$ rpki-client -vvf repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.mft File: EA1FF21834CE2546B93FF7ABD7A24231492E6157.mft (raw, json) Hash identifier: HncgO15IgK29pwXMFJuGAzNkuqQL0MautTjTY1dpBrc= Subject key identifier: CD:FB:DC:2F:D3:E9:B0:5F:02:C8:E0:F4:33:40:29:FE:3C:BB:A2:68 Authority key identifier: EA:1F:F2:18:34:CE:25:46:B9:3F:F7:AB:D7:A2:42:31:49:2E:61:57 Certificate issuer: /CN=EA1FF21834CE2546B93FF7ABD7A24231492E6157 Certificate serial: 3B555AFB37A73748F8580A7409F4C126B6A5746F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA1FF21834CE2546B93FF7ABD7A24231492E6157.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.mft Manifest number: 04EA Signing time: Wed 25 Mar 2026 17:32:12 +0000 Manifest this update: Wed 25 Mar 2026 17:27:12 +0000 Manifest next update: Sat 28 Mar 2026 23:03:12 +0000 Files and hashes: 1: EA1FF21834CE2546B93FF7ABD7A24231492E6157.crl (hash: HCDrZk+Jm3p05w6RL5FSGRiciKNNbI9ED1XtPj29nIY=) 2: 3130332e3136312e3134392e302f32342d3234203d3e20313431363137.roa (hash: aO5GUOOYzWayE1+nuqtYCqJb6iqD3aY2aScclOaaV0o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.crl rsync://repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA1FF21834CE2546B93FF7ABD7A24231492E6157.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 23:03:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:55:5a:fb:37:a7:37:48:f8:58:0a:74:09:f4:c1:26:b6:a5:74:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA1FF21834CE2546B93FF7ABD7A24231492E6157 Validity Not Before: Mar 25 17:27:12 2026 GMT Not After : Mar 28 23:03:12 2026 GMT Subject: CN=CDFBDC2FD3E9B05F02C8E0F4334029FE3CBBA268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1e:fb:06:c0:4e:93:e1:7b:8f:72:b1:f7:20: 3b:70:9e:b7:ec:5a:1c:41:53:09:9b:e1:68:d7:a8: 96:ff:44:b1:b5:a4:2e:62:15:e9:f6:72:16:34:db: 5f:f1:c5:cf:33:b5:7a:e7:76:bb:95:ca:dc:b0:1a: f1:20:34:1e:5f:ac:d0:97:f7:31:05:02:f6:72:e4: af:9c:3b:00:0e:bc:c7:0f:6f:96:f2:64:0e:31:e2: db:ac:d6:91:60:df:03:0d:4a:2c:5d:71:88:a8:ec: b9:31:d7:b0:c3:dd:0c:26:6d:e3:9d:14:5a:3f:0f: 54:10:ff:7e:f6:55:46:ba:38:91:e7:7e:9f:0b:7e: 65:f5:d1:bd:a1:76:4b:63:36:9e:d5:68:6b:6d:79: a1:d0:94:67:bf:13:25:84:a3:c5:1c:8e:31:d2:62: fb:e9:4b:b6:c5:8b:c2:7e:e1:59:b3:f7:a8:e3:12: 8f:93:72:04:30:2c:6d:80:f1:07:44:be:bb:bc:9e: bc:de:19:b6:22:ac:39:e6:88:4b:39:9f:57:8a:ff: 19:7c:0d:74:7b:c4:15:41:a4:c7:30:fa:25:10:3e: 62:fd:10:3a:d6:10:74:64:75:5e:df:2a:69:f3:1d: b8:6a:d3:58:5a:ae:86:7a:93:90:25:a1:67:78:90: 35:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:FB:DC:2F:D3:E9:B0:5F:02:C8:E0:F4:33:40:29:FE:3C:BB:A2:68 X509v3 Authority Key Identifier: keyid:EA:1F:F2:18:34:CE:25:46:B9:3F:F7:AB:D7:A2:42:31:49:2E:61:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA1FF21834CE2546B93FF7ABD7A24231492E6157.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:86:49:08:87:b5:87:de:20:78:56:ba:01:87:0f:a6:c5:62: 59:58:0e:58:f7:73:70:0d:60:ea:d0:5d:30:ce:e0:f2:07:24: 5a:9b:bd:de:da:5e:7b:ce:0f:91:3c:5e:07:34:43:1a:2e:04: 86:db:56:27:8a:ef:8b:ea:49:58:cd:d8:7d:e0:44:bb:59:f7: b8:3e:d4:43:e1:97:0b:17:1a:48:47:49:21:db:75:38:de:af: 43:e5:bc:07:ab:93:97:7b:7c:41:7b:b7:5c:71:6e:44:97:6c: 64:f3:cc:04:7f:71:e5:51:f4:fc:36:a2:dc:ba:cd:13:93:1b: 8a:50:66:b9:c6:c7:2c:ce:9a:58:61:58:88:cb:17:5a:f5:69: 39:f2:ec:e3:74:83:d2:44:d7:8e:a2:24:9d:51:79:d8:d0:24: 24:08:6a:a4:a4:03:e7:8a:fe:14:00:7a:9b:b4:69:29:8f:23: 6a:ac:1d:51:62:5e:fe:79:ea:55:ea:6a:8c:5e:b4:6f:85:51: 56:2a:53:1c:36:ca:fd:b8:2b:9f:c6:b4:9e:ee:ea:19:d0:5c: 39:f1:38:83:ea:38:b6:81:ed:65:8e:3f:fe:44:64:d6:48:37: 8f:88:27:8c:3d:44:a0:d7:4b:e9:ee:fe:38:38:dd:dd:4b:82: 88:63:f8:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO1Va+zenN0j4WAp0CfTBJraldG8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUExRkYyMTgzNENFMjU0NkI5M0ZGN0FCRDdBMjQyMzE0 OTJFNjE1NzAeFw0yNjAzMjUxNzI3MTJaFw0yNjAzMjgyMzAzMTJaMDMxMTAvBgNV BAMTKENERkJEQzJGRDNFOUIwNUYwMkM4RTBGNDMzNDAyOUZFM0NCQkEyNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaHvsGwE6T4XuPcrH3IDtwnrfs WhxBUwmb4WjXqJb/RLG1pC5iFen2chY021/xxc8ztXrndruVytywGvEgNB5frNCX 9zEFAvZy5K+cOwAOvMcPb5byZA4x4tus1pFg3wMNSixdcYio7Lkx17DD3QwmbeOd FFo/D1QQ/372VUa6OJHnfp8LfmX10b2hdktjNp7VaGtteaHQlGe/EyWEo8UcjjHS YvvpS7bFi8J+4Vmz96jjEo+TcgQwLG2A8QdEvru8nrzeGbYirDnmiEs5n1eK/xl8 DXR7xBVBpMcw+iUQPmL9EDrWEHRkdV7fKmnzHbhq01haroZ6k5AloWd4kDWdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzfvcL9PpsF8CyOD0M0Ap/jy7omgwHwYDVR0j BBgwFoAU6h/yGDTOJUa5P/er16JCMUkuYVcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjExOGYyYi05Zjk0LTQxOTktYTI0MS04ZmM1MWQxN2UwYzUvMC9FQTFGRjIxODM0 Q0UyNTQ2QjkzRkY3QUJEN0EyNDIzMTQ5MkU2MTU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUExRkYyMTgzNENFMjU0NkI5M0ZGN0FCRDdBMjQyMzE0OTJF NjE1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDYxMThmMmItOWY5NC00MTk5LWEy NDEtOGZjNTFkMTdlMGM1LzAvRUExRkYyMTgzNENFMjU0NkI5M0ZGN0FCRDdBMjQy MzE0OTJFNjE1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFOGSQiHtYfeIHhWugGHD6bFYllYDlj3c3AN YOrQXTDO4PIHJFqbvd7aXnvOD5E8Xgc0QxouBIbbVieK74vqSVjN2H3gRLtZ97g+ 1EPhlwsXGkhHSSHbdTjer0PlvAerk5d7fEF7t1xxbkSXbGTzzAR/ceVR9Pw2oty6 zROTG4pQZrnGxyzOmlhhWIjLF1r1aTny7ON0g9JE146iJJ1RedjQJCQIaqSkA+eK /hQAepu0aSmPI2qsHVFiXv556lXqaoxetG+FUVYqUxw2yv24K5/GtJ7u6hnQXDnx OIPqOLaB7WWOP/5EZNZIN4+IJ4w9RKDXS+nu/jg43d1Lgohj+MQ= -----END CERTIFICATE-----Generated at Thu Mar 26 18:09:13 2026 by rpki-client