$ rpki-client -vvf repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.mft File: 1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.mft (raw, json) Hash identifier: dm5ZOJ00VbQkYNtCPyfgRgBLtP6rgllafqcEipbFaF4= Subject key identifier: 5E:E8:10:19:4C:F0:C5:40:86:D1:30:91:9E:9E:5A:22:18:86:94:23 Authority key identifier: 1E:AF:FD:F7:6C:26:1A:0C:98:01:D9:F2:B0:2D:5B:A1:49:67:F3:CD Certificate issuer: /CN=1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD Certificate serial: 6012E2D2E0BE970A9B81513F303CA250FA1CC5D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.mft Manifest number: 01F5 Signing time: Wed 25 Mar 2026 10:51:33 +0000 Manifest this update: Wed 25 Mar 2026 10:46:33 +0000 Manifest next update: Sat 28 Mar 2026 14:36:33 +0000 Files and hashes: 1: 1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.crl (hash: ohoZLVpaWuLNo945ka4AUY9JExJALpqajvwD6NGJjyU=) 2: 3130332e3139302e39342e302f32342d3234203d3e20313530353531.roa (hash: XvrWKabUzo+8QdekV/WCEKHm2CO1S57vakuFbZ2xMyY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.crl rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 14:36:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:12:e2:d2:e0:be:97:0a:9b:81:51:3f:30:3c:a2:50:fa:1c:c5:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD Validity Not Before: Mar 25 10:46:33 2026 GMT Not After : Mar 28 14:36:33 2026 GMT Subject: CN=5EE810194CF0C54086D130919E9E5A2218869423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0f:87:d2:98:e3:7e:80:03:0b:b8:f8:cd:66: fc:a1:a7:1f:fa:11:37:2f:c3:56:0c:34:48:a6:b9: 2c:d7:38:7d:d5:fc:75:93:1f:83:5a:76:2f:c7:e3: 5f:6f:31:b0:e7:12:6f:0a:f0:e4:95:84:92:3c:57: e1:c7:b2:75:79:09:8d:a2:31:83:76:1f:d7:eb:e1: f7:fd:06:7f:03:31:db:96:51:ae:82:b0:b7:46:5d: 79:1c:b1:32:7c:b3:7f:45:76:ce:cb:2e:77:bc:b5: a4:33:ac:65:fa:9b:95:df:54:fa:48:c5:3c:69:f3: 25:48:66:c7:c2:d4:a5:63:e0:5f:98:fe:57:4b:c5: 10:90:bd:65:4c:89:06:23:18:cc:81:83:3e:d3:77: d0:d0:46:dd:3b:ab:30:f9:86:e2:17:4a:e3:93:62: f9:3f:2c:89:2c:f6:d5:a6:7c:6b:ae:e8:87:10:74: a4:0b:65:dd:3c:0f:8e:1e:40:6a:76:8d:cd:f7:ca: 45:a0:33:2f:47:96:ea:7e:87:91:a0:d8:1c:fc:df: 52:c4:47:f7:bf:82:c4:48:81:e6:bd:74:d6:5f:1e: c8:6c:2b:fd:3a:ea:04:95:21:66:dc:ef:2a:1e:82: f5:e4:cf:08:4e:85:3c:1c:38:05:2e:ee:00:4b:8d: 21:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:E8:10:19:4C:F0:C5:40:86:D1:30:91:9E:9E:5A:22:18:86:94:23 X509v3 Authority Key Identifier: keyid:1E:AF:FD:F7:6C:26:1A:0C:98:01:D9:F2:B0:2D:5B:A1:49:67:F3:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:83:ae:bf:f7:d4:d6:9e:cd:09:50:cf:d8:e7:c4:cc:37:fb: bc:a3:6f:cf:be:55:3b:bb:74:f1:30:49:b5:1e:5e:e8:6c:65: 6a:66:47:cb:50:40:ce:37:9e:cd:03:38:93:f8:49:dc:e4:38: 90:b3:bb:63:1e:88:9e:28:32:0f:23:88:10:af:e3:99:ea:2e: cd:86:89:bb:4e:9b:60:c3:5f:a8:1d:42:88:95:0f:7b:ff:a0: be:33:19:1d:f9:7c:c3:b2:66:f1:94:52:83:6e:4d:db:ac:0b: 7e:c7:00:8e:d8:9f:37:a5:5a:f9:90:f1:6c:50:81:e4:ed:f1: 58:27:ce:0f:23:e0:17:8a:41:03:58:5d:6a:5c:fd:94:43:01: c5:95:04:19:f3:8c:6d:b9:62:0c:bd:cf:f3:d9:89:c6:58:52: fa:c4:24:2d:10:f4:a5:30:72:9b:36:b0:23:5c:85:91:69:3f: 14:0e:f7:91:60:e0:9e:8c:1a:cf:51:c4:de:7b:f1:4c:a7:8c: 16:e3:e2:bd:53:5a:77:11:8d:6f:fc:13:b5:5d:37:fb:91:ec: 01:ca:40:db:37:ae:41:24:f0:03:c4:af:eb:f8:19:b4:70:25: 1e:5e:0d:d9:b7:ff:54:5d:2c:5c:4e:72:5d:8e:22:d7:82:96: 5a:1d:05:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYBLi0uC+lwqbgVE/MDyiUPocxdIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVBRkZERjc2QzI2MUEwQzk4MDFEOUYyQjAyRDVCQTE0 OTY3RjNDRDAeFw0yNjAzMjUxMDQ2MzNaFw0yNjAzMjgxNDM2MzNaMDMxMTAvBgNV BAMTKDVFRTgxMDE5NENGMEM1NDA4NkQxMzA5MTlFOUU1QTIyMTg4Njk0MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCD4fSmON+gAMLuPjNZvyhpx/6 ETcvw1YMNEimuSzXOH3V/HWTH4Nadi/H419vMbDnEm8K8OSVhJI8V+HHsnV5CY2i MYN2H9fr4ff9Bn8DMduWUa6CsLdGXXkcsTJ8s39Fds7LLne8taQzrGX6m5XfVPpI xTxp8yVIZsfC1KVj4F+Y/ldLxRCQvWVMiQYjGMyBgz7Td9DQRt07qzD5huIXSuOT Yvk/LIks9tWmfGuu6IcQdKQLZd08D44eQGp2jc33ykWgMy9Hlup+h5Gg2Bz831LE R/e/gsRIgea9dNZfHshsK/066gSVIWbc7yoegvXkzwhOhTwcOAUu7gBLjSGpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXugQGUzwxUCG0TCRnp5aIhiGlCMwHwYDVR0j BBgwFoAUHq/992wmGgyYAdnysC1boUln880wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Nzk4MDkxZS1jMWFlLTQwNDktOTZkMi1jNGNlMzdmZGMzNWIvMC8xRUFGRkRGNzZD MjYxQTBDOTgwMUQ5RjJCMDJENUJBMTQ5NjdGM0NELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUVBRkZERjc2QzI2MUEwQzk4MDFEOUYyQjAyRDVCQTE0OTY3 RjNDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDc5ODA5MWUtYzFhZS00MDQ5LTk2 ZDItYzRjZTM3ZmRjMzViLzAvMUVBRkZERjc2QzI2MUEwQzk4MDFEOUYyQjAyRDVC QTE0OTY3RjNDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFWDrr/31NaezQlQz9jnxMw3+7yjb8++VTu7 dPEwSbUeXuhsZWpmR8tQQM43ns0DOJP4SdzkOJCzu2MeiJ4oMg8jiBCv45nqLs2G ibtOm2DDX6gdQoiVD3v/oL4zGR35fMOyZvGUUoNuTdusC37HAI7YnzelWvmQ8WxQ geTt8Vgnzg8j4BeKQQNYXWpc/ZRDAcWVBBnzjG25Ygy9z/PZicZYUvrEJC0Q9KUw cps2sCNchZFpPxQO95Fg4J6MGs9RxN578UynjBbj4r1TWncRjW/8E7VdN/uR7AHK QNs3rkEk8APEr+v4GbRwJR5eDdm3/1RdLFxOcl2OIteCllodBQA= -----END CERTIFICATE-----Generated at Thu Mar 26 10:00:41 2026 by rpki-client