$ rpki-client -vvf repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.mft File: E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.mft (raw, json) Hash identifier: OvVDNi9N3ZqNBM25R0PQAGirwL1+/llIFuKBZXQVF98= Subject key identifier: 96:99:3E:19:A3:B5:53:31:D0:56:21:5F:A8:19:A7:E0:FC:38:9D:7B Authority key identifier: E3:5D:44:33:8E:59:37:B4:AE:26:9D:DD:CD:A4:0A:28:F8:7F:3E:C8 Certificate issuer: /CN=E35D44338E5937B4AE269DDDCDA40A28F87F3EC8 Certificate serial: 1AF8A0934E1D6396980709A72BF108A51425FABB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.mft Manifest number: 0249 Signing time: Tue 24 Mar 2026 11:22:04 +0000 Manifest this update: Tue 24 Mar 2026 11:17:04 +0000 Manifest next update: Fri 27 Mar 2026 18:05:04 +0000 Files and hashes: 1: E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.crl (hash: mEJETlWOinkRc117dfG+EYwhTU0Wqyw5LGfnaT9UXEQ=) 2: 3130332e32312e3139352e302f32342d3234203d3e20313439393637.roa (hash: ztOieajHr1k+CIYjNgErkUbe6vEvP2EXx+nQ8S+WL90=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.crl rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 18:05:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:f8:a0:93:4e:1d:63:96:98:07:09:a7:2b:f1:08:a5:14:25:fa:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E35D44338E5937B4AE269DDDCDA40A28F87F3EC8 Validity Not Before: Mar 24 11:17:04 2026 GMT Not After : Mar 27 18:05:04 2026 GMT Subject: CN=96993E19A3B55331D056215FA819A7E0FC389D7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ae:c0:36:12:4c:08:72:da:e0:3e:2e:36:5c: bf:48:9c:ff:19:94:16:a2:16:f6:ab:23:59:66:98: 78:46:74:0c:d1:57:a9:f0:45:3a:64:e4:31:9d:02: f1:a8:64:f4:98:af:b2:0f:e0:9e:bb:da:bb:66:7f: 26:e0:b5:1b:07:38:0b:7f:93:c0:fd:96:9b:9b:1a: 5b:24:f2:48:74:c9:c7:7a:21:0b:e5:5e:05:f6:7c: c3:6f:bd:fc:ba:1a:43:46:f2:56:fa:c0:9e:97:0c: 2c:8c:96:5b:b8:b5:53:28:1d:a7:39:4b:ba:e8:5d: 1a:a9:45:42:34:8a:2e:85:32:b0:78:9d:f4:43:02: 15:dd:ec:1a:04:68:a0:d8:05:f6:ef:0f:af:e2:4f: c5:05:89:84:5a:52:a7:9d:fa:c2:1b:f1:40:82:38: 85:f8:d3:4f:4f:73:4b:54:76:61:44:b1:62:d7:ee: 9c:71:11:92:69:45:85:8f:8b:cc:d8:6a:e1:ab:b1: e8:cf:e9:94:b0:27:f0:9f:c1:a0:85:c5:13:e3:cf: 18:0d:43:20:c3:f8:21:ba:0b:89:dc:bf:21:d3:34: f3:88:90:96:9b:d0:96:c2:7a:8b:7f:ae:06:da:61: d5:3f:5f:39:e7:8c:11:5b:1f:e9:30:50:43:7f:43: dd:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:99:3E:19:A3:B5:53:31:D0:56:21:5F:A8:19:A7:E0:FC:38:9D:7B X509v3 Authority Key Identifier: keyid:E3:5D:44:33:8E:59:37:B4:AE:26:9D:DD:CD:A4:0A:28:F8:7F:3E:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:b8:26:6e:1d:73:e3:eb:fc:68:81:e7:7b:92:ea:d5:c9:f1: 20:2d:c4:da:13:7a:4d:64:8b:d9:2d:cd:e9:b3:0e:d7:c1:f9: f5:f5:36:59:7c:52:be:c3:aa:08:f3:55:83:5c:32:72:cc:1a: 4e:91:72:c7:7a:2c:12:15:37:4d:4b:aa:fd:87:a0:1e:57:99: 17:79:90:77:3a:93:b0:23:0f:84:62:7e:50:e4:6e:7f:c3:31: a2:53:42:95:56:2e:74:7e:2e:2e:66:10:86:20:7c:f2:73:a8: ec:2f:db:96:fa:eb:8c:fe:b7:20:f9:62:28:a7:27:b0:75:6c: 36:fb:0f:7f:85:74:f8:61:c5:b0:ca:53:aa:41:62:3f:f0:97: c4:52:e8:6a:06:cd:de:43:d1:02:3d:27:ef:c7:3f:96:cb:7e: bc:bb:d6:0e:17:64:05:f9:e1:89:7d:27:fb:f1:07:5b:03:2a: 17:b9:08:53:4c:d6:19:7c:70:34:54:05:20:b6:5e:c9:ac:6a: 91:b2:b0:d7:22:ac:83:e3:cb:02:b0:44:dc:f1:23:ac:dc:a2: 00:52:26:f3:b1:7b:ae:59:f2:ef:fa:e9:45:60:a6:ee:fa:27: 53:6b:3b:3b:2c:94:99:ce:92:e2:c2:f6:44:3a:23:25:6d:b6: 9c:16:9b:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGvigk04dY5aYBwmnK/EIpRQl+rswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM1RDQ0MzM4RTU5MzdCNEFFMjY5REREQ0RBNDBBMjhG ODdGM0VDODAeFw0yNjAzMjQxMTE3MDRaFw0yNjAzMjcxODA1MDRaMDMxMTAvBgNV BAMTKDk2OTkzRTE5QTNCNTUzMzFEMDU2MjE1RkE4MTlBN0UwRkMzODlEN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1rsA2EkwIctrgPi42XL9InP8Z lBaiFvarI1lmmHhGdAzRV6nwRTpk5DGdAvGoZPSYr7IP4J672rtmfybgtRsHOAt/ k8D9lpubGlsk8kh0ycd6IQvlXgX2fMNvvfy6GkNG8lb6wJ6XDCyMllu4tVMoHac5 S7roXRqpRUI0ii6FMrB4nfRDAhXd7BoEaKDYBfbvD6/iT8UFiYRaUqed+sIb8UCC OIX4009Pc0tUdmFEsWLX7pxxEZJpRYWPi8zYauGrsejP6ZSwJ/CfwaCFxRPjzxgN QyDD+CG6C4ncvyHTNPOIkJab0JbCeot/rgbaYdU/XznnjBFbH+kwUEN/Q91nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlpk+GaO1UzHQViFfqBmn4Pw4nXswHwYDVR0j BBgwFoAU411EM45ZN7SuJp3dzaQKKPh/PsgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjgzYjI3Yy1hNzMwLTQwMDItOTFiOC1kMDM2NmRmYWM3N2UvMC9FMzVENDQzMzhF NTkzN0I0QUUyNjlERERDREE0MEEyOEY4N0YzRUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTM1RDQ0MzM4RTU5MzdCNEFFMjY5REREQ0RBNDBBMjhGODdG M0VDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTY4M2IyN2MtYTczMC00MDAyLTkx YjgtZDAzNjZkZmFjNzdlLzAvRTM1RDQ0MzM4RTU5MzdCNEFFMjY5REREQ0RBNDBB MjhGODdGM0VDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAG4Jm4dc+Pr/GiB53uS6tXJ8SAtxNoTek1k i9ktzemzDtfB+fX1Nll8Ur7DqgjzVYNcMnLMGk6Rcsd6LBIVN01Lqv2HoB5XmRd5 kHc6k7AjD4RiflDkbn/DMaJTQpVWLnR+Li5mEIYgfPJzqOwv25b664z+tyD5Yiin J7B1bDb7D3+FdPhhxbDKU6pBYj/wl8RS6GoGzd5D0QI9J+/HP5bLfry71g4XZAX5 4Yl9J/vxB1sDKhe5CFNM1hl8cDRUBSC2XsmsapGysNcirIPjywKwRNzxI6zcogBS JvOxe65Z8u/66UVgpu76J1NrOzsslJnOkuLC9kQ6IyVttpwWmwE= -----END CERTIFICATE-----Generated at Thu Mar 26 11:29:39 2026 by rpki-client