$ rpki-client -vvf repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.mft File: E0D54A271CD04583E0304613C7075C15FA03E497.mft (raw, json) Hash identifier: cDK8kIHklVOw7bnHlWrQHG1WncktfG7Pzin5fHxrlpE= Subject key identifier: DE:DF:13:35:2D:D6:88:28:12:02:52:93:F3:3F:41:A7:37:58:D4:76 Authority key identifier: E0:D5:4A:27:1C:D0:45:83:E0:30:46:13:C7:07:5C:15:FA:03:E4:97 Certificate issuer: /CN=E0D54A271CD04583E0304613C7075C15FA03E497 Certificate serial: 1B8D8B7E22AFA2F2FD92F79F3D82F190F862CF70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0D54A271CD04583E0304613C7075C15FA03E497.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.mft Manifest number: 0428 Signing time: Mon 02 Mar 2026 12:12:33 +0000 Manifest this update: Mon 02 Mar 2026 12:07:33 +0000 Manifest next update: Thu 05 Mar 2026 16:45:33 +0000 Files and hashes: 1: 323430343a636263303a3a2f34302d3430203d3e20313338383433.roa (hash: /IjO3RoLZayoTUi4Et5qnT4r5nZ0hZHvLBKhiiiVD2Y=) 2: E0D54A271CD04583E0304613C7075C15FA03E497.crl (hash: e0vEBgAA2GtloxVsZftJQs3qdWSR7ZDdvW5T0g/Tvns=) 3: 3130332e3133382e36322e302f32332d3234203d3e20313338383433.roa (hash: XKkzY9bFjLgyHEKLIOgvs6VAzjvL/cf6BwGfRjG65P4=) 4: 3130332e3133382e36332e302f32342d3234203d3e20313338383433.roa (hash: grqJQep16rE8XIsToPc9eXCDsJaoO9etcdo/ZsDvg7E=) 5: 323430343a636263303a3a2f33322d3332203d3e20313338383433.roa (hash: ekiTRUXlXGfIdpnyynvPIh11dLh8SkdkAtK+PUzrwAE=) 6: 3130332e3133382e36322e302f32342d3234203d3e20313338383433.roa (hash: 0+nhoma588cZTYGkSlFGKnVxA81jzyEd2jcJVdxsfWE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.crl rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0D54A271CD04583E0304613C7075C15FA03E497.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:8d:8b:7e:22:af:a2:f2:fd:92:f7:9f:3d:82:f1:90:f8:62:cf:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0D54A271CD04583E0304613C7075C15FA03E497 Validity Not Before: Mar 2 12:07:33 2026 GMT Not After : Mar 5 16:45:33 2026 GMT Subject: CN=DEDF13352DD6882812025293F33F41A73758D476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c6:13:49:2e:df:f6:ce:d3:a5:13:22:7e:7f: b0:3e:bc:75:83:95:ea:0e:02:97:c4:9f:c1:86:78: dd:2b:ec:80:34:07:81:05:12:ed:14:83:46:13:f0: 4a:67:5f:67:e8:95:b7:4c:4c:4c:63:3f:f3:9b:57: a8:87:95:62:51:87:bc:d6:8b:97:6e:a3:76:5d:3e: 99:76:ca:01:22:60:97:60:cf:be:29:6d:64:df:ea: 8d:ae:4d:c0:37:e9:4f:aa:5d:8b:84:f4:59:2c:c0: 40:ab:b5:83:58:3e:c1:68:79:f9:95:e9:4a:6f:b5: ed:0e:7f:24:84:43:02:27:de:ce:ae:e3:56:9d:4d: cd:ac:d4:c6:3f:3a:fb:cf:ff:a1:98:2f:bf:8c:01: 97:2b:4a:c0:36:c9:05:72:ca:3b:b2:87:2a:a7:29: 31:53:df:de:8e:c1:bf:20:2c:5b:0d:7a:86:22:6b: 52:38:5f:f5:3e:73:1d:23:98:6a:7b:fa:2d:74:cb: b5:de:fd:8d:be:63:b4:26:13:42:22:1a:e0:ed:60: 66:79:c1:99:74:b8:51:70:93:20:fa:22:17:6a:47: f6:e7:56:6a:d7:a5:cc:a7:82:c7:f9:2b:8b:00:62: 55:50:5d:e9:06:9f:e6:cd:11:85:8c:e4:a1:ec:02: 22:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:DF:13:35:2D:D6:88:28:12:02:52:93:F3:3F:41:A7:37:58:D4:76 X509v3 Authority Key Identifier: keyid:E0:D5:4A:27:1C:D0:45:83:E0:30:46:13:C7:07:5C:15:FA:03:E4:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0D54A271CD04583E0304613C7075C15FA03E497.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:45:28:56:04:02:f2:92:5c:35:ac:59:f4:a7:b7:89:54:e5: 67:c0:0a:66:77:63:d3:22:86:1d:32:96:1e:3a:10:89:e6:bc: 3a:36:f6:21:b7:91:3e:35:33:39:0c:ee:ba:62:c6:aa:db:3a: 3f:15:af:cb:32:60:f1:5b:82:9b:fb:5f:be:ef:f3:8e:04:47: ce:e5:22:e7:41:29:46:aa:b8:9a:2d:b1:39:2f:ce:9b:df:56: 2b:7f:c4:5c:21:44:11:3e:1a:f7:03:21:10:c3:74:e1:e0:c3: 7a:77:46:32:20:18:de:66:04:44:56:20:1a:d8:45:35:92:f0: 6d:e9:ae:80:d8:bd:ed:4d:4c:06:8c:3d:1a:55:27:69:75:b0: de:6b:f1:eb:77:3d:ea:ad:15:aa:72:cb:81:88:e2:20:13:11: 15:7f:16:cd:81:61:e9:34:74:65:da:d2:84:f7:c5:b5:3e:a4: 4e:de:c2:9f:cb:d3:cf:a2:bf:c4:05:35:e3:b5:9b:37:a1:dd: 36:3a:52:39:1d:76:a2:72:07:fb:25:ab:54:91:49:fe:fa:f0: d3:07:08:af:0e:4c:48:3c:23:92:b3:a7:41:34:c8:1d:3e:1b: 93:f4:6f:c4:9b:ad:71:06:12:be:90:ca:ff:8f:a8:2e:c5:40: e0:36:9f:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG42LfiKvovL9kvefPYLxkPhiz3AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBENTRBMjcxQ0QwNDU4M0UwMzA0NjEzQzcwNzVDMTVG QTAzRTQ5NzAeFw0yNjAzMDIxMjA3MzNaFw0yNjAzMDUxNjQ1MzNaMDMxMTAvBgNV BAMTKERFREYxMzM1MkRENjg4MjgxMjAyNTI5M0YzM0Y0MUE3Mzc1OEQ0NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZxhNJLt/2ztOlEyJ+f7A+vHWD leoOApfEn8GGeN0r7IA0B4EFEu0Ug0YT8EpnX2folbdMTExjP/ObV6iHlWJRh7zW i5duo3ZdPpl2ygEiYJdgz74pbWTf6o2uTcA36U+qXYuE9FkswECrtYNYPsFoefmV 6Upvte0OfySEQwIn3s6u41adTc2s1MY/OvvP/6GYL7+MAZcrSsA2yQVyyjuyhyqn KTFT396Owb8gLFsNeoYia1I4X/U+cx0jmGp7+i10y7Xe/Y2+Y7QmE0IiGuDtYGZ5 wZl0uFFwkyD6IhdqR/bnVmrXpcyngsf5K4sAYlVQXekGn+bNEYWM5KHsAiL5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3t8TNS3WiCgSAlKT8z9BpzdY1HYwHwYDVR0j BBgwFoAU4NVKJxzQRYPgMEYTxwdcFfoD5JcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YzU4NjdkOC0zZDZmLTQ4MTYtYjg0Zi1mZGQ1YzUwMmI2MzQvMC9FMEQ1NEEyNzFD RDA0NTgzRTAzMDQ2MTNDNzA3NUMxNUZBMDNFNDk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTBENTRBMjcxQ0QwNDU4M0UwMzA0NjEzQzcwNzVDMTVGQTAz RTQ5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmM1ODY3ZDgtM2Q2Zi00ODE2LWI4 NGYtZmRkNWM1MDJiNjM0LzAvRTBENTRBMjcxQ0QwNDU4M0UwMzA0NjEzQzcwNzVD MTVGQTAzRTQ5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA9FKFYEAvKSXDWsWfSnt4lU5WfACmZ3Y9Mi hh0ylh46EInmvDo29iG3kT41MzkM7rpixqrbOj8Vr8syYPFbgpv7X77v844ER87l IudBKUaquJotsTkvzpvfVit/xFwhRBE+GvcDIRDDdOHgw3p3RjIgGN5mBERWIBrY RTWS8G3proDYve1NTAaMPRpVJ2l1sN5r8et3PeqtFapyy4GI4iATERV/Fs2BYek0 dGXa0oT3xbU+pE7ewp/L08+iv8QFNeO1mzeh3TY6UjkddqJyB/slq1SRSf768NMH CK8OTEg8I5Kzp0E0yB0+G5P0b8SbrXEGEr6Qyv+PqC7FQOA2nx4= -----END CERTIFICATE-----Generated at Mon Mar 2 16:53:20 2026 by rpki-client