$ rpki-client -vvf repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.mft File: E5B2AB049E75667C8F00ECB0EBF617859558571D.mft (raw, json) Hash identifier: XYODW04Jq6xaUGB0tIT10rWXxk75WWEpwiXJu6gwc5A= Subject key identifier: D3:6C:97:25:23:2F:17:D9:15:68:EF:4A:96:C4:93:0B:4F:ED:5D:7E Authority key identifier: E5:B2:AB:04:9E:75:66:7C:8F:00:EC:B0:EB:F6:17:85:95:58:57:1D Certificate issuer: /CN=E5B2AB049E75667C8F00ECB0EBF617859558571D Certificate serial: 7CE38E0BBE7BCE0609446183C797B54A92C66A5B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5B2AB049E75667C8F00ECB0EBF617859558571D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.mft Manifest number: 0191 Signing time: Tue 24 Mar 2026 22:20:42 +0000 Manifest this update: Tue 24 Mar 2026 22:15:42 +0000 Manifest next update: Sat 28 Mar 2026 05:30:42 +0000 Files and hashes: 1: E5B2AB049E75667C8F00ECB0EBF617859558571D.crl (hash: BRLwkwLCHUaWssMGy9Ngf4Qw+Yzzn5JVn63SnkIuUvI=) 2: 3130332e3232342e37362e302f32342d3234203d3e203536323535.roa (hash: pWyEMJB2NECQjGD21jXFIhV6AewDgUPpxcuSNxlavYI=) 3: 3130332e3232342e37372e302f32342d3234203d3e203536323535.roa (hash: p909d8VjhDkob+UXRoZRxJtZcS/lf4G9yDRtU4iVWWk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.crl rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5B2AB049E75667C8F00ECB0EBF617859558571D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 05:30:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:e3:8e:0b:be:7b:ce:06:09:44:61:83:c7:97:b5:4a:92:c6:6a:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5B2AB049E75667C8F00ECB0EBF617859558571D Validity Not Before: Mar 24 22:15:42 2026 GMT Not After : Mar 28 05:30:42 2026 GMT Subject: CN=D36C9725232F17D91568EF4A96C4930B4FED5D7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2f:79:12:ed:42:24:31:3e:77:15:95:de:07: 9b:89:0d:2b:6b:d4:0a:8b:6a:8f:80:78:03:8b:e8: dc:38:3e:82:38:2d:50:2f:ee:33:e8:3b:0d:c7:bb: 14:c2:a6:e1:b8:01:af:4b:4b:14:a0:ed:f7:68:06: e3:e7:4b:7d:ba:32:68:2b:5d:6a:59:07:c9:0a:1e: 6c:5f:98:27:de:6e:56:b4:cc:ab:06:8e:30:0b:fc: ae:24:7c:a4:e6:69:74:74:bc:91:fd:f1:9f:af:6e: d1:38:b9:85:7b:e6:49:10:50:26:43:ea:7f:a5:6c: ea:76:a4:a2:19:c5:bb:47:fc:62:c3:a5:ac:78:ee: 68:ef:6b:50:60:30:6b:f1:61:68:cb:78:d5:f5:a7: 77:f0:bf:1d:0f:b0:cf:4a:17:c0:02:78:65:ec:1e: 33:a9:97:b5:6b:7e:35:9d:89:7d:27:30:9c:f4:c1: ed:e8:4c:1e:05:62:33:26:c9:4b:71:43:aa:63:0b: b2:94:64:86:76:e7:1a:60:60:d6:66:2e:4f:7e:c9: 57:55:70:21:aa:d8:6f:cd:02:b0:9d:38:a2:e2:88: f9:18:97:d1:d8:eb:ce:0b:97:96:8f:03:af:f0:1e: bc:bb:61:26:be:26:86:f7:88:88:70:b8:6b:22:13: 55:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:6C:97:25:23:2F:17:D9:15:68:EF:4A:96:C4:93:0B:4F:ED:5D:7E X509v3 Authority Key Identifier: keyid:E5:B2:AB:04:9E:75:66:7C:8F:00:EC:B0:EB:F6:17:85:95:58:57:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5B2AB049E75667C8F00ECB0EBF617859558571D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:b9:4e:8f:8d:cf:f5:ee:e5:d5:ff:a6:ce:b3:8d:a9:8c:26: 60:37:d5:25:3f:bc:ef:c7:5c:09:6b:14:8f:2a:09:f2:2f:8b: 9f:df:60:6a:36:f2:25:a6:a1:d6:97:0d:17:86:92:e6:ac:ea: 33:8d:10:67:f8:b8:38:2c:4b:2d:36:33:00:e1:78:86:e8:ad: 97:cc:1a:79:58:0a:c8:09:7b:70:04:fe:1b:25:50:8b:d8:fc: 67:e7:1c:ba:2c:bd:c7:98:ba:69:84:66:9a:19:8e:49:df:68: fa:18:10:54:28:38:f3:da:3a:59:94:d5:9a:b2:29:bb:4d:4a: 33:a5:f3:2f:3d:c7:5c:43:75:a9:3d:e3:ac:7e:c6:b3:ac:eb: 8b:9c:56:d9:90:1b:54:87:53:b5:9e:85:9e:bd:03:df:36:2c: ae:34:f6:9b:98:0c:6e:2b:99:20:c3:5f:00:8b:22:41:98:bd: 36:16:56:60:b2:9d:41:22:c4:fe:f1:9c:d0:f3:69:73:39:4d: 45:b2:35:ea:f9:60:70:d4:9d:b7:f5:70:52:f6:67:c3:aa:f1: 12:73:da:54:24:21:99:13:9e:07:f6:c4:45:ae:26:bb:69:22: da:cc:50:93:d2:c4:f4:34:7a:e0:65:1b:eb:44:23:c5:7f:c8: 04:bb:7c:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfOOOC757zgYJRGGDx5e1SpLGalswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTVCMkFCMDQ5RTc1NjY3QzhGMDBFQ0IwRUJGNjE3ODU5 NTU4NTcxRDAeFw0yNjAzMjQyMjE1NDJaFw0yNjAzMjgwNTMwNDJaMDMxMTAvBgNV BAMTKEQzNkM5NzI1MjMyRjE3RDkxNTY4RUY0QTk2QzQ5MzBCNEZFRDVEN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrL3kS7UIkMT53FZXeB5uJDStr 1AqLao+AeAOL6Nw4PoI4LVAv7jPoOw3HuxTCpuG4Aa9LSxSg7fdoBuPnS326Mmgr XWpZB8kKHmxfmCfebla0zKsGjjAL/K4kfKTmaXR0vJH98Z+vbtE4uYV75kkQUCZD 6n+lbOp2pKIZxbtH/GLDpax47mjva1BgMGvxYWjLeNX1p3fwvx0PsM9KF8ACeGXs HjOpl7VrfjWdiX0nMJz0we3oTB4FYjMmyUtxQ6pjC7KUZIZ25xpgYNZmLk9+yVdV cCGq2G/NArCdOKLiiPkYl9HY684Ll5aPA6/wHry7YSa+Job3iIhwuGsiE1X1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU02yXJSMvF9kVaO9KlsSTC0/tXX4wHwYDVR0j BBgwFoAU5bKrBJ51ZnyPAOyw6/YXhZVYVx0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjI2YjNlMS1kN2Y2LTQ2NWUtODMwMi03ZDUyZjVjMzQwZmYvMC9FNUIyQUIwNDlF NzU2NjdDOEYwMEVDQjBFQkY2MTc4NTk1NTg1NzFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTVCMkFCMDQ5RTc1NjY3QzhGMDBFQ0IwRUJGNjE3ODU5NTU4 NTcxRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODIyNmIzZTEtZDdmNi00NjVlLTgz MDItN2Q1MmY1YzM0MGZmLzAvRTVCMkFCMDQ5RTc1NjY3QzhGMDBFQ0IwRUJGNjE3 ODU5NTU4NTcxRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALa5To+Nz/Xu5dX/ps6zjamMJmA31SU/vO/H XAlrFI8qCfIvi5/fYGo28iWmodaXDReGkuas6jONEGf4uDgsSy02MwDheIborZfM GnlYCsgJe3AE/hslUIvY/GfnHLosvceYummEZpoZjknfaPoYEFQoOPPaOlmU1Zqy KbtNSjOl8y89x1xDdak946x+xrOs64ucVtmQG1SHU7WehZ69A982LK409puYDG4r mSDDXwCLIkGYvTYWVmCynUEixP7xnNDzaXM5TUWyNer5YHDUnbf1cFL2Z8Oq8RJz 2lQkIZkTngf2xEWuJrtpItrMUJPSxPQ0euBlG+tEI8V/yAS7fL4= -----END CERTIFICATE-----Generated at Thu Mar 26 11:33:25 2026 by rpki-client