$ rpki-client -vvf repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.mft File: E0B3E049B031308B3778BB685FD3D149FA69DD3B.mft (raw, json) Hash identifier: iHGDYj83afSxFsf/CwYWLAvNCpNpYstxPCTyBLo/LCg= Subject key identifier: F9:29:6C:DF:FA:62:C2:CC:D3:1C:DF:F8:E3:74:45:FC:9C:0D:86:EB Authority key identifier: E0:B3:E0:49:B0:31:30:8B:37:78:BB:68:5F:D3:D1:49:FA:69:DD:3B Certificate issuer: /CN=E0B3E049B031308B3778BB685FD3D149FA69DD3B Certificate serial: 02A445247C4355EB16041FF96355242D9222D8E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0B3E049B031308B3778BB685FD3D149FA69DD3B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.mft Manifest number: 017E Signing time: Thu 26 Mar 2026 09:22:22 +0000 Manifest this update: Thu 26 Mar 2026 09:17:22 +0000 Manifest next update: Sun 29 Mar 2026 21:14:22 +0000 Files and hashes: 1: E0B3E049B031308B3778BB685FD3D149FA69DD3B.crl (hash: 7vhXwNju08zQGxlMxMmrYVYa6iwwnTwEhaAx9R0D8Ac=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.crl rsync://repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0B3E049B031308B3778BB685FD3D149FA69DD3B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:a4:45:24:7c:43:55:eb:16:04:1f:f9:63:55:24:2d:92:22:d8:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0B3E049B031308B3778BB685FD3D149FA69DD3B Validity Not Before: Mar 26 09:17:22 2026 GMT Not After : Mar 29 21:14:22 2026 GMT Subject: CN=F9296CDFFA62C2CCD31CDFF8E37445FC9C0D86EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c5:d6:39:68:eb:92:b2:38:ba:5a:67:a4:7e: f1:d1:4c:08:9a:e9:50:fe:98:d1:76:d0:60:bd:b9: c0:90:8c:9c:3c:89:e1:d7:63:d7:00:91:d1:64:2d: 8f:95:8b:e6:92:87:40:42:82:e1:29:d5:67:80:e1: 8c:d7:a6:55:1c:1b:94:cc:e8:a8:06:52:15:e1:b8: a7:ca:46:c9:f8:4e:3c:e1:cc:96:50:0b:a7:26:e1: d3:f8:11:3b:87:9f:99:49:be:c4:22:ca:7b:26:42: ad:22:12:fe:a8:16:e5:fc:de:28:bf:c9:ba:9c:00: 47:8d:ff:fc:37:46:e8:7b:39:86:86:46:56:a2:62: 55:32:0c:81:d8:bc:ed:04:6a:5a:73:9c:08:82:1b: 37:99:3b:ba:c4:ae:42:fc:48:92:4d:aa:29:8b:30: fc:e5:ee:7c:99:4e:77:e1:f9:c3:cf:ff:bb:09:6e: a7:79:38:ae:e1:93:30:26:4b:55:50:82:90:18:5a: 89:d5:b5:f5:ca:92:0d:05:ed:a3:cc:64:be:f1:d6: 68:ca:78:ff:d8:7c:0a:b8:00:14:d2:05:ee:94:9f: f5:f0:05:f5:fd:be:63:72:c5:b8:25:ab:6e:b7:c3: 34:4b:25:c7:6e:16:6f:fe:e6:16:fd:aa:9c:30:7b: e0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:29:6C:DF:FA:62:C2:CC:D3:1C:DF:F8:E3:74:45:FC:9C:0D:86:EB X509v3 Authority Key Identifier: keyid:E0:B3:E0:49:B0:31:30:8B:37:78:BB:68:5F:D3:D1:49:FA:69:DD:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0B3E049B031308B3778BB685FD3D149FA69DD3B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:f9:ee:8a:3a:65:57:f3:3a:7d:ec:62:24:e5:c9:03:c2:6b: 5b:b7:3b:82:4a:fd:f8:32:f5:d7:08:f2:1c:68:79:7e:fd:76: 66:f3:b1:26:39:53:29:0d:e1:7e:0d:37:2b:83:29:e7:8d:a4: e3:45:05:8f:69:cb:14:36:21:e6:62:af:d6:bf:36:11:2d:99: 95:ea:62:ff:b3:00:6b:e8:2a:86:6f:69:d4:28:8f:8d:8f:c4: 29:4e:4c:15:0e:eb:c8:59:de:56:a7:8c:8d:7e:17:a9:60:f3: 39:c0:0d:e6:e6:f7:09:e5:7b:50:ac:86:d4:e2:d5:71:41:7b: 4a:ab:31:0d:75:85:bd:48:a9:f0:48:70:97:ef:5e:ce:30:65: 3d:09:93:99:32:84:b1:64:ce:b9:15:29:19:21:f1:92:5f:e6: 26:2f:e6:af:8a:3d:11:96:d1:1d:f9:47:cc:b4:b6:6f:b4:c2: 48:3f:8a:84:fe:c0:1a:8b:c9:96:10:dc:12:3d:34:0e:9b:6d: 79:40:ec:09:a2:a4:4b:d6:22:be:f0:df:00:2a:c6:bc:c0:90: e2:21:3c:33:c6:eb:72:d2:37:b0:fb:d8:a8:99:57:68:6c:56: 1e:fa:cb:0c:65:6d:ef:74:0e:16:14:fd:2c:2f:bf:a7:ec:b9: da:18:7f:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAqRFJHxDVesWBB/5Y1UkLZIi2OUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBCM0UwNDlCMDMxMzA4QjM3NzhCQjY4NUZEM0QxNDlG QTY5REQzQjAeFw0yNjAzMjYwOTE3MjJaFw0yNjAzMjkyMTE0MjJaMDMxMTAvBgNV BAMTKEY5Mjk2Q0RGRkE2MkMyQ0NEMzFDREZGOEUzNzQ0NUZDOUMwRDg2RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8xdY5aOuSsji6WmekfvHRTAia 6VD+mNF20GC9ucCQjJw8ieHXY9cAkdFkLY+Vi+aSh0BCguEp1WeA4YzXplUcG5TM 6KgGUhXhuKfKRsn4TjzhzJZQC6cm4dP4ETuHn5lJvsQiynsmQq0iEv6oFuX83ii/ ybqcAEeN//w3Ruh7OYaGRlaiYlUyDIHYvO0EalpznAiCGzeZO7rErkL8SJJNqimL MPzl7nyZTnfh+cPP/7sJbqd5OK7hkzAmS1VQgpAYWonVtfXKkg0F7aPMZL7x1mjK eP/YfAq4ABTSBe6Un/XwBfX9vmNyxbglq263wzRLJcduFm/+5hb9qpwwe+BpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+Sls3/piwszTHN/443RF/JwNhuswHwYDVR0j BBgwFoAU4LPgSbAxMIs3eLtoX9PRSfpp3TswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MWM3ZTgzMy02YzU0LTRlMGItODMxYy0xYzFhNzEwY2U4ZTMvMC9FMEIzRTA0OUIw MzEzMDhCMzc3OEJCNjg1RkQzRDE0OUZBNjlERDNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTBCM0UwNDlCMDMxMzA4QjM3NzhCQjY4NUZEM0QxNDlGQTY5 REQzQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjFjN2U4MzMtNmM1NC00ZTBiLTgz MWMtMWMxYTcxMGNlOGUzLzAvRTBCM0UwNDlCMDMxMzA4QjM3NzhCQjY4NUZEM0Qx NDlGQTY5REQzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALz57oo6ZVfzOn3sYiTlyQPCa1u3O4JK/fgy 9dcI8hxoeX79dmbzsSY5UykN4X4NNyuDKeeNpONFBY9pyxQ2IeZir9a/NhEtmZXq Yv+zAGvoKoZvadQoj42PxClOTBUO68hZ3lanjI1+F6lg8znADebm9wnle1CshtTi 1XFBe0qrMQ11hb1IqfBIcJfvXs4wZT0Jk5kyhLFkzrkVKRkh8ZJf5iYv5q+KPRGW 0R35R8y0tm+0wkg/ioT+wBqLyZYQ3BI9NA6bbXlA7AmipEvWIr7w3wAqxrzAkOIh PDPG63LSN7D72KiZV2hsVh76ywxlbe90DhYU/Swvv6fsudoYf2w= -----END CERTIFICATE-----Generated at Thu Mar 26 17:11:33 2026 by rpki-client