$ rpki-client -vvf repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft File: E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft (raw, json) Hash identifier: W9zewbqJWkAq/wQ05DMll+DtJWk3u831JbMJTpCDVno= Subject key identifier: B9:36:87:E0:77:09:E6:3E:D1:E5:22:1E:7C:81:69:0D:0C:73:93:74 Authority key identifier: E9:02:BF:4C:FC:9D:99:7E:36:A9:E1:A3:2F:AA:2E:08:CC:2F:5C:7F Certificate issuer: /CN=E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F Certificate serial: 3D12E1E9B54AC11A52D55AAB00BD18F006357089 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft Manifest number: 0131 Signing time: Thu 26 Mar 2026 09:21:20 +0000 Manifest this update: Thu 26 Mar 2026 09:16:20 +0000 Manifest next update: Sun 29 Mar 2026 16:09:20 +0000 Files and hashes: 1: E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.crl (hash: 27qMV+J24qNxy2BF3KA4vKtuOmmlRDvOigCOvrax9nI=) 2: 3135372e31352e3132302e302f32342d3234203d3e20313336383436.roa (hash: w9lRGM+KvbJcbB/B7Klf8XUb4JaKXd4lgNIVZ1rwkw4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.crl rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:12:e1:e9:b5:4a:c1:1a:52:d5:5a:ab:00:bd:18:f0:06:35:70:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F Validity Not Before: Mar 26 09:16:20 2026 GMT Not After : Mar 29 16:09:20 2026 GMT Subject: CN=B93687E07709E63ED1E5221E7C81690D0C739374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e5:bb:4a:3f:e7:eb:e2:2b:25:c1:4b:75:3b: 41:96:93:57:dd:8e:94:35:f5:50:aa:e1:80:40:56: 0f:98:88:83:67:bd:da:7b:2c:de:ec:1b:f4:c9:7c: ad:00:18:c9:12:59:b7:f6:17:f5:9d:47:9c:f0:0c: a7:87:b3:ec:ee:ac:25:41:fc:f8:c4:91:6c:30:2f: 01:2a:99:95:9e:9f:e4:22:43:6d:17:b2:10:04:79: bc:11:6d:18:e1:96:55:8e:69:53:37:fd:7f:b6:d9: eb:c1:87:ec:3c:68:88:d5:e5:ae:56:63:37:4e:19: 4b:71:9a:f0:ef:c4:f5:f7:02:3e:14:32:d7:fa:58: 50:29:7d:e5:0d:08:cf:97:83:85:c1:b8:2b:aa:a3: 25:1d:1f:7f:63:2b:c3:86:4d:36:13:a4:12:31:69: 0c:d1:a3:c2:01:4a:9c:cc:cf:ce:d2:63:5b:f0:fa: 3f:d2:46:43:65:c9:7f:31:88:30:a9:d9:56:27:29: 92:93:96:25:66:d5:17:b0:b7:11:cd:c6:ca:fe:ed: 5f:65:87:22:3f:b3:a4:af:1b:0c:44:03:41:e9:91: e1:8c:ec:b1:75:18:17:f9:c1:1e:d2:13:57:00:d3: 9d:64:e2:96:ef:71:13:62:fd:8f:ea:89:ed:ba:f9: 60:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:36:87:E0:77:09:E6:3E:D1:E5:22:1E:7C:81:69:0D:0C:73:93:74 X509v3 Authority Key Identifier: keyid:E9:02:BF:4C:FC:9D:99:7E:36:A9:E1:A3:2F:AA:2E:08:CC:2F:5C:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:be:78:aa:0e:15:8d:a2:7a:d5:08:c1:41:70:ea:f0:21:79: b2:30:ee:d1:ce:50:bd:7d:67:9e:2f:6c:b7:13:fe:dd:77:f9: ec:c0:35:18:9d:a6:2f:c6:96:7d:b5:6c:d7:c3:b8:a5:fa:2f: 76:14:8a:e0:73:88:46:d8:a4:08:20:5f:e3:ad:2a:aa:77:d4: 88:44:29:0b:17:bd:b5:84:6d:1d:93:e8:fd:f7:f1:09:72:9c: c5:01:41:a6:f1:06:79:a4:2a:72:04:36:28:98:37:59:ae:e8: 04:f1:9e:c9:20:1c:c7:6b:16:c8:33:1d:3b:15:47:48:3f:0a: d5:18:4d:08:7a:40:38:93:61:1a:db:5b:12:8c:70:91:d3:55: 7f:8c:be:fb:fb:71:34:46:9c:5c:91:48:c0:df:25:4d:40:10: f6:eb:42:97:8f:66:03:11:f1:5e:91:8d:09:12:21:33:46:c2: c3:78:ea:27:5a:7c:79:0b:08:04:28:07:e3:fc:f2:a6:a0:ad: ae:63:f8:fa:9b:7e:28:7d:fd:5c:76:a3:b7:66:ad:3d:84:64: 54:3c:1f:1e:e8:2d:ea:22:45:f1:d0:ae:ee:92:d7:ff:d6:c1: 00:6d:80:3e:cf:8c:df:ab:e5:6b:48:d2:f9:3c:5c:40:c6:1e: 4c:36:ca:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPRLh6bVKwRpS1VqrAL0Y8AY1cIkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTkwMkJGNENGQzlEOTk3RTM2QTlFMUEzMkZBQTJFMDhD QzJGNUM3RjAeFw0yNjAzMjYwOTE2MjBaFw0yNjAzMjkxNjA5MjBaMDMxMTAvBgNV BAMTKEI5MzY4N0UwNzcwOUU2M0VEMUU1MjIxRTdDODE2OTBEMEM3MzkzNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC95btKP+fr4islwUt1O0GWk1fd jpQ19VCq4YBAVg+YiINnvdp7LN7sG/TJfK0AGMkSWbf2F/WdR5zwDKeHs+zurCVB /PjEkWwwLwEqmZWen+QiQ20XshAEebwRbRjhllWOaVM3/X+22evBh+w8aIjV5a5W YzdOGUtxmvDvxPX3Aj4UMtf6WFApfeUNCM+Xg4XBuCuqoyUdH39jK8OGTTYTpBIx aQzRo8IBSpzMz87SY1vw+j/SRkNlyX8xiDCp2VYnKZKTliVm1RewtxHNxsr+7V9l hyI/s6SvGwxEA0HpkeGM7LF1GBf5wR7SE1cA051k4pbvcRNi/Y/qie26+WBFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuTaH4HcJ5j7R5SIefIFpDQxzk3QwHwYDVR0j BBgwFoAU6QK/TPydmX42qeGjL6ouCMwvXH8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmI0NjZjNi0zNzQzLTQ5NWYtYjFhOC0yNjA3Y2M5OTU3M2YvMC9FOTAyQkY0Q0ZD OUQ5OTdFMzZBOUUxQTMyRkFBMkUwOENDMkY1QzdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRTkwMkJGNENGQzlEOTk3RTM2QTlFMUEzMkZBQTJFMDhDQzJG NUM3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZiNDY2YzYtMzc0My00OTVmLWIx YTgtMjYwN2NjOTk1NzNmLzAvRTkwMkJGNENGQzlEOTk3RTM2QTlFMUEzMkZBQTJF MDhDQzJGNUM3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAW+eKoOFY2ietUIwUFw6vAhebIw7tHOUL19 Z54vbLcT/t13+ezANRidpi/Gln21bNfDuKX6L3YUiuBziEbYpAggX+OtKqp31IhE KQsXvbWEbR2T6P338QlynMUBQabxBnmkKnIENiiYN1mu6ATxnskgHMdrFsgzHTsV R0g/CtUYTQh6QDiTYRrbWxKMcJHTVX+Mvvv7cTRGnFyRSMDfJU1AEPbrQpePZgMR 8V6RjQkSITNGwsN46idafHkLCAQoB+P88qagra5j+Pqbfih9/Vx2o7dmrT2EZFQ8 Hx7oLeoiRfHQru6S1//WwQBtgD7PjN+r5WtI0vk8XEDGHkw2ynQ= -----END CERTIFICATE-----Generated at Thu Mar 26 15:26:16 2026 by rpki-client