$ rpki-client -vvf repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft File: E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft (raw, json) Hash identifier: vVClf1YpzDXX6slZ/IOLVxwS/PS+VXdoWmclZTY0SOg= Subject key identifier: 61:FE:B9:F9:5D:CD:88:EB:7A:BA:69:F7:0A:75:20:DF:46:5E:DD:C3 Authority key identifier: E2:26:B4:FA:84:2D:CE:6C:38:64:49:F1:4F:8C:21:CF:D8:0C:F9:77 Certificate issuer: /CN=E226B4FA842DCE6C386449F14F8C21CFD80CF977 Certificate serial: 3F50856A3DB7A5BEBB187CE59EDF673FC662AD2D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E226B4FA842DCE6C386449F14F8C21CFD80CF977.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft Manifest number: 0551 Signing time: Sun 01 Mar 2026 00:51:22 +0000 Manifest this update: Sun 01 Mar 2026 00:46:22 +0000 Manifest next update: Wed 04 Mar 2026 05:44:22 +0000 Files and hashes: 1: 3130332e3135332e322e302f32332d3233203d3e20313430333839.roa (hash: A1pg6GpZFjYyhGEeCVl6G4t4Mmj6bG3hF/2pgiRzD7c=) 2: 3130332e3135332e332e302f32342d3234203d3e20313430333839.roa (hash: Od61s2CG7Pl8XbUZdUJwcwOoJ91FfP8RQCV9emNwZ0s=) 3: 3130332e3135332e322e302f32342d3234203d3e20313430333839.roa (hash: GxaX4eV/kFPfj8NmbOkhswC/G4Bnl9v3vVSuFyouusY=) 4: E226B4FA842DCE6C386449F14F8C21CFD80CF977.crl (hash: kEJd4OasuvUiZLiIZoklV8gy+tewgJ9d7+cJCr+E6OY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.crl rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E226B4FA842DCE6C386449F14F8C21CFD80CF977.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 05:44:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:50:85:6a:3d:b7:a5:be:bb:18:7c:e5:9e:df:67:3f:c6:62:ad:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E226B4FA842DCE6C386449F14F8C21CFD80CF977 Validity Not Before: Mar 1 00:46:22 2026 GMT Not After : Mar 4 05:44:22 2026 GMT Subject: CN=61FEB9F95DCD88EB7ABA69F70A7520DF465EDDC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:bf:f3:1c:f4:de:b1:6a:8d:79:b9:16:3e:d4: 59:d5:b4:52:0d:b6:00:e8:28:e4:1e:ac:11:5d:99: 4b:e3:41:99:ea:26:09:e4:18:98:5a:ab:69:96:9f: d3:0a:23:01:2d:c1:02:d2:43:cd:02:02:4c:87:4a: 2e:db:17:69:e3:3f:a0:e1:67:f4:87:d9:13:7a:c3: b9:e6:0c:ac:c7:f0:df:69:1b:51:2c:97:ed:07:a5: 14:6b:1b:a5:e9:5b:c3:d2:3f:9d:2e:83:3f:78:83: b4:2a:f1:33:51:da:da:c8:c4:4e:ae:cf:e1:e5:df: 06:f2:1c:af:b8:9e:8e:5a:d2:71:e4:c6:a4:b2:e2: 20:af:68:df:f7:94:d9:08:27:99:73:b0:e8:d0:5b: 45:b6:22:a6:f1:ff:a1:09:ba:40:c1:04:d1:39:08: 99:08:a6:1a:f4:9e:41:0b:23:3e:d1:12:c2:45:c4: 9d:42:c5:75:83:8f:ab:df:65:69:65:8a:4e:86:a0: fa:c0:eb:f2:47:c1:76:31:32:5e:1d:89:9c:e1:cb: 6f:7d:0b:7a:41:f1:9c:97:24:d4:2c:e8:15:7c:de: 41:2f:b5:6f:7a:d5:4d:5a:e6:fa:8e:34:6e:d2:0d: 73:a8:45:61:ed:16:09:c6:48:94:df:05:a0:8b:85: b5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:FE:B9:F9:5D:CD:88:EB:7A:BA:69:F7:0A:75:20:DF:46:5E:DD:C3 X509v3 Authority Key Identifier: keyid:E2:26:B4:FA:84:2D:CE:6C:38:64:49:F1:4F:8C:21:CF:D8:0C:F9:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E226B4FA842DCE6C386449F14F8C21CFD80CF977.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:d7:1d:00:ef:54:20:17:34:b5:72:cb:db:9c:fc:c8:f3:6d: 5c:c6:f0:3c:e4:34:64:60:73:79:aa:ad:82:07:7b:45:75:54: 8a:22:7d:58:7f:b5:0b:cc:da:28:9b:7e:af:5f:88:95:8d:a4: fa:53:88:79:c5:dd:29:46:4d:17:57:50:1d:b8:eb:50:e9:99: 21:63:4b:0c:12:76:36:ac:ed:02:4a:a7:5f:98:00:bd:df:a4: 29:78:b4:fa:d2:43:75:26:f3:8a:8b:a6:19:43:c5:a2:b1:b1: f9:73:2e:5d:7e:cd:a3:9f:89:e3:33:15:68:05:01:5c:03:93: 81:65:c5:17:6e:24:5e:63:1a:2b:41:b5:c7:ae:cd:df:52:04: 24:33:71:63:2c:73:49:00:96:45:0a:92:61:f9:fd:a6:71:98: d1:53:38:94:06:e4:3b:56:95:62:b6:a3:90:a5:2d:2b:99:ed: f0:15:b7:71:6b:1e:0f:e4:f4:6f:3f:7b:e0:46:d2:dc:60:49: 8c:1a:a8:f6:48:dd:69:36:84:f6:e5:8e:59:55:af:35:17:ff: 3a:e7:e7:b7:b2:36:eb:38:99:e7:9c:d9:40:f4:23:1d:d3:3b: b7:b3:3d:03:46:e4:73:52:37:38:09:be:61:7e:2f:98:bb:b1: 5f:fd:6b:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP1CFaj23pb67GHzlnt9nP8ZirS0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTIyNkI0RkE4NDJEQ0U2QzM4NjQ0OUYxNEY4QzIxQ0ZE ODBDRjk3NzAeFw0yNjAzMDEwMDQ2MjJaFw0yNjAzMDQwNTQ0MjJaMDMxMTAvBgNV BAMTKDYxRkVCOUY5NURDRDg4RUI3QUJBNjlGNzBBNzUyMERGNDY1RUREQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxv/Mc9N6xao15uRY+1FnVtFIN tgDoKOQerBFdmUvjQZnqJgnkGJhaq2mWn9MKIwEtwQLSQ80CAkyHSi7bF2njP6Dh Z/SH2RN6w7nmDKzH8N9pG1Esl+0HpRRrG6XpW8PSP50ugz94g7Qq8TNR2trIxE6u z+Hl3wbyHK+4no5a0nHkxqSy4iCvaN/3lNkIJ5lzsOjQW0W2Iqbx/6EJukDBBNE5 CJkIphr0nkELIz7REsJFxJ1CxXWDj6vfZWllik6GoPrA6/JHwXYxMl4diZzhy299 C3pB8ZyXJNQs6BV83kEvtW961U1a5vqONG7SDXOoRWHtFgnGSJTfBaCLhbURAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYf65+V3NiOt6umn3CnUg30Ze3cMwHwYDVR0j BBgwFoAU4ia0+oQtzmw4ZEnxT4whz9gM+XcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YmMxYWI3MS05MWQwLTRmMGItYmIyOS1jYmI3ZDM1ZTc0YmEvMC9FMjI2QjRGQTg0 MkRDRTZDMzg2NDQ5RjE0RjhDMjFDRkQ4MENGOTc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTIyNkI0RkE4NDJEQ0U2QzM4NjQ0OUYxNEY4QzIxQ0ZEODBD Rjk3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWJjMWFiNzEtOTFkMC00ZjBiLWJi MjktY2JiN2QzNWU3NGJhLzAvRTIyNkI0RkE4NDJEQ0U2QzM4NjQ0OUYxNEY4QzIx Q0ZEODBDRjk3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACLXHQDvVCAXNLVyy9uc/MjzbVzG8DzkNGRg c3mqrYIHe0V1VIoifVh/tQvM2iibfq9fiJWNpPpTiHnF3SlGTRdXUB2461DpmSFj SwwSdjas7QJKp1+YAL3fpCl4tPrSQ3Um84qLphlDxaKxsflzLl1+zaOfieMzFWgF AVwDk4FlxRduJF5jGitBtceuzd9SBCQzcWMsc0kAlkUKkmH5/aZxmNFTOJQG5DtW lWK2o5ClLSuZ7fAVt3FrHg/k9G8/e+BG0txgSYwaqPZI3Wk2hPbljllVrzUX/zrn 57eyNus4meec2UD0Ix3TO7ezPQNG5HNSNzgJvmF+L5i7sV/9a0s= -----END CERTIFICATE-----Generated at Mon Mar 2 04:41:27 2026 by rpki-client