$ rpki-client -vvf repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.mft File: E42B0752D5FFAB254C3F0E221499F67420870FEB.mft (raw, json) Hash identifier: t4IacG6fH1+MW9H3Cktvbx2xCCv4n1O/OCM5Wjcnmx4= Subject key identifier: E1:18:EE:AD:DE:D8:E7:D4:B8:17:09:08:BB:8D:EA:41:B9:3E:93:80 Authority key identifier: E4:2B:07:52:D5:FF:AB:25:4C:3F:0E:22:14:99:F6:74:20:87:0F:EB Certificate issuer: /CN=E42B0752D5FFAB254C3F0E221499F67420870FEB Certificate serial: 6D2E3899C2E0836A9B9175CED229CDEE9B2E0F98 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E42B0752D5FFAB254C3F0E221499F67420870FEB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.mft Manifest number: 04E4 Signing time: Wed 25 Mar 2026 14:01:23 +0000 Manifest this update: Wed 25 Mar 2026 13:56:23 +0000 Manifest next update: Sat 28 Mar 2026 15:33:23 +0000 Files and hashes: 1: 323430323a646130303a3a2f33322d3438203d3e203234353236.roa (hash: KXkQEzDE7eAOGwkwjqYSUBJ2gO8yBncemPnpiy3ztzA=) 2: 3230322e35382e3136302e302f32302d3234203d3e203234353236.roa (hash: U5G6WyuhUeeAyAkhv6VtLWLCxLc3eTUGqsMy7Fb3zes=) 3: 3230322e35382e3137362e302f32312d3234203d3e203234353236.roa (hash: TiBDscIwDM8LXa+oZsdSozLCIgCynFE1SJZ86LD1GBs=) 4: E42B0752D5FFAB254C3F0E221499F67420870FEB.crl (hash: fbNohp9MHtYutts992kKv45moYq1kfrivw9xa7RDHBE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.crl rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E42B0752D5FFAB254C3F0E221499F67420870FEB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 15:33:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:2e:38:99:c2:e0:83:6a:9b:91:75:ce:d2:29:cd:ee:9b:2e:0f:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E42B0752D5FFAB254C3F0E221499F67420870FEB Validity Not Before: Mar 25 13:56:23 2026 GMT Not After : Mar 28 15:33:23 2026 GMT Subject: CN=E118EEADDED8E7D4B8170908BB8DEA41B93E9380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:55:01:8c:03:24:ba:c6:0f:e7:a3:a1:59:53: 44:5d:f2:08:9c:91:72:b0:ca:20:58:8b:e6:86:4d: 0b:1f:af:7b:cc:9f:49:03:67:f1:9d:7a:e9:5b:98: 73:ab:48:ed:e8:67:b8:3c:69:e6:67:60:fd:9a:69: ae:e1:c7:da:50:ae:67:81:0c:df:e3:bb:41:62:d1: dd:ae:a6:f6:d5:6a:b8:d1:dd:17:97:3c:59:c0:bc: 3f:73:c8:98:43:61:97:0c:90:2a:8c:15:03:b3:9c: 11:35:63:d3:c8:f0:e7:75:be:46:b2:f9:b5:cb:01: e6:8f:cb:58:44:96:ce:df:42:62:5e:93:a8:31:1b: ec:59:15:ae:f5:e0:43:a9:57:5b:7c:b2:d0:22:5c: 07:d5:52:9a:c2:33:6c:73:d7:6b:34:e3:60:68:b8: 2e:01:74:4a:14:ac:f0:5c:84:c9:08:30:86:3a:8c: 9e:86:3c:b9:89:b2:46:4d:ac:73:53:86:74:94:8a: 7a:48:d2:36:bd:30:19:ee:ba:c3:d6:75:d8:1b:bf: 5d:91:88:f8:56:85:9d:fb:68:ea:ce:e9:5f:3c:93: a4:e6:05:52:db:4f:aa:6d:20:72:7d:37:48:a1:5c: f3:d5:57:0d:5e:55:73:32:27:d5:7c:97:ed:54:bf: 23:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:18:EE:AD:DE:D8:E7:D4:B8:17:09:08:BB:8D:EA:41:B9:3E:93:80 X509v3 Authority Key Identifier: keyid:E4:2B:07:52:D5:FF:AB:25:4C:3F:0E:22:14:99:F6:74:20:87:0F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E42B0752D5FFAB254C3F0E221499F67420870FEB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:a1:d8:07:ed:d4:35:12:14:ea:36:04:69:89:53:b4:6a:06: 49:9a:40:54:79:84:2c:18:0d:eb:80:e8:2b:aa:c3:2e:66:0b: b0:b3:20:81:c6:9c:a4:ca:d5:b1:35:bb:68:5d:0c:8c:b3:41: 88:58:46:bb:46:ee:fa:ef:60:05:c1:c8:69:b5:68:b5:f0:d3: cd:e5:02:e1:64:8e:75:53:75:8a:b4:64:19:6b:f2:65:95:f3: 86:27:b9:ee:f3:82:a8:b8:e9:2b:b9:12:a6:7b:36:68:65:94: 1f:ae:9a:14:af:8d:1b:74:73:b7:d6:b4:d1:61:71:f2:25:ba: ec:20:62:9f:cf:9b:83:4b:cf:8f:e0:65:2d:b4:83:b0:2b:4a: 01:97:b6:80:96:67:1b:d2:69:74:2c:88:83:8b:79:9a:39:d8: cb:60:c4:cc:5b:63:11:09:6f:2a:6d:77:2b:6f:1b:62:10:ab: 21:2b:c0:c0:d9:99:b1:5b:73:b3:d7:41:a6:dd:a5:11:7a:bd: ee:98:a6:3a:06:48:e3:d8:cc:c5:a0:61:7a:53:0a:83:ea:a0: e4:1e:b7:20:eb:42:ed:50:cf:b3:99:b1:b3:44:3f:75:5d:c3: be:89:30:fc:05:de:41:7a:44:46:3c:c5:25:e8:fa:60:b3:c2: 8e:fb:d8:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbS44mcLgg2qbkXXO0inN7psuD5gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQyQjA3NTJENUZGQUIyNTRDM0YwRTIyMTQ5OUY2NzQy MDg3MEZFQjAeFw0yNjAzMjUxMzU2MjNaFw0yNjAzMjgxNTMzMjNaMDMxMTAvBgNV BAMTKEUxMThFRUFEREVEOEU3RDRCODE3MDkwOEJCOERFQTQxQjkzRTkzODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBVQGMAyS6xg/no6FZU0Rd8gic kXKwyiBYi+aGTQsfr3vMn0kDZ/GdeulbmHOrSO3oZ7g8aeZnYP2aaa7hx9pQrmeB DN/ju0Fi0d2upvbVarjR3ReXPFnAvD9zyJhDYZcMkCqMFQOznBE1Y9PI8Od1vkay +bXLAeaPy1hEls7fQmJek6gxG+xZFa714EOpV1t8stAiXAfVUprCM2xz12s042Bo uC4BdEoUrPBchMkIMIY6jJ6GPLmJskZNrHNThnSUinpI0ja9MBnuusPWddgbv12R iPhWhZ37aOrO6V88k6TmBVLbT6ptIHJ9N0ihXPPVVw1eVXMyJ9V8l+1UvyPPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4Rjurd7Y59S4FwkIu43qQbk+k4AwHwYDVR0j BBgwFoAU5CsHUtX/qyVMPw4iFJn2dCCHD+swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MzUxMjllNC0yMzI4LTQzZDItYTQ1OC05ZDM4Mjk2MTQ4MTUvMC9FNDJCMDc1MkQ1 RkZBQjI1NEMzRjBFMjIxNDk5RjY3NDIwODcwRkVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQyQjA3NTJENUZGQUIyNTRDM0YwRTIyMTQ5OUY2NzQyMDg3 MEZFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM1MTI5ZTQtMjMyOC00M2QyLWE0 NTgtOWQzODI5NjE0ODE1LzAvRTQyQjA3NTJENUZGQUIyNTRDM0YwRTIyMTQ5OUY2 NzQyMDg3MEZFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAOh2Aft1DUSFOo2BGmJU7RqBkmaQFR5hCwY DeuA6Cuqwy5mC7CzIIHGnKTK1bE1u2hdDIyzQYhYRrtG7vrvYAXByGm1aLXw083l AuFkjnVTdYq0ZBlr8mWV84Ynue7zgqi46Su5EqZ7NmhllB+umhSvjRt0c7fWtNFh cfIluuwgYp/Pm4NLz4/gZS20g7ArSgGXtoCWZxvSaXQsiIOLeZo52MtgxMxbYxEJ byptdytvG2IQqyErwMDZmbFbc7PXQabdpRF6ve6YpjoGSOPYzMWgYXpTCoPqoOQe tyDrQu1Qz7OZsbNEP3Vdw76JMPwF3kF6REY8xSXo+mCzwo772JE= -----END CERTIFICATE-----Generated at Fri Mar 27 01:17:43 2026 by rpki-client