$ rpki-client -vvf repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft File: E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft (raw, json) Hash identifier: 1rmKuNjwciDSonGZeNHCr7/HJNQsdP+e3WJIwcsimSA= Subject key identifier: 0B:6D:22:93:7B:DE:4E:8D:17:72:03:AD:97:76:11:D8:5C:07:18:66 Authority key identifier: E2:AE:EC:7D:F8:97:A9:D6:E4:F0:D1:D1:C4:31:2A:03:FA:F5:75:6F Certificate issuer: /CN=E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F Certificate serial: 13F3C48B2C8142D3CB98816913F7F92E229A8E1E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft Manifest number: 01FD Signing time: Wed 25 Mar 2026 10:01:00 +0000 Manifest this update: Wed 25 Mar 2026 09:56:00 +0000 Manifest next update: Sat 28 Mar 2026 12:22:00 +0000 Files and hashes: 1: E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.crl (hash: Yx+JSK0KPgcbgkwLDJWGpOjTcndBVI1JpgscgR2OiRc=) 2: 3130332e3137322e3234322e302f32342d3234203d3e20313437303836.roa (hash: 3lqgIQzyR6/7cSCmR5iJslHIsmApf6ImpEqOGdjCApk=) 3: 3130332e3137322e3234332e302f32342d3234203d3e20313437303836.roa (hash: PNsGrsunNYvLcLEfdpgZYxKAz1Ra4qJ7YYKHTqQZiJg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.crl rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 12:22:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:f3:c4:8b:2c:81:42:d3:cb:98:81:69:13:f7:f9:2e:22:9a:8e:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F Validity Not Before: Mar 25 09:56:00 2026 GMT Not After : Mar 28 12:22:00 2026 GMT Subject: CN=0B6D22937BDE4E8D177203AD977611D85C071866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:66:0e:df:94:84:69:26:74:68:97:61:b9:d2: 24:89:85:d7:a0:32:72:cb:b1:32:cb:95:d7:53:e4: 01:9e:41:7b:4c:2a:c9:7b:78:e8:17:fa:61:cb:86: 49:60:c8:34:25:3f:6f:25:71:7c:99:48:48:c3:53: 0d:0c:d5:15:46:34:1e:76:6f:bc:8f:44:4e:78:96: 2d:27:bb:33:50:e4:7a:1c:d2:bf:b8:81:e3:5d:0b: fe:f2:94:22:be:15:79:09:cd:9a:e9:b1:46:aa:7a: d2:1f:e2:64:e7:1e:80:f3:7e:5c:c8:ef:6e:1c:b5: 24:5a:47:8c:94:ac:05:c9:e6:bc:12:3d:a8:48:92: 05:5f:68:dd:80:80:0c:eb:96:df:57:eb:41:f4:a4: 00:c2:b7:20:96:9c:b6:9f:00:f8:f9:27:74:df:ca: e4:f1:bd:5d:a6:e1:6f:d5:b8:bf:9f:a0:25:8c:d8: 74:0c:aa:37:f6:cf:db:9c:2d:6e:57:75:eb:30:47: 79:39:1d:20:19:96:2c:65:03:aa:85:b9:08:7c:45: 81:5e:f5:52:9f:6b:e3:6c:35:92:93:bf:79:6b:68: ce:b2:50:78:36:57:7a:cc:b4:cf:2d:a7:28:22:5f: f3:dd:b7:4b:05:5d:3a:6a:18:78:5c:fb:58:6b:ed: 7f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:6D:22:93:7B:DE:4E:8D:17:72:03:AD:97:76:11:D8:5C:07:18:66 X509v3 Authority Key Identifier: keyid:E2:AE:EC:7D:F8:97:A9:D6:E4:F0:D1:D1:C4:31:2A:03:FA:F5:75:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:37:93:61:e4:d7:ae:24:35:a8:9f:b5:83:97:91:af:60:48: e8:ac:c9:6a:63:cf:7a:e8:0c:9f:b0:43:b6:55:b5:50:3c:28: 53:f1:84:47:9c:ee:01:e4:df:bf:82:89:24:71:75:9d:6b:9b: 39:b5:71:c2:fa:ac:70:a3:b8:f2:20:c8:64:a0:bb:57:d6:82: 05:70:6e:2f:6d:96:05:4a:c0:2e:fb:d0:f0:2d:bc:bc:fd:8d: 94:90:32:21:d6:a7:04:28:4a:d8:0a:9f:6c:f0:c8:9a:12:20: 1c:c3:97:a2:7f:92:70:df:4b:a4:c4:ad:4b:1d:0e:33:34:5c: 2d:6c:31:e4:cc:1d:6f:3f:dd:d7:75:37:ce:7a:14:18:df:00: 2d:aa:7a:dd:d1:e3:d2:61:a8:bb:a9:d7:94:d3:64:89:a3:49: 83:74:b5:4b:c6:64:33:e4:d4:31:41:d8:e8:1a:45:9c:a5:cc: 56:53:58:ea:2b:41:e2:58:37:5f:4d:d8:1a:b1:9c:8a:6d:e6: 77:c7:52:e4:a8:0f:6a:b8:ef:0b:19:84:c2:b4:05:9a:97:00: 82:d6:10:0f:d1:93:df:ea:97:8a:72:52:ed:2f:d2:7b:0e:10: 04:4c:7b:fd:fc:72:88:7d:04:f9:a0:fb:5d:71:b4:9c:f4:0b: 8d:09:b2:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE/PEiyyBQtPLmIFpE/f5LiKajh4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTJBRUVDN0RGODk3QTlENkU0RjBEMUQxQzQzMTJBMDNG QUY1NzU2RjAeFw0yNjAzMjUwOTU2MDBaFw0yNjAzMjgxMjIyMDBaMDMxMTAvBgNV BAMTKDBCNkQyMjkzN0JERTRFOEQxNzcyMDNBRDk3NzYxMUQ4NUMwNzE4NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Zg7flIRpJnRol2G50iSJhdeg MnLLsTLLlddT5AGeQXtMKsl7eOgX+mHLhklgyDQlP28lcXyZSEjDUw0M1RVGNB52 b7yPRE54li0nuzNQ5Hoc0r+4geNdC/7ylCK+FXkJzZrpsUaqetIf4mTnHoDzflzI 724ctSRaR4yUrAXJ5rwSPahIkgVfaN2AgAzrlt9X60H0pADCtyCWnLafAPj5J3Tf yuTxvV2m4W/VuL+foCWM2HQMqjf2z9ucLW5XdeswR3k5HSAZlixlA6qFuQh8RYFe 9VKfa+NsNZKTv3lraM6yUHg2V3rMtM8tpygiX/Pdt0sFXTpqGHhc+1hr7X+1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC20ik3veTo0XcgOtl3YR2FwHGGYwHwYDVR0j BBgwFoAU4q7sffiXqdbk8NHRxDEqA/r1dW8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjZkOGY5Ny1jODA2LTQ3OTktODVlMC04Y2NmMThkYmJiMzEvMC9FMkFFRUM3REY4 OTdBOUQ2RTRGMEQxRDFDNDMxMkEwM0ZBRjU3NTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTJBRUVDN0RGODk3QTlENkU0RjBEMUQxQzQzMTJBMDNGQUY1 NzU2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI2ZDhmOTctYzgwNi00Nzk5LTg1 ZTAtOGNjZjE4ZGJiYjMxLzAvRTJBRUVDN0RGODk3QTlENkU0RjBEMUQxQzQzMTJB MDNGQUY1NzU2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACU3k2Hk164kNaiftYOXka9gSOisyWpjz3ro DJ+wQ7ZVtVA8KFPxhEec7gHk37+CiSRxdZ1rmzm1ccL6rHCjuPIgyGSgu1fWggVw bi9tlgVKwC770PAtvLz9jZSQMiHWpwQoStgKn2zwyJoSIBzDl6J/knDfS6TErUsd DjM0XC1sMeTMHW8/3dd1N856FBjfAC2qet3R49JhqLup15TTZImjSYN0tUvGZDPk 1DFB2OgaRZylzFZTWOorQeJYN19N2BqxnIpt5nfHUuSoD2q47wsZhMK0BZqXAILW EA/Rk9/ql4pyUu0v0nsOEARMe/38coh9BPmg+11xtJz0C40JskI= -----END CERTIFICATE-----Generated at Thu Mar 26 08:56:33 2026 by rpki-client