$ rpki-client -vvf repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft File: E2111F10F01C17C4A322DAF5076425FBD824219D.mft (raw, json) Hash identifier: oh1CrziX1ruXCo1Jg/6Xlgb5rgpY7khwQbMJi9gZ7K0= Subject key identifier: 3B:3E:39:66:93:99:30:1C:20:DC:A1:38:D2:E8:01:33:8B:8E:12:2C Authority key identifier: E2:11:1F:10:F0:1C:17:C4:A3:22:DA:F5:07:64:25:FB:D8:24:21:9D Certificate issuer: /CN=E2111F10F01C17C4A322DAF5076425FBD824219D Certificate serial: 54C6E19E5DF6A1CFAD36D1159C31DB7D9118B815 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft Manifest number: 0524 Signing time: Thu 26 Mar 2026 14:11:18 +0000 Manifest this update: Thu 26 Mar 2026 14:06:18 +0000 Manifest next update: Sun 29 Mar 2026 23:27:18 +0000 Files and hashes: 1: E2111F10F01C17C4A322DAF5076425FBD824219D.crl (hash: RtvvBXuZdUjn906M4DQxmRgdn15I/e7QaOUS5Q2+8pI=) 2: 323430353a633963303a3a2f33322d3438203d3e20313338383233.roa (hash: fAuWxeE7ImjYp2a97WPBMhqeHz7I3/dQp2udhbh8G2w=) 3: 3230332e3136312e32342e302f32312d3234203d3e20313338383233.roa (hash: pFuk/AGngpWFrOWsfA6YRJueZJFWOC8v02Ywbm8rUMw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.crl rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 20:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:c6:e1:9e:5d:f6:a1:cf:ad:36:d1:15:9c:31:db:7d:91:18:b8:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2111F10F01C17C4A322DAF5076425FBD824219D Validity Not Before: Mar 26 14:06:18 2026 GMT Not After : Mar 29 23:27:18 2026 GMT Subject: CN=3B3E39669399301C20DCA138D2E801338B8E122C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4f:a7:07:66:86:bc:48:b7:7e:11:7e:73:4a: 80:c3:57:3d:c9:2b:e6:4c:2a:bc:aa:e4:8a:bc:51: 8b:3d:9d:4a:b1:3e:e3:a8:0e:30:d7:ff:88:1e:d8: 37:19:0b:94:4b:68:42:29:cd:fc:08:18:15:cd:ce: 76:09:e3:07:ae:49:ad:e2:47:c7:c3:d2:7d:4f:9c: cb:8e:f2:86:39:3c:54:bf:0e:7e:12:a7:69:fc:92: 2c:59:2d:94:35:21:b5:32:ba:22:46:09:72:56:21: 9f:e4:dc:ab:85:7a:9c:4c:f1:94:eb:db:57:20:69: 1f:98:85:72:4f:28:14:c4:e0:9e:9e:dc:a5:c1:b6: f3:97:a6:93:de:79:d4:4d:a3:15:60:77:85:aa:98: 44:2c:44:88:05:b6:ac:af:d6:dd:e2:17:94:d0:da: 0d:48:eb:2c:73:99:b2:4f:9c:c3:bf:de:21:88:75: 65:8b:87:a4:b0:46:37:78:b3:c5:71:e1:c0:10:e1: f6:76:e4:05:ff:22:d3:4d:78:e1:32:a3:df:96:56: 79:a5:18:3f:1f:15:70:21:de:86:c8:ae:c2:48:b2: 56:f4:a5:09:28:80:1b:13:98:b5:dd:5e:7e:49:d2: 1d:41:e7:3e:5e:0c:97:ac:53:3a:cf:53:c2:bb:24: ac:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:3E:39:66:93:99:30:1C:20:DC:A1:38:D2:E8:01:33:8B:8E:12:2C X509v3 Authority Key Identifier: keyid:E2:11:1F:10:F0:1C:17:C4:A3:22:DA:F5:07:64:25:FB:D8:24:21:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:ec:af:d2:ff:6c:02:2c:18:1b:64:c7:ef:c8:6b:8b:56:4d: b1:70:47:73:2f:e0:5d:be:57:aa:03:b7:81:e3:6c:8b:c8:54: e6:1a:5c:58:4b:a7:32:55:7b:5b:36:20:b8:36:56:48:73:71: 10:fd:f6:41:f9:24:aa:6b:7a:52:ea:6b:48:00:bb:d2:dc:8a: 2b:13:7e:ba:c5:94:35:e4:58:b0:25:de:ec:40:c4:18:8e:4f: 03:f9:ab:7f:de:36:8b:a9:db:49:9d:a2:d9:4e:a7:53:48:6a: 15:00:83:74:63:ba:d0:a9:5d:40:35:81:6a:e7:15:ba:61:60: 8a:6f:4c:6f:31:e0:ff:49:f2:6e:03:9f:85:c9:a5:de:19:51: 86:aa:50:77:96:ec:fa:03:e4:78:f1:75:4b:e2:f4:96:43:37: 56:65:ef:24:13:af:ac:3a:18:39:01:40:bb:db:90:9e:9f:a7: 3e:64:69:d4:41:dd:c9:8b:ce:d7:96:95:5c:cc:38:28:1d:a6: db:de:73:82:00:d5:f4:93:0d:98:9e:4c:e4:d0:ab:6e:71:60: 1d:86:96:f2:47:d0:62:34:c0:dd:e1:c8:43:e5:3f:c6:ba:f6: 4d:2e:8e:f6:87:1e:f4:a0:c6:87:17:ad:f1:51:ec:1b:ff:05: b7:98:8e:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVMbhnl32oc+tNtEVnDHbfZEYuBUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTIxMTFGMTBGMDFDMTdDNEEzMjJEQUY1MDc2NDI1RkJE ODI0MjE5RDAeFw0yNjAzMjYxNDA2MThaFw0yNjAzMjkyMzI3MThaMDMxMTAvBgNV BAMTKDNCM0UzOTY2OTM5OTMwMUMyMERDQTEzOEQyRTgwMTMzOEI4RTEyMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPT6cHZoa8SLd+EX5zSoDDVz3J K+ZMKryq5Iq8UYs9nUqxPuOoDjDX/4ge2DcZC5RLaEIpzfwIGBXNznYJ4weuSa3i R8fD0n1PnMuO8oY5PFS/Dn4Sp2n8kixZLZQ1IbUyuiJGCXJWIZ/k3KuFepxM8ZTr 21cgaR+YhXJPKBTE4J6e3KXBtvOXppPeedRNoxVgd4WqmEQsRIgFtqyv1t3iF5TQ 2g1I6yxzmbJPnMO/3iGIdWWLh6SwRjd4s8Vx4cAQ4fZ25AX/ItNNeOEyo9+WVnml GD8fFXAh3obIrsJIslb0pQkogBsTmLXdXn5J0h1B5z5eDJesUzrPU8K7JKw9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOz45ZpOZMBwg3KE40ugBM4uOEiwwHwYDVR0j BBgwFoAU4hEfEPAcF8SjItr1B2Ql+9gkIZ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjE1OGFlYy01MjgxLTQyZTYtOTc5Yi1mY2E2MWQ0N2M4NDUvMC9FMjExMUYxMEYw MUMxN0M0QTMyMkRBRjUwNzY0MjVGQkQ4MjQyMTlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTIxMTFGMTBGMDFDMTdDNEEzMjJEQUY1MDc2NDI1RkJEODI0 MjE5RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDIxNThhZWMtNTI4MS00MmU2LTk3 OWItZmNhNjFkNDdjODQ1LzAvRTIxMTFGMTBGMDFDMTdDNEEzMjJEQUY1MDc2NDI1 RkJEODI0MjE5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA/sr9L/bAIsGBtkx+/Ia4tWTbFwR3Mv4F2+ V6oDt4HjbIvIVOYaXFhLpzJVe1s2ILg2VkhzcRD99kH5JKprelLqa0gAu9LciisT frrFlDXkWLAl3uxAxBiOTwP5q3/eNoup20mdotlOp1NIahUAg3RjutCpXUA1gWrn FbphYIpvTG8x4P9J8m4Dn4XJpd4ZUYaqUHeW7PoD5HjxdUvi9JZDN1Zl7yQTr6w6 GDkBQLvbkJ6fpz5kadRB3cmLzteWlVzMOCgdptvec4IA1fSTDZieTOTQq25xYB2G lvJH0GI0wN3hyEPlP8a69k0ujvaHHvSgxocXrfFR7Bv/BbeYjvM= -----END CERTIFICATE-----Generated at Thu Mar 26 20:27:14 2026 by rpki-client