8c:d9:38:28:7c:a2:23:19:3c:59:1e:68:80:b8:65:b8: 97:18:a2:b1:c7:9a:07:79:eb:d2:40:ea:10:f8:1d:75:85:ea: d7:ae:59:a4:67:b5:a7:0f:32:70:0d:15:d6:74:b4:13:43:0c: cc:e0:cc:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI3DevhPd7pFxarWVUrYt2i9fWUUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTUxQTc3RjVEQkZCMTZCMTYwNkRFMUE0RkY2REZEMDU3 MzQyMEUzODAeFw0yNjAzMjYwNTA2MDBaFw0yNjAzMjkxMDE3MDBaMDMxMTAvBgNV BAMTKEIzMDc3NEM1ODZGODUxRTdENzkzRDRDQzc3NDMzRUU0OUU0NkJCNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUKf0zr4gB7Amc/EyQOXnBCi4f g4jsRdvZki8af3r4rRU94ra9WvaBp/xaYfmt3R72ZzJ+EHFS0KvK+vVkFdTizVhM DCfpdIh4Geu+M5bXJ14vQObURh7mOCiGiGQi+qZdALp5lGNa/XYdYK9jtNkwWcgc lzR22+efVNMGOsqiuV8sOflL2DjaPqUSFIQX7mMDwWIUY+CfhrCAwWScSCd91KB2 s3BpoNLWqivPD3Dynm/IFhEEHU4eek6dFquD5dMgL9bRe4EDYAK+XVFrX5lcp8AT d4CzF9kZK9zQlYDWi9xKYs7rRGJQewOggVG2Gyc+btPe6zYLpHFjtPxLXr5NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUswd0xYb4UefXk9TMd0M+5J5Gu28wHwYDVR0j BBgwFoAU5Rp39dv7FrFgbeGk/239BXNCDjgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NDBlMWYyMC1iMGNkLTQ2OWItOTEwNi0xZWEwMDA3OTVmOWYvMC9FNTFBNzdGNURC RkIxNkIxNjA2REUxQTRGRjZERkQwNTczNDIwRTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTUxQTc3RjVEQkZCMTZCMTYwNkRFMUE0RkY2REZEMDU3MzQy MEUzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjQwZTFmMjAtYjBjZC00NjliLTkx MDYtMWVhMDAwNzk1ZjlmLzAvRTUxQTc3RjVEQkZCMTZCMTYwNkRFMUE0RkY2REZE MDU3MzQyMEUzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAFoo1P6uyhbet/pSjWY/zKjnrnNFsa/Fj1D KzyTFoC2nFCWryMAu4G7wnb7HnCfQ102M4EnwxfNbummGXhImh/emxTQXnqGc8Ys l3CKvXvSvhu91I2l33r18i4/GcfgwOQ5u1zasBbEksmhdudOpzwPtiWD46K3RUzU xqtpHNNgh5dRKg31cKeTh9zmOWsxwF/CEbh1M7qkDWr/nsKAsAhs8xMY8fWF5kb1 ShG5fDwlmaHpIjUsHWs3plcO45E+tWaPf4j7tiHZjNk4KHyiIxk8WR5ogLhluJcY orHHmgd569JA6hD4HXWF6teuWaRntacPMnANFdZ0tBNDDMzgzOM= -----END CERTIFICATE-----Generated at Thu Mar 26 19:29:56 2026 by rpki-client