$ rpki-client -vvf repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft File: EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft (raw, json) Hash identifier: 7iajoOQ3ZcZS336JOaScqm7YKMrcQFYn1gvZFrje7cc= Subject key identifier: DC:11:DF:D5:A3:6A:EF:ED:92:67:1D:E7:F8:D7:11:9D:08:11:90:DD Authority key identifier: EA:5E:33:0B:F8:DC:FF:6D:09:DF:49:07:4B:46:B2:2E:BD:FB:D4:54 Certificate issuer: /CN=EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454 Certificate serial: 78306115289717AEB0FAAD77D3F26436F37C8A41 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft Manifest number: 0212 Signing time: Thu 26 Mar 2026 05:51:42 +0000 Manifest this update: Thu 26 Mar 2026 05:46:42 +0000 Manifest next update: Sun 29 Mar 2026 16:50:42 +0000 Files and hashes: 1: EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.crl (hash: 6bkZ68o4zZ2EXaejY7flxcOC5uLdCJ07aUzJNkEEXrE=) 2: 3230322e34372e39322e302f32332d3234203d3e203137393935.roa (hash: 80MS0ZuTW+5iQNzQYBDQPZfjWsQsANAR7yyCgQ7zGBU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.crl rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:30:61:15:28:97:17:ae:b0:fa:ad:77:d3:f2:64:36:f3:7c:8a:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454 Validity Not Before: Mar 26 05:46:42 2026 GMT Not After : Mar 29 16:50:42 2026 GMT Subject: CN=DC11DFD5A36AEFED92671DE7F8D7119D081190DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:51:e7:32:66:be:3c:6d:00:9f:f0:84:12:3d: 2d:af:c4:ee:ea:ab:99:19:73:26:35:0a:dd:2d:1e: 21:98:92:34:c4:7f:a6:85:64:76:69:8f:08:fe:9f: 16:5e:ba:f4:83:fb:b2:48:97:df:db:aa:9c:92:d7: 34:14:f3:fc:73:95:7e:c8:15:0b:e8:21:30:df:94: 01:db:ba:cd:bd:3b:dd:99:06:ec:fd:dc:84:de:d3: 3a:c0:ef:ee:86:5b:70:15:36:05:35:7c:1f:3c:08: 89:c6:75:a1:38:ec:4f:84:8a:a9:da:a9:ed:8c:49: 27:b3:35:ec:b4:4c:b9:72:a7:dc:96:46:f7:a6:35: 80:d7:cd:9d:25:39:0e:f8:23:aa:b9:70:29:9a:ef: af:18:ec:8a:1a:7f:a1:90:58:9b:f3:d8:5a:3b:81: 4c:22:8e:12:f9:50:ad:d1:3f:8b:fd:6e:d2:c2:48: 88:84:0d:45:b1:61:0a:7d:00:88:e9:d0:01:4e:23: 7e:14:d1:7b:c0:00:1e:d7:38:7b:bb:ad:d5:8f:f7: 21:9c:ef:9d:bf:1b:7b:15:74:cb:93:e2:37:f8:aa: 7e:49:6e:e9:95:67:ce:f3:de:4e:12:bb:8f:8f:b8: 07:d8:00:76:c7:8c:db:ce:c0:84:b9:65:70:77:5c: 80:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:11:DF:D5:A3:6A:EF:ED:92:67:1D:E7:F8:D7:11:9D:08:11:90:DD X509v3 Authority Key Identifier: keyid:EA:5E:33:0B:F8:DC:FF:6D:09:DF:49:07:4B:46:B2:2E:BD:FB:D4:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:ba:68:03:73:5a:fc:9d:51:7d:7e:0b:96:0e:e2:88:92:6b: e5:88:2f:5a:30:24:07:7d:c8:74:42:27:20:44:9e:09:77:c7: f9:e0:04:ff:40:af:58:84:36:7b:e8:75:be:8e:a8:79:db:96: 1a:1e:f2:60:08:2a:7b:be:da:0b:e5:3a:0d:85:94:29:01:73: e7:15:8d:ee:df:b9:3d:38:d6:da:a9:4f:f6:73:84:52:05:e8: 8b:cc:89:9a:62:db:fc:e4:ce:d9:8c:b5:1f:ed:65:10:2c:35: b3:32:c2:4f:ae:9b:09:e6:dc:2b:be:4f:60:c9:83:2c:03:37: 25:af:87:5b:de:d6:53:fc:16:10:27:c1:06:7a:35:1a:c4:ed: 73:03:06:bc:6c:e5:7d:4f:94:e6:14:6d:fe:e0:bd:d6:61:25: 9e:25:0b:0a:21:d9:52:f3:d6:49:31:05:e6:48:c6:16:2e:1d: 5c:8b:fc:df:33:64:3a:fe:af:f7:ba:03:f5:bf:93:00:b9:91: 3a:74:55:d5:e7:bd:4b:41:3f:34:64:51:df:64:64:ef:56:17: cc:15:3f:6a:31:82:81:cc:e9:5b:38:2f:fd:d6:d1:02:f7:1b: a1:0a:ec:e2:04:46:05:1a:d1:07:64:4d:e4:f1:ba:a6:94:ba: 18:6c:ed:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeDBhFSiXF66w+q130/JkNvN8ikEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUE1RTMzMEJGOERDRkY2RDA5REY0OTA3NEI0NkIyMkVC REZCRDQ1NDAeFw0yNjAzMjYwNTQ2NDJaFw0yNjAzMjkxNjUwNDJaMDMxMTAvBgNV BAMTKERDMTFERkQ1QTM2QUVGRUQ5MjY3MURFN0Y4RDcxMTlEMDgxMTkwREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXUecyZr48bQCf8IQSPS2vxO7q q5kZcyY1Ct0tHiGYkjTEf6aFZHZpjwj+nxZeuvSD+7JIl9/bqpyS1zQU8/xzlX7I FQvoITDflAHbus29O92ZBuz93ITe0zrA7+6GW3AVNgU1fB88CInGdaE47E+Eiqna qe2MSSezNey0TLlyp9yWRvemNYDXzZ0lOQ74I6q5cCma768Y7Ioaf6GQWJvz2Fo7 gUwijhL5UK3RP4v9btLCSIiEDUWxYQp9AIjp0AFOI34U0XvAAB7XOHu7rdWP9yGc 752/G3sVdMuT4jf4qn5JbumVZ87z3k4Su4+PuAfYAHbHjNvOwIS5ZXB3XIBbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3BHf1aNq7+2SZx3n+NcRnQgRkN0wHwYDVR0j BBgwFoAU6l4zC/jc/20J30kHS0ayLr371FQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzcxZGI5Yi03YzQwLTQ5NjYtOTkxYi01MTM4YjM2OTMyNDYvMC9FQTVFMzMwQkY4 RENGRjZEMDlERjQ5MDc0QjQ2QjIyRUJERkJENDU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUE1RTMzMEJGOERDRkY2RDA5REY0OTA3NEI0NkIyMkVCREZC RDQ1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM3MWRiOWItN2M0MC00OTY2LTk5 MWItNTEzOGIzNjkzMjQ2LzAvRUE1RTMzMEJGOERDRkY2RDA5REY0OTA3NEI0NkIy MkVCREZCRDQ1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACa6aANzWvydUX1+C5YO4oiSa+WIL1owJAd9 yHRCJyBEngl3x/ngBP9Ar1iENnvodb6OqHnblhoe8mAIKnu+2gvlOg2FlCkBc+cV je7fuT041tqpT/ZzhFIF6IvMiZpi2/zkztmMtR/tZRAsNbMywk+umwnm3Cu+T2DJ gywDNyWvh1ve1lP8FhAnwQZ6NRrE7XMDBrxs5X1PlOYUbf7gvdZhJZ4lCwoh2VLz 1kkxBeZIxhYuHVyL/N8zZDr+r/e6A/W/kwC5kTp0VdXnvUtBPzRkUd9kZO9WF8wV P2oxgoHM6Vs4L/3W0QL3G6EK7OIERgUa0QdkTeTxuqaUuhhs7dA= -----END CERTIFICATE-----Generated at Thu Mar 26 17:01:06 2026 by rpki-client