$ rpki-client -vvf repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft File: E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft (raw, json) Hash identifier: qN/Oii1osgE1QTZQuhFMEtBQQLClMYn7m6MuLGRXwB0= Subject key identifier: 67:ED:19:32:0A:79:C7:42:6D:3B:D6:27:91:AD:D3:74:E0:B1:10:7D Authority key identifier: E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52 Certificate issuer: /CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52 Certificate serial: 677E87188561F2C0851C345051448C52690526F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer Subject info access: rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft Manifest number: 0551 Signing time: Mon 02 Mar 2026 00:52:20 +0000 Manifest this update: Mon 02 Mar 2026 00:47:20 +0000 Manifest next update: Thu 05 Mar 2026 06:08:20 +0000 Files and hashes: 1: 3130332e3133302e36312e302f32342d3234203d3e20313338303739.roa (hash: VmKn4H92OZlUtnRAAPlH3DAWvPgKEL7aXZz1kY1YrQ0=) 2: 3130332e3133302e36322e302f32342d3234203d3e20313338303739.roa (hash: gA/G4KU0S654m0JbYV6SpYNvybqVwcWtbGvUC8YnGdc=) 3: E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl (hash: ySsWyhacMo5zbVJSbsMh6Yto/DmMEbdHl/FReNUsfZs=) 4: 3130332e3133302e36302e302f32342d3234203d3e20313338303739.roa (hash: 8GAdTJuNR1Zetl+ziDhBJwBFLCcefBc1zOZpq/utdAc=) 5: 3130332e3133302e36302e302f32332d3233203d3e20313338303739.roa (hash: t1GlQPTqCX0tSN2oGwnozLwYbWtyVQRe58xqkUEfAuQ=) 6: 3130332e3133302e36332e302f32342d3234203d3e20313338303739.roa (hash: BTJyyClQJ2ooNN9EN9agUZZ+ml+xViKf+qFHMjyGIK0=) 7: 3130332e3133302e36302e302f32322d3232203d3e20313338303739.roa (hash: dr1CQsFDr+grBIANLd3KqKBw7/lJxKh8r7O2jOMsoyE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:08:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:7e:87:18:85:61:f2:c0:85:1c:34:50:51:44:8c:52:69:05:26:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52 Validity Not Before: Mar 2 00:47:20 2026 GMT Not After : Mar 5 06:08:20 2026 GMT Subject: CN=67ED19320A79C7426D3BD62791ADD374E0B1107D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a6:04:1a:c9:d2:f6:4c:c1:af:31:18:b0:bb: 1a:51:cf:4b:e0:ff:10:1e:74:09:1e:6e:77:2f:89: 21:71:93:3f:31:30:f5:2b:00:47:84:68:f1:39:ed: c9:4e:95:eb:0f:b1:14:b8:a9:ab:f2:c8:0a:39:5f: ee:e6:09:81:3e:ba:63:e5:97:47:d3:2f:2a:d5:9c: 0f:87:a3:50:8a:5b:55:d2:b7:85:1a:c6:0d:42:1d: af:f0:32:38:2b:f2:d6:a8:c9:fe:54:70:15:d1:a8: 18:b8:54:bc:42:f2:63:3d:cc:a2:e9:e2:1f:26:ad: f1:11:ff:df:be:e5:61:5a:25:32:1d:00:ad:b7:90: 1c:85:d8:99:3a:b0:c3:8c:c4:2c:44:41:4d:79:a3: 6e:83:f9:ff:8f:76:66:d8:b2:69:35:a9:0d:59:21: bd:0c:0e:96:fa:e6:f0:a2:83:3c:f3:be:0e:ec:65: 79:66:e8:79:a1:3d:78:75:d3:04:cd:ef:3d:29:34: 33:ad:39:5b:b8:08:00:9d:77:94:66:ba:31:50:29: 7b:08:77:ad:20:2b:b0:68:f5:38:b1:d8:76:dc:6f: c6:2a:d5:99:4b:4e:ed:3b:54:39:34:0d:cb:5d:18: 76:36:0d:f7:dd:58:a5:9a:3d:f0:2f:d6:8a:37:2d: 96:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:ED:19:32:0A:79:C7:42:6D:3B:D6:27:91:AD:D3:74:E0:B1:10:7D X509v3 Authority Key Identifier: keyid:E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:6a:02:6d:49:14:42:65:1d:af:57:f7:be:6f:c9:42:16:78: 16:71:53:de:6f:ca:4d:a0:6b:0f:e6:56:21:0c:8f:1b:de:c4: e2:f7:03:27:f5:a0:8e:ee:03:e1:10:1e:10:95:56:40:1d:07: 41:89:46:31:17:88:04:3e:ce:50:2a:9b:24:15:25:25:5a:02: 08:03:c5:cb:3f:b9:5c:9a:0f:af:38:9a:61:9d:70:c7:89:6a: 18:71:0b:24:6d:47:73:ca:b2:c0:ec:ba:c5:8e:35:34:b9:19: f8:9f:58:7d:74:ca:4c:00:d8:17:1b:04:ec:1d:57:64:c5:e2: c3:01:80:21:0f:95:f9:30:f5:b4:14:19:53:7e:cc:5a:74:e1: 53:d4:b0:ee:00:45:2f:10:5b:d4:d4:e4:d5:0b:5c:aa:1b:18: ec:30:38:82:01:e3:98:b4:3f:95:9e:69:03:36:31:c1:86:6e: 1a:db:c6:85:cb:a8:2e:2b:d4:16:35:54:bf:cd:dc:91:65:f5: 6e:37:c6:ad:d1:32:2d:04:02:7d:20:48:0e:35:dd:ff:b1:d1: a4:c6:d7:f7:67:e6:28:1a:d7:e5:51:61:e6:90:de:5f:f9:57: 3c:e4:48:67:d4:32:01:d0:7a:41:0a:89:3f:9c:01:65:7b:42: 47:1a:a9:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ36HGIVh8sCFHDRQUUSMUmkFJvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE3QTVFQjk0MTU2REUyM0ZDREM4RjI5QjIxMEZDREVE Q0YwOEY1MjAeFw0yNjAzMDIwMDQ3MjBaFw0yNjAzMDUwNjA4MjBaMDMxMTAvBgNV BAMTKDY3RUQxOTMyMEE3OUM3NDI2RDNCRDYyNzkxQUREMzc0RTBCMTEwN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdpgQaydL2TMGvMRiwuxpRz0vg /xAedAkebncviSFxkz8xMPUrAEeEaPE57clOlesPsRS4qavyyAo5X+7mCYE+umPl l0fTLyrVnA+Ho1CKW1XSt4Uaxg1CHa/wMjgr8taoyf5UcBXRqBi4VLxC8mM9zKLp 4h8mrfER/9++5WFaJTIdAK23kByF2Jk6sMOMxCxEQU15o26D+f+PdmbYsmk1qQ1Z Ib0MDpb65vCigzzzvg7sZXlm6HmhPXh10wTN7z0pNDOtOVu4CACdd5RmujFQKXsI d60gK7Bo9Tix2Hbcb8Yq1ZlLTu07VDk0DctdGHY2DffdWKWaPfAv1oo3LZYfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ+0ZMgp5x0JtO9Ynka3TdOCxEH0wHwYDVR0j BBgwFoAU4XpeuUFW3iP83I8pshD83tzwj1IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTJhM2YyOC04MjczLTRkZDUtODdmYy0xZWYwMGFjYWM5YjYvMC9FMTdBNUVCOTQx NTZERTIzRkNEQzhGMjlCMjEwRkNERURDRjA4RjUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTE3QTVFQjk0MTU2REUyM0ZDREM4RjI5QjIxMEZDREVEQ0Yw OEY1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTEyYTNmMjgtODI3My00ZGQ1LTg3 ZmMtMWVmMDBhY2FjOWI2LzAvRTE3QTVFQjk0MTU2REUyM0ZDREM4RjI5QjIxMEZD REVEQ0YwOEY1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJVqAm1JFEJlHa9X975vyUIWeBZxU95vyk2g aw/mViEMjxvexOL3Ayf1oI7uA+EQHhCVVkAdB0GJRjEXiAQ+zlAqmyQVJSVaAggD xcs/uVyaD684mmGdcMeJahhxCyRtR3PKssDsusWONTS5GfifWH10ykwA2BcbBOwd V2TF4sMBgCEPlfkw9bQUGVN+zFp04VPUsO4ARS8QW9TU5NULXKobGOwwOIIB45i0 P5WeaQM2McGGbhrbxoXLqC4r1BY1VL/N3JFl9W43xq3RMi0EAn0gSA413f+x0aTG 1/dn5iga1+VRYeaQ3l/5VzzkSGfUMgHQekEKiT+cAWV7QkcaqYA= -----END CERTIFICATE-----Generated at Mon Mar 2 09:23:25 2026 by rpki-client