$ rpki-client -vvf repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft File: E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft (raw, json) Hash identifier: hNFJdXmVgMtEa+Cr+E4YZnKf7t0iFSrrAodsSNxLVyg= Subject key identifier: 39:33:D6:4B:95:28:21:65:26:A7:D9:AD:8D:10:39:1D:A0:44:36:D4 Authority key identifier: E2:9E:83:C2:C5:89:7F:A4:F6:CE:FE:3C:37:EE:1A:65:32:B8:E9:43 Certificate issuer: /CN=E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943 Certificate serial: 286D2CA9365E1ECFF898883DC2F5592F6D9A5E63 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft Manifest number: 0158 Signing time: Tue 24 Mar 2026 06:01:23 +0000 Manifest this update: Tue 24 Mar 2026 05:56:23 +0000 Manifest next update: Fri 27 Mar 2026 07:48:23 +0000 Files and hashes: 1: E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.crl (hash: xuLzG8i8MQT90eo8EW2nT2m6GbnJt1KMI2njUfffUt4=) 2: 3130332e3130352e35372e302f32342d3234203d3e20313530393432.roa (hash: 4blY0KBpSzRUoyFaq35Eu1DEa3N9B3gRpwyZoNwNxRU=) 3: 3130332e3130352e35362e302f32342d3234203d3e20313530393432.roa (hash: zHu+x2gGwUwgUlq5CctYUcopUHkJoC2ZyqysIaSRBBM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.crl rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 07:48:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:6d:2c:a9:36:5e:1e:cf:f8:98:88:3d:c2:f5:59:2f:6d:9a:5e:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943 Validity Not Before: Mar 24 05:56:23 2026 GMT Not After : Mar 27 07:48:23 2026 GMT Subject: CN=3933D64B9528216526A7D9AD8D10391DA04436D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b1:82:df:42:d9:53:b5:08:e8:c7:ba:1f:91: 55:58:1f:c4:1d:a0:f3:1a:de:41:f8:7b:d6:cf:54: 2b:92:ce:03:3b:4e:be:18:1e:68:2c:09:91:97:c9: e9:c8:e4:4d:10:39:fa:d9:1d:03:d7:e9:75:70:83: d4:e2:7c:70:96:21:2b:1d:31:7b:d3:84:94:56:a9: e4:00:87:aa:fd:d2:8f:fe:62:f4:45:c3:e2:78:05: 7d:d0:ca:8c:f7:75:24:73:81:3b:3b:fa:a5:28:1e: 09:72:9b:2d:fb:3c:44:66:09:84:71:6e:c4:7f:e8: d8:d4:97:ce:bd:ab:69:39:53:d0:80:54:66:a1:1c: 17:9a:bd:46:1b:50:33:67:ad:21:34:36:8d:e4:07: 66:25:02:34:33:c1:4e:c4:34:d5:ac:07:d7:da:11: bd:53:ab:41:74:a7:18:67:fc:d0:c3:e6:0e:f0:71: 21:05:a4:a9:ab:d5:f4:32:9f:fd:fa:4d:7d:7f:b6: ee:22:da:95:c4:ce:d4:5e:06:3c:c9:fb:3f:f8:ac: 06:38:b7:c1:5e:9e:73:ac:a1:6e:07:cc:45:f6:d6: 57:11:1f:20:b8:a0:8a:89:8d:f9:fc:ee:d1:d7:b3: 26:f6:a4:5c:03:4d:e4:92:72:c4:69:1f:65:87:82: be:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:33:D6:4B:95:28:21:65:26:A7:D9:AD:8D:10:39:1D:A0:44:36:D4 X509v3 Authority Key Identifier: keyid:E2:9E:83:C2:C5:89:7F:A4:F6:CE:FE:3C:37:EE:1A:65:32:B8:E9:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:e0:e8:18:5e:c1:ef:8c:dc:1d:b3:26:ca:fd:1c:fa:6d:93: 10:3f:bf:ec:7a:03:16:67:fd:05:79:3f:e9:8e:de:5b:3a:74: f5:cc:fa:ff:7d:5a:97:8d:51:c0:0f:0d:b4:f9:1f:6d:35:ad: 05:43:44:1e:4a:1d:35:34:67:b1:70:18:fa:65:0f:40:92:45: 21:f7:a2:1a:2f:31:37:f9:56:77:cb:83:ce:e8:b9:be:94:19: 61:1f:6d:09:f8:81:04:da:b1:ab:93:55:4d:f3:0a:61:c6:e8: 8a:5f:f5:66:ed:94:f0:ae:44:8e:5b:14:c7:df:56:3b:2c:e8: 90:33:8f:9d:60:ce:55:9d:29:e0:ec:86:f0:a1:72:7a:76:93: 4a:97:4f:af:ce:43:16:d4:35:a0:47:e3:d7:e0:90:8c:64:be: 69:f9:4b:04:46:16:1e:d1:42:e7:c4:ce:11:cf:60:5e:d5:47: f0:3a:f4:41:f4:50:e2:4d:23:35:18:e6:5b:0a:45:73:0b:ae: f1:45:2c:b6:5f:36:e4:6b:05:84:c3:f8:2c:c6:47:38:cb:ec: d1:8b:a5:ed:a8:be:57:62:9c:ec:89:2d:53:dc:9d:03:bf:b0: 62:29:ff:08:56:01:71:4a:a2:6f:9c:93:e0:50:42:73:07:49: 78:77:1d:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKG0sqTZeHs/4mIg9wvVZL22aXmMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTI5RTgzQzJDNTg5N0ZBNEY2Q0VGRTNDMzdFRTFBNjUz MkI4RTk0MzAeFw0yNjAzMjQwNTU2MjNaFw0yNjAzMjcwNzQ4MjNaMDMxMTAvBgNV BAMTKDM5MzNENjRCOTUyODIxNjUyNkE3RDlBRDhEMTAzOTFEQTA0NDM2RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8sYLfQtlTtQjox7ofkVVYH8Qd oPMa3kH4e9bPVCuSzgM7Tr4YHmgsCZGXyenI5E0QOfrZHQPX6XVwg9TifHCWISsd MXvThJRWqeQAh6r90o/+YvRFw+J4BX3Qyoz3dSRzgTs7+qUoHglymy37PERmCYRx bsR/6NjUl869q2k5U9CAVGahHBeavUYbUDNnrSE0No3kB2YlAjQzwU7ENNWsB9fa Eb1Tq0F0pxhn/NDD5g7wcSEFpKmr1fQyn/36TX1/tu4i2pXEztReBjzJ+z/4rAY4 t8FennOsoW4HzEX21lcRHyC4oIqJjfn87tHXsyb2pFwDTeSScsRpH2WHgr4NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOTPWS5UoIWUmp9mtjRA5HaBENtQwHwYDVR0j BBgwFoAU4p6DwsWJf6T2zv48N+4aZTK46UMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OTdjZjlhMC1lOTI3LTQ4MTQtODQ0Ny04YjNhMDAyNzYwYTgvMC9FMjlFODNDMkM1 ODk3RkE0RjZDRUZFM0MzN0VFMUE2NTMyQjhFOTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTI5RTgzQzJDNTg5N0ZBNEY2Q0VGRTNDMzdFRTFBNjUzMkI4 RTk0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjk3Y2Y5YTAtZTkyNy00ODE0LTg0 NDctOGIzYTAwMjc2MGE4LzAvRTI5RTgzQzJDNTg5N0ZBNEY2Q0VGRTNDMzdFRTFB NjUzMkI4RTk0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI7g6Bhewe+M3B2zJsr9HPptkxA/v+x6AxZn /QV5P+mO3ls6dPXM+v99WpeNUcAPDbT5H201rQVDRB5KHTU0Z7FwGPplD0CSRSH3 ohovMTf5VnfLg87oub6UGWEfbQn4gQTasauTVU3zCmHG6Ipf9WbtlPCuRI5bFMff Vjss6JAzj51gzlWdKeDshvChcnp2k0qXT6/OQxbUNaBH49fgkIxkvmn5SwRGFh7R QufEzhHPYF7VR/A69EH0UOJNIzUY5lsKRXMLrvFFLLZfNuRrBYTD+CzGRzjL7NGL pe2ovldinOyJLVPcnQO/sGIp/whWAXFKom+ck+BQQnMHSXh3HdQ= -----END CERTIFICATE-----Generated at Thu Mar 26 08:54:54 2026 by rpki-client