$ rpki-client -vvf repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft File: E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft (raw, json) Hash identifier: p7amT3PZFfCPh4byKbK9tDin+0Z52OdlAAQBu1jUSQ8= Subject key identifier: 44:C6:0A:08:2A:97:CB:CD:FC:8C:6C:7A:0D:55:59:A0:DE:8A:B6:3F Authority key identifier: E4:86:34:E1:D6:FB:2E:8A:06:A4:88:25:B4:D7:EE:C4:7B:2A:E4:BE Certificate issuer: /CN=E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE Certificate serial: 13083DFE16F273212984FD27A9836CD2B2CC8D8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft Manifest number: 0280 Signing time: Tue 24 Mar 2026 15:51:18 +0000 Manifest this update: Tue 24 Mar 2026 15:46:18 +0000 Manifest next update: Sat 28 Mar 2026 03:42:18 +0000 Files and hashes: 1: E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.crl (hash: X2vmj2D6RXSxTC6RT3KnqokSwkXeQu6nxNImimS1Wfk=) 2: 3130332e3137322e3139342e302f32332d3233203d3e20313437303735.roa (hash: PyDXoIlT1NIef5VwI6vIhfIo1ytHrmrJtk3n+sEFsT0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.crl rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 03:42:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:08:3d:fe:16:f2:73:21:29:84:fd:27:a9:83:6c:d2:b2:cc:8d:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE Validity Not Before: Mar 24 15:46:18 2026 GMT Not After : Mar 28 03:42:18 2026 GMT Subject: CN=44C60A082A97CBCDFC8C6C7A0D5559A0DE8AB63F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8b:84:91:ae:4b:be:16:63:f8:05:3d:a6:b1: e7:e1:1d:7d:d1:86:ad:5f:c6:ac:99:a5:86:f4:e4: 73:53:b1:f1:28:10:d4:ce:ed:92:ad:88:2c:99:93: d0:bd:9d:13:1d:a1:6d:a4:3f:cc:4e:8b:be:62:20: 47:f2:c6:c9:8c:cc:ed:b9:28:7a:84:8b:bf:12:e1: 3e:b8:53:fa:21:95:b8:7c:69:52:fe:9d:24:8a:05: d0:18:3f:e2:60:da:39:5d:74:78:ef:8e:1e:00:4c: bb:08:73:01:34:d8:47:7a:94:94:53:b4:2f:a0:37: f8:11:f5:67:cb:40:3e:f9:ad:bd:60:93:04:ae:67: 0b:4c:15:79:70:b9:9d:d6:43:ee:92:a0:a3:df:d4: 0d:a7:fc:2e:4f:62:94:65:05:67:9c:64:d8:35:2d: 79:aa:cc:9c:71:03:6a:3a:3c:63:35:f1:bc:7b:54: de:5d:c4:30:cf:85:70:f1:76:68:20:00:70:25:58: 05:6f:30:b8:3a:7c:05:a8:84:d8:2a:73:9d:91:2e: 58:7c:3f:15:4b:44:7c:3c:25:94:3e:21:95:c7:6b: 4e:c5:98:0e:c2:93:12:06:80:7c:7a:e9:66:c5:3f: 32:e6:76:92:c4:75:55:93:10:56:42:1c:10:1a:9d: f0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:C6:0A:08:2A:97:CB:CD:FC:8C:6C:7A:0D:55:59:A0:DE:8A:B6:3F X509v3 Authority Key Identifier: keyid:E4:86:34:E1:D6:FB:2E:8A:06:A4:88:25:B4:D7:EE:C4:7B:2A:E4:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:e4:5a:57:02:9f:80:81:7d:0f:ea:8f:da:ea:fe:da:06:cd: cc:65:db:6d:ba:c7:62:bf:36:ba:ae:28:fa:ee:9c:d9:50:c9: ec:0c:4c:51:8b:a1:c2:f6:5a:c5:a8:2e:43:c0:63:16:b6:58: 7a:b4:85:c3:d2:d1:61:d4:c6:b8:6d:93:d6:49:ed:a9:64:60: a0:79:1e:e6:be:c1:41:ab:c2:4d:fa:5e:58:75:fc:65:40:09: a4:ef:87:ca:52:ce:dc:fe:75:24:e4:6c:f6:6c:4b:2e:6b:f9: 1f:62:b3:77:c4:d7:9b:07:ca:9f:aa:da:28:fc:a4:7d:82:0b: be:9e:a0:01:19:27:39:a1:9e:b5:b5:59:e5:a3:4c:84:a9:f5: c4:65:07:2b:4f:8f:1b:aa:c3:b4:98:8a:90:79:38:92:95:bf: 57:0b:ee:0f:3b:d6:c1:71:a1:b0:14:61:6d:3c:9b:31:6e:7f: de:c7:73:69:ac:c1:a7:9a:c2:77:75:67:b6:66:5b:4c:f1:60: 34:0b:0d:5c:86:34:b9:9e:49:53:b4:49:0b:cf:15:35:21:55: 15:63:5a:91:2f:4d:35:bf:70:e9:be:e9:44:42:f4:f0:3e:a6: a9:14:fa:0c:0c:ac:c9:79:aa:b7:de:f1:f8:00:42:ea:b4:db: a2:9c:04:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEwg9/hbycyEphP0nqYNs0rLMjY4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ4NjM0RTFENkZCMkU4QTA2QTQ4ODI1QjREN0VFQzQ3 QjJBRTRCRTAeFw0yNjAzMjQxNTQ2MThaFw0yNjAzMjgwMzQyMThaMDMxMTAvBgNV BAMTKDQ0QzYwQTA4MkE5N0NCQ0RGQzhDNkM3QTBENTU1OUEwREU4QUI2M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8i4SRrku+FmP4BT2msefhHX3R hq1fxqyZpYb05HNTsfEoENTO7ZKtiCyZk9C9nRMdoW2kP8xOi75iIEfyxsmMzO25 KHqEi78S4T64U/ohlbh8aVL+nSSKBdAYP+Jg2jlddHjvjh4ATLsIcwE02Ed6lJRT tC+gN/gR9WfLQD75rb1gkwSuZwtMFXlwuZ3WQ+6SoKPf1A2n/C5PYpRlBWecZNg1 LXmqzJxxA2o6PGM18bx7VN5dxDDPhXDxdmggAHAlWAVvMLg6fAWohNgqc52RLlh8 PxVLRHw8JZQ+IZXHa07FmA7CkxIGgHx66WbFPzLmdpLEdVWTEFZCHBAanfD3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURMYKCCqXy838jGx6DVVZoN6Ktj8wHwYDVR0j BBgwFoAU5IY04db7LooGpIgltNfuxHsq5L4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2VjMmNiNi0zNWFkLTQxMDEtOTgyZS0yZTM0ZDU2NmVmZGEvMC9FNDg2MzRFMUQ2 RkIyRThBMDZBNDg4MjVCNEQ3RUVDNDdCMkFFNEJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQ4NjM0RTFENkZCMkU4QTA2QTQ4ODI1QjREN0VFQzQ3QjJB RTRCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNlYzJjYjYtMzVhZC00MTAxLTk4 MmUtMmUzNGQ1NjZlZmRhLzAvRTQ4NjM0RTFENkZCMkU4QTA2QTQ4ODI1QjREN0VF QzQ3QjJBRTRCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHbkWlcCn4CBfQ/qj9rq/toGzcxl2226x2K/ NrquKPrunNlQyewMTFGLocL2WsWoLkPAYxa2WHq0hcPS0WHUxrhtk9ZJ7alkYKB5 Hua+wUGrwk36Xlh1/GVACaTvh8pSztz+dSTkbPZsSy5r+R9is3fE15sHyp+q2ij8 pH2CC76eoAEZJzmhnrW1WeWjTISp9cRlBytPjxuqw7SYipB5OJKVv1cL7g871sFx obAUYW08mzFuf97Hc2mswaeawnd1Z7ZmW0zxYDQLDVyGNLmeSVO0SQvPFTUhVRVj WpEvTTW/cOm+6URC9PA+pqkU+gwMrMl5qrfe8fgAQuq026KcBEQ= -----END CERTIFICATE-----Generated at Thu Mar 26 19:40:56 2026 by rpki-client