$ rpki-client -vvf repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft File: E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft (raw, json) Hash identifier: PZJqc0Exi4jevCVioP2fGOCEaERfv3W/vU5lDcQuRmc= Subject key identifier: 6F:96:B3:83:4A:1F:4E:A8:79:07:94:B5:3A:ED:DC:D1:8E:05:00:EB Authority key identifier: E4:75:A8:B0:18:BA:E5:84:48:DD:E5:5D:94:87:44:2B:3B:D3:1D:1D Certificate issuer: /CN=E475A8B018BAE58448DDE55D9487442B3BD31D1D Certificate serial: 67DE2FAC9CB69BBF26B1A45D9B90543178E9E915 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft Manifest number: 03E3 Signing time: Mon 02 Mar 2026 10:20:46 +0000 Manifest this update: Mon 02 Mar 2026 10:15:46 +0000 Manifest next update: Thu 05 Mar 2026 17:48:46 +0000 Files and hashes: 1: 3130332e33312e3230362e302f32342d3234203d3e203435373138.roa (hash: jM1dJ3YR7TzVljwojJa4q/EeDXXOpsBTj/prM8KE7fc=) 2: 3230332e37392e32392e302f32342d3234203d3e203435373138.roa (hash: yAg9m7pF+iYdNCy/yrXz8NRtzJrusflXAmCndUFdC8g=) 3: E475A8B018BAE58448DDE55D9487442B3BD31D1D.crl (hash: Ub1G2K67ABxREGsVqksIGHGx1WN3uoyATXF3sZDC5Oo=) 4: 3130332e33312e3230342e302f32332d3234203d3e203435373138.roa (hash: BxXiGZiZ0RhEjv39QYMG93IThYVCN/N1iK7U2fft/Rc=) 5: 3131372e3130332e36362e302f32332d3234203d3e203435373138.roa (hash: 804HXnC9WlBS21d4SfuHgFOcruO6kfwM3PJgXEA5PHA=) 6: 3130332e3139382e39332e302f32342d3234203d3e203435373138.roa (hash: rGHSmtnO8YlcwKux+iU+plREJhdzVU0+yTBDbs6kXto=) 7: 323030313a6466303a62333a3a2f34382d3438203d3e203435373138.roa (hash: goKqtOANx7qYkuYC16JMyOMD7wMXtPJ41zk+xa8C7PI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.crl rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:de:2f:ac:9c:b6:9b:bf:26:b1:a4:5d:9b:90:54:31:78:e9:e9:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E475A8B018BAE58448DDE55D9487442B3BD31D1D Validity Not Before: Mar 2 10:15:46 2026 GMT Not After : Mar 5 17:48:46 2026 GMT Subject: CN=6F96B3834A1F4EA8790794B53AEDDCD18E0500EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:08:47:16:0c:99:6d:3f:4e:1a:24:58:3e:b5: bb:04:b3:96:50:2f:8e:3b:54:03:d7:3f:4e:40:50: 13:9b:29:83:c2:b8:38:81:29:1b:be:8f:0b:73:9d: a0:6c:eb:59:85:e2:88:85:89:f7:60:1f:29:97:ba: af:bb:70:8e:b0:57:3f:c2:a4:f9:f2:b8:e8:fa:ad: f6:44:89:69:fc:e8:23:92:eb:2e:3f:35:99:5a:ca: a0:f5:ad:8a:04:20:e6:13:18:0d:ad:c4:56:53:7d: 8b:0a:76:77:35:a6:6e:99:f2:b4:a8:d7:70:5e:52: 05:cc:8a:72:e5:6a:d2:cc:d0:dd:94:a6:dc:e4:99: 63:ed:eb:af:a5:33:21:a4:c6:2e:e6:fc:24:55:ad: 23:76:0d:24:17:98:52:ac:88:a8:82:aa:79:d7:01: f5:40:b3:63:35:b9:f6:fd:37:f5:69:61:8d:4f:7e: 41:a8:c6:42:3a:57:ea:b4:e4:3d:68:9a:17:a7:25: db:e2:83:60:7b:18:60:44:1a:8e:5a:dd:77:65:c3: 4b:86:14:91:ff:49:6d:f8:a9:21:73:b2:ff:37:fd: 4f:32:97:b2:9a:a0:92:96:ef:28:2a:ee:bc:1a:f1: 94:e6:54:4e:50:a1:63:36:23:70:5e:97:46:e6:ad: 9b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:96:B3:83:4A:1F:4E:A8:79:07:94:B5:3A:ED:DC:D1:8E:05:00:EB X509v3 Authority Key Identifier: keyid:E4:75:A8:B0:18:BA:E5:84:48:DD:E5:5D:94:87:44:2B:3B:D3:1D:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:d7:eb:af:16:28:12:b3:3c:77:5f:08:80:7e:77:30:53:f1: d0:8d:06:8b:e8:a7:17:12:8c:50:f9:f7:ac:36:02:e9:eb:99: b2:a0:a2:57:67:1b:09:e3:12:1b:82:e8:f8:a7:08:39:47:e5: 2a:02:9d:d8:5b:db:27:f0:28:2e:c6:94:76:ad:94:e3:1e:53: 2e:b5:fb:12:7a:5f:4c:13:c0:fc:43:d7:ee:68:98:23:3f:94: 4d:07:0e:e2:45:ad:d6:5f:c0:3a:04:a3:61:52:0c:23:e1:5c: d0:c5:01:98:de:75:0c:69:30:0a:50:e3:56:3c:22:ab:fa:65: 30:66:60:05:03:f7:67:5d:b1:96:40:62:02:2f:26:d5:34:2b: 3e:85:dd:62:3a:40:40:f5:db:ef:55:91:a8:ec:8d:bb:b9:55: bb:31:36:cb:b9:e6:aa:b4:3d:1c:1f:09:09:1c:f7:5e:00:49: 77:c9:c5:e7:b2:2b:13:ae:e0:d4:34:56:7a:3f:d3:f6:9b:93: ac:13:21:c8:93:e7:ce:3f:e1:1e:09:a3:c5:ef:1d:57:6e:3a: 96:3a:7e:d8:0b:7a:e7:25:83:d7:ee:d1:55:61:7d:56:64:a0: 22:ff:0a:fc:61:da:82:7b:ae:b3:3f:fc:b7:9a:e1:c2:37:4d: cb:fc:df:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ94vrJy2m78msaRdm5BUMXjp6RUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ3NUE4QjAxOEJBRTU4NDQ4RERFNTVEOTQ4NzQ0MkIz QkQzMUQxRDAeFw0yNjAzMDIxMDE1NDZaFw0yNjAzMDUxNzQ4NDZaMDMxMTAvBgNV BAMTKDZGOTZCMzgzNEExRjRFQTg3OTA3OTRCNTNBRUREQ0QxOEUwNTAwRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPCEcWDJltP04aJFg+tbsEs5ZQ L447VAPXP05AUBObKYPCuDiBKRu+jwtznaBs61mF4oiFifdgHymXuq+7cI6wVz/C pPnyuOj6rfZEiWn86COS6y4/NZlayqD1rYoEIOYTGA2txFZTfYsKdnc1pm6Z8rSo 13BeUgXMinLlatLM0N2UptzkmWPt66+lMyGkxi7m/CRVrSN2DSQXmFKsiKiCqnnX AfVAs2M1ufb9N/VpYY1PfkGoxkI6V+q05D1omhenJdvig2B7GGBEGo5a3Xdlw0uG FJH/SW34qSFzsv83/U8yl7KaoJKW7ygq7rwa8ZTmVE5QoWM2I3Bel0bmrZtZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb5azg0ofTqh5B5S1Ou3c0Y4FAOswHwYDVR0j BBgwFoAU5HWosBi65YRI3eVdlIdEKzvTHR0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDQ5YzIxMC1mMzY1LTQzMmYtYTdjYS0wYjVlYjg2YjAxYzYvMC9FNDc1QThCMDE4 QkFFNTg0NDhEREU1NUQ5NDg3NDQyQjNCRDMxRDFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQ3NUE4QjAxOEJBRTU4NDQ4RERFNTVEOTQ4NzQ0MkIzQkQz MUQxRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjA0OWMyMTAtZjM2NS00MzJmLWE3 Y2EtMGI1ZWI4NmIwMWM2LzAvRTQ3NUE4QjAxOEJBRTU4NDQ4RERFNTVEOTQ4NzQ0 MkIzQkQzMUQxRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI7X668WKBKzPHdfCIB+dzBT8dCNBovopxcS jFD596w2AunrmbKgoldnGwnjEhuC6PinCDlH5SoCndhb2yfwKC7GlHatlOMeUy61 +xJ6X0wTwPxD1+5omCM/lE0HDuJFrdZfwDoEo2FSDCPhXNDFAZjedQxpMApQ41Y8 Iqv6ZTBmYAUD92ddsZZAYgIvJtU0Kz6F3WI6QED12+9Vkajsjbu5VbsxNsu55qq0 PRwfCQkc914ASXfJxeeyKxOu4NQ0Vno/0/abk6wTIciT584/4R4Jo8XvHVduOpY6 ftgLeuclg9fu0VVhfVZkoCL/Cvxh2oJ7rrM//Lea4cI3Tcv835Q= -----END CERTIFICATE-----Generated at Mon Mar 2 18:11:55 2026 by rpki-client