$ rpki-client -vvf repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft File: E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft (raw, json) Hash identifier: cse537GKuwB1gsq1tW9/nsryPXdVueoCi8pUFiGRRsY= Subject key identifier: 3C:CB:18:BB:D5:42:97:2C:5C:53:43:3D:29:FF:6E:57:41:82:D2:5B Authority key identifier: E7:C9:E4:E5:C8:EA:98:9F:0F:F7:D6:FE:6D:BD:6A:4F:E8:21:2D:DE Certificate issuer: /CN=E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE Certificate serial: 0387A4C49C4EA6C369039EAD3D51326B7ECC6DD8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft Manifest number: 0130 Signing time: Mon 02 Mar 2026 00:22:20 +0000 Manifest this update: Mon 02 Mar 2026 00:17:20 +0000 Manifest next update: Thu 05 Mar 2026 10:13:20 +0000 Files and hashes: 1: 3130332e36302e38392e302f32342d3234203d3e20313531353732.roa (hash: Enf4GZpiw8yRCRJ559txgbwn9cUloBn5l+xZd4CiSI4=) 2: 3130332e36302e38382e302f32332d3233203d3e20313531353732.roa (hash: ZC6TgLNk0lzol6BMmLGccC1JZhUEJfXYzEcHnys8G1o=) 3: E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.crl (hash: d+BEvXXex5JcRfsFzeY6MhlVHIG3Mhk7staEz9V6NQ8=) 4: 3130332e36302e38382e302f32342d3234203d3e20313531353732.roa (hash: k2+2S8JNGrIJgA3B1fWsPdcHVnZQhwJAO8DfE0j/qJE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.crl rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:87:a4:c4:9c:4e:a6:c3:69:03:9e:ad:3d:51:32:6b:7e:cc:6d:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE Validity Not Before: Mar 2 00:17:20 2026 GMT Not After : Mar 5 10:13:20 2026 GMT Subject: CN=3CCB18BBD542972C5C53433D29FF6E574182D25B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:27:72:42:ae:59:26:bb:94:40:c4:15:8f:61: 35:e3:f7:d0:2e:1c:1a:56:c4:97:e0:4b:b7:08:5c: ab:40:f2:3c:ba:61:7e:25:9f:f8:2f:ce:24:40:38: f2:a2:a7:5d:54:f3:31:e5:d9:dd:01:c6:b9:1e:66: 2d:01:80:6e:00:a5:83:a9:03:74:18:e5:05:48:f4: 95:31:be:da:ed:2b:35:0e:eb:da:49:98:41:9b:b7: f6:8d:3d:74:58:e1:03:4c:bc:d0:49:72:37:33:14: 5b:5e:06:f7:b4:e0:a8:25:cc:41:d4:41:e9:60:a4: 1b:0c:d4:5d:2d:8a:f8:ff:a4:ef:18:07:36:50:16: 66:16:61:db:b4:42:4a:b4:6d:74:80:f9:4d:58:e2: a1:42:10:bd:8d:b3:5c:10:5b:a3:8e:2a:5f:50:8b: 12:80:f3:8b:24:69:ed:91:ca:c4:58:a3:a4:1e:84: f4:00:98:62:85:48:60:a0:fe:e4:13:c1:b6:67:95: fa:90:5b:32:f2:bd:dc:2d:b3:ad:98:00:6b:31:4a: 4f:dd:33:9a:da:bd:ff:40:24:d7:7e:7a:c3:fa:25: aa:16:33:4f:c2:12:f6:bd:62:14:cc:31:07:0a:1d: 45:ce:49:a9:56:59:e2:dd:06:d8:29:ba:69:12:d3: 0c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:CB:18:BB:D5:42:97:2C:5C:53:43:3D:29:FF:6E:57:41:82:D2:5B X509v3 Authority Key Identifier: keyid:E7:C9:E4:E5:C8:EA:98:9F:0F:F7:D6:FE:6D:BD:6A:4F:E8:21:2D:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:81:28:b5:20:a7:ad:2f:ff:df:ee:5c:c4:6c:35:af:32:c6: d9:61:1c:ed:d2:1b:5d:00:fd:0c:44:ae:79:85:1f:14:68:31: 25:e7:df:61:fb:80:8d:98:43:5d:ab:90:1e:bb:0d:77:64:a7: 04:3c:01:4c:0e:42:c6:cf:20:e1:bd:61:d7:6b:37:93:da:39: 2d:f3:dd:3a:8a:d1:c5:06:5e:d1:f6:72:f1:49:30:42:0b:0d: 53:b4:6c:44:c8:36:e3:4d:91:cf:dc:9b:ee:76:3f:2b:32:bc: d0:20:9c:3e:b7:40:42:5a:df:cb:4a:35:8b:ab:1a:b3:25:e0: 79:44:e4:45:56:b9:34:f7:54:0a:93:17:82:a0:06:c9:9e:01: 7a:a9:80:7c:f6:af:d0:bb:27:21:4d:e0:b4:82:d1:36:bf:76: a0:0e:b7:93:01:d2:f5:b8:87:10:aa:62:00:61:df:fe:7f:49: bc:26:95:a8:a6:f7:62:37:c7:31:60:de:3b:4f:99:ea:a4:0f: 65:a0:b4:20:0e:92:e7:23:eb:72:15:ff:1b:4a:26:3b:f3:22: 6a:84:b9:20:6e:af:ab:ab:06:86:8b:be:91:6b:46:0c:f4:ac: 46:5d:ff:29:fc:ee:fa:79:41:30:27:38:44:7d:cb:f9:59:e7: a8:1c:45:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA4ekxJxOpsNpA56tPVEya37MbdgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTdDOUU0RTVDOEVBOTg5RjBGRjdENkZFNkRCRDZBNEZF ODIxMkRERTAeFw0yNjAzMDIwMDE3MjBaFw0yNjAzMDUxMDEzMjBaMDMxMTAvBgNV BAMTKDNDQ0IxOEJCRDU0Mjk3MkM1QzUzNDMzRDI5RkY2RTU3NDE4MkQyNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgJ3JCrlkmu5RAxBWPYTXj99Au HBpWxJfgS7cIXKtA8jy6YX4ln/gvziRAOPKip11U8zHl2d0BxrkeZi0BgG4ApYOp A3QY5QVI9JUxvtrtKzUO69pJmEGbt/aNPXRY4QNMvNBJcjczFFteBve04KglzEHU QelgpBsM1F0tivj/pO8YBzZQFmYWYdu0Qkq0bXSA+U1Y4qFCEL2Ns1wQW6OOKl9Q ixKA84skae2RysRYo6QehPQAmGKFSGCg/uQTwbZnlfqQWzLyvdwts62YAGsxSk/d M5ravf9AJNd+esP6JaoWM0/CEva9YhTMMQcKHUXOSalWWeLdBtgpumkS0wydAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPMsYu9VClyxcU0M9Kf9uV0GC0lswHwYDVR0j BBgwFoAU58nk5cjqmJ8P99b+bb1qT+ghLd4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzExYWE0Ni1mMjhlLTRjNTUtYjliYS03ZDViZGM5NWI0ZjYvMC9FN0M5RTRFNUM4 RUE5ODlGMEZGN0Q2RkU2REJENkE0RkU4MjEyRERFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTdDOUU0RTVDOEVBOTg5RjBGRjdENkZFNkRCRDZBNEZFODIx MkRERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTcxMWFhNDYtZjI4ZS00YzU1LWI5 YmEtN2Q1YmRjOTViNGY2LzAvRTdDOUU0RTVDOEVBOTg5RjBGRjdENkZFNkRCRDZB NEZFODIxMkRERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABaBKLUgp60v/9/uXMRsNa8yxtlhHO3SG10A /QxErnmFHxRoMSXn32H7gI2YQ12rkB67DXdkpwQ8AUwOQsbPIOG9YddrN5PaOS3z 3TqK0cUGXtH2cvFJMEILDVO0bETINuNNkc/cm+52PysyvNAgnD63QEJa38tKNYur GrMl4HlE5EVWuTT3VAqTF4KgBsmeAXqpgHz2r9C7JyFN4LSC0Ta/dqAOt5MB0vW4 hxCqYgBh3/5/Sbwmlaim92I3xzFg3jtPmeqkD2WgtCAOkucj63IV/xtKJjvzImqE uSBur6urBoaLvpFrRgz0rEZd/yn87vp5QTAnOER9y/lZ56gcRd4= -----END CERTIFICATE-----Generated at Mon Mar 2 14:42:49 2026 by rpki-client