$ rpki-client -vvf repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.mft File: E17357E41F3644D13EBC7C4B25B8A2936B91165A.mft (raw, json) Hash identifier: +GjNzbseLvIqiSy5OzymwkacNlXipBrCYWoNjIuuKmo= Subject key identifier: C9:49:7C:DE:6E:37:B4:B8:5A:01:8E:26:F2:49:97:84:75:FC:BC:46 Authority key identifier: E1:73:57:E4:1F:36:44:D1:3E:BC:7C:4B:25:B8:A2:93:6B:91:16:5A Certificate issuer: /CN=E17357E41F3644D13EBC7C4B25B8A2936B91165A Certificate serial: 6277329C9B509D73AF2BBF71B7A71157D13D0696 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17357E41F3644D13EBC7C4B25B8A2936B91165A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.mft Manifest number: 0498 Signing time: Sun 01 Mar 2026 09:01:58 +0000 Manifest this update: Sun 01 Mar 2026 08:56:58 +0000 Manifest next update: Wed 04 Mar 2026 14:38:58 +0000 Files and hashes: 1: 323430353a633934303a3a2f33322d3332203d3e20313430303132.roa (hash: 0Ch00VaMiPntZrLpBaDMR1Y+kpCG3oxMGYz3YYRWkbY=) 2: 3130332e3134382e32392e302f32342d3234203d3e20313430303132.roa (hash: ftn9K7p77+T5MEgcZnDpxyUXZFHtofZmQssGsi+FEgo=) 3: E17357E41F3644D13EBC7C4B25B8A2936B91165A.crl (hash: 00rUF+P1AMY6IK9Rr9MGWXEhBDN2t979Zvw1J5uEqkI=) 4: 3130332e3134382e32382e302f32342d3234203d3e20313430303132.roa (hash: c+kaUi4De+/vm5rVBRPjrkkr1HTjdZlHY3+0tiasoH8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.crl rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17357E41F3644D13EBC7C4B25B8A2936B91165A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 14:38:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:77:32:9c:9b:50:9d:73:af:2b:bf:71:b7:a7:11:57:d1:3d:06:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E17357E41F3644D13EBC7C4B25B8A2936B91165A Validity Not Before: Mar 1 08:56:58 2026 GMT Not After : Mar 4 14:38:58 2026 GMT Subject: CN=C9497CDE6E37B4B85A018E26F249978475FCBC46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:53:35:f7:b6:7f:de:af:c2:7f:92:a9:c0:de: 61:19:a2:81:c0:39:d4:cb:67:8c:64:2c:82:a7:81: b7:b8:d7:4c:7d:d5:4c:80:8e:77:83:5e:70:be:5b: 1a:9f:fd:40:04:7a:91:13:84:9a:c4:73:9f:3c:aa: b4:ef:b4:70:1f:12:fa:5f:23:29:69:f5:7c:dc:05: 27:43:74:9c:7e:82:62:74:94:9a:d7:d7:89:3b:c4: 53:56:e8:94:e0:f5:6b:69:ea:e1:01:bc:6f:51:45: 32:d1:00:08:3e:4e:74:fb:e5:32:eb:6d:e1:1a:a3: f1:3d:7c:1b:59:f0:8e:1b:82:4d:64:90:59:fc:c0: 8b:50:0f:9f:95:39:54:0f:61:92:20:0f:02:0c:a1: 9d:20:7a:19:5b:99:d3:78:c3:52:0e:e2:32:c4:07: 0f:d4:ea:95:aa:05:09:ea:b8:ab:c1:99:94:12:77: a1:3f:fe:76:1b:cd:2a:41:a7:84:32:df:bf:14:74: 10:b6:1d:30:7c:cf:36:ee:60:39:d7:d3:77:45:b3: e0:db:fc:a2:8f:16:ed:8d:47:aa:7d:52:07:a5:48: 5d:e5:b8:b0:72:8f:6b:47:44:6d:f9:15:81:97:5d: 81:22:d1:31:59:16:76:42:6a:61:da:50:f8:b2:f7: 4e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:49:7C:DE:6E:37:B4:B8:5A:01:8E:26:F2:49:97:84:75:FC:BC:46 X509v3 Authority Key Identifier: keyid:E1:73:57:E4:1F:36:44:D1:3E:BC:7C:4B:25:B8:A2:93:6B:91:16:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17357E41F3644D13EBC7C4B25B8A2936B91165A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:ed:a9:dc:55:7c:9e:79:c3:43:be:82:da:8e:bf:a6:6e:ed: 5a:c4:da:5a:61:97:10:22:f0:2b:86:c8:1e:7a:e1:d1:29:7d: f9:08:a8:de:0f:5a:fd:fa:c7:0a:19:96:58:08:4b:7e:48:0d: 4f:58:fb:7f:d7:f7:81:98:47:37:bd:5d:69:ce:d2:8c:ed:5a: 3c:54:6d:db:fd:18:f1:82:de:ae:e1:e8:e2:9a:2e:38:1c:04: ad:7a:83:1e:8b:2c:0e:9f:35:38:e4:14:2c:62:47:e3:4f:86: b9:84:29:e9:a9:e8:af:26:3d:33:1f:07:44:bd:73:c6:4c:70: 48:3a:91:73:dc:69:da:73:3c:65:a8:85:4b:d1:a9:0b:81:c9: aa:ef:66:9f:fe:e7:ca:79:40:b8:b9:c5:15:04:14:18:37:52: 5e:8a:ae:e6:53:35:3a:d5:b7:d0:02:9b:86:de:48:07:58:ea: e1:20:e5:94:8f:be:cd:24:cc:4e:fd:e2:c5:74:4b:97:e9:9e: 45:43:ad:01:d1:af:de:01:b3:4a:b1:87:89:75:55:76:1b:d6: 68:9d:eb:6c:2c:86:48:09:b7:53:68:d2:ab:09:f0:7c:b7:dc: 48:db:d9:45:8f:02:5a:27:9e:42:a6:ef:a8:87:d1:e4:27:6f: 33:a6:9f:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYncynJtQnXOvK79xt6cRV9E9BpYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE3MzU3RTQxRjM2NDREMTNFQkM3QzRCMjVCOEEyOTM2 QjkxMTY1QTAeFw0yNjAzMDEwODU2NThaFw0yNjAzMDQxNDM4NThaMDMxMTAvBgNV BAMTKEM5NDk3Q0RFNkUzN0I0Qjg1QTAxOEUyNkYyNDk5Nzg0NzVGQ0JDNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFUzX3tn/er8J/kqnA3mEZooHA OdTLZ4xkLIKngbe410x91UyAjneDXnC+Wxqf/UAEepEThJrEc588qrTvtHAfEvpf Iylp9XzcBSdDdJx+gmJ0lJrX14k7xFNW6JTg9Wtp6uEBvG9RRTLRAAg+TnT75TLr beEao/E9fBtZ8I4bgk1kkFn8wItQD5+VOVQPYZIgDwIMoZ0gehlbmdN4w1IO4jLE Bw/U6pWqBQnquKvBmZQSd6E//nYbzSpBp4Qy378UdBC2HTB8zzbuYDnX03dFs+Db /KKPFu2NR6p9UgelSF3luLByj2tHRG35FYGXXYEi0TFZFnZCamHaUPiy905pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyUl83m43tLhaAY4m8kmXhHX8vEYwHwYDVR0j BBgwFoAU4XNX5B82RNE+vHxLJbiik2uRFlowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MmFjOWU2My05ODkwLTQyMmUtODhkYy03Y2I2ZGRhYzIyZmEvMC9FMTczNTdFNDFG MzY0NEQxM0VCQzdDNEIyNUI4QTI5MzZCOTExNjVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTE3MzU3RTQxRjM2NDREMTNFQkM3QzRCMjVCOEEyOTM2Qjkx MTY1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTJhYzllNjMtOTg5MC00MjJlLTg4 ZGMtN2NiNmRkYWMyMmZhLzAvRTE3MzU3RTQxRjM2NDREMTNFQkM3QzRCMjVCOEEy OTM2QjkxMTY1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACvtqdxVfJ55w0O+gtqOv6Zu7VrE2lphlxAi 8CuGyB564dEpffkIqN4PWv36xwoZllgIS35IDU9Y+3/X94GYRze9XWnO0oztWjxU bdv9GPGC3q7h6OKaLjgcBK16gx6LLA6fNTjkFCxiR+NPhrmEKemp6K8mPTMfB0S9 c8ZMcEg6kXPcadpzPGWohUvRqQuByarvZp/+58p5QLi5xRUEFBg3Ul6KruZTNTrV t9ACm4beSAdY6uEg5ZSPvs0kzE794sV0S5fpnkVDrQHRr94Bs0qxh4l1VXYb1mid 62wshkgJt1No0qsJ8Hy33Ejb2UWPAlonnkKm76iH0eQnbzOmn34= -----END CERTIFICATE-----Generated at Mon Mar 2 10:24:03 2026 by rpki-client