$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.mft File: E3FB5E3343EC63D705FF51B645113F74C7965236.mft (raw, json) Hash identifier: ulsrCsvFKYAeV2PhWKR5Wz0uVn1SQI3jWoWgtQy2mt8= Subject key identifier: A5:63:14:89:26:D8:C0:6C:BB:A2:0D:64:7D:A0:84:E6:16:4A:E3:D9 Authority key identifier: E3:FB:5E:33:43:EC:63:D7:05:FF:51:B6:45:11:3F:74:C7:96:52:36 Certificate issuer: /CN=E3FB5E3343EC63D705FF51B645113F74C7965236 Certificate serial: 2DE59BAE1E1B1F83F3F361D5BE1850D7E9CD6B7C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E3FB5E3343EC63D705FF51B645113F74C7965236.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.mft Manifest number: 010C Signing time: Wed 25 Mar 2026 13:01:35 +0000 Manifest this update: Wed 25 Mar 2026 12:56:35 +0000 Manifest next update: Sat 28 Mar 2026 13:26:35 +0000 Files and hashes: 1: 3136302e32352e3232322e302f32332d3233203d3e20313533303837.roa (hash: KzwY0iiHcJ5O0UVPUHPKtH6yEpVlgjbtPe1xq08+n3c=) 2: 3136302e32352e3232322e302f32342d3234203d3e20313533303837.roa (hash: pcP51KVAYXagtYkUaOdwTyhCZXZM5gMNbSSkIN9xwSo=) 3: E3FB5E3343EC63D705FF51B645113F74C7965236.crl (hash: 2qLC3ykrr+gIN9m9bac3KguGmUENsZtHoLSKL2PopMw=) 4: 3136302e32352e3232332e302f32342d3234203d3e20313533303837.roa (hash: 4O9lmpHneuudT9xjvw5LwULxiETAfGvFoNCP2XYgoOQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.crl rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E3FB5E3343EC63D705FF51B645113F74C7965236.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 13:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:e5:9b:ae:1e:1b:1f:83:f3:f3:61:d5:be:18:50:d7:e9:cd:6b:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3FB5E3343EC63D705FF51B645113F74C7965236 Validity Not Before: Mar 25 12:56:35 2026 GMT Not After : Mar 28 13:26:35 2026 GMT Subject: CN=A563148926D8C06CBBA20D647DA084E6164AE3D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ad:fc:37:13:19:7d:77:d1:10:21:4f:dd:3d: a7:ac:6c:cd:15:c8:7a:92:68:7f:f7:57:b7:d0:32: 47:e2:da:65:42:5c:b6:28:69:e4:c8:7b:dc:48:b9: 7f:03:1f:5c:82:07:81:fe:e8:25:d9:74:34:a2:60: ec:5c:0f:ed:5d:68:00:81:9c:8c:eb:31:4a:7f:0b: 48:f1:9f:72:c8:a5:ca:d1:05:30:2a:e9:f7:54:ac: 91:7b:fe:92:87:2e:2f:c1:3a:92:02:73:13:4b:e5: 12:ac:b2:27:2f:80:42:50:c0:64:42:d3:f4:96:54: 75:a3:28:17:59:f5:ea:ab:b9:5c:9d:ee:ef:e3:14: 86:9e:2b:6b:83:61:de:e0:0e:bb:a1:c5:94:a1:c4: e7:71:55:1e:9f:86:70:fa:b2:0d:02:2b:55:a1:3e: a9:64:15:04:fc:cf:74:af:4b:17:f9:24:13:ae:25: 89:17:f8:f1:74:5f:78:19:40:ca:67:e2:21:f8:fe: 89:24:45:cc:41:cd:c6:de:d7:34:dc:b4:ea:f2:85: 07:d5:4a:e0:3b:4b:74:d9:53:d8:2e:de:94:ad:94: 99:09:c8:88:71:f4:c5:9f:95:8b:42:f1:32:2d:fb: 34:80:2d:b5:61:d3:53:91:11:ab:35:1b:2e:ed:d7: 9b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:63:14:89:26:D8:C0:6C:BB:A2:0D:64:7D:A0:84:E6:16:4A:E3:D9 X509v3 Authority Key Identifier: keyid:E3:FB:5E:33:43:EC:63:D7:05:FF:51:B6:45:11:3F:74:C7:96:52:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E3FB5E3343EC63D705FF51B645113F74C7965236.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:79:79:6b:d7:e9:11:32:8b:af:b8:1e:7a:52:52:ef:0c:f0: b6:10:15:1f:2e:b9:8b:d3:57:aa:5b:29:62:1f:7d:4c:26:18: f4:13:e7:53:7c:bd:ab:12:97:3d:d4:aa:ff:f3:76:26:09:a6: 4f:3d:fd:f7:b4:65:6a:be:e3:43:f5:8b:49:8b:13:54:0e:59: d7:28:4e:8e:c2:62:e8:fa:9c:ff:05:93:a5:e2:f6:2a:1a:c7: a4:01:20:64:28:47:14:07:e4:a9:e0:3d:3b:09:fd:2f:f6:59: a4:cd:93:75:ca:e6:dd:9f:4f:02:29:5b:82:a9:7f:2f:17:b7: b8:42:3b:92:b6:42:2e:23:5e:32:36:a4:9e:ca:01:e7:97:cd: e7:7f:62:72:93:bb:51:b7:0a:d8:2f:4d:a9:8d:e2:08:18:85: 4b:f4:b0:09:44:1b:20:54:b9:2b:68:d2:91:9a:6d:96:82:04: ee:16:0c:cb:6f:0a:c2:6b:4a:9a:9c:35:f1:0c:5b:f6:83:22: 7e:7d:cc:a9:2a:38:95:94:2a:6e:be:92:f2:35:60:42:1e:de: 4d:ec:f6:d4:16:9a:be:c1:4f:e1:38:9d:e4:bc:92:61:8d:cd: a5:8a:96:92:22:a1:77:b0:e3:16:e4:b8:59:6a:f3:92:37:6b: 76:24:d4:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULeWbrh4bH4Pz82HVvhhQ1+nNa3wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTNGQjVFMzM0M0VDNjNENzA1RkY1MUI2NDUxMTNGNzRD Nzk2NTIzNjAeFw0yNjAzMjUxMjU2MzVaFw0yNjAzMjgxMzI2MzVaMDMxMTAvBgNV BAMTKEE1NjMxNDg5MjZEOEMwNkNCQkEyMEQ2NDdEQTA4NEU2MTY0QUUzRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhrfw3Exl9d9EQIU/dPaesbM0V yHqSaH/3V7fQMkfi2mVCXLYoaeTIe9xIuX8DH1yCB4H+6CXZdDSiYOxcD+1daACB nIzrMUp/C0jxn3LIpcrRBTAq6fdUrJF7/pKHLi/BOpICcxNL5RKssicvgEJQwGRC 0/SWVHWjKBdZ9eqruVyd7u/jFIaeK2uDYd7gDruhxZShxOdxVR6fhnD6sg0CK1Wh PqlkFQT8z3SvSxf5JBOuJYkX+PF0X3gZQMpn4iH4/okkRcxBzcbe1zTctOryhQfV SuA7S3TZU9gu3pStlJkJyIhx9MWflYtC8TIt+zSALbVh01OREas1Gy7t15sLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpWMUiSbYwGy7og1kfaCE5hZK49kwHwYDVR0j BBgwFoAU4/teM0PsY9cF/1G2RRE/dMeWUjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGVkNTgxMS1iZTUwLTRjYWEtOWY5Ni02M2QzNzIwMzExZGUvMC9FM0ZCNUUzMzQz RUM2M0Q3MDVGRjUxQjY0NTExM0Y3NEM3OTY1MjM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRTNGQjVFMzM0M0VDNjNENzA1RkY1MUI2NDUxMTNGNzRDNzk2 NTIzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRlZDU4MTEtYmU1MC00Y2FhLTlm OTYtNjNkMzcyMDMxMWRlLzAvRTNGQjVFMzM0M0VDNjNENzA1RkY1MUI2NDUxMTNG NzRDNzk2NTIzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADV5eWvX6REyi6+4HnpSUu8M8LYQFR8uuYvT V6pbKWIffUwmGPQT51N8vasSlz3Uqv/zdiYJpk89/fe0ZWq+40P1i0mLE1QOWdco To7CYuj6nP8Fk6Xi9ioax6QBIGQoRxQH5KngPTsJ/S/2WaTNk3XK5t2fTwIpW4Kp fy8Xt7hCO5K2Qi4jXjI2pJ7KAeeXzed/YnKTu1G3CtgvTamN4ggYhUv0sAlEGyBU uSto0pGabZaCBO4WDMtvCsJrSpqcNfEMW/aDIn59zKkqOJWUKm6+kvI1YEIe3k3s 9tQWmr7BT+E4neS8kmGNzaWKlpIioXew4xbkuFlq85I3a3Yk1C8= -----END CERTIFICATE-----Generated at Thu Mar 26 19:43:50 2026 by rpki-client