$ rpki-client -vvf repo-rpki.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.mft File: E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.mft (raw, json) Hash identifier: icyAaYACTWYLf1HuFAb68u0Hmm44o/pcZzkldlRcc64= Subject key identifier: 78:71:AA:D6:CC:B8:69:AB:29:77:81:AC:AE:3A:89:E5:A5:59:51:CB Authority key identifier: E1:B0:3F:9E:EA:71:C0:0F:69:D8:38:BC:1D:AA:D1:13:A8:BD:F6:DF Certificate issuer: /CN=E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF Certificate serial: 3C5DEB2BEDA4754DF9654A4D43BD7F9BB3DA5E1F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.mft Manifest number: 025B Signing time: Wed 25 Mar 2026 18:02:25 +0000 Manifest this update: Wed 25 Mar 2026 17:57:25 +0000 Manifest next update: Sun 29 Mar 2026 02:07:25 +0000 Files and hashes: 1: 3130332e3135322e39342e302f32342d3234203d3e20313432333039.roa (hash: N+b2Iu4VbSgstaUesFmQsFf6IU12aajq3e/wLuOvgLQ=) 2: 3130332e3135322e39342e302f32342d3234203d3e203435333132.roa (hash: ++rnMg/cn38VB7ywZ7HTwbB2FOMWD3Zhtth2U6OPVoI=) 3: E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.crl (hash: 71ETTNig0AX6rjCVD9g62fILWeBAJYhFlS2FrgEv5tE=) 4: 3130332e3135322e39352e302f32342d3234203d3e20313432333039.roa (hash: AMV0DaoVzEpr6QFAmB1hobQPZBoR2MCCNocuQFbfT54=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.crl rsync://repo-rpki.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 02:07:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:5d:eb:2b:ed:a4:75:4d:f9:65:4a:4d:43:bd:7f:9b:b3:da:5e:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF Validity Not Before: Mar 25 17:57:25 2026 GMT Not After : Mar 29 02:07:25 2026 GMT Subject: CN=7871AAD6CCB869AB297781ACAE3A89E5A55951CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2e:6a:9f:ab:a5:80:25:24:99:28:d7:8c:9a: f1:99:a0:6a:93:72:30:3f:51:4b:59:bf:41:fc:0e: 84:c5:a7:5f:b9:14:d2:cc:79:56:26:b6:20:53:10: fc:65:44:70:61:10:5d:e5:97:7e:81:cb:f5:e8:4f: 47:ac:8b:fe:09:35:a3:0c:b7:e2:5a:0d:e8:53:ef: 4b:53:8b:34:2a:85:ba:dc:e6:0b:04:83:1a:98:3f: f4:0b:c4:1b:18:45:66:83:48:0c:a0:e6:c1:27:32: e3:d6:fb:6c:1d:11:53:e5:f6:ab:52:3e:83:df:40: 65:2e:12:bd:41:37:24:2e:ae:01:57:88:71:7f:22: 1a:a9:ad:01:8e:8d:f5:f7:f8:45:6e:09:b8:0c:28: d5:cb:c5:0a:cd:f9:f3:d6:9d:f7:6b:d9:c1:af:db: 94:10:9e:be:92:50:57:9b:dd:89:b3:44:7e:bc:30: 65:5f:c7:a6:78:05:c8:0b:e3:51:96:af:cd:cb:ec: 60:02:ed:8b:45:da:2e:fc:a5:f2:01:84:db:02:bc: 37:f7:37:51:a9:df:3d:a4:58:1a:a3:f6:77:8a:7c: ef:73:c0:fc:44:bf:8d:e2:e7:ad:bc:3b:89:83:e0: da:42:4f:8f:a9:6d:8b:54:2b:ae:45:94:08:63:19: 30:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:71:AA:D6:CC:B8:69:AB:29:77:81:AC:AE:3A:89:E5:A5:59:51:CB X509v3 Authority Key Identifier: keyid:E1:B0:3F:9E:EA:71:C0:0F:69:D8:38:BC:1D:AA:D1:13:A8:BD:F6:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:ac:d5:5b:7b:bc:98:6b:1e:9d:d1:63:13:33:ed:84:b9:00: 7d:81:5e:0a:42:80:e2:d1:38:ae:92:8b:88:ea:d0:d0:77:94: e5:a0:0b:b4:18:4c:b1:c3:f4:be:be:6d:e6:4c:82:cd:e0:d5: 2f:60:db:ac:2d:c9:d5:ea:96:b2:05:e2:9b:69:61:ea:9c:d5: 94:ee:1d:e0:cc:d0:59:59:aa:86:46:4b:9c:65:44:8b:67:63: c3:19:1e:6f:95:57:d3:f8:65:67:6f:e9:f4:1b:a2:ff:44:ae: 0c:66:16:6f:57:4d:81:60:9d:12:2c:da:12:fb:b2:82:6f:70: 91:2a:39:bf:93:0c:5b:44:87:24:48:e8:42:50:3b:f5:d5:14: 24:71:40:a9:ea:21:95:78:10:a9:0c:70:20:b7:c9:e3:b3:9c: a2:10:67:28:24:c1:f4:0a:62:63:e7:83:2a:45:72:08:de:3b: 39:c7:bf:55:3c:7d:98:97:43:6d:b5:24:57:4e:b4:d9:2c:c5: c9:b7:26:e2:fe:12:f4:2a:1f:5a:37:f4:2a:99:fb:b3:c5:e7: 78:32:f8:98:40:4a:ab:b7:7a:e0:a3:7d:47:d8:f1:91:47:23: 86:35:f6:a0:c8:56:de:5b:98:b1:9a:4e:b1:b4:b6:4f:77:c7: 50:17:5c:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPF3rK+2kdU35ZUpNQ71/m7PaXh8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFCMDNGOUVFQTcxQzAwRjY5RDgzOEJDMURBQUQxMTNB OEJERjZERjAeFw0yNjAzMjUxNzU3MjVaFw0yNjAzMjkwMjA3MjVaMDMxMTAvBgNV BAMTKDc4NzFBQUQ2Q0NCODY5QUIyOTc3ODFBQ0FFM0E4OUU1QTU1OTUxQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClLmqfq6WAJSSZKNeMmvGZoGqT cjA/UUtZv0H8DoTFp1+5FNLMeVYmtiBTEPxlRHBhEF3ll36By/XoT0esi/4JNaMM t+JaDehT70tTizQqhbrc5gsEgxqYP/QLxBsYRWaDSAyg5sEnMuPW+2wdEVPl9qtS PoPfQGUuEr1BNyQurgFXiHF/IhqprQGOjfX3+EVuCbgMKNXLxQrN+fPWnfdr2cGv 25QQnr6SUFeb3YmzRH68MGVfx6Z4BcgL41GWr83L7GAC7YtF2i78pfIBhNsCvDf3 N1Gp3z2kWBqj9neKfO9zwPxEv43i5628O4mD4NpCT4+pbYtUK65FlAhjGTD/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeHGq1sy4aaspd4GsrjqJ5aVZUcswHwYDVR0j BBgwFoAU4bA/nupxwA9p2Di8HarRE6i99t8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjNkMTRjYi1jY2MyLTQ2ZDItOGUzMS0xNmY1YmVjMGFjZDgvMC9FMUIwM0Y5RUVB NzFDMDBGNjlEODM4QkMxREFBRDExM0E4QkRGNkRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTFCMDNGOUVFQTcxQzAwRjY5RDgzOEJDMURBQUQxMTNBOEJE RjZERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWIzZDE0Y2ItY2NjMi00NmQyLThl MzEtMTZmNWJlYzBhY2Q4LzAvRTFCMDNGOUVFQTcxQzAwRjY5RDgzOEJDMURBQUQx MTNBOEJERjZERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABqs1Vt7vJhrHp3RYxMz7YS5AH2BXgpCgOLR OK6Si4jq0NB3lOWgC7QYTLHD9L6+beZMgs3g1S9g26wtydXqlrIF4ptpYeqc1ZTu HeDM0FlZqoZGS5xlRItnY8MZHm+VV9P4ZWdv6fQbov9ErgxmFm9XTYFgnRIs2hL7 soJvcJEqOb+TDFtEhyRI6EJQO/XVFCRxQKnqIZV4EKkMcCC3yeOznKIQZygkwfQK YmPngypFcgjeOznHv1U8fZiXQ221JFdOtNksxcm3JuL+EvQqH1o39CqZ+7PF53gy +JhASqu3euCjfUfY8ZFHI4Y19qDIVt5bmLGaTrG0tk93x1AXXLU= -----END CERTIFICATE-----Generated at Thu Mar 26 09:53:18 2026 by rpki-client