$ rpki-client -vvf repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft File: EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft (raw, json) Hash identifier: 0bSUKWFMvBjSQJe1ZPQPMq1kvKzVewcd5MBJyK43lpc= Subject key identifier: 47:DC:F1:29:34:97:F6:73:5B:11:4B:CA:40:92:3B:02:0F:06:AB:8C Authority key identifier: EA:01:C9:15:11:C5:E3:47:C7:C1:1E:A4:64:9B:0F:04:1A:5D:05:20 Certificate issuer: /CN=EA01C91511C5E347C7C11EA4649B0F041A5D0520 Certificate serial: 328E4A9B1833EEC5832B5BB89D69AB4E9180433D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft Manifest number: 0208 Signing time: Wed 25 Mar 2026 12:10:02 +0000 Manifest this update: Wed 25 Mar 2026 12:05:02 +0000 Manifest next update: Sat 28 Mar 2026 14:56:02 +0000 Files and hashes: 1: EA01C91511C5E347C7C11EA4649B0F041A5D0520.crl (hash: 7iE1nH9OBcIPpVDTwbdb7a/o72Y9LjC4hBSu17gbiUk=) 2: 3130332e3132302e3231382e302f32342d3234203d3e20313338303832.roa (hash: XXDfIIYOEglBKxR32q76DP0xk41MtlD2sFhZIbxce4A=) 3: 3130332e3137392e38322e302f32342d3234203d3e20313338303832.roa (hash: GfoRbCqzzEwM+JaSR+jL9jpyyrybmpGlShF5wsNuV5w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.crl rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 14:56:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:8e:4a:9b:18:33:ee:c5:83:2b:5b:b8:9d:69:ab:4e:91:80:43:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA01C91511C5E347C7C11EA4649B0F041A5D0520 Validity Not Before: Mar 25 12:05:02 2026 GMT Not After : Mar 28 14:56:02 2026 GMT Subject: CN=47DCF1293497F6735B114BCA40923B020F06AB8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8c:cc:78:e7:21:4a:c6:c2:18:9e:7f:16:25: bf:9a:c0:90:29:01:de:6b:ba:26:26:c1:43:2a:b8: bf:fd:6a:1c:77:ff:5e:f6:a4:87:3c:7c:72:42:a1: 2e:81:cd:65:9b:b8:5f:fd:62:a4:f9:c1:9c:8f:5b: 58:01:56:0c:01:9e:34:f9:5e:7e:c6:9f:57:47:69: 09:f8:a6:33:8d:89:0b:f4:1d:ea:e8:7a:84:f6:49: ba:66:49:c5:94:ba:19:e1:8d:b9:78:79:fe:72:e9: 20:95:67:60:d5:84:1b:68:d9:a2:e8:bb:40:dc:6d: d9:0b:e2:d0:9d:a3:5f:94:2a:5f:a0:cf:cd:c1:b7: e5:1a:35:2a:0d:cf:1d:56:5d:58:11:7f:4d:bf:e9: c7:c5:5d:da:6d:83:ff:8b:1c:d0:fb:f8:1f:9c:fd: b1:40:ca:0a:ce:00:0f:e2:b1:1b:2c:08:9d:55:f8: 57:a4:a8:a0:a2:fa:d2:16:33:1f:43:e8:76:cb:7a: f7:b0:de:bf:d5:4d:d3:2a:14:9b:71:5c:5d:b3:60: a5:52:10:5b:40:db:63:79:2e:02:0e:db:10:b1:e3: ed:f1:8c:d7:4b:2a:f2:f9:4a:e4:39:f4:25:a1:38: d4:f8:8e:52:91:9c:c8:82:2b:41:a5:7f:41:b0:10: 79:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:DC:F1:29:34:97:F6:73:5B:11:4B:CA:40:92:3B:02:0F:06:AB:8C X509v3 Authority Key Identifier: keyid:EA:01:C9:15:11:C5:E3:47:C7:C1:1E:A4:64:9B:0F:04:1A:5D:05:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:45:c8:4f:f4:4b:e3:e0:1e:4e:4c:f5:38:35:57:23:7a:0a: ea:53:9e:40:d4:a5:c6:fa:31:2b:ba:b0:c4:04:f4:e2:e2:21: 6a:cd:f3:8a:89:fd:ae:8f:1f:60:6d:82:15:00:87:a0:7b:52: b5:41:93:dc:0d:ca:b4:f1:a6:67:c4:5c:a1:f8:ef:11:1e:67: af:78:8d:93:07:dc:9c:10:b6:1f:38:3a:d5:53:f5:dc:43:5d: ee:6b:80:4d:53:64:d1:27:ec:15:47:75:b5:ff:ba:44:25:ff: 49:f4:07:04:73:6c:91:ef:c1:fa:18:b2:29:1a:a9:85:33:c2: f8:c8:f4:39:13:59:7a:60:b7:b3:10:2b:7a:f7:79:8f:d5:ad: f6:16:90:7e:49:24:43:e7:85:11:74:17:b9:f4:13:80:f9:42: a0:81:3f:42:4f:5e:da:f3:f0:31:97:3e:3f:7a:15:73:f3:c5: 52:27:c9:05:69:fe:f3:7d:c3:69:26:e6:8b:54:76:f0:a0:36: 0b:85:d6:71:79:1e:ad:94:b3:46:37:7f:aa:55:09:2d:7d:23: cc:fe:8b:4b:0f:58:cc:60:f9:0a:de:f6:09:29:03:4a:3a:0a: f9:24:cf:aa:15:bc:f1:78:68:bb:9c:58:8a:42:98:ca:da:6f: 46:a3:63:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMo5Kmxgz7sWDK1u4nWmrTpGAQz0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUEwMUM5MTUxMUM1RTM0N0M3QzExRUE0NjQ5QjBGMDQx QTVEMDUyMDAeFw0yNjAzMjUxMjA1MDJaFw0yNjAzMjgxNDU2MDJaMDMxMTAvBgNV BAMTKDQ3RENGMTI5MzQ5N0Y2NzM1QjExNEJDQTQwOTIzQjAyMEYwNkFCOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHjMx45yFKxsIYnn8WJb+awJAp Ad5ruiYmwUMquL/9ahx3/172pIc8fHJCoS6BzWWbuF/9YqT5wZyPW1gBVgwBnjT5 Xn7Gn1dHaQn4pjONiQv0HeroeoT2SbpmScWUuhnhjbl4ef5y6SCVZ2DVhBto2aLo u0DcbdkL4tCdo1+UKl+gz83Bt+UaNSoNzx1WXVgRf02/6cfFXdptg/+LHND7+B+c /bFAygrOAA/isRssCJ1V+FekqKCi+tIWMx9D6HbLevew3r/VTdMqFJtxXF2zYKVS EFtA22N5LgIO2xCx4+3xjNdLKvL5SuQ59CWhONT4jlKRnMiCK0Glf0GwEHkDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR9zxKTSX9nNbEUvKQJI7Ag8Gq4wwHwYDVR0j BBgwFoAU6gHJFRHF40fHwR6kZJsPBBpdBSAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w Y2QyNGU4Mi1mMzA2LTQ0MDAtYjAwYS1kNTliNDFlMjg2YmIvMC9FQTAxQzkxNTEx QzVFMzQ3QzdDMTFFQTQ2NDlCMEYwNDFBNUQwNTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUEwMUM5MTUxMUM1RTM0N0M3QzExRUE0NjQ5QjBGMDQxQTVE MDUyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGNkMjRlODItZjMwNi00NDAwLWIw MGEtZDU5YjQxZTI4NmJiLzAvRUEwMUM5MTUxMUM1RTM0N0M3QzExRUE0NjQ5QjBG MDQxQTVEMDUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKBFyE/0S+PgHk5M9Tg1VyN6CupTnkDUpcb6 MSu6sMQE9OLiIWrN84qJ/a6PH2BtghUAh6B7UrVBk9wNyrTxpmfEXKH47xEeZ694 jZMH3JwQth84OtVT9dxDXe5rgE1TZNEn7BVHdbX/ukQl/0n0BwRzbJHvwfoYsika qYUzwvjI9DkTWXpgt7MQK3r3eY/VrfYWkH5JJEPnhRF0F7n0E4D5QqCBP0JPXtrz 8DGXPj96FXPzxVInyQVp/vN9w2km5otUdvCgNguF1nF5Hq2Us0Y3f6pVCS19I8z+ i0sPWMxg+Qre9gkpA0o6Cvkkz6oVvPF4aLucWIpCmMrab0ajY1E= -----END CERTIFICATE-----Generated at Fri Mar 27 01:56:18 2026 by rpki-client