$ rpki-client -vvf repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft File: E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft (raw, json) Hash identifier: n5lZRiO4YSp3s4aE42f5qVKjkqVOr4X51duox6JviVQ= Subject key identifier: CD:19:16:4E:01:8C:5A:EA:64:F8:10:EF:B6:B2:66:62:94:5A:65:1D Authority key identifier: E0:14:E6:ED:03:53:7E:45:35:65:D0:6E:7B:8A:31:AA:8A:05:25:A1 Certificate issuer: /CN=E014E6ED03537E453565D06E7B8A31AA8A0525A1 Certificate serial: 65404CB8765FA702D103E08A7CF072A4EC489A40 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft Manifest number: 031E Signing time: Thu 05 Mar 2026 10:12:36 +0000 Manifest this update: Thu 05 Mar 2026 10:07:35 +0000 Manifest next update: Sun 08 Mar 2026 14:03:35 +0000 Files and hashes: 1: 3130332e3137352e33382e302f32342d3234203d3e20313534343130.roa (hash: 6lkF35ri6uYPakCCX2pr0zjkUKU+eMFqvXgf24o+vlE=) 2: 3130332e3137352e33382e302f32332d3233203d3e20323135373237.roa (hash: joRtsTzluk9HUnqI3+6HvaybpCq3OAhZ2eSjEhqFFeA=) 3: 3130332e3137352e33382e302f32332d3233203d3e20313534343130.roa (hash: CguEl+Lysn/5KkRoQJibPhJwVyvdrOOvzPigdqH+W1o=) 4: E014E6ED03537E453565D06E7B8A31AA8A0525A1.crl (hash: u2qx1F4aP1R+sq7jaRbo7e+je+ab5hPYFNFs9ZXCyJ8=) 5: 3130332e3137352e33392e302f32342d3234203d3e20323135373237.roa (hash: uShV8vRhK/SDVf3Twj+hPuhHAzUhqQGJIQPtkavd13M=) 6: 3130332e3137352e33382e302f32342d3234203d3e20323135373237.roa (hash: UUOaSFdZB1gNgfcBiLfpj8+sysFmMb8lGgAOYylAanI=) 7: 3130332e3137352e33382e302f32332d3234203d3e20313437313038.roa (hash: JG72NXt605ww3XbVNf9DT18KzObGZzgsJOiqL+ceVSI=) 8: 3130332e3137352e33392e302f32342d3234203d3e20313534343130.roa (hash: r3WK8CrHgCN8V7Zn9QuD1b2cQJfP1EGB1oRF8Yw67HM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.crl rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 14:03:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:40:4c:b8:76:5f:a7:02:d1:03:e0:8a:7c:f0:72:a4:ec:48:9a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E014E6ED03537E453565D06E7B8A31AA8A0525A1 Validity Not Before: Mar 5 10:07:35 2026 GMT Not After : Mar 8 14:03:35 2026 GMT Subject: CN=CD19164E018C5AEA64F810EFB6B26662945A651D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8d:47:b1:b5:aa:b7:eb:5a:06:a6:e8:ca:24: 56:13:78:5b:23:b9:42:27:2c:9b:ed:fe:5b:24:70: f3:87:3b:c1:70:4d:96:ec:ba:58:0a:8c:bb:21:7f: 1d:77:c2:88:21:3b:96:d0:f5:44:b7:16:b9:c4:34: 8a:ad:8b:7a:05:77:91:2b:6c:65:39:d6:3b:66:17: 43:6a:20:98:30:34:33:b2:b0:b5:ad:7d:83:67:79: 80:b8:44:8e:99:c8:0f:70:08:53:f6:ef:1c:06:70: cf:0e:a6:3a:e6:ff:94:32:e2:fd:1a:10:e8:9f:05: e2:a8:fa:12:6a:a1:ee:15:9f:c3:e8:71:dd:da:6f: ec:54:04:e5:e1:2c:31:90:02:c2:8e:ff:3c:00:aa: 27:21:2c:9f:e3:9e:36:d8:fe:e9:d2:15:4c:5d:20: c7:3a:07:70:b9:e1:eb:d3:ee:60:4f:46:53:fe:b7: e7:76:81:ec:29:c2:d7:bd:b6:6a:76:a0:b9:46:78: a1:58:43:37:77:dc:57:74:f7:45:25:05:39:1f:d3: c0:7e:4c:eb:44:dd:14:15:e7:66:6d:b3:8c:f2:7f: 17:5f:79:86:28:20:c7:60:79:c6:ab:00:b9:f7:dc: 1b:d6:47:dc:11:c2:6d:e7:d2:c4:25:b4:a8:b5:b1: d4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:19:16:4E:01:8C:5A:EA:64:F8:10:EF:B6:B2:66:62:94:5A:65:1D X509v3 Authority Key Identifier: keyid:E0:14:E6:ED:03:53:7E:45:35:65:D0:6E:7B:8A:31:AA:8A:05:25:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:2c:91:99:7c:7c:e2:3a:10:cd:1a:83:4e:c0:12:25:ac:0f: 5d:6e:4b:74:e8:50:5b:ff:4f:1c:30:ee:aa:df:3f:58:1c:22: f6:2a:9f:11:4a:2a:da:94:6e:9a:1f:7e:21:d0:6c:f1:44:9f: 7a:bf:bf:be:2c:7d:7e:1e:e6:db:44:94:91:46:e3:f3:b7:83: 1c:62:88:38:e3:03:a6:1a:d9:f0:37:18:00:37:be:68:cb:05: ef:15:5b:ec:0d:5c:0d:07:21:18:f8:36:b3:ac:fc:10:7c:48: c3:3b:70:7b:06:0a:ff:60:33:42:09:ee:ed:f8:c0:62:ec:89: 7d:4d:a5:95:cc:bf:92:a6:c6:1e:a0:7a:5e:fb:bf:2c:41:23: 24:69:e9:c1:2b:da:37:cd:61:af:1f:15:32:95:46:af:49:cb: 85:91:67:e9:e5:be:79:d8:49:07:c9:fa:99:ed:18:a1:15:57: f0:67:a1:58:c5:45:fa:f7:1d:d9:62:76:05:ca:49:a7:2b:c4: fd:14:15:1c:93:7e:99:9e:0a:65:fe:e9:a3:60:72:82:11:1a: cd:15:1e:03:e9:69:b2:7c:96:b1:d6:e7:46:1c:de:9a:23:ab: 2d:6a:f4:ac:1b:a1:86:50:20:e6:69:96:ea:e0:41:4a:a9:58: 5a:41:74:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZUBMuHZfpwLRA+CKfPBypOxImkAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTAxNEU2RUQwMzUzN0U0NTM1NjVEMDZFN0I4QTMxQUE4 QTA1MjVBMTAeFw0yNjAzMDUxMDA3MzVaFw0yNjAzMDgxNDAzMzVaMDMxMTAvBgNV BAMTKENEMTkxNjRFMDE4QzVBRUE2NEY4MTBFRkI2QjI2NjYyOTQ1QTY1MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4jUextaq361oGpujKJFYTeFsj uUInLJvt/lskcPOHO8FwTZbsulgKjLshfx13woghO5bQ9US3FrnENIqti3oFd5Er bGU51jtmF0NqIJgwNDOysLWtfYNneYC4RI6ZyA9wCFP27xwGcM8Opjrm/5Qy4v0a EOifBeKo+hJqoe4Vn8Pocd3ab+xUBOXhLDGQAsKO/zwAqichLJ/jnjbY/unSFUxd IMc6B3C54evT7mBPRlP+t+d2gewpwte9tmp2oLlGeKFYQzd33Fd090UlBTkf08B+ TOtE3RQV52Zts4zyfxdfeYYoIMdgecarALn33BvWR9wRwm3n0sQltKi1sdQTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzRkWTgGMWupk+BDvtrJmYpRaZR0wHwYDVR0j BBgwFoAU4BTm7QNTfkU1ZdBue4oxqooFJaEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YmIyOTM3OC00NWYwLTQ5ZDMtYTZhZi01NzNiZTdkY2E2ZDAvMC9FMDE0RTZFRDAz NTM3RTQ1MzU2NUQwNkU3QjhBMzFBQThBMDUyNUExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTAxNEU2RUQwMzUzN0U0NTM1NjVEMDZFN0I4QTMxQUE4QTA1 MjVBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGJiMjkzNzgtNDVmMC00OWQzLWE2 YWYtNTczYmU3ZGNhNmQwLzAvRTAxNEU2RUQwMzUzN0U0NTM1NjVEMDZFN0I4QTMx QUE4QTA1MjVBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHYskZl8fOI6EM0ag07AEiWsD11uS3ToUFv/ Txww7qrfP1gcIvYqnxFKKtqUbpoffiHQbPFEn3q/v74sfX4e5ttElJFG4/O3gxxi iDjjA6Ya2fA3GAA3vmjLBe8VW+wNXA0HIRj4NrOs/BB8SMM7cHsGCv9gM0IJ7u34 wGLsiX1NpZXMv5Kmxh6gel77vyxBIyRp6cEr2jfNYa8fFTKVRq9Jy4WRZ+nlvnnY SQfJ+pntGKEVV/BnoVjFRfr3HdlidgXKSacrxP0UFRyTfpmeCmX+6aNgcoIRGs0V HgPpabJ8lrHW50Yc3pojqy1q9KwboYZQIOZplurgQUqpWFpBdJ8= -----END CERTIFICATE-----Generated at Thu Mar 5 22:20:29 2026 by rpki-client