$ rpki-client -vvf repo-rpki.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/0/E9DF36C39D2A9CB3B5EE9B37234A45A0D2E0D59E.mft File: E9DF36C39D2A9CB3B5EE9B37234A45A0D2E0D59E.mft (raw, json) Hash identifier: hJhWWclSrhAHFmT3hq4ftXl4TpW2aeHTyoU8bE6vek8= Subject key identifier: 10:16:7B:92:A5:7B:25:A2:F4:D1:5C:A5:81:5E:88:CF:E6:46:3E:9A Authority key identifier: E9:DF:36:C3:9D:2A:9C:B3:B5:EE:9B:37:23:4A:45:A0:D2:E0:D5:9E Certificate issuer: /CN=E9DF36C39D2A9CB3B5EE9B37234A45A0D2E0D59E Certificate serial: 0FB092B861462A488BDD90E57760ABBCA3EB4C6F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9DF36C39D2A9CB3B5EE9B37234A45A0D2E0D59E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/0/E9DF36C39D2A9CB3B5EE9B37234A45A0D2E0D59E.mft Manifest number: 0E Signing time: Thu 26 Mar 2026 20:41:55 +0000 Manifest this update: Thu 26 Mar 2026 20:36:55 +0000 Manifest next update: Sun 29 Mar 2026 21:13:55 +0000 Files and hashes: 1: E9DF36C39D2A9CB3B5EE9B37234A45A0D2E0D59E.crl (hash: q4y91ZXJkbn8hWidstxddfQthg0DHHInQQHZcJ2iwy8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/0/E9DF36C39D2A9CB3B5EE9B37234A45A0D2E0D59E.crl rsync://repo-rpki.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/0/E9DF36C39D2A9CB3B5EE9B37234A45A0D2E0D59E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9DF36C39D2A9CB3B5EE9B37234A45A0D2E0D59E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 21:13:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:b0:92:b8:61:46:2a:48:8b:dd:90:e5:77:60:ab:bc:a3:eb:4c:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9DF36C39D2A9CB3B5EE9B37234A45A0D2E0D59E Validity Not Before: Mar 26 20:36:55 2026 GMT Not After : Mar 29 21:13:55 2026 GMT Subject: CN=10167B92A57B25A2F4D15CA5815E88CFE6463E9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:90:8a:7a:08:5c:ed:e1:67:aa:08:38:c1:22: b4:c9:37:dc:3a:46:70:4e:73:15:7e:0e:89:f6:6b: d0:c3:9f:10:3f:88:ed:de:a9:0a:c6:d5:1d:eb:d7: ec:3d:5d:7b:e3:1e:74:aa:c7:ca:e9:a9:b5:d0:c5: c9:29:63:46:2f:70:6a:83:69:dd:d8:82:64:62:8e: 63:4a:81:cd:b9:c8:e0:06:24:29:f6:9b:f8:12:a1: ab:55:8f:e9:db:31:27:1e:3b:89:b4:ec:50:d7:c8: a2:39:f8:64:7d:8b:80:a8:2d:65:62:2f:f0:f3:d7: e7:8d:29:9c:df:85:6d:e0:0b:7f:6f:68:75:16:4c: f2:93:57:d5:8d:76:a5:ff:f4:12:4f:6e:21:d9:7b: a6:2d:c2:9e:f9:28:d2:40:80:05:56:54:8a:0b:d9: ed:84:2e:28:80:f4:9e:7e:58:a0:53:bd:c8:28:f7: 12:26:5b:1c:b6:35:6c:1a:1e:1d:29:1f:8e:d6:c7: 83:30:9b:f4:f2:23:a8:5c:30:a9:d8:3b:5e:ef:d2: dd:47:72:71:84:3e:8f:53:4d:ae:cb:6c:58:a7:01: 5c:b2:75:f6:19:d5:08:b4:e4:49:f3:1a:d7:b4:d1: 51:8f:73:e9:9c:34:25:87:46:98:30:05:c5:1d:4a: f6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:16:7B:92:A5:7B:25:A2:F4:D1:5C:A5:81:5E:88:CF:E6:46:3E:9A X509v3 Authority Key Identifier: keyid:E9:DF:36:C3:9D:2A:9C:B3:B5:EE:9B:37:23:4A:45:A0:D2:E0:D5:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/0/E9DF36C39D2A9CB3B5EE9B37234A45A0D2E0D59E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9DF36C39D2A9CB3B5EE9B37234A45A0D2E0D59E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/0/E9DF36C39D2A9CB3B5EE9B37234A45A0D2E0D59E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:e8:3e:b4:00:a1:b2:f1:a6:63:52:b8:82:a1:b4:6d:bc:07: 09:36:9d:b7:21:78:bc:87:5a:b4:ae:41:b7:30:c6:f2:51:79: 71:17:a2:2b:f8:37:c5:42:f1:52:bb:e8:df:6f:ea:d9:8e:42: 65:45:49:6a:3f:41:01:47:cd:83:2b:cf:17:36:f4:ad:68:80: e2:41:15:9a:97:07:17:fc:61:22:8e:2b:6e:a1:eb:fe:b9:e4: c0:6a:59:97:fc:b7:11:e2:cc:5f:9a:f9:d1:86:77:76:29:4e: 0f:ad:e3:40:49:bf:2e:96:51:ce:9f:f5:65:be:7f:dd:6d:b8: ac:44:25:1c:fd:db:42:d7:e5:88:a5:0b:de:8b:50:07:03:a4: 76:86:6f:2f:21:a3:ea:39:20:96:da:f5:13:ce:5f:f3:72:d9: 23:ba:08:da:49:14:13:31:45:37:3f:63:bb:9b:ca:97:b4:a2: bf:52:4b:73:4f:67:ef:49:f2:18:be:87:d1:e2:96:27:74:26: e4:e6:ae:1e:c6:36:57:2c:f6:e1:b2:b3:6c:b2:61:b7:3c:cf: 37:38:3d:a1:d7:a3:81:fc:a2:1d:75:57:87:12:69:28:56:1a: 20:d4:29:8c:55:98:25:f3:81:45:81:2b:cb:3a:d9:ee:5a:8e: 89:5a:b4:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD7CSuGFGKkiL3ZDld2CrvKPrTG8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlERjM2QzM5RDJBOUNCM0I1RUU5QjM3MjM0QTQ1QTBE MkUwRDU5RTAeFw0yNjAzMjYyMDM2NTVaFw0yNjAzMjkyMTEzNTVaMDMxMTAvBgNV BAMTKDEwMTY3QjkyQTU3QjI1QTJGNEQxNUNBNTgxNUU4OENGRTY0NjNFOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKkIp6CFzt4WeqCDjBIrTJN9w6 RnBOcxV+Don2a9DDnxA/iO3eqQrG1R3r1+w9XXvjHnSqx8rpqbXQxckpY0YvcGqD ad3YgmRijmNKgc25yOAGJCn2m/gSoatVj+nbMSceO4m07FDXyKI5+GR9i4CoLWVi L/Dz1+eNKZzfhW3gC39vaHUWTPKTV9WNdqX/9BJPbiHZe6Ytwp75KNJAgAVWVIoL 2e2ELiiA9J5+WKBTvcgo9xImWxy2NWwaHh0pH47Wx4Mwm/TyI6hcMKnYO17v0t1H cnGEPo9TTa7LbFinAVyydfYZ1Qi05EnzGte00VGPc+mcNCWHRpgwBcUdSvYtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEBZ7kqV7JaL00VylgV6Iz+ZGPpowHwYDVR0j BBgwFoAU6d82w50qnLO17ps3I0pFoNLg1Z4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDY0OWVmNS1jNDg0LTRmNDEtYTA1NC1kNmNlMzljMWY1MDYvMC9FOURGMzZDMzlE MkE5Q0IzQjVFRTlCMzcyMzRBNDVBMEQyRTBENTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTlERjM2QzM5RDJBOUNCM0I1RUU5QjM3MjM0QTQ1QTBEMkUw RDU5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTA2NDllZjUtYzQ4NC00ZjQxLWEw NTQtZDZjZTM5YzFmNTA2LzAvRTlERjM2QzM5RDJBOUNCM0I1RUU5QjM3MjM0QTQ1 QTBEMkUwRDU5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMzoPrQAobLxpmNSuIKhtG28Bwk2nbcheLyH WrSuQbcwxvJReXEXoiv4N8VC8VK76N9v6tmOQmVFSWo/QQFHzYMrzxc29K1ogOJB FZqXBxf8YSKOK26h6/655MBqWZf8txHizF+a+dGGd3YpTg+t40BJvy6WUc6f9WW+ f91tuKxEJRz920LX5YilC96LUAcDpHaGby8ho+o5IJba9RPOX/Ny2SO6CNpJFBMx RTc/Y7ubype0or9SS3NPZ+9J8hi+h9Hilid0JuTmrh7GNlcs9uGys2yyYbc8zzc4 PaHXo4H8oh11V4cSaShWGiDUKYxVmCXzgUWBK8s62e5ajolatLQ= -----END CERTIFICATE-----Generated at Fri Mar 27 00:17:41 2026 by rpki-client