$ rpki-client -vvf repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.mft File: E53CDD204A5D5BF7883A0438BFC2179495953A1F.mft (raw, json) Hash identifier: zVcT7hA1tjwpvruQglCPgXK7a9HDb5dOjCAdgjaODyA= Subject key identifier: BF:0E:B5:95:C9:3C:95:8E:B0:F1:AA:AA:45:86:59:4A:31:C3:D0:D6 Authority key identifier: E5:3C:DD:20:4A:5D:5B:F7:88:3A:04:38:BF:C2:17:94:95:95:3A:1F Certificate issuer: /CN=E53CDD204A5D5BF7883A0438BFC2179495953A1F Certificate serial: 5E4EF708B83977281212C101F5AD06E5D2FB4AC6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E53CDD204A5D5BF7883A0438BFC2179495953A1F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.mft Manifest number: CB Signing time: Mon 02 Mar 2026 18:11:01 +0000 Manifest this update: Mon 02 Mar 2026 18:06:01 +0000 Manifest next update: Thu 05 Mar 2026 18:11:01 +0000 Files and hashes: 1: E53CDD204A5D5BF7883A0438BFC2179495953A1F.crl (hash: dEfoGfs7Ou0OVHqt5ocb9hVnltB/XQc6NY+MXa36/8g=) 2: 3130332e332e3233322e302f32342d3234203d3e20313531353238.roa (hash: dSXAsb0EYxBUtM1CoaRZWop2Ld4yRUPCa2RHmQsYyhU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.crl rsync://repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E53CDD204A5D5BF7883A0438BFC2179495953A1F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:4e:f7:08:b8:39:77:28:12:12:c1:01:f5:ad:06:e5:d2:fb:4a:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E53CDD204A5D5BF7883A0438BFC2179495953A1F Validity Not Before: Mar 2 18:06:01 2026 GMT Not After : Mar 5 18:11:01 2026 GMT Subject: CN=BF0EB595C93C958EB0F1AAAA4586594A31C3D0D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d8:57:4c:90:a8:a5:3e:3b:03:b5:cb:34:54: b0:86:c9:46:33:28:6b:09:1d:0d:77:88:89:e7:d3: 2f:41:b1:e7:06:27:4d:fa:bc:3f:26:7a:e2:3e:12: 21:4d:be:74:6d:85:43:3e:f8:e9:46:4f:c9:d8:73: e5:de:aa:31:04:d5:95:c3:78:aa:76:a3:08:3f:c1: 42:99:7e:65:1d:c0:40:20:5b:71:b6:88:7a:de:e5: 8e:5f:8e:bb:a9:35:76:d9:c3:91:00:ae:6e:bd:82: 0b:ca:38:8e:35:0b:e0:57:c7:b4:ea:42:69:f8:c7: 6f:90:36:28:50:99:eb:bb:dc:fc:59:ca:85:86:fc: fa:61:db:86:33:23:b1:54:dd:52:73:e6:ea:9b:f5: 19:c8:a2:c9:84:59:63:b0:15:c8:fe:a7:aa:75:7f: 85:62:11:82:41:67:12:50:75:bc:53:e9:b1:b8:72: ec:4e:c8:10:d4:64:91:1e:b3:34:eb:54:fa:5a:a0: 9c:39:45:aa:b2:33:c8:b7:95:db:d5:19:ff:4d:08: 19:14:5b:bc:86:84:59:3b:d5:34:fb:83:87:fe:6e: d1:1c:fe:f1:3d:84:ad:f4:53:ef:83:55:d1:5e:d3: 8f:ed:03:ab:39:cc:9d:b9:65:20:99:f4:e2:a8:a9: ab:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:0E:B5:95:C9:3C:95:8E:B0:F1:AA:AA:45:86:59:4A:31:C3:D0:D6 X509v3 Authority Key Identifier: keyid:E5:3C:DD:20:4A:5D:5B:F7:88:3A:04:38:BF:C2:17:94:95:95:3A:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E53CDD204A5D5BF7883A0438BFC2179495953A1F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:6f:ea:20:bc:f6:b1:34:5e:8f:21:c2:89:56:cd:03:75:7f: ad:b6:8c:db:6c:0c:03:01:71:68:62:af:33:e3:78:e2:87:fa: fd:27:ed:ca:32:86:92:9f:5a:82:41:cf:c3:e3:cf:71:67:9b: 50:d9:2c:1c:66:42:ca:49:9a:8b:cf:5c:d9:35:19:17:36:57: b1:46:2f:a0:18:90:1e:fb:6b:0b:fd:37:ee:97:f3:45:fd:0f: 25:7c:4d:7a:6e:ac:a8:8c:44:1d:10:4f:4f:85:07:ae:0b:25: f8:f3:58:69:7e:fb:f1:8b:09:21:93:4a:e7:0a:53:59:33:b4: f7:6a:8d:fe:17:ac:c5:6c:77:22:91:92:1c:f1:4d:f4:67:14: 2d:ce:12:86:d8:72:00:68:19:68:48:a1:25:dc:ed:54:17:9c: cc:82:ec:15:d9:b8:fd:1e:6f:8c:b2:af:48:96:dd:07:99:8e: 70:92:cc:58:3d:eb:48:df:16:1f:e6:77:ed:14:fb:06:e5:7d: 7f:ed:b6:84:5d:f7:84:88:4d:a8:d9:ce:1e:c9:4b:69:00:2e: 1a:25:2c:7f:65:20:ca:ae:0b:9a:b3:a0:69:30:62:c6:d5:49: d0:25:62:31:7f:98:bb:fa:37:79:c7:db:63:a1:87:e8:b2:fb: 41:41:94:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXk73CLg5dygSEsEB9a0G5dL7SsYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTUzQ0REMjA0QTVENUJGNzg4M0EwNDM4QkZDMjE3OTQ5 NTk1M0ExRjAeFw0yNjAzMDIxODA2MDFaFw0yNjAzMDUxODExMDFaMDMxMTAvBgNV BAMTKEJGMEVCNTk1QzkzQzk1OEVCMEYxQUFBQTQ1ODY1OTRBMzFDM0QwRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO2FdMkKilPjsDtcs0VLCGyUYz KGsJHQ13iInn0y9BsecGJ036vD8meuI+EiFNvnRthUM++OlGT8nYc+XeqjEE1ZXD eKp2owg/wUKZfmUdwEAgW3G2iHre5Y5fjrupNXbZw5EArm69ggvKOI41C+BXx7Tq Qmn4x2+QNihQmeu73PxZyoWG/Pph24YzI7FU3VJz5uqb9RnIosmEWWOwFcj+p6p1 f4ViEYJBZxJQdbxT6bG4cuxOyBDUZJEeszTrVPpaoJw5RaqyM8i3ldvVGf9NCBkU W7yGhFk71TT7g4f+btEc/vE9hK30U++DVdFe04/tA6s5zJ25ZSCZ9OKoqatnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvw61lck8lY6w8aqqRYZZSjHD0NYwHwYDVR0j BBgwFoAU5TzdIEpdW/eIOgQ4v8IXlJWVOh8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWU3Y2EzOS04ZGJjLTQyODItYTBkMy04NDgwMjM3MjY4NjIvMC9FNTNDREQyMDRB NUQ1QkY3ODgzQTA0MzhCRkMyMTc5NDk1OTUzQTFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTUzQ0REMjA0QTVENUJGNzg4M0EwNDM4QkZDMjE3OTQ5NTk1 M0ExRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTllN2NhMzktOGRiYy00MjgyLWEw ZDMtODQ4MDIzNzI2ODYyLzAvRTUzQ0REMjA0QTVENUJGNzg4M0EwNDM4QkZDMjE3 OTQ5NTk1M0ExRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB1v6iC89rE0Xo8hwolWzQN1f622jNtsDAMB cWhirzPjeOKH+v0n7coyhpKfWoJBz8Pjz3Fnm1DZLBxmQspJmovPXNk1GRc2V7FG L6AYkB77awv9N+6X80X9DyV8TXpurKiMRB0QT0+FB64LJfjzWGl++/GLCSGTSucK U1kztPdqjf4XrMVsdyKRkhzxTfRnFC3OEobYcgBoGWhIoSXc7VQXnMyC7BXZuP0e b4yyr0iW3QeZjnCSzFg960jfFh/md+0U+wblfX/ttoRd94SITajZzh7JS2kALhol LH9lIMquC5qzoGkwYsbVSdAlYjF/mLv6N3nH22Ohh+iy+0FBlOo= -----END CERTIFICATE-----Generated at Mon Mar 2 21:13:30 2026 by rpki-client