$ rpki-client -vvf repo-rpki.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/EA581458C8710B7F2862361DF5BE327D72423B7F.mft File: EA581458C8710B7F2862361DF5BE327D72423B7F.mft (raw, json) Hash identifier: ljQ+KM26thHl9YQMEHrQ6EcV5rWdXgvtfMrkjGKE1Qo= Subject key identifier: DC:AB:7F:16:45:75:66:29:2A:F4:18:5F:EF:18:B4:6D:B7:49:79:56 Authority key identifier: EA:58:14:58:C8:71:0B:7F:28:62:36:1D:F5:BE:32:7D:72:42:3B:7F Certificate issuer: /CN=EA581458C8710B7F2862361DF5BE327D72423B7F Certificate serial: 5E54CA7DA3404C3FC2F146798D89607B54A9A8AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA581458C8710B7F2862361DF5BE327D72423B7F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/EA581458C8710B7F2862361DF5BE327D72423B7F.mft Manifest number: 028B Signing time: Wed 25 Mar 2026 00:50:01 +0000 Manifest this update: Wed 25 Mar 2026 00:45:01 +0000 Manifest next update: Sat 28 Mar 2026 12:16:01 +0000 Files and hashes: 1: 3130332e3138352e33382e302f32332d3234203d3e20313339343536.roa (hash: KB1G1+0qfCddZUFEHNbpBoUfnLJXbrwxBEUZeryfQ/8=) 2: EA581458C8710B7F2862361DF5BE327D72423B7F.crl (hash: C8q+KjY1wygBerEmKHAVdY6+jf/CYrdJzYoxN1i29JU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/EA581458C8710B7F2862361DF5BE327D72423B7F.crl rsync://repo-rpki.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/EA581458C8710B7F2862361DF5BE327D72423B7F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA581458C8710B7F2862361DF5BE327D72423B7F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 12:16:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:54:ca:7d:a3:40:4c:3f:c2:f1:46:79:8d:89:60:7b:54:a9:a8:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA581458C8710B7F2862361DF5BE327D72423B7F Validity Not Before: Mar 25 00:45:01 2026 GMT Not After : Mar 28 12:16:01 2026 GMT Subject: CN=DCAB7F16457566292AF4185FEF18B46DB7497956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f2:3c:15:96:3e:d0:6b:67:51:5b:74:24:53: 5b:e3:75:02:23:0d:1c:d3:31:62:50:17:57:cc:dc: f1:ae:b9:b3:92:8d:24:1c:0f:8b:24:45:9f:81:22: 41:e3:98:2e:f3:78:67:b3:d5:50:a6:00:90:78:ab: de:e7:55:4e:1e:5c:0d:df:0e:bf:46:b3:30:e5:59: 4c:3a:dc:3e:52:4a:fa:18:38:20:88:ee:77:e5:23: 2c:63:c9:8e:a8:44:9e:29:b9:98:1d:32:10:d1:79: 28:37:03:55:33:a3:24:a0:ce:8c:14:fd:05:fa:b0: 6e:99:db:6c:74:86:70:f8:91:9d:bb:78:6f:f6:5f: 53:ea:d7:ec:04:b2:4e:5d:a5:53:9a:af:5c:3a:aa: a4:50:03:b3:4b:87:a2:57:f2:f8:da:4d:12:97:76: d4:73:18:dc:17:c3:d4:ab:16:86:ee:c6:f6:97:76: 63:6b:41:d3:c2:31:25:fa:76:6a:85:6c:2c:fc:8c: 1f:62:b0:a0:15:38:2b:c9:c8:32:0e:28:ca:57:fa: 9e:48:bd:03:63:f8:1b:06:20:e0:29:c0:f0:c3:40: ff:e6:c7:b1:40:b9:91:71:60:11:e7:db:43:1f:70: 88:18:64:e4:5b:43:bc:09:0d:46:0c:5f:94:05:8a: 4d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:AB:7F:16:45:75:66:29:2A:F4:18:5F:EF:18:B4:6D:B7:49:79:56 X509v3 Authority Key Identifier: keyid:EA:58:14:58:C8:71:0B:7F:28:62:36:1D:F5:BE:32:7D:72:42:3B:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/EA581458C8710B7F2862361DF5BE327D72423B7F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA581458C8710B7F2862361DF5BE327D72423B7F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/EA581458C8710B7F2862361DF5BE327D72423B7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:e2:e8:4f:de:31:7c:b9:8e:a0:f7:23:59:d1:50:c8:7d:d8: 9a:cc:b1:2b:2b:a3:e9:65:95:2d:2a:8c:84:7c:15:33:87:09: 17:e8:18:d7:f8:da:53:98:43:6d:23:67:7b:28:51:90:99:2a: 93:cd:51:10:43:eb:df:52:4c:6e:bb:73:4d:f5:98:9c:f2:88: ff:2f:8e:71:45:a9:a7:dc:d7:e6:f4:2c:2c:ad:48:21:70:73: fc:42:ce:45:ef:cc:bc:90:b6:2c:76:0a:4e:c3:0e:ac:89:6c: 63:ad:cb:14:79:05:ba:9e:d6:b9:94:d4:ff:78:a9:84:35:e7: 49:66:e5:b9:d1:b1:55:f4:40:00:81:62:9c:4b:d7:1b:37:b5: b2:be:02:b3:ea:95:e0:fd:fe:fe:0a:ca:99:28:e0:e1:37:5d: e7:8c:37:50:54:4f:eb:c4:ec:8a:8d:44:47:91:36:2d:3f:0f: 72:54:06:0d:3a:19:82:e9:93:d0:30:ac:e7:f0:e1:af:9f:a9: 53:ca:be:c2:ea:dc:c3:22:14:fb:28:bc:d9:30:4a:b1:53:95: 63:97:23:4f:38:a7:1a:7e:d6:9e:37:70:6f:4b:1e:ef:cf:a6: 95:97:9a:e4:27:d8:62:12:c9:b4:f3:9f:69:91:c0:ea:05:fd: 7b:43:b3:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXlTKfaNATD/C8UZ5jYlge1SpqKowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUE1ODE0NThDODcxMEI3RjI4NjIzNjFERjVCRTMyN0Q3 MjQyM0I3RjAeFw0yNjAzMjUwMDQ1MDFaFw0yNjAzMjgxMjE2MDFaMDMxMTAvBgNV BAMTKERDQUI3RjE2NDU3NTY2MjkyQUY0MTg1RkVGMThCNDZEQjc0OTc5NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp8jwVlj7Qa2dRW3QkU1vjdQIj DRzTMWJQF1fM3PGuubOSjSQcD4skRZ+BIkHjmC7zeGez1VCmAJB4q97nVU4eXA3f Dr9GszDlWUw63D5SSvoYOCCI7nflIyxjyY6oRJ4puZgdMhDReSg3A1UzoySgzowU /QX6sG6Z22x0hnD4kZ27eG/2X1Pq1+wEsk5dpVOar1w6qqRQA7NLh6JX8vjaTRKX dtRzGNwXw9SrFobuxvaXdmNrQdPCMSX6dmqFbCz8jB9isKAVOCvJyDIOKMpX+p5I vQNj+BsGIOApwPDDQP/mx7FAuZFxYBHn20MfcIgYZORbQ7wJDUYMX5QFik0xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3Kt/FkV1Zikq9Bhf7xi0bbdJeVYwHwYDVR0j BBgwFoAU6lgUWMhxC38oYjYd9b4yfXJCO38wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZTA1YWI2Ni02NmFmLTQwYTQtODlhNS04MDY5NDAyODM5YTkvMC9FQTU4MTQ1OEM4 NzEwQjdGMjg2MjM2MURGNUJFMzI3RDcyNDIzQjdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUE1ODE0NThDODcxMEI3RjI4NjIzNjFERjVCRTMyN0Q3MjQy M0I3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmUwNWFiNjYtNjZhZi00MGE0LTg5 YTUtODA2OTQwMjgzOWE5LzAvRUE1ODE0NThDODcxMEI3RjI4NjIzNjFERjVCRTMy N0Q3MjQyM0I3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMXi6E/eMXy5jqD3I1nRUMh92JrMsSsro+ll lS0qjIR8FTOHCRfoGNf42lOYQ20jZ3soUZCZKpPNURBD699STG67c031mJzyiP8v jnFFqafc1+b0LCytSCFwc/xCzkXvzLyQtix2Ck7DDqyJbGOtyxR5Bbqe1rmU1P94 qYQ150lm5bnRsVX0QACBYpxL1xs3tbK+ArPqleD9/v4Kypko4OE3XeeMN1BUT+vE 7IqNREeRNi0/D3JUBg06GYLpk9AwrOfw4a+fqVPKvsLq3MMiFPsovNkwSrFTlWOX I084pxp+1p43cG9LHu/PppWXmuQn2GISybTzn2mRwOoF/XtDs0E= -----END CERTIFICATE-----Generated at Thu Mar 26 10:54:47 2026 by rpki-client