$ rpki-client -vvf repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft File: E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft (raw, json) Hash identifier: ofZ7+hLY12B86DLJivqAUkzRWFwecEHXTOZcXWNJB/s= Subject key identifier: 7E:8E:EE:2C:CB:97:12:4B:9C:5B:12:F1:8B:86:7B:35:4E:A8:AD:F1 Authority key identifier: E8:7D:91:4F:A5:36:CD:DA:1C:04:86:F0:92:3D:2B:E9:FB:FF:15:C9 Certificate issuer: /CN=E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9 Certificate serial: 03CB96E077A12D537C263BDE15D49A1669DA2A82 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft Manifest number: 01E6 Signing time: Thu 26 Mar 2026 07:12:28 +0000 Manifest this update: Thu 26 Mar 2026 07:07:28 +0000 Manifest next update: Sun 29 Mar 2026 16:49:28 +0000 Files and hashes: 1: 3130332e3230392e31302e302f32342d3234203d3e20313530393237.roa (hash: B5yJ9xoVUUkBKOWIFFCAU70s3XFhUz96BtRULEmOrv0=) 2: E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.crl (hash: Ci2I0XQuF2XktDEX+QOtmAaYGQY4VC2bi1Xa1vVLcr4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.crl rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:cb:96:e0:77:a1:2d:53:7c:26:3b:de:15:d4:9a:16:69:da:2a:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9 Validity Not Before: Mar 26 07:07:28 2026 GMT Not After : Mar 29 16:49:28 2026 GMT Subject: CN=7E8EEE2CCB97124B9C5B12F18B867B354EA8ADF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a2:bd:22:f0:fd:e6:15:fe:91:f0:15:ef:e3: 65:12:80:4f:56:4b:d6:cf:68:37:33:0d:09:1b:39: 42:e4:70:09:41:74:ee:32:8e:5c:50:d9:a0:d2:e4: 17:ac:d7:9f:28:94:11:f0:4f:fa:5e:e8:e6:55:b0: 67:a7:26:3d:c9:be:a9:d6:a3:b7:97:4d:c3:e0:05: 0f:7a:1a:a1:ae:dd:d5:e3:7f:62:f1:15:bb:29:a4: b3:6e:0b:de:03:c7:fa:fb:9d:5a:39:58:79:b7:4e: 43:ed:0b:a8:ff:1d:19:95:20:23:e4:ce:85:44:6b: d1:e2:b1:2b:d2:d5:60:18:c6:5a:d9:87:64:56:2a: ec:57:25:40:ed:eb:59:1d:6f:73:97:56:f2:bb:09: 23:d6:e4:40:5e:47:c6:3a:5d:5a:a8:55:07:4e:e0: 83:b2:df:26:e3:68:57:34:9a:3e:cc:be:c0:d5:ce: 24:8d:9a:04:82:95:61:4a:97:b6:43:ca:2d:4a:75: 2a:0f:02:f8:82:49:3b:56:a6:ff:f0:36:38:e4:8e: 3c:6b:e8:90:30:80:2f:e4:3d:f3:4a:99:69:94:8b: 65:b8:a8:99:a5:06:d8:75:30:28:de:2f:72:d9:d0: 32:8e:e0:a4:87:fe:5a:86:98:0b:bc:4e:61:84:f0: d4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:8E:EE:2C:CB:97:12:4B:9C:5B:12:F1:8B:86:7B:35:4E:A8:AD:F1 X509v3 Authority Key Identifier: keyid:E8:7D:91:4F:A5:36:CD:DA:1C:04:86:F0:92:3D:2B:E9:FB:FF:15:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:8f:63:2e:9b:02:0d:3e:b6:e1:03:44:7d:95:cb:ee:a3:f9: 1e:ae:74:79:2d:de:f0:86:f3:75:24:9b:ba:5a:26:fe:a5:ea: 60:c0:a8:af:b9:d8:e0:68:da:3a:71:af:d1:f3:e7:29:9b:24: 49:0e:73:42:c0:02:a8:17:91:00:67:5d:17:e1:98:87:68:06: 59:f3:04:60:5b:9a:20:05:f1:43:93:01:b7:ad:da:bd:e4:ba: bb:c2:8a:15:66:e5:19:77:8c:5a:a0:33:36:e6:f2:b6:dd:ae: 5a:2a:89:c4:11:37:60:ca:90:66:fd:4d:dd:2e:36:f8:07:41: c7:9b:08:45:ca:71:7d:a3:02:53:01:4d:3a:73:0c:2d:1a:b7: 20:99:41:ee:fc:ed:10:bb:91:46:12:68:c7:01:2d:8b:9b:41: 0f:fc:e0:9c:9f:74:c7:73:fa:31:9f:82:d4:17:55:d3:db:b7: ce:db:8a:08:e5:21:3d:d6:c3:ed:66:f5:d9:96:f5:58:51:ec: 82:00:80:66:04:95:94:df:71:35:85:3f:6d:f3:42:bb:fa:ba: ad:02:ba:93:6d:5f:20:bd:77:60:1c:2f:50:fe:5f:43:8f:cd: 8c:f9:c7:ff:6d:e6:e3:d0:ee:77:70:42:c1:b4:c1:d2:aa:69: da:71:3e:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA8uW4HehLVN8JjveFdSaFmnaKoIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg3RDkxNEZBNTM2Q0REQTFDMDQ4NkYwOTIzRDJCRTlG QkZGMTVDOTAeFw0yNjAzMjYwNzA3MjhaFw0yNjAzMjkxNjQ5MjhaMDMxMTAvBgNV BAMTKDdFOEVFRTJDQ0I5NzEyNEI5QzVCMTJGMThCODY3QjM1NEVBOEFERjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4or0i8P3mFf6R8BXv42USgE9W S9bPaDczDQkbOULkcAlBdO4yjlxQ2aDS5Bes158olBHwT/pe6OZVsGenJj3JvqnW o7eXTcPgBQ96GqGu3dXjf2LxFbsppLNuC94Dx/r7nVo5WHm3TkPtC6j/HRmVICPk zoVEa9HisSvS1WAYxlrZh2RWKuxXJUDt61kdb3OXVvK7CSPW5EBeR8Y6XVqoVQdO 4IOy3ybjaFc0mj7MvsDVziSNmgSClWFKl7ZDyi1KdSoPAviCSTtWpv/wNjjkjjxr 6JAwgC/kPfNKmWmUi2W4qJmlBth1MCjeL3LZ0DKO4KSH/lqGmAu8TmGE8NQPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfo7uLMuXEkucWxLxi4Z7NU6orfEwHwYDVR0j BBgwFoAU6H2RT6U2zdocBIbwkj0r6fv/FckwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Yjg0M2YwMC0yODIzLTQ3MzItOWI3Yy1kOGNmZTYzMDEwZGMvMC9FODdEOTE0RkE1 MzZDRERBMUMwNDg2RjA5MjNEMkJFOUZCRkYxNUM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTg3RDkxNEZBNTM2Q0REQTFDMDQ4NkYwOTIzRDJCRTlGQkZG MTVDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGI4NDNmMDAtMjgyMy00NzMyLTli N2MtZDhjZmU2MzAxMGRjLzAvRTg3RDkxNEZBNTM2Q0REQTFDMDQ4NkYwOTIzRDJC RTlGQkZGMTVDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJePYy6bAg0+tuEDRH2Vy+6j+R6udHkt3vCG 83Ukm7paJv6l6mDAqK+52OBo2jpxr9Hz5ymbJEkOc0LAAqgXkQBnXRfhmIdoBlnz BGBbmiAF8UOTAbet2r3kurvCihVm5Rl3jFqgMzbm8rbdrloqicQRN2DKkGb9Td0u NvgHQcebCEXKcX2jAlMBTTpzDC0atyCZQe787RC7kUYSaMcBLYubQQ/84JyfdMdz +jGfgtQXVdPbt87bigjlIT3Ww+1m9dmW9VhR7IIAgGYElZTfcTWFP23zQrv6uq0C upNtXyC9d2AcL1D+X0OPzYz5x/9t5uPQ7ndwQsG0wdKqadpxPsQ= -----END CERTIFICATE-----Generated at Thu Mar 26 12:01:58 2026 by rpki-client