$ rpki-client -vvf repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft File: 020EA2304929066809CA6F723574798639D77438.mft (raw, json) Hash identifier: fj7LCMyWWdClHiMpjJGvn4J2VSE6CfQ4Z5W/nH6rskQ= Subject key identifier: 42:24:37:1A:41:4B:3F:ED:A5:11:8E:B9:EC:D1:3A:F6:CA:16:A1:A5 Authority key identifier: 02:0E:A2:30:49:29:06:68:09:CA:6F:72:35:74:79:86:39:D7:74:38 Certificate issuer: /CN=020EA2304929066809CA6F723574798639D77438 Certificate serial: 1ED32E9BFA9372514AE1177D71233FDB13C9DC32 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/020EA2304929066809CA6F723574798639D77438.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft Manifest number: 012D Signing time: Wed 25 Mar 2026 09:30:46 +0000 Manifest this update: Wed 25 Mar 2026 09:25:46 +0000 Manifest next update: Sat 28 Mar 2026 12:57:46 +0000 Files and hashes: 1: 3136302e32352e35352e302f32342d3234203d3e20313533303630.roa (hash: MP77i5+UkMfE9Efc/VCdIpK7dS6PJg0LKmWtQikmXHg=) 2: 3136302e32352e35342e302f32342d3234203d3e20313533303630.roa (hash: F+hf6H0tQ4o5DL4EaEr99NgmrD9BB/0HbFh2DX09QTE=) 3: 020EA2304929066809CA6F723574798639D77438.crl (hash: +xe0vHxkuDkEug66QOxQfUQsNCs3/cI+2HdPCAPuYYE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.crl rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/020EA2304929066809CA6F723574798639D77438.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 12:57:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:d3:2e:9b:fa:93:72:51:4a:e1:17:7d:71:23:3f:db:13:c9:dc:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=020EA2304929066809CA6F723574798639D77438 Validity Not Before: Mar 25 09:25:46 2026 GMT Not After : Mar 28 12:57:46 2026 GMT Subject: CN=4224371A414B3FEDA5118EB9ECD13AF6CA16A1A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:09:f6:d1:a5:bb:54:69:e6:f8:8a:95:15:e0: a8:da:9f:3a:9f:97:17:c4:6c:81:5c:a6:a8:d1:c7: cb:a8:81:c6:1d:1e:d2:2e:28:f0:c5:a7:75:0c:e5: 2b:bb:cb:01:a7:ba:58:a2:9e:4c:2d:f7:d0:c9:5d: 34:df:87:5f:51:17:92:33:4d:a9:36:44:d9:df:79: fd:9b:ed:de:1c:9b:69:c2:1b:f4:dc:a0:21:69:d5: 33:dd:90:f9:ee:26:85:17:4d:59:23:45:66:3b:ea: 5f:e7:84:17:b7:63:d0:96:ef:58:04:34:a3:e3:a2: 03:99:e3:8a:99:e6:6c:e8:28:74:82:fa:94:9d:62: 16:71:5d:ee:99:36:01:a7:29:57:54:9c:57:da:5f: 1d:54:54:95:09:76:44:bb:26:7d:33:a7:7e:f8:f2: a5:f9:0b:61:1e:b1:1a:fb:dd:89:6d:39:8c:38:b0: 2a:41:9d:1f:34:d7:65:ee:55:82:57:5c:9d:6a:ff: 83:41:7c:93:15:ec:0f:fc:a7:5c:5f:b2:a4:31:26: cc:5e:39:98:2d:f1:62:b2:9d:52:80:7c:5a:f1:cc: 3e:4d:37:bf:f1:0e:56:c9:10:5f:3d:e9:0a:3d:f6: 6c:ad:18:8e:3f:de:02:d6:6e:ec:69:2a:27:9a:9b: 60:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:24:37:1A:41:4B:3F:ED:A5:11:8E:B9:EC:D1:3A:F6:CA:16:A1:A5 X509v3 Authority Key Identifier: keyid:02:0E:A2:30:49:29:06:68:09:CA:6F:72:35:74:79:86:39:D7:74:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/020EA2304929066809CA6F723574798639D77438.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:69:1a:00:66:d6:de:57:8b:b8:24:f7:2b:82:8f:01:c7:43: 08:1b:31:ee:eb:82:9e:37:c6:62:de:c2:d1:c0:58:6a:2f:d8: 44:b1:f2:94:09:e9:d1:43:a6:84:4c:31:2f:f9:b9:b3:7a:bf: e6:80:05:15:6a:34:b9:11:67:c4:07:a8:a3:5e:05:aa:6e:04: 8f:92:a6:86:66:31:63:8f:cb:db:c6:1c:fb:66:c9:e7:cf:f1: 9e:18:d0:45:90:0a:6e:74:b4:0d:5c:4d:d2:be:1c:ce:34:ef: 1a:c6:9c:06:1f:e1:44:f7:ba:a2:c0:4a:7c:1c:5a:43:39:35: bf:f7:a2:e8:ba:63:5d:e2:95:8d:a0:6c:1e:06:f1:8c:29:e7: 23:00:69:1b:13:bf:8f:4e:58:9a:32:35:f0:00:81:95:86:15: 79:da:f1:f5:25:ef:c3:44:e0:10:48:87:91:7f:21:ba:22:ec: e5:2e:93:dd:ce:ea:32:e5:1f:2e:06:ae:55:9d:40:ba:c3:ed: 4c:68:ae:7e:50:ec:da:91:b0:72:cb:e7:6d:85:87:b7:c5:25: 45:9f:45:38:7e:f6:92:ba:4f:8f:b8:f6:ac:58:00:e1:50:47: 32:9d:6a:cc:8a:b7:7e:7c:77:0f:5a:06:9c:b2:16:ae:55:5f: 7a:00:be:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHtMum/qTclFK4Rd9cSM/2xPJ3DIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIwRUEyMzA0OTI5MDY2ODA5Q0E2RjcyMzU3NDc5ODYz OUQ3NzQzODAeFw0yNjAzMjUwOTI1NDZaFw0yNjAzMjgxMjU3NDZaMDMxMTAvBgNV BAMTKDQyMjQzNzFBNDE0QjNGRURBNTExOEVCOUVDRDEzQUY2Q0ExNkExQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClCfbRpbtUaeb4ipUV4Kjanzqf lxfEbIFcpqjRx8uogcYdHtIuKPDFp3UM5Su7ywGnuliinkwt99DJXTTfh19RF5Iz Tak2RNnfef2b7d4cm2nCG/TcoCFp1TPdkPnuJoUXTVkjRWY76l/nhBe3Y9CW71gE NKPjogOZ44qZ5mzoKHSC+pSdYhZxXe6ZNgGnKVdUnFfaXx1UVJUJdkS7Jn0zp374 8qX5C2EesRr73YltOYw4sCpBnR8012XuVYJXXJ1q/4NBfJMV7A/8p1xfsqQxJsxe OZgt8WKynVKAfFrxzD5NN7/xDlbJEF896Qo99mytGI4/3gLWbuxpKieam2BHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQiQ3GkFLP+2lEY657NE69soWoaUwHwYDVR0j BBgwFoAUAg6iMEkpBmgJym9yNXR5hjnXdDgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWEyNmExMC01OGU4LTQzYzctOTQ3ZS03MjIxNzNkNjY2MTQvMC8wMjBFQTIzMDQ5 MjkwNjY4MDlDQTZGNzIzNTc0Nzk4NjM5RDc3NDM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDIwRUEyMzA0OTI5MDY2ODA5Q0E2RjcyMzU3NDc5ODYzOUQ3 NzQzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWVhMjZhMTAtNThlOC00M2M3LTk0 N2UtNzIyMTczZDY2NjE0LzAvMDIwRUEyMzA0OTI5MDY2ODA5Q0E2RjcyMzU3NDc5 ODYzOUQ3NzQzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADRpGgBm1t5Xi7gk9yuCjwHHQwgbMe7rgp43 xmLewtHAWGov2ESx8pQJ6dFDpoRMMS/5ubN6v+aABRVqNLkRZ8QHqKNeBapuBI+S poZmMWOPy9vGHPtmyefP8Z4Y0EWQCm50tA1cTdK+HM407xrGnAYf4UT3uqLASnwc WkM5Nb/3oui6Y13ilY2gbB4G8Ywp5yMAaRsTv49OWJoyNfAAgZWGFXna8fUl78NE 4BBIh5F/Iboi7OUuk93O6jLlHy4GrlWdQLrD7Uxorn5Q7NqRsHLL522Fh7fFJUWf RTh+9pK6T4+49qxYAOFQRzKdasyKt358dw9aBpyyFq5VX3oAvkE= -----END CERTIFICATE-----Generated at Thu Mar 26 19:50:37 2026 by rpki-client