$ rpki-client -vvf repo-rpki.idnic.net/repo/544cfaac-5d11-4142-b1f3-88fcc41b338a/0/E306D62165BEB9609E6DD25466BDD9071B1F23CF.mft File: E306D62165BEB9609E6DD25466BDD9071B1F23CF.mft (raw, json) Hash identifier: 8yY2LadjLXIjWi6tblH6UsU8Zh0Ij41wID9zf+SMtyk= Subject key identifier: C6:E7:28:4C:FD:33:74:10:62:71:D1:EB:1A:82:2D:60:5D:03:B4:14 Authority key identifier: E3:06:D6:21:65:BE:B9:60:9E:6D:D2:54:66:BD:D9:07:1B:1F:23:CF Certificate issuer: /CN=E306D62165BEB9609E6DD25466BDD9071B1F23CF Certificate serial: 5AEB60A016F074D2FA51AB9AE17EF96770C99E68 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E306D62165BEB9609E6DD25466BDD9071B1F23CF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/544cfaac-5d11-4142-b1f3-88fcc41b338a/0/E306D62165BEB9609E6DD25466BDD9071B1F23CF.mft Manifest number: 0218 Signing time: Tue 24 Mar 2026 07:12:42 +0000 Manifest this update: Tue 24 Mar 2026 07:07:42 +0000 Manifest next update: Fri 27 Mar 2026 19:04:42 +0000 Files and hashes: 1: E306D62165BEB9609E6DD25466BDD9071B1F23CF.crl (hash: MjvgRw5/NSs9FnyasUQgIRKUXAcPlpkhH/GLPTe0UqA=) 2: 3130332e3231312e38322e302f32342d3234203d3e20313334363630.roa (hash: Nh+HiVLmMcDNhbKCLKBivfmLyDAXlG86o04scwdSgPc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/544cfaac-5d11-4142-b1f3-88fcc41b338a/0/E306D62165BEB9609E6DD25466BDD9071B1F23CF.crl rsync://repo-rpki.idnic.net/repo/544cfaac-5d11-4142-b1f3-88fcc41b338a/0/E306D62165BEB9609E6DD25466BDD9071B1F23CF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E306D62165BEB9609E6DD25466BDD9071B1F23CF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 19:04:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:eb:60:a0:16:f0:74:d2:fa:51:ab:9a:e1:7e:f9:67:70:c9:9e:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E306D62165BEB9609E6DD25466BDD9071B1F23CF Validity Not Before: Mar 24 07:07:42 2026 GMT Not After : Mar 27 19:04:42 2026 GMT Subject: CN=C6E7284CFD3374106271D1EB1A822D605D03B414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:51:5d:88:20:8c:91:1a:1e:32:22:f2:a4:e5: 43:9a:72:19:ba:c8:cd:c6:63:f7:b1:91:1c:07:e6: fc:27:7e:df:a8:47:7b:96:52:6d:17:ac:f9:f9:36: dd:46:6b:42:35:8d:2c:85:0d:5c:3d:eb:20:27:1b: 79:91:03:6c:17:1e:5c:d5:63:60:f9:b9:3a:3e:0c: 5e:16:da:7b:56:7c:e9:00:14:64:33:f7:21:83:82: 6a:a0:71:8a:b6:dc:e4:3b:e5:07:f4:ae:43:16:5e: 58:f0:1e:40:84:22:40:34:7b:d0:51:e6:0f:e8:cd: 23:03:35:b0:86:dc:57:8f:9b:af:30:70:86:79:af: 3f:95:32:11:b3:de:52:2a:de:26:f4:10:df:8c:c0: 24:af:35:17:d5:07:77:88:62:aa:f7:8c:22:ff:a1: 96:46:11:a9:c8:05:ca:fa:f4:5c:10:00:67:eb:f6: 3a:c8:3d:a0:a2:a7:4b:53:f9:ce:59:26:aa:9d:7d: 71:05:1e:fe:ba:55:99:31:67:0f:f6:df:8a:93:04: e9:85:59:71:39:ae:ff:d9:00:8a:1e:c3:a6:f2:3a: 13:0e:91:a3:56:eb:bf:09:94:90:c6:30:26:02:14: a6:04:49:c9:59:19:0d:e2:b5:20:8c:3a:d7:37:4f: ef:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E7:28:4C:FD:33:74:10:62:71:D1:EB:1A:82:2D:60:5D:03:B4:14 X509v3 Authority Key Identifier: keyid:E3:06:D6:21:65:BE:B9:60:9E:6D:D2:54:66:BD:D9:07:1B:1F:23:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/544cfaac-5d11-4142-b1f3-88fcc41b338a/0/E306D62165BEB9609E6DD25466BDD9071B1F23CF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E306D62165BEB9609E6DD25466BDD9071B1F23CF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/544cfaac-5d11-4142-b1f3-88fcc41b338a/0/E306D62165BEB9609E6DD25466BDD9071B1F23CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:b4:d9:26:a2:b4:d4:cd:69:58:d6:0c:04:10:66:56:12:48: 29:8b:73:25:f6:3c:94:81:16:04:2f:d1:0d:99:62:17:20:04: e6:06:51:9c:89:b0:bb:d9:71:d0:87:b6:38:cb:98:84:98:c9: c2:d5:ab:7f:43:7d:83:61:14:22:20:01:83:1e:b9:13:09:76: 7b:f0:4b:02:ff:ad:c2:a0:fb:5a:52:97:f6:29:6f:26:33:b9: 1e:09:00:2f:6e:17:a4:c7:ba:0d:d7:00:73:55:50:72:fd:78: eb:a3:a1:d5:74:09:c1:5e:dd:49:97:46:32:50:bb:99:f2:64: b6:94:20:8b:b8:12:be:7c:c7:f3:4c:0a:6d:d0:c6:4b:d4:8c: 71:0e:af:14:c1:6e:ba:c4:87:67:28:1f:fc:86:8c:52:c7:7f: 1a:c5:37:b3:d9:e8:5c:cd:8e:2b:58:dd:c4:9a:d9:7d:c6:9c: 77:de:79:be:2b:c0:21:67:54:e6:be:d5:4a:4e:60:74:05:6a: e4:6e:df:46:53:19:59:33:8e:67:49:85:d5:ba:d7:17:62:51: 59:c7:4e:4e:c1:84:b6:c4:65:06:4c:fc:19:22:0e:52:9c:72: f2:89:b1:00:fb:13:5e:50:8a:0b:0b:3d:9c:58:31:71:a0:cd: 3b:dd:fb:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWutgoBbwdNL6Uaua4X75Z3DJnmgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTMwNkQ2MjE2NUJFQjk2MDlFNkREMjU0NjZCREQ5MDcx QjFGMjNDRjAeFw0yNjAzMjQwNzA3NDJaFw0yNjAzMjcxOTA0NDJaMDMxMTAvBgNV BAMTKEM2RTcyODRDRkQzMzc0MTA2MjcxRDFFQjFBODIyRDYwNUQwM0I0MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsUV2IIIyRGh4yIvKk5UOachm6 yM3GY/exkRwH5vwnft+oR3uWUm0XrPn5Nt1Ga0I1jSyFDVw96yAnG3mRA2wXHlzV Y2D5uTo+DF4W2ntWfOkAFGQz9yGDgmqgcYq23OQ75Qf0rkMWXljwHkCEIkA0e9BR 5g/ozSMDNbCG3FePm68wcIZ5rz+VMhGz3lIq3ib0EN+MwCSvNRfVB3eIYqr3jCL/ oZZGEanIBcr69FwQAGfr9jrIPaCip0tT+c5ZJqqdfXEFHv66VZkxZw/234qTBOmF WXE5rv/ZAIoew6byOhMOkaNW678JlJDGMCYCFKYESclZGQ3itSCMOtc3T+8JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxucoTP0zdBBicdHrGoItYF0DtBQwHwYDVR0j BBgwFoAU4wbWIWW+uWCebdJUZr3ZBxsfI88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NDRjZmFhYy01ZDExLTQxNDItYjFmMy04OGZjYzQxYjMzOGEvMC9FMzA2RDYyMTY1 QkVCOTYwOUU2REQyNTQ2NkJERDkwNzFCMUYyM0NGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTMwNkQ2MjE2NUJFQjk2MDlFNkREMjU0NjZCREQ5MDcxQjFG MjNDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTQ0Y2ZhYWMtNWQxMS00MTQyLWIx ZjMtODhmY2M0MWIzMzhhLzAvRTMwNkQ2MjE2NUJFQjk2MDlFNkREMjU0NjZCREQ5 MDcxQjFGMjNDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADW02SaitNTNaVjWDAQQZlYSSCmLcyX2PJSB FgQv0Q2ZYhcgBOYGUZyJsLvZcdCHtjjLmISYycLVq39DfYNhFCIgAYMeuRMJdnvw SwL/rcKg+1pSl/YpbyYzuR4JAC9uF6THug3XAHNVUHL9eOujodV0CcFe3UmXRjJQ u5nyZLaUIIu4Er58x/NMCm3QxkvUjHEOrxTBbrrEh2coH/yGjFLHfxrFN7PZ6FzN jitY3cSa2X3GnHfeeb4rwCFnVOa+1UpOYHQFauRu30ZTGVkzjmdJhdW61xdiUVnH Tk7BhLbEZQZM/BkiDlKccvKJsQD7E15QigsLPZxYMXGgzTvd+wQ= -----END CERTIFICATE-----Generated at Thu Mar 26 21:05:09 2026 by rpki-client