$ rpki-client -vvf repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E810D41602DB2D5449939EA97EB71C350841BC5D.mft File: E810D41602DB2D5449939EA97EB71C350841BC5D.mft (raw, json) Hash identifier: Sn3J0QyelVnmV7Cw8zbIeYPMA7Bax3YEN9SpgQ0SjWQ= Subject key identifier: E0:CE:28:90:AE:09:5F:C8:F1:7C:10:60:E3:B2:8F:A4:F4:CE:72:5A Authority key identifier: E8:10:D4:16:02:DB:2D:54:49:93:9E:A9:7E:B7:1C:35:08:41:BC:5D Certificate issuer: /CN=E810D41602DB2D5449939EA97EB71C350841BC5D Certificate serial: 7A6796903041CDB6284FFC209ED376A4BD1CDFF5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E810D41602DB2D5449939EA97EB71C350841BC5D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E810D41602DB2D5449939EA97EB71C350841BC5D.mft Manifest number: 0277 Signing time: Wed 25 Mar 2026 14:21:13 +0000 Manifest this update: Wed 25 Mar 2026 14:16:13 +0000 Manifest next update: Sun 29 Mar 2026 00:30:13 +0000 Files and hashes: 1: E810D41602DB2D5449939EA97EB71C350841BC5D.crl (hash: LqH5oHFbbEEU9jZfjHotEcYs+5XhdXZFxpbZltwkvuE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E810D41602DB2D5449939EA97EB71C350841BC5D.crl rsync://repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E810D41602DB2D5449939EA97EB71C350841BC5D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E810D41602DB2D5449939EA97EB71C350841BC5D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 00:30:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:67:96:90:30:41:cd:b6:28:4f:fc:20:9e:d3:76:a4:bd:1c:df:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E810D41602DB2D5449939EA97EB71C350841BC5D Validity Not Before: Mar 25 14:16:13 2026 GMT Not After : Mar 29 00:30:13 2026 GMT Subject: CN=E0CE2890AE095FC8F17C1060E3B28FA4F4CE725A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:46:05:d7:b6:38:22:a9:57:fe:52:9f:84:e1: e9:ca:78:4a:79:a3:eb:27:82:53:2b:2b:80:a0:0e: e0:98:c8:ec:1c:2b:d9:c5:e3:a6:99:80:de:a0:e6: f6:b6:54:8a:38:df:68:10:e1:77:c0:af:ea:6a:fb: 15:9c:d3:5f:63:c7:f4:10:61:b2:c0:a5:97:ed:63: 9b:6f:de:8c:1f:5b:4f:1b:26:8e:6d:a4:b5:30:0a: 66:4c:42:75:20:d1:e0:f6:f5:95:cd:9d:2a:36:20: a7:b7:e9:a0:14:c1:dd:50:0b:37:1f:f5:18:45:e8: 71:ff:7a:89:9f:33:b9:a8:2d:f6:f7:32:e7:35:2e: 74:05:a5:92:a6:4b:0a:5a:53:78:3b:9e:64:5b:d3: 85:77:e4:ce:48:d1:2e:c2:e4:64:21:37:e1:74:15: b1:40:64:17:e1:59:e7:77:8d:cc:84:92:db:7e:e5: 23:20:d6:b8:c7:ad:ee:02:e8:44:18:96:e2:c3:0c: fc:e7:ac:f3:7f:75:f7:61:18:04:d2:36:b4:ed:1c: 42:a0:73:5c:5e:e4:f0:54:97:86:ed:1c:9b:b9:c5: 36:91:69:64:77:fa:b2:b7:32:19:40:aa:0f:5e:c6: 34:2e:ff:29:75:48:b8:4f:3c:2b:fd:c1:c2:64:ea: d1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:CE:28:90:AE:09:5F:C8:F1:7C:10:60:E3:B2:8F:A4:F4:CE:72:5A X509v3 Authority Key Identifier: keyid:E8:10:D4:16:02:DB:2D:54:49:93:9E:A9:7E:B7:1C:35:08:41:BC:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E810D41602DB2D5449939EA97EB71C350841BC5D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E810D41602DB2D5449939EA97EB71C350841BC5D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E810D41602DB2D5449939EA97EB71C350841BC5D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:aa:1d:3b:3e:66:2c:d3:eb:53:85:11:00:a0:7f:2d:9a:09: 78:db:2f:bc:81:6c:75:c7:cc:5f:41:12:3f:7a:7a:b8:22:95: 5d:1f:b6:78:ae:da:d4:4c:fb:e8:fd:9b:d5:82:cd:70:c4:b7: de:a9:62:ac:76:7f:74:f4:ea:d0:bf:58:3d:8b:45:07:3e:1a: 0f:73:8d:e9:7a:e6:59:6a:3a:b8:33:73:c1:ac:20:16:cb:10: c4:bd:42:cb:e2:2c:c5:08:06:87:55:03:b4:64:bf:c4:08:4d: a9:a7:0d:af:a8:8e:5a:c6:4d:31:e8:46:ef:72:35:65:4c:13: d4:d6:2b:04:13:77:6e:45:d9:a8:de:c2:2d:0d:dd:dd:6a:7a: d6:a3:45:8e:40:18:7b:b6:a6:47:8d:35:a6:e2:f3:4e:8f:01: b1:8f:eb:6c:89:70:db:0e:c1:4d:c1:18:40:b6:b1:05:8c:92: a9:1e:fb:da:1c:5b:d5:12:10:97:45:6a:37:cc:2a:29:75:ee: fa:b3:95:3c:47:6b:35:8b:09:a1:0f:f2:10:a3:7e:68:cd:e3: 93:97:63:43:e5:5b:97:c2:26:b6:d6:ea:9c:ec:85:cb:0d:2d: 77:d9:93:8d:61:b3:15:27:46:8d:8e:eb:0f:41:58:a4:f6:55: d0:1c:51:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUemeWkDBBzbYoT/wgntN2pL0c3/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTgxMEQ0MTYwMkRCMkQ1NDQ5OTM5RUE5N0VCNzFDMzUw ODQxQkM1RDAeFw0yNjAzMjUxNDE2MTNaFw0yNjAzMjkwMDMwMTNaMDMxMTAvBgNV BAMTKEUwQ0UyODkwQUUwOTVGQzhGMTdDMTA2MEUzQjI4RkE0RjRDRTcyNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzRgXXtjgiqVf+Up+E4enKeEp5 o+snglMrK4CgDuCYyOwcK9nF46aZgN6g5va2VIo432gQ4XfAr+pq+xWc019jx/QQ YbLApZftY5tv3owfW08bJo5tpLUwCmZMQnUg0eD29ZXNnSo2IKe36aAUwd1QCzcf 9RhF6HH/eomfM7moLfb3Muc1LnQFpZKmSwpaU3g7nmRb04V35M5I0S7C5GQhN+F0 FbFAZBfhWed3jcyEktt+5SMg1rjHre4C6EQYluLDDPznrPN/dfdhGATSNrTtHEKg c1xe5PBUl4btHJu5xTaRaWR3+rK3MhlAqg9exjQu/yl1SLhPPCv9wcJk6tH/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4M4okK4JX8jxfBBg47KPpPTOclowHwYDVR0j BBgwFoAU6BDUFgLbLVRJk56pfrccNQhBvF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTkwNWI4Zi01YzBhLTQ1NzktYjRmNy0wOTI2N2I1NTg5NjgvMC9FODEwRDQxNjAy REIyRDU0NDk5MzlFQTk3RUI3MUMzNTA4NDFCQzVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTgxMEQ0MTYwMkRCMkQ1NDQ5OTM5RUE5N0VCNzFDMzUwODQx QkM1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk5MDViOGYtNWMwYS00NTc5LWI0 ZjctMDkyNjdiNTU4OTY4LzAvRTgxMEQ0MTYwMkRCMkQ1NDQ5OTM5RUE5N0VCNzFD MzUwODQxQkM1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJmqHTs+ZizT61OFEQCgfy2aCXjbL7yBbHXH zF9BEj96ergilV0ftniu2tRM++j9m9WCzXDEt96pYqx2f3T06tC/WD2LRQc+Gg9z jel65llqOrgzc8GsIBbLEMS9QsviLMUIBodVA7Rkv8QITamnDa+ojlrGTTHoRu9y NWVME9TWKwQTd25F2ajewi0N3d1qetajRY5AGHu2pkeNNabi806PAbGP62yJcNsO wU3BGEC2sQWMkqke+9ocW9USEJdFajfMKil17vqzlTxHazWLCaEP8hCjfmjN45OX Y0PlW5fCJrbW6pzshcsNLXfZk41hsxUnRo2O6w9BWKT2VdAcUeY= -----END CERTIFICATE-----Generated at Thu Mar 26 20:45:57 2026 by rpki-client