$ rpki-client -vvf repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft File: E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft (raw, json) Hash identifier: 2bxzWTnxqkWft1Jqc/Lm0ynmnAbLTRyK3eKXMSgbuzM= Subject key identifier: DF:87:DA:1F:0A:A4:82:60:4D:AA:0B:0D:52:57:A5:90:43:18:C0:06 Authority key identifier: E4:CE:C1:1F:24:4B:F0:DA:BE:C1:36:F8:39:FD:53:7B:2D:BB:ED:0F Certificate issuer: /CN=E4CEC11F244BF0DABEC136F839FD537B2DBBED0F Certificate serial: 7A0F4FF924FC2BA632B808356077E98A61444228 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft Manifest number: 0140 Signing time: Thu 26 Mar 2026 04:52:05 +0000 Manifest this update: Thu 26 Mar 2026 04:47:05 +0000 Manifest next update: Sun 29 Mar 2026 05:08:05 +0000 Files and hashes: 1: E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl (hash: iU0LAueAmym2E6RO1ENV3kC1/yKdPeZ60RQGPeX+ejc=) 2: 323030313a6466333a313934303a3a2f34382d3438203d3e20313431393230.roa (hash: edoGoSPm2CAwjuI59D3DYQ99ncwjrFmVk1Lk6FbM204=) 3: 3130332e3136352e3134392e302f32342d3234203d3e20313431393230.roa (hash: 3sn3cHR3pPdkg5yz9dRolP/N8qZbatQdrQrIM71l4Oo=) 4: 3130332e3136352e3134382e302f32342d3234203d3e20313431393230.roa (hash: PAO+Kk4WyW8qQnaa3rlW0GbO1a4tKVv1+JDyB+HgHco=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 05:08:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:0f:4f:f9:24:fc:2b:a6:32:b8:08:35:60:77:e9:8a:61:44:42:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4CEC11F244BF0DABEC136F839FD537B2DBBED0F Validity Not Before: Mar 26 04:47:05 2026 GMT Not After : Mar 29 05:08:05 2026 GMT Subject: CN=DF87DA1F0AA482604DAA0B0D5257A5904318C006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b0:d4:c5:c5:3a:5c:fe:a3:da:fb:9f:d4:4c: 6e:f9:07:80:51:35:1a:83:d6:27:92:47:34:29:67: 79:e8:19:73:90:e6:fa:78:e7:63:c9:15:07:e1:5b: ad:3e:d2:74:7e:e7:26:8f:22:66:5c:19:83:ed:38: cb:be:89:1d:8f:7c:e6:59:69:33:c3:9d:ed:03:05: dd:73:2e:f1:38:ac:37:7a:db:c8:fa:a8:43:06:eb: bd:7b:86:33:37:26:a5:b3:ec:b3:db:ea:b4:70:6f: b8:c2:64:01:65:cd:09:e1:e9:c0:fe:82:22:c2:56: 19:a4:65:fa:0c:93:a7:97:97:bf:29:87:d4:52:24: 32:eb:70:69:a9:24:3b:67:f4:b3:75:fa:c4:d2:27: 90:ee:54:86:d8:55:a1:0b:14:fe:a3:8f:a1:0b:99: 84:4b:97:3b:b7:5f:95:99:43:de:cc:47:cc:54:29: 38:9d:20:cf:4c:23:0f:d5:ba:04:ab:c0:de:5a:db: 0d:14:a6:12:10:65:b9:d8:f7:ed:dd:1b:2a:f8:e6: c5:19:83:be:0a:9a:78:63:43:23:c4:8d:ec:22:1b: 32:bb:20:db:31:25:7d:c4:ea:c3:ee:00:08:6d:84: 78:5d:2f:aa:20:1c:b3:8a:e2:5e:a1:de:53:d5:52: 0a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:87:DA:1F:0A:A4:82:60:4D:AA:0B:0D:52:57:A5:90:43:18:C0:06 X509v3 Authority Key Identifier: keyid:E4:CE:C1:1F:24:4B:F0:DA:BE:C1:36:F8:39:FD:53:7B:2D:BB:ED:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:a8:34:88:3a:33:91:a8:01:c0:2b:24:32:cb:96:01:20:fc: ed:3f:b1:93:e9:f6:58:54:bb:72:fe:70:6c:7d:d5:b7:6a:7f: 68:14:9f:87:90:7d:4f:3b:50:e5:47:ab:52:70:fc:bd:c4:9a: fa:fa:ac:eb:bb:15:4b:67:0d:9b:e2:86:77:5b:0e:aa:f3:6b: 53:7b:4a:93:91:2e:54:73:e2:5f:2e:e2:e0:5f:ce:35:b4:64: 8f:e0:47:f6:3f:9a:a2:d5:56:62:a6:7e:55:ba:42:70:9e:89: 50:1a:ff:f0:50:a0:73:16:8b:c0:54:d0:2d:a9:1e:7e:2f:67: 77:85:da:04:44:af:c8:b4:46:3e:3d:57:2b:cf:1d:90:a1:6b: 16:3c:ce:b0:a5:a6:ba:e7:2d:80:80:07:c0:f1:f7:7a:c4:91: 82:70:6c:5f:aa:0c:cf:61:07:d2:77:3d:7c:69:86:ec:16:c5: 5a:c7:9b:ea:88:73:55:d6:1f:18:d6:18:5e:38:0a:d8:fb:1f: 11:5b:39:5b:47:66:65:63:e4:a8:41:56:53:92:45:78:f6:0d: 0e:7d:66:bc:67:06:95:ab:f8:b0:4e:68:c8:aa:1c:bd:e4:7a: 40:fa:23:62:b7:6b:ac:71:be:85:c7:0d:8a:16:86:dd:0f:b9: 71:f2:f8:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeg9P+ST8K6YyuAg1YHfpimFEQigwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUzN0Iy REJCRUQwRjAeFw0yNjAzMjYwNDQ3MDVaFw0yNjAzMjkwNTA4MDVaMDMxMTAvBgNV BAMTKERGODdEQTFGMEFBNDgyNjA0REFBMEIwRDUyNTdBNTkwNDMxOEMwMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdsNTFxTpc/qPa+5/UTG75B4BR NRqD1ieSRzQpZ3noGXOQ5vp452PJFQfhW60+0nR+5yaPImZcGYPtOMu+iR2PfOZZ aTPDne0DBd1zLvE4rDd628j6qEMG6717hjM3JqWz7LPb6rRwb7jCZAFlzQnh6cD+ giLCVhmkZfoMk6eXl78ph9RSJDLrcGmpJDtn9LN1+sTSJ5DuVIbYVaELFP6jj6EL mYRLlzu3X5WZQ97MR8xUKTidIM9MIw/VugSrwN5a2w0UphIQZbnY9+3dGyr45sUZ g74KmnhjQyPEjewiGzK7INsxJX3E6sPuAAhthHhdL6ogHLOK4l6h3lPVUgotAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU34faHwqkgmBNqgsNUlelkEMYwAYwHwYDVR0j BBgwFoAU5M7BHyRL8Nq+wTb4Of1Tey277Q8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MmYzZjVkOS1jZmI4LTQxMjMtYTJiMS1iMGI1Mjk5ZjljNmUvMC9FNENFQzExRjI0 NEJGMERBQkVDMTM2RjgzOUZENTM3QjJEQkJFRDBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUzN0IyREJC RUQwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzJmM2Y1ZDktY2ZiOC00MTIzLWEy YjEtYjBiNTI5OWY5YzZlLzAvRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUz N0IyREJCRUQwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHuoNIg6M5GoAcArJDLLlgEg/O0/sZPp9lhU u3L+cGx91bdqf2gUn4eQfU87UOVHq1Jw/L3Emvr6rOu7FUtnDZvihndbDqrza1N7 SpORLlRz4l8u4uBfzjW0ZI/gR/Y/mqLVVmKmflW6QnCeiVAa//BQoHMWi8BU0C2p Hn4vZ3eF2gREr8i0Rj49VyvPHZChaxY8zrClprrnLYCAB8Dx93rEkYJwbF+qDM9h B9J3PXxphuwWxVrHm+qIc1XWHxjWGF44Ctj7HxFbOVtHZmVj5KhBVlOSRXj2DQ59 ZrxnBpWr+LBOaMiqHL3kekD6I2K3a6xxvoXHDYoWht0PuXHy+Fc= -----END CERTIFICATE-----Generated at Thu Mar 26 07:11:37 2026 by rpki-client