$ rpki-client -vvf repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft File: E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft (raw, json) Hash identifier: XumrZ5mrceif7QG/FO7YgQneX177792GnEsQya5tlA4= Subject key identifier: 75:90:0A:E4:2E:0D:C9:0F:77:07:62:A8:14:BC:74:BF:2B:6A:8D:FE Authority key identifier: E9:FC:7A:F3:FF:BA:00:98:63:D1:04:ED:E1:B4:5D:A0:59:25:35:E6 Certificate issuer: /CN=E9FC7AF3FFBA009863D104EDE1B45DA0592535E6 Certificate serial: 725383ED6925D5C501222B5C14D25227C6170211 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft Manifest number: 0284 Signing time: Tue 24 Mar 2026 19:12:36 +0000 Manifest this update: Tue 24 Mar 2026 19:07:36 +0000 Manifest next update: Fri 27 Mar 2026 21:49:36 +0000 Files and hashes: 1: 3130332e3137352e3233362e302f32332d3234203d3e20313437313231.roa (hash: aCDG0lrlh4WtnIcxV8xhMFOvj5nqiDG0NeV95EvZchY=) 2: E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.crl (hash: 1j4CY5tSs0vbmqaUh7YAxdMupdxwDU47Jgj0OGkB3rQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.crl rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 21:49:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:53:83:ed:69:25:d5:c5:01:22:2b:5c:14:d2:52:27:c6:17:02:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9FC7AF3FFBA009863D104EDE1B45DA0592535E6 Validity Not Before: Mar 24 19:07:36 2026 GMT Not After : Mar 27 21:49:36 2026 GMT Subject: CN=75900AE42E0DC90F770762A814BC74BF2B6A8DFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e9:9e:51:da:97:02:39:56:34:a1:d4:af:39: a5:d4:51:9a:a0:64:9f:24:2a:78:71:ab:e0:c7:fa: af:99:9f:bd:2a:3d:f5:b5:ff:4a:f2:b9:f4:20:c7: 4d:8c:0c:82:08:f1:c1:a3:10:30:a4:2e:89:ad:73: d8:51:65:46:d2:71:4e:44:75:74:63:ce:7e:f0:de: 08:62:e8:9e:1f:b6:33:47:d5:e4:3b:e8:6c:be:3c: 81:29:4f:51:55:6c:09:b6:ea:81:b8:54:1c:1d:26: ef:2f:b8:73:d1:3c:c8:95:d3:c8:3e:6b:09:c0:5b: 3c:77:52:8b:8b:73:7d:68:70:33:5e:e0:f8:b6:8b: b0:5a:79:ce:2d:2f:4d:43:5b:97:92:2a:8e:e1:9b: 1b:02:a4:6d:99:4e:36:45:ad:dc:43:34:93:87:50: 7a:64:79:b1:3b:c0:07:9b:26:1a:c3:08:3c:6b:60: e4:1f:4e:7e:d6:5c:af:47:26:5b:e8:46:17:0d:c4: 82:67:df:51:da:da:1b:68:ba:5d:4d:4e:97:24:43: e7:a3:60:a8:68:34:a9:e5:3b:60:16:ed:37:f2:80: 90:2e:ad:1b:77:47:99:7c:d3:97:2e:38:3d:e6:88: cf:14:c5:55:54:23:b2:3e:d0:3f:11:9d:d4:d2:e4: c3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:90:0A:E4:2E:0D:C9:0F:77:07:62:A8:14:BC:74:BF:2B:6A:8D:FE X509v3 Authority Key Identifier: keyid:E9:FC:7A:F3:FF:BA:00:98:63:D1:04:ED:E1:B4:5D:A0:59:25:35:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:5e:3c:48:46:51:58:03:a2:05:7b:e3:ee:2f:dd:1e:d1:2d: d9:27:8d:51:1f:52:69:94:56:c2:8f:d8:1d:c0:f1:cd:de:19: 45:05:78:09:11:9d:6e:f9:7b:2f:69:24:ca:4f:f6:cc:0f:8f: 9d:45:d9:4d:c1:c7:22:f6:d6:9d:01:76:7a:66:1b:e5:32:3b: 31:ff:74:c2:92:03:31:fa:9b:45:2f:e7:16:1b:ff:b5:cf:2c: dc:09:eb:53:1d:44:4c:c8:7e:60:43:2c:a8:bb:3d:63:30:87: 11:a3:0f:6d:7c:9c:96:07:ff:18:87:8b:de:ca:8b:08:a9:e2: dc:5a:7d:47:31:45:17:ea:99:68:87:bc:5b:f9:87:c3:e6:09: e2:72:f9:13:a0:f1:2e:25:01:51:8f:2e:cd:eb:f4:25:2a:c4: f9:83:ae:6f:42:f7:2a:9b:ab:8d:41:d5:67:36:b9:b4:0d:2e: da:3e:cb:f1:33:52:0c:8a:13:d3:35:e3:47:d1:6a:e2:57:21: f5:2c:e3:46:3a:e1:0b:2b:3e:52:c4:55:33:f7:4e:5d:3d:c4: 8e:79:9f:e3:f4:ea:a0:e7:47:b0:7c:1d:8b:56:a1:19:4c:86: 67:7c:46:c9:00:e2:55:64:fa:f7:5a:c9:76:d3:5b:be:78:39: 54:3d:c9:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUclOD7Wkl1cUBIitcFNJSJ8YXAhEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlGQzdBRjNGRkJBMDA5ODYzRDEwNEVERTFCNDVEQTA1 OTI1MzVFNjAeFw0yNjAzMjQxOTA3MzZaFw0yNjAzMjcyMTQ5MzZaMDMxMTAvBgNV BAMTKDc1OTAwQUU0MkUwREM5MEY3NzA3NjJBODE0QkM3NEJGMkI2QThERkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA6Z5R2pcCOVY0odSvOaXUUZqg ZJ8kKnhxq+DH+q+Zn70qPfW1/0ryufQgx02MDIII8cGjEDCkLomtc9hRZUbScU5E dXRjzn7w3ghi6J4ftjNH1eQ76Gy+PIEpT1FVbAm26oG4VBwdJu8vuHPRPMiV08g+ awnAWzx3UouLc31ocDNe4Pi2i7Baec4tL01DW5eSKo7hmxsCpG2ZTjZFrdxDNJOH UHpkebE7wAebJhrDCDxrYOQfTn7WXK9HJlvoRhcNxIJn31Ha2htoul1NTpckQ+ej YKhoNKnlO2AW7TfygJAurRt3R5l805cuOD3miM8UxVVUI7I+0D8RndTS5MMhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdZAK5C4NyQ93B2KoFLx0vytqjf4wHwYDVR0j BBgwFoAU6fx68/+6AJhj0QTt4bRdoFklNeYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YjRjNzBhMS01MDM2LTQ1MGItYjkzNi01MDg0Zjc4ZjgxZWYvMC9FOUZDN0FGM0ZG QkEwMDk4NjNEMTA0RURFMUI0NURBMDU5MjUzNUU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTlGQzdBRjNGRkJBMDA5ODYzRDEwNEVERTFCNDVEQTA1OTI1 MzVFNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmI0YzcwYTEtNTAzNi00NTBiLWI5 MzYtNTA4NGY3OGY4MWVmLzAvRTlGQzdBRjNGRkJBMDA5ODYzRDEwNEVERTFCNDVE QTA1OTI1MzVFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA1ePEhGUVgDogV74+4v3R7RLdknjVEfUmmU VsKP2B3A8c3eGUUFeAkRnW75ey9pJMpP9swPj51F2U3BxyL21p0BdnpmG+UyOzH/ dMKSAzH6m0Uv5xYb/7XPLNwJ61MdREzIfmBDLKi7PWMwhxGjD218nJYH/xiHi97K iwip4txafUcxRRfqmWiHvFv5h8PmCeJy+ROg8S4lAVGPLs3r9CUqxPmDrm9C9yqb q41B1Wc2ubQNLto+y/EzUgyKE9M140fRauJXIfUs40Y64QsrPlLEVTP3Tl09xI55 n+P06qDnR7B8HYtWoRlMhmd8RskA4lVk+vdayXbTW754OVQ9yXQ= -----END CERTIFICATE-----Generated at Thu Mar 26 05:57:55 2026 by rpki-client