$ rpki-client -vvf repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft File: 0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft (raw, json) Hash identifier: N88OjizXOS8PyS9bnBfiC6eMsBTfygIJdH6tpwJupCw= Subject key identifier: C6:CE:62:0E:0D:A8:1A:17:AA:7D:84:15:25:EF:EB:B9:01:3B:84:16 Authority key identifier: 0E:2E:7A:9C:F1:1C:69:2E:C8:E5:6F:03:52:7B:DF:92:FA:00:1A:4E Certificate issuer: /CN=0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E Certificate serial: 23923DD3979820E141FF4F3A098423BC13BB7EB3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft Manifest number: 01F8 Signing time: Wed 25 Mar 2026 16:21:09 +0000 Manifest this update: Wed 25 Mar 2026 16:16:09 +0000 Manifest next update: Sat 28 Mar 2026 22:34:09 +0000 Files and hashes: 1: 0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.crl (hash: NqDXYieyCP2E3wdRdFbqSELxG2u1IfboAkDjrvI1Fjk=) 2: 3130332e342e38302e302f32332d3233203d3e20313530323034.roa (hash: sAxyAacrSqW6mHWffMKLhhk3JgkihWYb7S14LaFMATc=) 3: 3130332e342e38312e302f32342d3234203d3e20313530323034.roa (hash: lkSfYrODyHMpEekQgH4/krwxQF80Ua2eqSFXhHKZbPA=) 4: 3130332e342e38302e302f32342d3234203d3e20313530323034.roa (hash: KnPDrY7Tqy+sU3wNCKUDVoZ9WQhkJdY8RVjgQku10bc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.crl rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:34:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:92:3d:d3:97:98:20:e1:41:ff:4f:3a:09:84:23:bc:13:bb:7e:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E Validity Not Before: Mar 25 16:16:09 2026 GMT Not After : Mar 28 22:34:09 2026 GMT Subject: CN=C6CE620E0DA81A17AA7D841525EFEBB9013B8416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:55:4a:3b:b6:f7:65:18:8a:07:27:80:bf:c1: ff:8d:d9:ec:f9:79:e6:6a:5e:e3:0b:15:78:80:14: 95:07:c8:5a:34:b7:56:a7:ec:61:ee:a8:e5:69:13: c3:6e:ab:d9:9e:a3:35:d9:fe:8e:54:77:bb:fa:a6: f9:8f:69:5c:67:b6:e7:4c:68:6f:a0:40:75:0a:ed: 4b:3e:4b:80:4c:ce:78:1f:4c:b1:66:c4:da:33:9f: b8:d6:cf:59:b4:a1:64:62:f3:16:28:f0:e0:ec:fc: e4:ef:60:1d:42:e3:89:89:fd:de:35:b4:62:c9:ea: 11:1a:41:10:ec:22:ff:7c:a7:d8:32:1e:cd:1c:7b: 86:65:fa:50:78:8c:81:c8:93:25:73:a5:4d:78:1f: 49:fb:dc:2a:c2:02:65:f7:24:cd:03:12:de:67:26: 4c:fc:27:7b:ed:b7:a2:29:78:07:f1:16:ba:c1:d4: 5c:23:13:e3:0d:10:f6:67:e8:88:51:46:d9:d9:bf: 6b:c5:de:f5:b6:f4:c1:ab:09:39:a8:d7:a6:d8:7a: c2:90:b4:73:4b:6d:50:50:2a:04:63:90:65:17:c3: 85:ee:72:c5:79:f9:71:44:8b:01:74:74:fc:23:23: d5:62:2d:c2:96:de:e0:0a:41:81:fd:b1:6f:7b:2e: ff:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:CE:62:0E:0D:A8:1A:17:AA:7D:84:15:25:EF:EB:B9:01:3B:84:16 X509v3 Authority Key Identifier: keyid:0E:2E:7A:9C:F1:1C:69:2E:C8:E5:6F:03:52:7B:DF:92:FA:00:1A:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:74:78:cc:11:61:d4:ee:95:8e:1e:4b:9f:c3:11:be:cb:c6: 88:4e:8c:01:03:af:e6:e6:8e:a4:72:fb:0f:51:74:d0:ff:2c: ee:6d:67:4e:ff:00:88:a5:41:48:5b:fa:df:52:82:cf:f9:69: 7b:2b:37:d6:53:4c:30:7d:cf:1a:c7:46:59:ea:4d:b6:89:c9: 2c:ee:30:7c:d0:66:40:91:65:1c:26:fa:f5:b4:f6:45:77:ee: c3:fe:29:65:57:bc:cd:4b:89:71:4f:f5:a4:2a:77:9e:85:26: f8:af:14:35:8e:e0:2c:e5:ae:13:5b:08:77:36:3f:55:9e:9e: e0:a5:3a:f1:bc:83:83:d7:d0:07:fd:f2:a2:19:7f:29:90:5b: bf:f6:88:cd:2c:e8:73:98:23:4f:c1:03:21:47:a8:73:38:59: 87:96:9a:33:6f:ce:63:5a:ed:09:71:d8:d0:ae:5e:dd:84:0d: bd:94:df:a0:0f:78:fb:79:3d:b2:14:7a:c4:7a:c6:d0:55:ef: f4:5b:d4:90:e4:be:cd:bf:77:fa:1e:25:6e:d7:b0:cf:39:80: 40:05:aa:46:d4:01:55:6b:ef:c5:d7:39:dd:b8:03:d6:9f:f1: 9e:d9:a3:a7:f4:df:c7:f8:5c:43:70:02:8d:9b:c5:ea:b1:5b: 3e:d6:22:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI5I905eYIOFB/086CYQjvBO7frMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUyRTdBOUNGMTFDNjkyRUM4RTU2RjAzNTI3QkRGOTJG QTAwMUE0RTAeFw0yNjAzMjUxNjE2MDlaFw0yNjAzMjgyMjM0MDlaMDMxMTAvBgNV BAMTKEM2Q0U2MjBFMERBODFBMTdBQTdEODQxNTI1RUZFQkI5MDEzQjg0MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1VUo7tvdlGIoHJ4C/wf+N2ez5 eeZqXuMLFXiAFJUHyFo0t1an7GHuqOVpE8Nuq9meozXZ/o5Ud7v6pvmPaVxntudM aG+gQHUK7Us+S4BMzngfTLFmxNozn7jWz1m0oWRi8xYo8ODs/OTvYB1C44mJ/d41 tGLJ6hEaQRDsIv98p9gyHs0ce4Zl+lB4jIHIkyVzpU14H0n73CrCAmX3JM0DEt5n Jkz8J3vtt6IpeAfxFrrB1FwjE+MNEPZn6IhRRtnZv2vF3vW29MGrCTmo16bYesKQ tHNLbVBQKgRjkGUXw4XucsV5+XFEiwF0dPwjI9ViLcKW3uAKQYH9sW97Lv/JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxs5iDg2oGheqfYQVJe/ruQE7hBYwHwYDVR0j BBgwFoAUDi56nPEcaS7I5W8DUnvfkvoAGk4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDE5NTg5YS1kNTI1LTQwZmMtODk0YS0xMmU0NDAxMGUzZTQvMC8wRTJFN0E5Q0Yx MUM2OTJFQzhFNTZGMDM1MjdCREY5MkZBMDAxQTRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEUyRTdBOUNGMTFDNjkyRUM4RTU2RjAzNTI3QkRGOTJGQTAw MUE0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTAxOTU4OWEtZDUyNS00MGZjLTg5 NGEtMTJlNDQwMTBlM2U0LzAvMEUyRTdBOUNGMTFDNjkyRUM4RTU2RjAzNTI3QkRG OTJGQTAwMUE0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD50eMwRYdTulY4eS5/DEb7LxohOjAEDr+bm jqRy+w9RdND/LO5tZ07/AIilQUhb+t9Sgs/5aXsrN9ZTTDB9zxrHRlnqTbaJySzu MHzQZkCRZRwm+vW09kV37sP+KWVXvM1LiXFP9aQqd56FJvivFDWO4CzlrhNbCHc2 P1WenuClOvG8g4PX0Af98qIZfymQW7/2iM0s6HOYI0/BAyFHqHM4WYeWmjNvzmNa 7Qlx2NCuXt2EDb2U36APePt5PbIUesR6xtBV7/Rb1JDkvs2/d/oeJW7XsM85gEAF qkbUAVVr78XXOd24A9af8Z7Zo6f038f4XENwAo2bxeqxWz7WIvo= -----END CERTIFICATE-----Generated at Thu Mar 26 18:56:48 2026 by rpki-client