$ rpki-client -vvf repo-rpki.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.mft File: EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.mft (raw, json) Hash identifier: jpa/3Or4VbhyIa1XNRKfGpZ/cuI2/j7V/qurPQ5gGZU= Subject key identifier: 8A:F4:EC:29:62:16:F6:52:89:FC:31:ED:EA:3A:29:08:9B:D0:37:48 Authority key identifier: EA:EA:2F:2F:07:FF:F3:43:40:77:7B:3B:BD:7D:1D:18:6F:4E:C1:CB Certificate issuer: /CN=EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB Certificate serial: 04D29EB34E1C3D292E8EEFF9F7F0A2AAE8B76154 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.mft Manifest number: 0257 Signing time: Wed 25 Mar 2026 06:31:48 +0000 Manifest this update: Wed 25 Mar 2026 06:26:48 +0000 Manifest next update: Sat 28 Mar 2026 14:58:48 +0000 Files and hashes: 1: 3130332e3139312e3135302e302f32332d3234203d3e20313439393337.roa (hash: i80S93LcbuzfKOEUZo9C4vjXTfLHmrCj4n9ypSMTwBE=) 2: EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.crl (hash: SBs9ebznN8yi42x+rOmJxTYefUVqlIfFmwbdNs+gFX0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.crl rsync://repo-rpki.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 14:58:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:d2:9e:b3:4e:1c:3d:29:2e:8e:ef:f9:f7:f0:a2:aa:e8:b7:61:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB Validity Not Before: Mar 25 06:26:48 2026 GMT Not After : Mar 28 14:58:48 2026 GMT Subject: CN=8AF4EC296216F65289FC31EDEA3A29089BD03748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d4:e6:9b:e5:82:e7:3b:f3:75:1b:f6:29:5e: 61:53:24:4c:02:a8:9f:b8:6c:53:d3:9d:38:2d:15: 57:31:01:19:46:8e:d7:8a:39:5e:82:56:63:dd:6c: f2:e1:b3:88:47:bc:b0:94:66:d1:f1:51:11:e7:cd: 4e:f7:9d:77:db:4f:ee:ce:cc:ed:25:70:fa:ad:0b: 5b:46:77:19:77:84:e8:37:f1:2b:ff:79:bd:79:da: 9b:29:6b:6a:35:ad:1c:de:94:3c:06:35:d9:91:ba: f6:12:92:0d:94:7d:bb:bf:83:fc:37:5f:1b:a5:18: 30:da:4a:46:78:aa:d8:a2:f6:c1:14:8a:0c:be:8e: 6b:af:0b:7f:a1:dd:4d:13:27:ae:11:bb:16:3d:fd: 54:a2:9e:73:4b:1a:5f:83:36:b8:ef:f8:4d:bd:53: 2a:9c:0c:bb:c2:ab:e7:e7:dd:62:7a:6e:14:7b:90: 12:5e:9f:d0:e4:b1:98:61:1a:7a:86:db:48:f8:e8: 1d:42:67:0a:a9:18:4c:8e:ad:a4:a4:ed:a4:82:87: 3b:01:3e:53:a8:85:b0:2d:80:cf:b3:7c:62:43:c3: 4d:24:2f:f2:b5:57:67:f5:c7:c6:4a:a2:86:cc:e4: 72:a3:ed:2a:71:ea:7d:50:cd:38:11:aa:a4:40:3e: 35:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F4:EC:29:62:16:F6:52:89:FC:31:ED:EA:3A:29:08:9B:D0:37:48 X509v3 Authority Key Identifier: keyid:EA:EA:2F:2F:07:FF:F3:43:40:77:7B:3B:BD:7D:1D:18:6F:4E:C1:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:ee:f8:e1:e2:43:1e:cd:b7:9d:c3:fa:c7:e0:b6:0c:8b:6d: df:ef:0c:0e:59:0d:cf:c8:b4:1b:58:d2:ea:ba:a5:26:00:f7: a7:43:84:1d:13:d8:2c:87:33:83:68:6c:4e:d5:9a:c8:58:69: 2c:64:43:1b:1a:40:9d:92:1b:39:ca:31:bc:79:2c:37:08:4b: 92:e2:aa:57:4f:53:ca:2a:15:14:83:59:e4:66:8c:ac:fa:70: fb:4f:14:52:cc:a8:79:dd:55:8b:7f:df:51:92:aa:6c:49:dc: 4a:29:8e:13:32:b1:61:61:98:cb:5e:34:d4:6b:8e:2a:91:9c: 72:cd:7c:34:6b:d1:12:ae:e7:2c:2b:6f:9b:97:d4:a8:dc:58: 67:5a:2c:48:0d:c8:68:ec:24:71:4f:b3:64:15:f4:c9:13:d5: 91:fe:c7:b4:23:6b:86:12:2a:11:d8:62:e8:53:3e:9a:43:9c: 7f:f0:bd:39:f3:27:7e:28:e5:62:bb:b5:fa:ca:e8:26:e5:3d: 1f:06:1e:9c:e9:05:60:27:6a:78:9d:23:15:51:a7:73:81:9a: e6:70:c6:e0:f5:52:3d:74:55:3d:d2:e7:ad:eb:a1:57:2a:8c: 19:78:0b:5f:9b:6c:15:c5:30:d1:4f:5b:62:23:32:a8:c6:b3: ec:6c:a9:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBNKes04cPSkuju/59/Ciqui3YVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFFQTJGMkYwN0ZGRjM0MzQwNzc3QjNCQkQ3RDFEMTg2 RjRFQzFDQjAeFw0yNjAzMjUwNjI2NDhaFw0yNjAzMjgxNDU4NDhaMDMxMTAvBgNV BAMTKDhBRjRFQzI5NjIxNkY2NTI4OUZDMzFFREVBM0EyOTA4OUJEMDM3NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV1Oab5YLnO/N1G/YpXmFTJEwC qJ+4bFPTnTgtFVcxARlGjteKOV6CVmPdbPLhs4hHvLCUZtHxURHnzU73nXfbT+7O zO0lcPqtC1tGdxl3hOg38Sv/eb152pspa2o1rRzelDwGNdmRuvYSkg2Ufbu/g/w3 XxulGDDaSkZ4qtii9sEUigy+jmuvC3+h3U0TJ64RuxY9/VSinnNLGl+DNrjv+E29 UyqcDLvCq+fn3WJ6bhR7kBJen9DksZhhGnqG20j46B1CZwqpGEyOraSk7aSChzsB PlOohbAtgM+zfGJDw00kL/K1V2f1x8ZKoobM5HKj7Spx6n1QzTgRqqRAPjXTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUivTsKWIW9lKJ/DHt6jopCJvQN0gwHwYDVR0j BBgwFoAU6uovLwf/80NAd3s7vX0dGG9OwcswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OGI0MjQyMC01NmQwLTQ1MWEtYTI5ZC01ZjlkNjIzMGUyMjcvMC9FQUVBMkYyRjA3 RkZGMzQzNDA3NzdCM0JCRDdEMUQxODZGNEVDMUNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUFFQTJGMkYwN0ZGRjM0MzQwNzc3QjNCQkQ3RDFEMTg2RjRF QzFDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMThiNDI0MjAtNTZkMC00NTFhLWEy OWQtNWY5ZDYyMzBlMjI3LzAvRUFFQTJGMkYwN0ZGRjM0MzQwNzc3QjNCQkQ3RDFE MTg2RjRFQzFDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADru+OHiQx7Nt53D+sfgtgyLbd/vDA5ZDc/I tBtY0uq6pSYA96dDhB0T2CyHM4NobE7VmshYaSxkQxsaQJ2SGznKMbx5LDcIS5Li qldPU8oqFRSDWeRmjKz6cPtPFFLMqHndVYt/31GSqmxJ3EopjhMysWFhmMteNNRr jiqRnHLNfDRr0RKu5ywrb5uX1KjcWGdaLEgNyGjsJHFPs2QV9MkT1ZH+x7Qja4YS KhHYYuhTPppDnH/wvTnzJ34o5WK7tfrK6CblPR8GHpzpBWAnanidIxVRp3OBmuZw xuD1Uj10VT3S563roVcqjBl4C1+bbBXFMNFPW2IjMqjGs+xsqeA= -----END CERTIFICATE-----Generated at Thu Mar 26 15:47:08 2026 by rpki-client