$ rpki-client -vvf repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.mft File: 00EE953FD699788668C724460F4D8D420238194F.mft (raw, json) Hash identifier: meuaU9+xEaJfHEdUh/iFKTZV6OTwdt9qOKarxALn/u0= Subject key identifier: 66:81:32:CD:8A:AB:16:D7:61:00:B9:5C:DE:0E:3D:5C:42:2A:59:2A Authority key identifier: 00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F Certificate issuer: /CN=00EE953FD699788668C724460F4D8D420238194F Certificate serial: 4AD276DF8182444FD197B7D53AF31AB155F5BFF9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.mft Manifest number: 0259 Signing time: Wed 18 Mar 2026 14:30:45 +0000 Manifest this update: Wed 18 Mar 2026 14:25:45 +0000 Manifest next update: Sat 21 Mar 2026 20:09:45 +0000 Files and hashes: 1: 3132322e3132382e32312e302f32342d3234203d3e203531323032.roa (hash: rkVkBOM1gxwGdr/crh5svI3UEvA+KgJo/zG78neJc4s=) 2: 3132322e3132382e32312e302f32342d3234203d3e20323632393239.roa (hash: oOdkzUMhWiV8RYKVpP+DjzstiVGxbGTPIWzG22cdnjM=) 3: 3132322e3132382e31382e302f32342d3234203d3e203436303435.roa (hash: bvNupIpWmDhaL8rFDaTnVFDhI5fuAg0k+27/VGkzYJs=) 4: 3132322e3132382e31372e302f32342d3234203d3e203436303435.roa (hash: P5LJ10k2BHWyFCmNYnH84ZTaEVA9KJ8Poi0f/ODMh70=) 5: 00EE953FD699788668C724460F4D8D420238194F.crl (hash: 5H/f3MjHymEHy8GYKwZjRCerZxgW1CTRCYyj7C6Bbiw=) 6: 3132322e3132382e31392e302f32342d3234203d3e203436303435.roa (hash: +0IYJt+ldEx6hRx5/LkWzdAnyMowfs90g5flb4WhwNI=) 7: 3132322e3132382e32332e302f32342d3234203d3e203436303435.roa (hash: jtfCyTfV0URchGl+wzEZEXq1ZK6wyh3Rdim0gK9JxbY=) 8: 3132322e3132382e31362e302f32342d3234203d3e203436303435.roa (hash: sAwAc9IZ0DLVOhouh4zmTpqaxK9YADxytwY1+gNq8u0=) 9: 3132322e3132382e31362e302f32312d3231203d3e203436303435.roa (hash: /6F+dCYfhj8nILz7NzSN2rSqER4M9P3bFQ45j14GuDI=) 10: 3132322e3132382e31362e302f32342d3234203d3e203531323032.roa (hash: SFv+wuFNNUXZIPzGgJ8H4FmCqsXvXTtUEEjtGiij04Q=) 11: 3132322e3132382e32322e302f32342d3234203d3e203436303435.roa (hash: ebM/F6KIH60LQhN77naN07o0NG2yDX1tXydmaED/mYQ=) 12: 3132322e3132382e32322e302f32342d3234203d3e20323032363733.roa (hash: s40PNuPdNfcWQatEkq0oOjj78y3YVxe60B1MhUs2hPU=) 13: 3132322e3132382e32302e302f32342d3234203d3e203436303435.roa (hash: FgOjY7TNj+vVOTY+T0f+/7XZ2PEhUJFN/481ZR8iBC4=) 14: 3132322e3132382e31362e302f32342d3234203d3e20323632393239.roa (hash: V10gFKQc+WgMolRvJOryKxPX23lt9/y0uKRD456elbI=) 15: 3132322e3132382e32312e302f32342d3234203d3e203436303435.roa (hash: YWPfLwfnjAzwyRdQ8HMatujMpctNGsrqPWB+mJd3o7c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.crl rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 20:09:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:d2:76:df:81:82:44:4f:d1:97:b7:d5:3a:f3:1a:b1:55:f5:bf:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00EE953FD699788668C724460F4D8D420238194F Validity Not Before: Mar 18 14:25:45 2026 GMT Not After : Mar 21 20:09:45 2026 GMT Subject: CN=668132CD8AAB16D76100B95CDE0E3D5C422A592A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:30:c8:4d:b5:a1:79:47:a5:17:2d:56:c9:f0: ba:7d:40:dd:2a:2b:45:57:15:7b:a2:78:ae:fb:c4: df:fc:ec:f2:0c:c1:68:a3:c3:2e:29:3a:71:6f:8e: 70:da:7e:d3:ff:b9:4c:bc:bf:60:73:89:c7:d3:50: 3d:87:3a:fa:2d:ae:65:f3:74:15:3a:ea:83:49:12: c2:d2:d5:8f:87:d9:e0:95:6d:ce:36:3e:b3:10:49: 0d:22:f7:54:a0:aa:08:44:a1:1c:fb:f0:7d:db:0b: de:b4:a2:cf:5e:aa:65:9f:64:d6:80:a8:8b:bf:5d: 1c:fb:9c:02:dd:1d:53:ae:6d:2e:cd:bf:d2:df:e4: 55:69:b7:54:c7:69:cf:37:cb:70:69:e1:19:c6:58: 6a:68:a5:bc:3e:91:96:8d:ec:55:0d:f0:0d:75:54: a2:ce:75:16:15:d7:ae:08:fa:f5:b1:e1:78:83:aa: 82:6e:0a:16:16:b9:a6:be:00:a1:87:6d:61:8a:0d: a7:c3:c1:ec:22:04:8d:4f:79:56:cc:99:7b:01:43: e6:7a:48:e3:05:8d:8f:a5:3d:16:69:a1:33:df:58: 08:79:67:08:52:e6:71:fc:c3:ff:47:7d:2a:17:bb: 7f:19:33:9d:31:2a:b5:13:2d:89:cb:07:e9:21:ff: 89:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:81:32:CD:8A:AB:16:D7:61:00:B9:5C:DE:0E:3D:5C:42:2A:59:2A X509v3 Authority Key Identifier: keyid:00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:3a:40:3d:5c:5c:be:8a:ae:69:a9:20:ee:4f:d8:86:ef:c6: 0f:c0:b1:49:69:df:e2:18:6f:e4:54:78:95:ae:46:ea:5d:58: 37:c6:91:91:82:de:2e:10:4d:b6:96:e2:52:f7:1a:78:1c:37: 3b:d7:81:a0:9d:49:d1:d8:b3:9d:e7:87:1a:fd:08:a0:52:b6: 54:44:73:17:8d:e4:62:b9:41:52:8b:3f:7b:26:75:87:27:ee: da:e7:26:28:d7:09:0e:6b:84:e8:66:c9:f9:72:88:bb:57:40: 11:81:43:87:95:ed:3e:06:61:2e:aa:fc:ac:bb:8e:bf:66:07: b1:c5:3a:f5:78:5d:a2:41:f3:57:50:a0:9f:22:8e:f1:11:90: 27:8c:9b:e8:6f:57:2b:aa:92:11:ce:80:2b:7a:de:89:a8:99: 08:84:9c:8e:32:82:f2:b8:e0:eb:b1:64:ec:76:46:5e:f6:8b: 97:ef:0b:b0:d8:5b:47:9c:ba:f3:9e:cf:61:e8:81:1e:f7:ae: 75:85:5c:e9:24:61:7a:b7:0b:44:05:43:eb:e8:7d:e9:d7:11: 98:b1:de:34:96:8e:32:71:8d:6f:00:28:74:e7:51:4f:22:ed: 74:3a:0b:c9:5d:5a:e3:b5:65:ed:18:fc:d4:85:7d:ef:f1:82: 02:db:aa:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUStJ234GCRE/Rl7fVOvMasVX1v/kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBFRTk1M0ZENjk5Nzg4NjY4QzcyNDQ2MEY0RDhENDIw MjM4MTk0RjAeFw0yNjAzMTgxNDI1NDVaFw0yNjAzMjEyMDA5NDVaMDMxMTAvBgNV BAMTKDY2ODEzMkNEOEFBQjE2RDc2MTAwQjk1Q0RFMEUzRDVDNDIyQTU5MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/MMhNtaF5R6UXLVbJ8Lp9QN0q K0VXFXuieK77xN/87PIMwWijwy4pOnFvjnDaftP/uUy8v2BzicfTUD2HOvotrmXz dBU66oNJEsLS1Y+H2eCVbc42PrMQSQ0i91SgqghEoRz78H3bC960os9eqmWfZNaA qIu/XRz7nALdHVOubS7Nv9Lf5FVpt1THac83y3Bp4RnGWGpopbw+kZaN7FUN8A11 VKLOdRYV164I+vWx4XiDqoJuChYWuaa+AKGHbWGKDafDwewiBI1PeVbMmXsBQ+Z6 SOMFjY+lPRZpoTPfWAh5ZwhS5nH8w/9HfSoXu38ZM50xKrUTLYnLB+kh/4kpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZoEyzYqrFtdhALlc3g49XEIqWSowHwYDVR0j BBgwFoAUAO6VP9aZeIZoxyRGD02NQgI4GU8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODUzZjIyOC0zN2YyLTQ3ZDktYjlmZS00NzZiYWRlMTMzOTMvMC8wMEVFOTUzRkQ2 OTk3ODg2NjhDNzI0NDYwRjREOEQ0MjAyMzgxOTRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBFRTk1M0ZENjk5Nzg4NjY4QzcyNDQ2MEY0RDhENDIwMjM4 MTk0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzg1M2YyMjgtMzdmMi00N2Q5LWI5 ZmUtNDc2YmFkZTEzMzkzLzAvMDBFRTk1M0ZENjk5Nzg4NjY4QzcyNDQ2MEY0RDhE NDIwMjM4MTk0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJM6QD1cXL6KrmmpIO5P2Ibvxg/AsUlp3+IY b+RUeJWuRupdWDfGkZGC3i4QTbaW4lL3GngcNzvXgaCdSdHYs53nhxr9CKBStlRE cxeN5GK5QVKLP3smdYcn7trnJijXCQ5rhOhmyflyiLtXQBGBQ4eV7T4GYS6q/Ky7 jr9mB7HFOvV4XaJB81dQoJ8ijvERkCeMm+hvVyuqkhHOgCt63omomQiEnI4ygvK4 4OuxZOx2Rl72i5fvC7DYW0ecuvOez2HogR73rnWFXOkkYXq3C0QFQ+vofenXEZix 3jSWjjJxjW8AKHTnUU8i7XQ6C8ldWuO1Ze0Y/NSFfe/xggLbqpU= -----END CERTIFICATE-----Generated at Thu Mar 19 07:01:54 2026 by rpki-client