$ rpki-client -vvf repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft File: E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft (raw, json) Hash identifier: VzTCY+bPSutJuVmvuG5KiecNVXfVuXSVs6ruGBByT/I= Subject key identifier: 0A:31:9F:31:7F:12:17:FA:CF:95:DA:01:E0:A2:BA:18:E8:57:44:D5 Authority key identifier: E0:9D:0E:1D:26:3D:BD:91:4D:0C:4E:0C:AA:7E:5E:50:D0:22:46:F1 Certificate issuer: /CN=E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1 Certificate serial: 3B6C811CAB6DEF4BEC54914C3AA6EB0D928C451C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft Manifest number: 02E1 Signing time: Wed 25 Mar 2026 15:42:32 +0000 Manifest this update: Wed 25 Mar 2026 15:37:32 +0000 Manifest next update: Sat 28 Mar 2026 23:53:32 +0000 Files and hashes: 1: 3130332e3137382e3137312e302f32342d3234203d3e20313339393532.roa (hash: qWtnu+D2OJjgUIAZhBWqF4N8kzQJfxmKrFVqp2H/d+E=) 2: 3130332e3137382e3137302e302f32342d3234203d3e20313339393532.roa (hash: h1Tx5XQe9PTjaWSuT2kvzlzqF3kndx9Hsu7Upo8uOTc=) 3: E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.crl (hash: NdtaaPZIzNiMknk4fW6JGpGJ1D6w5BSDH3GUyo3q/kk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.crl rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 23:53:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:6c:81:1c:ab:6d:ef:4b:ec:54:91:4c:3a:a6:eb:0d:92:8c:45:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1 Validity Not Before: Mar 25 15:37:32 2026 GMT Not After : Mar 28 23:53:32 2026 GMT Subject: CN=0A319F317F1217FACF95DA01E0A2BA18E85744D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9c:f2:ee:ef:0d:84:13:fb:f5:e9:b5:d6:ff: 62:0a:d4:99:4b:c8:1a:49:2c:e9:52:87:f6:87:9e: dd:10:dd:f5:ea:73:ee:7f:38:76:56:66:dd:fc:d9: 44:5a:44:a0:ad:07:b4:a6:93:38:6c:91:61:6a:bd: 5c:ec:35:fc:f8:2e:09:8e:61:63:96:a8:89:9a:cd: c7:94:c0:5a:4a:e3:3e:88:da:b5:d7:a7:20:8e:2b: 86:ba:a0:f5:77:d4:bc:18:cc:e0:5c:de:a1:e7:7f: d5:40:70:67:dd:15:e1:6c:00:1f:d5:ba:e7:ad:19: 59:6d:9e:d5:fc:0e:02:35:98:61:32:68:54:47:8e: 8d:ee:22:40:56:2e:24:15:1c:f2:2f:a3:54:61:ab: f8:a6:2d:cc:83:5b:95:98:73:b6:a6:d7:a7:7c:c1: 71:a0:7b:bf:c2:6e:db:c7:1c:50:72:26:b7:13:24: 8a:2b:05:e8:2f:40:bd:ec:8d:da:c1:85:90:da:a3: 27:f0:e8:6f:c6:66:ca:79:63:dd:a8:74:dc:52:24: 77:c0:cf:ed:ad:2a:b1:9e:6d:0a:2b:51:ba:ea:c1: 79:55:4b:9b:f3:18:bd:50:8b:84:61:8f:01:04:6a: 8c:28:af:13:f4:06:1f:49:29:ad:37:a6:59:88:5c: 79:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:31:9F:31:7F:12:17:FA:CF:95:DA:01:E0:A2:BA:18:E8:57:44:D5 X509v3 Authority Key Identifier: keyid:E0:9D:0E:1D:26:3D:BD:91:4D:0C:4E:0C:AA:7E:5E:50:D0:22:46:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:38:a4:03:c8:1f:ec:71:e5:2d:d8:e5:85:1f:ff:7f:1c:be: 83:7d:21:4f:19:ce:40:a0:18:5d:f4:72:dc:8c:c1:64:5a:70: e2:c8:fc:d5:68:02:5f:c2:fd:be:28:01:ed:41:a3:48:ac:34: 92:88:90:9c:79:f8:20:f0:66:a9:9e:31:05:4d:0b:81:d6:89: 4f:35:b1:28:7f:69:38:04:24:8f:43:e2:ba:eb:f8:4f:9a:55: aa:f9:72:8d:fb:ff:e6:92:f1:52:aa:b7:18:10:ac:c4:f2:3f: df:b8:1e:fa:cd:eb:db:d5:1c:bf:89:7e:71:1f:4c:32:4b:44: 8f:8e:64:4f:d4:76:47:db:4d:09:09:d0:44:48:43:75:86:c8: 19:1b:15:bf:01:7e:d9:32:b8:49:c6:05:66:44:58:78:80:3f: 07:a1:78:b8:38:63:83:c5:a7:f2:9b:ec:ce:13:ff:46:2f:e1: 7a:8f:c5:6c:16:b8:10:04:b7:15:99:c8:e0:9b:b5:cd:37:12: 77:de:b7:13:0e:dd:11:d8:fa:b9:a2:22:9e:ad:8d:4f:43:2e: c6:f6:fc:e2:5c:e1:c6:e4:c6:31:3f:f7:e9:0e:1d:5a:8a:0d: 5d:b8:45:93:8d:ba:6e:15:39:89:3d:87:97:1e:48:39:8c:11: 57:df:c0:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO2yBHKtt70vsVJFMOqbrDZKMRRwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTA5RDBFMUQyNjNEQkQ5MTREMEM0RTBDQUE3RTVFNTBE MDIyNDZGMTAeFw0yNjAzMjUxNTM3MzJaFw0yNjAzMjgyMzUzMzJaMDMxMTAvBgNV BAMTKDBBMzE5RjMxN0YxMjE3RkFDRjk1REEwMUUwQTJCQTE4RTg1NzQ0RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMnPLu7w2EE/v16bXW/2IK1JlL yBpJLOlSh/aHnt0Q3fXqc+5/OHZWZt382URaRKCtB7SmkzhskWFqvVzsNfz4LgmO YWOWqImazceUwFpK4z6I2rXXpyCOK4a6oPV31LwYzOBc3qHnf9VAcGfdFeFsAB/V uuetGVltntX8DgI1mGEyaFRHjo3uIkBWLiQVHPIvo1Rhq/imLcyDW5WYc7am16d8 wXGge7/CbtvHHFByJrcTJIorBegvQL3sjdrBhZDaoyfw6G/GZsp5Y92odNxSJHfA z+2tKrGebQorUbrqwXlVS5vzGL1Qi4RhjwEEaoworxP0Bh9JKa03plmIXHmpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCjGfMX8SF/rPldoB4KK6GOhXRNUwHwYDVR0j BBgwFoAU4J0OHSY9vZFNDE4Mqn5eUNAiRvEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzAxZmQ0NC04Y2Q2LTRkOWYtOWJkMS04MzY3YWQ5Y2Q5ZWEvMC9FMDlEMEUxRDI2 M0RCRDkxNEQwQzRFMENBQTdFNUU1MEQwMjI0NkYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTA5RDBFMUQyNjNEQkQ5MTREMEM0RTBDQUE3RTVFNTBEMDIy NDZGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMwMWZkNDQtOGNkNi00ZDlmLTli ZDEtODM2N2FkOWNkOWVhLzAvRTA5RDBFMUQyNjNEQkQ5MTREMEM0RTBDQUE3RTVF NTBEMDIyNDZGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFA4pAPIH+xx5S3Y5YUf/38cvoN9IU8ZzkCg GF30ctyMwWRacOLI/NVoAl/C/b4oAe1Bo0isNJKIkJx5+CDwZqmeMQVNC4HWiU81 sSh/aTgEJI9D4rrr+E+aVar5co37/+aS8VKqtxgQrMTyP9+4HvrN69vVHL+JfnEf TDJLRI+OZE/UdkfbTQkJ0ERIQ3WGyBkbFb8BftkyuEnGBWZEWHiAPweheLg4Y4PF p/Kb7M4T/0Yv4XqPxWwWuBAEtxWZyOCbtc03EnfetxMO3RHY+rmiIp6tjU9DLsb2 /OJc4cbkxjE/9+kOHVqKDV24RZONum4VOYk9h5ceSDmMEVffwGE= -----END CERTIFICATE-----Generated at Thu Mar 26 10:09:55 2026 by rpki-client