$ rpki-client -vvf repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft File: 2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft (raw, json) Hash identifier: MjI40CaMTtkHKnk1nqAx0smR6ZZ8Pzaw4ftwVRULm+E= Subject key identifier: A2:71:64:12:2C:19:0E:C4:4A:6D:45:BF:3D:D9:4F:47:2C:6D:08:14 Authority key identifier: 28:63:C0:F5:0E:0E:E5:0D:A8:CD:FB:2E:F1:2D:4B:58:11:B1:66:6C Certificate issuer: /CN=2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C Certificate serial: 5FE3B4FD392714C4BCB17BA5E335FD870A226893 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft Manifest number: 0245 Signing time: Thu 26 Mar 2026 06:50:44 +0000 Manifest this update: Thu 26 Mar 2026 06:45:44 +0000 Manifest next update: Sun 29 Mar 2026 14:30:44 +0000 Files and hashes: 1: 3130332e3138332e35372e302f32342d3234203d3e203438343635.roa (hash: ih19KYxvAXsTsnPq7aFCmnb58F9kPF7YQb52MN4zD5E=) 2: 3130332e3138332e35362e302f32332d3234203d3e20313439343035.roa (hash: /nEcTC5QsPT94UNynHuxNo5heYOYhbTbt0590F0PjQ8=) 3: 3130332e3138332e35362e302f32342d3234203d3e20333938373730.roa (hash: 6mPOu8i0ZNMpERixSEWj+YT5W5q+bEUWd8MdCrMm+DU=) 4: 2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl (hash: rOkIBg4cIfeRVF2L3f0VJ0B10GoqrU1qajIzjI8zQM4=) 5: 3130332e3138332e35362e302f32342d3234203d3e203438343635.roa (hash: 9/+sbuomRYkbpuZkgeXYn2wYKrH6jZB0uQ6CyyEN0fI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:30:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:e3:b4:fd:39:27:14:c4:bc:b1:7b:a5:e3:35:fd:87:0a:22:68:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C Validity Not Before: Mar 26 06:45:44 2026 GMT Not After : Mar 29 14:30:44 2026 GMT Subject: CN=A27164122C190EC44A6D45BF3DD94F472C6D0814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b8:f6:05:4b:6b:d1:8a:f3:d6:cc:47:35:94: 2e:53:9b:93:03:e5:e7:0e:56:95:2a:06:ce:f5:99: 42:84:25:6d:26:af:ad:04:18:52:d1:7e:33:d3:81: 6f:99:10:e7:64:72:2c:f4:ed:46:72:67:e2:4f:f3: d6:6a:93:d5:22:dd:b4:52:af:e7:5a:b8:6a:e2:e4: 31:a1:89:43:fa:4b:15:56:cc:2a:36:22:7c:33:75: 81:a8:d6:e3:99:ab:3c:19:25:3a:81:ef:63:35:ca: 2a:bf:12:14:33:a8:3a:53:eb:b2:76:1a:bc:c3:92: 43:3c:d7:20:69:db:66:82:14:09:7b:03:9f:0e:8c: 0b:d6:70:94:21:51:33:08:b9:7f:7d:b0:c9:5e:6b: 0d:63:42:46:e6:9a:da:12:f3:e9:98:23:fd:28:17: 2f:7a:b8:33:9f:6b:ac:ca:82:3f:b4:01:ec:b1:4c: a9:82:f0:d7:96:70:eb:f9:51:54:a6:e1:da:91:03: 25:aa:a8:ce:27:f4:32:11:28:0b:4d:97:52:95:73: 85:7a:39:c9:ac:1b:8f:29:73:ef:e8:05:fc:f6:59: e9:b3:28:a0:c4:98:59:01:c9:41:92:7d:54:97:2f: e2:c5:cf:9d:06:c0:ea:6c:70:83:0d:32:e4:23:25: 58:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:71:64:12:2C:19:0E:C4:4A:6D:45:BF:3D:D9:4F:47:2C:6D:08:14 X509v3 Authority Key Identifier: keyid:28:63:C0:F5:0E:0E:E5:0D:A8:CD:FB:2E:F1:2D:4B:58:11:B1:66:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:ad:33:04:73:f6:47:45:26:df:a5:36:91:ab:91:d2:64:4d: 8a:f3:bf:71:99:ed:e8:21:e8:db:1c:ad:0c:d2:cd:f1:bb:4d: 85:15:29:1a:61:96:5f:56:c0:58:fb:2b:f4:be:b3:e9:77:92: 91:40:8f:37:a7:7f:69:b3:90:f4:eb:27:f1:7d:3b:d4:c1:3a: 22:c1:23:e4:b7:b6:84:9b:4b:00:17:2a:94:45:b6:b1:e5:68: 2c:c8:da:32:b6:53:32:46:03:8f:3d:9c:2b:29:9d:6b:70:00: e3:cd:7c:41:47:04:e7:83:20:c7:48:0e:ef:12:8f:4a:1b:3a: f5:bd:46:d7:34:35:8a:ab:93:6d:cd:fb:81:38:8f:aa:cf:eb: fb:01:c7:87:94:0c:19:3f:74:ed:88:6b:25:09:58:7e:1e:fe: cd:a3:95:73:af:f9:f8:96:3a:b4:c4:dc:03:7c:38:2a:6e:ea: d4:d3:24:0b:9a:57:ba:e3:47:3f:82:4d:d5:fd:f8:f6:05:dc: 25:74:7b:e8:90:2e:fa:92:7e:55:7b:3f:39:1a:e6:63:55:d1: 73:69:f9:79:96:5b:01:ce:72:74:71:81:9d:26:69:24:75:27: 7a:d0:69:1f:0b:e6:ed:e0:d1:b5:a0:ed:03:c8:18:41:ad:63: 9f:0a:4a:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX+O0/TknFMS8sXul4zX9hwoiaJMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRCNTgx MUIxNjY2QzAeFw0yNjAzMjYwNjQ1NDRaFw0yNjAzMjkxNDMwNDRaMDMxMTAvBgNV BAMTKEEyNzE2NDEyMkMxOTBFQzQ0QTZENDVCRjNERDk0RjQ3MkM2RDA4MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHuPYFS2vRivPWzEc1lC5Tm5MD 5ecOVpUqBs71mUKEJW0mr60EGFLRfjPTgW+ZEOdkciz07UZyZ+JP89Zqk9Ui3bRS r+dauGri5DGhiUP6SxVWzCo2InwzdYGo1uOZqzwZJTqB72M1yiq/EhQzqDpT67J2 GrzDkkM81yBp22aCFAl7A58OjAvWcJQhUTMIuX99sMleaw1jQkbmmtoS8+mYI/0o Fy96uDOfa6zKgj+0AeyxTKmC8NeWcOv5UVSm4dqRAyWqqM4n9DIRKAtNl1KVc4V6 OcmsG48pc+/oBfz2WemzKKDEmFkByUGSfVSXL+LFz50GwOpscIMNMuQjJVgHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUonFkEiwZDsRKbUW/PdlPRyxtCBQwHwYDVR0j BBgwFoAUKGPA9Q4O5Q2ozfsu8S1LWBGxZmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTRkZGM2NS02MWMxLTQ5ZTEtYTg5NS0zYzAzZjU4N2EyN2IvMC8yODYzQzBGNTBF MEVFNTBEQThDREZCMkVGMTJENEI1ODExQjE2NjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRCNTgxMUIx NjY2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjU0ZGRjNjUtNjFjMS00OWUxLWE4 OTUtM2MwM2Y1ODdhMjdiLzAvMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRC NTgxMUIxNjY2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAACtMwRz9kdFJt+lNpGrkdJkTYrzv3GZ7egh 6NscrQzSzfG7TYUVKRphll9WwFj7K/S+s+l3kpFAjzenf2mzkPTrJ/F9O9TBOiLB I+S3toSbSwAXKpRFtrHlaCzI2jK2UzJGA489nCspnWtwAOPNfEFHBOeDIMdIDu8S j0obOvW9Rtc0NYqrk23N+4E4j6rP6/sBx4eUDBk/dO2IayUJWH4e/s2jlXOv+fiW OrTE3AN8OCpu6tTTJAuaV7rjRz+CTdX9+PYF3CV0e+iQLvqSflV7Pzka5mNV0XNp +XmWWwHOcnRxgZ0maSR1J3rQaR8L5u3g0bWg7QPIGEGtY58KSi0= -----END CERTIFICATE-----Generated at Thu Mar 26 20:10:26 2026 by rpki-client