$ rpki-client -vvf repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft File: EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft (raw, json) Hash identifier: lxkQhpOhkvgHrYoLZA910wneI25aiZuVDwhEVBVNUww= Subject key identifier: 8F:53:AB:4D:6B:F0:07:F6:CF:54:E9:1F:E0:BB:D5:1C:C5:98:3F:A6 Authority key identifier: EB:78:21:4F:24:8E:FE:08:B4:E4:62:FD:AF:D4:E7:0B:C3:D0:5A:2F Certificate issuer: /CN=EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F Certificate serial: 14A2BEC38D5C48A2F4CEA0538560F32A371303A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft Manifest number: 0136 Signing time: Thu 26 Mar 2026 02:50:57 +0000 Manifest this update: Thu 26 Mar 2026 02:45:57 +0000 Manifest next update: Sun 29 Mar 2026 07:35:57 +0000 Files and hashes: 1: EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.crl (hash: xL7DfGKzxArnDJb1wpGA3TfTAdslngJ7/Yj9WRppp78=) 2: 3130332e3130312e3231362e302f32332d3233203d3e20313530393431.roa (hash: jaZVjq3R+3/LbbBN+QBMswILVamVqgypIXD15guKfqg=) 3: 3130332e3130312e3231362e302f32342d3234203d3e20313530393431.roa (hash: V76cC5CNnJtNiE3A1eNlVqFtp7QA7yYWZJ54/BrVb60=) 4: 3130332e3130312e3231372e302f32342d3234203d3e20313530393431.roa (hash: aAMjUzaN1yMPp7oXLSGICiOHUfNylQXYPCCHO4WZk9E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.crl rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 07:35:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:a2:be:c3:8d:5c:48:a2:f4:ce:a0:53:85:60:f3:2a:37:13:03:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F Validity Not Before: Mar 26 02:45:57 2026 GMT Not After : Mar 29 07:35:57 2026 GMT Subject: CN=8F53AB4D6BF007F6CF54E91FE0BBD51CC5983FA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:02:dd:41:9a:e8:f2:86:bd:3d:4d:62:57:ee: 04:56:b2:e2:a8:76:a9:50:42:6e:6c:12:50:b9:45: fb:69:5b:35:e3:c1:50:b4:3c:63:74:bf:ef:b7:03: fd:4c:a4:01:7f:23:74:b0:af:ea:f6:61:62:2a:70: a0:00:16:65:bd:c8:96:a8:82:f6:94:0a:87:62:08: 1c:19:4f:1b:f8:02:17:1c:4b:21:76:c6:9f:4a:5c: 08:46:2b:d3:65:71:2a:e0:c0:96:b4:e7:48:13:83: 01:5d:09:db:a6:41:32:75:7c:9c:8e:3d:5e:11:3d: 44:b1:b2:8a:08:94:d8:da:75:c9:b4:5b:2d:a9:e7: ba:07:fd:0a:05:b7:bf:41:3f:c9:33:80:de:62:ee: 1a:5d:d0:4a:72:28:ba:6d:f8:35:2d:94:1e:e7:fd: 3b:03:e9:17:b8:74:6a:64:b4:d0:71:91:56:be:db: f4:f9:e3:01:df:e1:8f:7a:ff:19:d5:97:0a:78:b4: 71:3c:c9:99:3d:dc:25:22:5b:de:2d:59:62:2c:67: 7e:86:17:84:9a:9f:c8:78:34:9b:25:20:9c:ee:96: 2e:f7:77:53:36:a4:18:f6:e6:89:ec:6d:d3:1c:d4: ff:e2:c5:c1:a0:d8:44:4d:8e:08:b9:1c:4f:dc:92: 28:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:53:AB:4D:6B:F0:07:F6:CF:54:E9:1F:E0:BB:D5:1C:C5:98:3F:A6 X509v3 Authority Key Identifier: keyid:EB:78:21:4F:24:8E:FE:08:B4:E4:62:FD:AF:D4:E7:0B:C3:D0:5A:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:c8:bc:8b:aa:30:44:6d:f3:87:41:d3:77:bd:5d:17:3b:10: 63:4e:a5:02:5a:a8:23:00:40:70:75:62:10:11:05:f3:10:c4: 00:31:96:81:af:fa:35:bb:f0:55:2d:95:be:bd:8b:46:18:bb: 67:34:45:63:14:4e:e4:41:14:f0:8c:71:10:82:17:d7:c0:ac: a9:36:32:a6:e8:73:0e:92:6c:da:d3:c7:77:0c:17:0d:21:93: b2:3c:61:87:31:5f:48:cc:d2:06:d2:f5:c0:b6:c8:1f:7b:78: 84:bf:46:f6:ac:7b:52:c7:e0:a6:8a:d6:e7:41:d1:4b:dd:19: b3:ea:42:44:0e:e5:3b:bc:7e:49:32:32:64:8e:90:ac:f9:00: bc:99:66:68:fe:8a:77:86:ba:dc:79:21:c3:51:7e:75:02:d6: 71:5c:d3:be:6c:13:38:f4:7d:1b:cd:4e:07:2f:76:d1:ca:68: b3:88:94:71:c3:dd:56:3b:68:aa:e3:b1:bb:93:7c:b8:8b:4d: 8a:20:33:f9:1a:2c:8a:38:66:0f:18:fa:c2:93:98:f8:dd:97: 42:a4:95:9a:66:75:bb:6d:48:64:67:6a:db:7a:73:d6:d9:50: d0:03:1e:50:08:ca:87:93:49:00:eb:bd:2f:00:f1:0d:b3:6c: 60:00:f3:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFKK+w41cSKL0zqBThWDzKjcTA6IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUI3ODIxNEYyNDhFRkUwOEI0RTQ2MkZEQUZENEU3MEJD M0QwNUEyRjAeFw0yNjAzMjYwMjQ1NTdaFw0yNjAzMjkwNzM1NTdaMDMxMTAvBgNV BAMTKDhGNTNBQjRENkJGMDA3RjZDRjU0RTkxRkUwQkJENTFDQzU5ODNGQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsAt1Bmujyhr09TWJX7gRWsuKo dqlQQm5sElC5RftpWzXjwVC0PGN0v++3A/1MpAF/I3Swr+r2YWIqcKAAFmW9yJao gvaUCodiCBwZTxv4AhccSyF2xp9KXAhGK9NlcSrgwJa050gTgwFdCdumQTJ1fJyO PV4RPUSxsooIlNjadcm0Wy2p57oH/QoFt79BP8kzgN5i7hpd0EpyKLpt+DUtlB7n /TsD6Re4dGpktNBxkVa+2/T54wHf4Y96/xnVlwp4tHE8yZk93CUiW94tWWIsZ36G F4San8h4NJslIJzuli73d1M2pBj25onsbdMc1P/ixcGg2ERNjgi5HE/ckihjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj1OrTWvwB/bPVOkf4LvVHMWYP6YwHwYDVR0j BBgwFoAU63ghTySO/gi05GL9r9TnC8PQWi8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTFmMzk3MS0zYTQ3LTQ1NWQtYWIzMC1lN2MyM2I2MWI5ZjIvMC9FQjc4MjE0RjI0 OEVGRTA4QjRFNDYyRkRBRkQ0RTcwQkMzRDA1QTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUI3ODIxNEYyNDhFRkUwOEI0RTQ2MkZEQUZENEU3MEJDM0Qw NUEyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGExZjM5NzEtM2E0Ny00NTVkLWFi MzAtZTdjMjNiNjFiOWYyLzAvRUI3ODIxNEYyNDhFRkUwOEI0RTQ2MkZEQUZENEU3 MEJDM0QwNUEyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALzIvIuqMERt84dB03e9XRc7EGNOpQJaqCMA QHB1YhARBfMQxAAxloGv+jW78FUtlb69i0YYu2c0RWMUTuRBFPCMcRCCF9fArKk2 Mqbocw6SbNrTx3cMFw0hk7I8YYcxX0jM0gbS9cC2yB97eIS/Rvase1LH4KaK1udB 0UvdGbPqQkQO5Tu8fkkyMmSOkKz5ALyZZmj+ineGutx5IcNRfnUC1nFc075sEzj0 fRvNTgcvdtHKaLOIlHHD3VY7aKrjsbuTfLiLTYogM/kaLIo4Zg8Y+sKTmPjdl0Kk lZpmdbttSGRnatt6c9bZUNADHlAIyoeTSQDrvS8A8Q2zbGAA82Q= -----END CERTIFICATE-----Generated at Thu Mar 26 08:52:55 2026 by rpki-client