$ rpki-client -vvf repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft File: E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft (raw, json) Hash identifier: 8HHUxwrWDDn/k4QofKltLBwenE4Zq+0yd7aK5Y2Y42I= Subject key identifier: 8D:D3:E0:06:9D:5A:27:CA:E2:E5:71:C4:6B:D7:55:C5:DD:D4:37:19 Authority key identifier: E1:FE:69:A3:42:16:C2:4D:18:70:F5:CE:D3:A4:30:92:34:A0:F1:B2 Certificate issuer: /CN=E1FE69A34216C24D1870F5CED3A4309234A0F1B2 Certificate serial: 1E94E4596CC1F346FF7904251CB2DEAE84BE254F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft Manifest number: 0183 Signing time: Tue 24 Mar 2026 12:02:42 +0000 Manifest this update: Tue 24 Mar 2026 11:57:42 +0000 Manifest next update: Fri 27 Mar 2026 23:49:42 +0000 Files and hashes: 1: E1FE69A34216C24D1870F5CED3A4309234A0F1B2.crl (hash: JqE+bkRpCoIfXxqg7YDwS8N0tk5UkX6H6Acgy42xD9E=) 2: 3130332e3138392e3232322e302f32342d3234203d3e20313439383831.roa (hash: LJVWK744DaCLalz0/Sl7Gt/PYQWV0FOVmOX8NAlnD4I=) 3: 323030313a6466313a396563303a3a2f34382d3438203d3e20313439383831.roa (hash: icoM+EmZmnaUSNYe+M3YT7QPi2377uDTJ5GrlCTs7Lw=) 4: 3130332e3138392e3232332e302f32342d3234203d3e20313439383831.roa (hash: Y71EeD959aIr9ucCZApJALClmCCepz1YWwy1H6B20+w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.crl rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 23:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:94:e4:59:6c:c1:f3:46:ff:79:04:25:1c:b2:de:ae:84:be:25:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1FE69A34216C24D1870F5CED3A4309234A0F1B2 Validity Not Before: Mar 24 11:57:42 2026 GMT Not After : Mar 27 23:49:42 2026 GMT Subject: CN=8DD3E0069D5A27CAE2E571C46BD755C5DDD43719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5f:ff:10:17:fc:97:24:5a:85:9b:77:2f:16: 7f:5b:26:43:46:e0:6b:0e:d4:a9:9f:90:ae:f8:3b: 9b:71:d8:f9:59:42:28:43:19:1b:d1:b0:ca:28:e5: 2a:07:46:3d:cc:23:13:77:21:80:a9:7c:61:86:de: 0d:5b:0b:56:73:63:d6:18:ee:5a:2f:22:c9:8c:6d: c8:88:aa:92:e9:c8:aa:64:e7:bd:74:6c:81:ae:08: 5d:8c:d4:f3:cf:31:1d:fd:bc:65:97:93:d1:8b:2e: 31:a8:5c:53:91:0f:ca:8e:24:da:0e:5e:f9:02:4a: cf:99:ca:80:aa:a7:50:9a:ce:22:74:f8:e2:f2:02: 9b:72:a5:a1:e3:1e:4a:db:9b:53:1e:ae:a9:bf:d5: bc:0a:64:99:1b:4a:24:f6:8c:12:1a:dd:6c:2f:56: da:4a:93:3f:54:22:82:23:09:60:de:2a:61:1e:5d: 17:ae:74:89:20:27:72:db:da:fd:ae:c3:eb:40:56: b8:3e:b2:7e:70:a4:a5:94:e4:61:e5:01:c3:03:c0: 22:e6:39:48:76:d0:30:03:e9:03:55:f4:6f:d5:6e: 28:28:51:75:16:8a:56:12:05:52:19:a3:48:19:c6: be:45:56:c7:8f:0e:f7:4c:e2:6a:7e:e1:9d:af:9c: 99:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:D3:E0:06:9D:5A:27:CA:E2:E5:71:C4:6B:D7:55:C5:DD:D4:37:19 X509v3 Authority Key Identifier: keyid:E1:FE:69:A3:42:16:C2:4D:18:70:F5:CE:D3:A4:30:92:34:A0:F1:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:f0:c0:df:81:f4:98:6b:af:7a:e4:f6:16:a7:0b:fb:63:b4: 30:a9:15:be:92:55:7a:e4:a9:41:78:86:ad:27:ac:0e:ce:1f: a2:1e:7a:35:88:53:ac:2a:b3:ce:2c:ec:be:1a:d9:a3:81:b9: fc:ca:80:d8:5d:bf:68:a7:15:40:99:34:8a:1c:c8:5e:87:18: 71:35:15:3c:98:af:b6:c6:91:3f:cd:b9:94:68:a4:a1:ec:d7: c2:f1:9e:f1:c4:5c:5a:ae:1f:86:2a:c5:f6:b4:65:e2:03:a6: d5:42:41:7b:80:dd:1d:f9:c6:5b:fc:ce:41:22:2d:c3:cf:41: 30:ae:45:04:60:9f:4a:d0:74:4d:f2:2b:29:91:3a:69:fa:c3: 58:c8:20:8d:ce:3e:dc:bf:d6:d6:6a:36:5e:89:40:2d:bc:12: 5e:04:02:10:27:8f:72:1c:57:86:02:39:28:94:d2:88:e5:fe: 36:80:a1:71:c0:1e:a1:a4:e6:13:2e:e3:d4:83:96:56:64:58: 55:5a:7e:3e:41:d1:3a:75:fb:fb:31:f0:aa:a5:a9:19:71:04: d6:79:2c:69:02:cb:f0:01:14:00:0d:4c:ff:18:48:13:4b:d3: e4:6e:28:41:54:d2:5a:bf:5b:bb:91:c7:fd:4d:9a:5a:14:2e: 99:23:3b:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHpTkWWzB80b/eQQlHLLeroS+JU8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFGRTY5QTM0MjE2QzI0RDE4NzBGNUNFRDNBNDMwOTIz NEEwRjFCMjAeFw0yNjAzMjQxMTU3NDJaFw0yNjAzMjcyMzQ5NDJaMDMxMTAvBgNV BAMTKDhERDNFMDA2OUQ1QTI3Q0FFMkU1NzFDNDZCRDc1NUM1RERENDM3MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3X/8QF/yXJFqFm3cvFn9bJkNG 4GsO1KmfkK74O5tx2PlZQihDGRvRsMoo5SoHRj3MIxN3IYCpfGGG3g1bC1ZzY9YY 7lovIsmMbciIqpLpyKpk5710bIGuCF2M1PPPMR39vGWXk9GLLjGoXFORD8qOJNoO XvkCSs+ZyoCqp1CaziJ0+OLyAptypaHjHkrbm1Merqm/1bwKZJkbSiT2jBIa3Wwv VtpKkz9UIoIjCWDeKmEeXReudIkgJ3Lb2v2uw+tAVrg+sn5wpKWU5GHlAcMDwCLm OUh20DAD6QNV9G/VbigoUXUWilYSBVIZo0gZxr5FVsePDvdM4mp+4Z2vnJm1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjdPgBp1aJ8ri5XHEa9dVxd3UNxkwHwYDVR0j BBgwFoAU4f5po0IWwk0YcPXO06QwkjSg8bIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODhlM2ExNy0xYzkxLTQ3OTMtODNjNC0yMTFkNDIxMGFlYTgvMC9FMUZFNjlBMzQy MTZDMjREMTg3MEY1Q0VEM0E0MzA5MjM0QTBGMUIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTFGRTY5QTM0MjE2QzI0RDE4NzBGNUNFRDNBNDMwOTIzNEEw RjFCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTg4ZTNhMTctMWM5MS00NzkzLTgz YzQtMjExZDQyMTBhZWE4LzAvRTFGRTY5QTM0MjE2QzI0RDE4NzBGNUNFRDNBNDMw OTIzNEEwRjFCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA/wwN+B9Jhrr3rk9hanC/tjtDCpFb6SVXrk qUF4hq0nrA7OH6IeejWIU6wqs84s7L4a2aOBufzKgNhdv2inFUCZNIocyF6HGHE1 FTyYr7bGkT/NuZRopKHs18LxnvHEXFquH4Yqxfa0ZeIDptVCQXuA3R35xlv8zkEi LcPPQTCuRQRgn0rQdE3yKymROmn6w1jIII3OPty/1tZqNl6JQC28El4EAhAnj3Ic V4YCOSiU0ojl/jaAoXHAHqGk5hMu49SDllZkWFVafj5B0Tp1+/sx8KqlqRlxBNZ5 LGkCy/ABFAANTP8YSBNL0+RuKEFU0lq/W7uRx/1NmloULpkjOxY= -----END CERTIFICATE-----Generated at Thu Mar 26 21:19:16 2026 by rpki-client