$ rpki-client -vvf repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.mft File: E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.mft (raw, json) Hash identifier: 4kNBsNCTptux5P2LPAHrEk18ERTJON0qeI+dqFpBzC4= Subject key identifier: 1E:29:C8:F1:20:D3:59:C5:47:FC:65:43:3C:E0:C3:ED:EB:5D:FC:14 Authority key identifier: E5:1A:77:F5:DB:FB:16:B1:60:6D:E1:A4:FF:6D:FD:05:73:42:0E:38 Certificate issuer: /CN=E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38 Certificate serial: 605356B72933362C71DA5E9BDB680293C7C1D8F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.mft Manifest number: 023F Signing time: Sun 01 Mar 2026 04:01:00 +0000 Manifest this update: Sun 01 Mar 2026 03:56:00 +0000 Manifest next update: Wed 04 Mar 2026 05:36:00 +0000 Files and hashes: 1: 3130332e3139312e37302e302f32342d3234203d3e20313439393134.roa (hash: LKby0ViyWSUSxyx6by+Sa+3JQIcYE0HMocb+PoIEh0U=) 2: 3130332e3139312e37312e302f32342d3234203d3e20313439393134.roa (hash: wWf96mUt4wCBbqfalQK0TLTz6ApBKN5hLe7UYoC3TzQ=) 3: E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.crl (hash: QntHMADZUj955JKUgzp8NBa1n7NCFU3wCldpKJJeMNc=) 4: 3130332e3139312e37302e302f32332d3233203d3e20313439393134.roa (hash: buLsY1iWxn5uAX/tlzA+XQSdGjGRQVTlyaSVt5UiGA8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.crl rsync://repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 05:36:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:53:56:b7:29:33:36:2c:71:da:5e:9b:db:68:02:93:c7:c1:d8:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38 Validity Not Before: Mar 1 03:56:00 2026 GMT Not After : Mar 4 05:36:00 2026 GMT Subject: CN=1E29C8F120D359C547FC65433CE0C3EDEB5DFC14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:70:f1:c6:cd:b9:fd:c0:51:46:e1:8f:99:06: 6f:23:3a:e8:60:bc:f0:35:18:d5:ed:17:34:55:d2: e2:39:ab:d0:27:aa:7e:13:29:33:8a:da:a9:ec:3b: b1:fe:33:04:4a:b4:9f:6f:f2:11:30:79:df:37:61: f3:76:0a:f6:f1:c6:4e:5f:f3:55:b7:86:6d:cd:d2: 01:f1:cd:26:0c:b7:26:18:56:a0:49:f7:7c:f2:1d: 66:b8:00:7a:42:fd:93:4a:a3:2e:b5:5b:b1:3f:87: be:8d:fa:9e:4d:11:b7:12:e7:a7:f2:2e:e6:09:c9: c8:6f:4b:b9:f4:03:e6:98:55:b7:da:81:c4:e0:d4: 9a:52:38:3c:e8:b5:0f:6e:eb:c7:f7:de:0a:de:c7: e1:d5:22:16:ec:62:cc:33:bf:43:51:28:af:8a:99: 4a:69:e2:a3:5a:23:a4:51:94:ae:44:9b:3e:0e:41: 37:d5:eb:34:5c:f9:1f:1a:c3:de:17:c5:a3:d9:01: ac:b3:b9:d7:a8:e5:fa:85:3e:44:83:84:38:b4:eb: 61:c5:63:65:8c:5d:c7:55:c7:45:44:a5:cc:94:a6: bf:44:2c:dd:2b:50:41:c6:64:17:93:ca:ea:7c:db: 16:ba:48:53:b8:7f:39:15:4c:d1:23:d9:19:62:6d: 61:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:29:C8:F1:20:D3:59:C5:47:FC:65:43:3C:E0:C3:ED:EB:5D:FC:14 X509v3 Authority Key Identifier: keyid:E5:1A:77:F5:DB:FB:16:B1:60:6D:E1:A4:FF:6D:FD:05:73:42:0E:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:13:6d:9c:71:cd:08:34:57:27:0b:9c:ac:3b:d7:a4:11:89: b6:11:be:16:80:1c:13:ce:08:ef:c3:2d:1a:1f:d8:05:da:8a: ad:01:55:00:99:37:80:85:67:ea:48:1c:98:1b:8a:28:ca:d3: 1f:43:1c:69:b1:e6:ea:1f:64:68:8b:8f:2f:7e:bb:d8:8f:5d: dd:b3:08:3c:3c:f7:34:66:0e:2f:3c:52:e9:38:bf:72:52:fe: 5c:f5:72:75:95:11:0f:78:22:15:7e:66:e7:50:79:d1:e5:9f: 5a:00:ab:d4:c8:cd:91:7e:bc:a3:ac:14:1f:90:26:62:13:f2: 1e:6e:02:0a:82:ef:83:06:d6:06:c0:63:9e:0f:51:56:89:f1: ed:1c:18:52:ce:24:30:61:a5:55:c7:54:60:97:42:25:7d:37: c3:8f:65:f7:a1:fa:26:d2:31:55:8d:06:0e:da:ad:65:46:f6: 3d:e3:b4:5d:11:1c:8a:31:56:bf:07:a6:6f:5f:c7:93:75:9c: 34:34:e6:f5:2e:4e:74:0e:57:2f:35:71:c8:09:7f:54:27:9a: 7e:f6:cd:c4:fc:f6:70:f0:16:88:5a:54:a5:d5:33:c2:e3:99: 67:28:8d:7e:db:c1:f7:fd:ee:7d:6e:00:30:43:95:0c:6d:48: c6:12:bb:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYFNWtykzNixx2l6b22gCk8fB2PIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTUxQTc3RjVEQkZCMTZCMTYwNkRFMUE0RkY2REZEMDU3 MzQyMEUzODAeFw0yNjAzMDEwMzU2MDBaFw0yNjAzMDQwNTM2MDBaMDMxMTAvBgNV BAMTKDFFMjlDOEYxMjBEMzU5QzU0N0ZDNjU0MzNDRTBDM0VERUI1REZDMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3cPHGzbn9wFFG4Y+ZBm8jOuhg vPA1GNXtFzRV0uI5q9Anqn4TKTOK2qnsO7H+MwRKtJ9v8hEwed83YfN2Cvbxxk5f 81W3hm3N0gHxzSYMtyYYVqBJ93zyHWa4AHpC/ZNKoy61W7E/h76N+p5NEbcS56fy LuYJychvS7n0A+aYVbfagcTg1JpSODzotQ9u68f33grex+HVIhbsYswzv0NRKK+K mUpp4qNaI6RRlK5Emz4OQTfV6zRc+R8aw94XxaPZAayzudeo5fqFPkSDhDi062HF Y2WMXcdVx0VEpcyUpr9ELN0rUEHGZBeTyup82xa6SFO4fzkVTNEj2RlibWFfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHinI8SDTWcVH/GVDPODD7etd/BQwHwYDVR0j BBgwFoAU5Rp39dv7FrFgbeGk/239BXNCDjgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NDBlMWYyMC1iMGNkLTQ2OWItOTEwNi0xZWEwMDA3OTVmOWYvMC9FNTFBNzdGNURC RkIxNkIxNjA2REUxQTRGRjZERkQwNTczNDIwRTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTUxQTc3RjVEQkZCMTZCMTYwNkRFMUE0RkY2REZEMDU3MzQy MEUzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjQwZTFmMjAtYjBjZC00NjliLTkx MDYtMWVhMDAwNzk1ZjlmLzAvRTUxQTc3RjVEQkZCMTZCMTYwNkRFMUE0RkY2REZE MDU3MzQyMEUzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADMTbZxxzQg0VycLnKw716QRibYRvhaAHBPO CO/DLRof2AXaiq0BVQCZN4CFZ+pIHJgbiijK0x9DHGmx5uofZGiLjy9+u9iPXd2z CDw89zRmDi88Uuk4v3JS/lz1cnWVEQ94IhV+ZudQedHln1oAq9TIzZF+vKOsFB+Q JmIT8h5uAgqC74MG1gbAY54PUVaJ8e0cGFLOJDBhpVXHVGCXQiV9N8OPZfeh+ibS MVWNBg7arWVG9j3jtF0RHIoxVr8Hpm9fx5N1nDQ05vUuTnQOVy81ccgJf1Qnmn72 zcT89nDwFohaVKXVM8LjmWcojX7bwff97n1uADBDlQxtSMYSu6o= -----END CERTIFICATE-----Generated at Mon Mar 2 13:36:48 2026 by rpki-client