$ rpki-client -vvf repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft File: E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft (raw, json) Hash identifier: TgnVxHnUyA/6Uo8SqrrVLuJaiS60PiCoBQ3qtknURvM= Subject key identifier: 0A:54:36:0C:B8:BA:1A:1F:84:19:42:8A:0E:43:59:3F:A6:D9:7F:3D Authority key identifier: E2:CD:AA:22:3B:FB:6F:2B:13:97:3E:B8:03:53:ED:21:1C:9F:21:C9 Certificate issuer: /CN=E2CDAA223BFB6F2B13973EB80353ED211C9F21C9 Certificate serial: 39EF0EB7A0C396FA61C7579C1B2A9A444CD418FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft Manifest number: 0241 Signing time: Tue 24 Mar 2026 03:01:41 +0000 Manifest this update: Tue 24 Mar 2026 02:56:41 +0000 Manifest next update: Fri 27 Mar 2026 09:18:41 +0000 Files and hashes: 1: E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.crl (hash: MGCqIM5PCN8nlq+illoG8AlbAqD9QtOJ8nnZxGogK+E=) 2: 3130332e3138392e3234392e302f32342d3234203d3e20313439383838.roa (hash: yz9DrhiZMU3eHWMSo1Oy5Cw6+/2sDeBXKj2G3NoDN0k=) 3: 3130332e3138392e3234382e302f32342d3234203d3e20313439383838.roa (hash: r4fgqA47qTlb3GhP6gzYmrPLdVv6QpS/f5hXYEC/f/k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.crl rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 09:18:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:ef:0e:b7:a0:c3:96:fa:61:c7:57:9c:1b:2a:9a:44:4c:d4:18:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2CDAA223BFB6F2B13973EB80353ED211C9F21C9 Validity Not Before: Mar 24 02:56:41 2026 GMT Not After : Mar 27 09:18:41 2026 GMT Subject: CN=0A54360CB8BA1A1F8419428A0E43593FA6D97F3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fa:3c:2d:ed:e3:98:54:ad:1f:9b:a2:a7:75: c3:d0:aa:a0:24:69:44:8f:8f:f6:85:07:0a:c9:17: 33:93:66:c9:a1:0a:f7:28:57:32:45:b8:3a:d9:89: 64:b1:4d:b0:6b:25:44:6a:a6:79:0e:5f:b9:75:bf: b5:89:89:6f:f8:9b:e6:b9:10:14:1b:20:5e:c5:93: ce:40:b7:07:6e:e4:57:9b:16:b5:6f:a9:c6:a3:52: 02:cb:5b:95:d3:65:cd:3d:c9:a6:41:68:0a:3b:c4: 98:4b:21:56:b5:a0:b3:09:7f:78:85:bd:5f:9e:f5: 35:c0:33:78:a8:6c:14:35:48:7c:12:10:15:a0:e6: 60:1f:dd:25:66:6e:06:44:32:5c:eb:ad:08:37:39: ed:6e:05:a8:0d:b6:0a:25:92:c4:e7:b2:80:3f:95: fa:29:11:85:fd:6d:5e:3f:3d:23:ed:ff:c7:d9:be: c4:ca:e1:8a:9a:52:74:9d:8b:9a:d1:30:1f:2d:c8: b5:3c:bf:d2:ea:e8:58:75:63:bc:22:1e:9e:2f:df: cc:df:2d:9a:d5:ae:53:61:1e:f0:df:d1:ad:2e:d3: e1:d3:f9:a3:01:3b:ea:9e:aa:22:c0:e2:7e:05:23: 3f:dd:f1:a8:32:99:43:b3:0c:88:c4:05:17:f8:df: 14:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:54:36:0C:B8:BA:1A:1F:84:19:42:8A:0E:43:59:3F:A6:D9:7F:3D X509v3 Authority Key Identifier: keyid:E2:CD:AA:22:3B:FB:6F:2B:13:97:3E:B8:03:53:ED:21:1C:9F:21:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:4a:7e:14:cd:d5:84:f4:4b:6b:c3:13:38:c1:86:85:80:a9: 3a:7b:57:a6:46:b5:72:e6:94:71:14:e9:02:ef:d1:72:20:90: 26:4c:a2:48:d0:c9:8b:13:78:0c:21:70:bf:f4:ae:81:1e:92: a7:7a:9a:91:c8:a7:4f:89:3a:95:b4:c3:e6:89:a6:1c:7b:ed: 07:91:40:ce:00:70:f3:f8:3a:c4:94:39:4a:09:6e:18:0d:79: a7:2d:70:17:a0:1b:b7:b4:43:9b:0e:a4:d4:04:c3:cd:78:8b: 3d:34:39:14:aa:6e:64:2e:2a:5b:87:e0:95:ac:7e:84:41:98: 17:20:b6:c6:98:a9:28:81:e5:fd:db:83:b4:0d:15:1a:a4:9d: a1:ab:23:82:b3:9d:9c:14:2a:67:6d:9f:5c:f6:87:f0:7a:96: 12:ab:f4:f2:a3:f0:52:53:6b:d5:6c:30:ce:23:23:b3:03:73: 8a:c4:1d:fe:4d:95:a9:b2:8d:2e:4d:48:d0:b2:43:bd:cc:4d: f6:c8:4d:f3:ba:c7:6c:bd:fa:ff:34:35:7d:3f:56:bf:90:e4: 04:05:5f:6f:55:33:5d:72:42:29:69:f7:5a:23:8c:94:6c:2e: f4:4f:c5:ac:8a:92:95:86:cd:29:e5:c7:1e:e8:8c:03:ef:59: 58:57:23:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOe8Ot6DDlvphx1ecGyqaREzUGP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTJDREFBMjIzQkZCNkYyQjEzOTczRUI4MDM1M0VEMjEx QzlGMjFDOTAeFw0yNjAzMjQwMjU2NDFaFw0yNjAzMjcwOTE4NDFaMDMxMTAvBgNV BAMTKDBBNTQzNjBDQjhCQTFBMUY4NDE5NDI4QTBFNDM1OTNGQTZEOTdGM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu+jwt7eOYVK0fm6KndcPQqqAk aUSPj/aFBwrJFzOTZsmhCvcoVzJFuDrZiWSxTbBrJURqpnkOX7l1v7WJiW/4m+a5 EBQbIF7Fk85Atwdu5FebFrVvqcajUgLLW5XTZc09yaZBaAo7xJhLIVa1oLMJf3iF vV+e9TXAM3iobBQ1SHwSEBWg5mAf3SVmbgZEMlzrrQg3Oe1uBagNtgolksTnsoA/ lfopEYX9bV4/PSPt/8fZvsTK4YqaUnSdi5rRMB8tyLU8v9Lq6Fh1Y7wiHp4v38zf LZrVrlNhHvDf0a0u0+HT+aMBO+qeqiLA4n4FIz/d8agymUOzDIjEBRf43xTzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUClQ2DLi6Gh+EGUKKDkNZP6bZfz0wHwYDVR0j BBgwFoAU4s2qIjv7bysTlz64A1PtIRyfIckwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGY0MTY0ZS03NGU1LTQwZDYtOWEzMC1iMzcyYTRkMmE0NTQvMC9FMkNEQUEyMjNC RkI2RjJCMTM5NzNFQjgwMzUzRUQyMTFDOUYyMUM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTJDREFBMjIzQkZCNkYyQjEzOTczRUI4MDM1M0VEMjExQzlG MjFDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRmNDE2NGUtNzRlNS00MGQ2LTlh MzAtYjM3MmE0ZDJhNDU0LzAvRTJDREFBMjIzQkZCNkYyQjEzOTczRUI4MDM1M0VE MjExQzlGMjFDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABVKfhTN1YT0S2vDEzjBhoWAqTp7V6ZGtXLm lHEU6QLv0XIgkCZMokjQyYsTeAwhcL/0roEekqd6mpHIp0+JOpW0w+aJphx77QeR QM4AcPP4OsSUOUoJbhgNeactcBegG7e0Q5sOpNQEw814iz00ORSqbmQuKluH4JWs foRBmBcgtsaYqSiB5f3bg7QNFRqknaGrI4KznZwUKmdtn1z2h/B6lhKr9PKj8FJT a9VsMM4jI7MDc4rEHf5NlamyjS5NSNCyQ73MTfbITfO6x2y9+v80NX0/Vr+Q5AQF X29VM11yQilp91ojjJRsLvRPxayKkpWGzSnlxx7ojAPvWVhXI54= -----END CERTIFICATE-----Generated at Thu Mar 26 05:39:04 2026 by rpki-client