$ rpki-client -vvf repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.mft File: 0E7BF2CE27D899D8E985DBD9311DF8B250C58581.mft (raw, json) Hash identifier: QlQEWkNRzq6WEo8nD6029TuflCBI3+Q0+lUHwWWOUCQ= Subject key identifier: C2:BB:52:21:A0:99:47:42:16:2D:34:4B:E9:4D:BD:ED:CD:C8:B3:81 Authority key identifier: 0E:7B:F2:CE:27:D8:99:D8:E9:85:DB:D9:31:1D:F8:B2:50:C5:85:81 Certificate issuer: /CN=0E7BF2CE27D899D8E985DBD9311DF8B250C58581 Certificate serial: 3464E2BEE354C4717A27CCAFAF53FF0FD77F45D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.mft Manifest number: 0151 Signing time: Wed 25 Mar 2026 15:41:30 +0000 Manifest this update: Wed 25 Mar 2026 15:36:30 +0000 Manifest next update: Sun 29 Mar 2026 03:32:30 +0000 Files and hashes: 1: 0E7BF2CE27D899D8E985DBD9311DF8B250C58581.crl (hash: NfSr20cs3PMPs+TbR62F24LLV6QcTqFKvGEjYTT7QxQ=) 2: 3130332e3235322e3130302e302f32342d3234203d3e203539313437.roa (hash: Q18iWCzyIgnJ03JWHzXheCWpGYNBjtSoC3dIdyCS6t0=) 3: 3130332e3235322e3130302e302f32332d3233203d3e203539313437.roa (hash: MBFnv7ZoP4iaMV1OJ7B+JK9tAnoUgV3W7EEXgSWuTJc=) 4: 3130332e3235322e3130312e302f32342d3234203d3e203539313437.roa (hash: N8BYJ8Ja8cI/O8F5jWMsSdJz8j5GkTqxxcCM4rTW7ZA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.crl rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 03:32:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:64:e2:be:e3:54:c4:71:7a:27:cc:af:af:53:ff:0f:d7:7f:45:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E7BF2CE27D899D8E985DBD9311DF8B250C58581 Validity Not Before: Mar 25 15:36:30 2026 GMT Not After : Mar 29 03:32:30 2026 GMT Subject: CN=C2BB5221A0994742162D344BE94DBDEDCDC8B381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:24:b8:e5:08:ed:e5:68:e4:16:e0:66:6a:98: 5b:61:fc:a9:65:37:f0:94:7c:c6:cd:62:39:bd:28: cf:7f:b3:4b:a8:ec:d5:b9:2d:50:c5:c4:6b:0a:a4: fe:86:cc:99:d5:ec:dc:5b:54:08:2f:8a:68:97:4c: a9:a9:ce:5a:00:94:6e:b4:86:1a:e7:49:f2:83:44: 76:ef:a8:f8:76:11:ef:12:06:42:7e:32:6c:4c:d0: 73:90:e9:80:91:0e:2d:24:95:4e:61:ca:d5:df:91: 9c:fb:09:44:12:c2:61:a7:11:19:ea:62:44:de:61: 3b:a1:e5:5e:c2:7d:9e:dd:7e:50:d6:d8:06:c4:0d: 2e:55:0f:fc:0e:79:68:0f:ed:6e:15:ed:41:e4:df: cd:93:28:a3:90:2f:87:ca:c7:57:4e:d6:4d:b3:84: 14:32:1f:95:ce:d3:67:7d:e0:57:ac:e0:91:e9:73: d2:64:b5:84:c8:2b:b2:09:30:3d:28:63:34:30:1c: 18:6d:02:14:fc:8a:4b:b0:61:9d:9e:f7:a1:bc:34: 75:b5:ff:9f:bf:04:95:6e:d1:77:fa:8c:df:11:75: 8f:47:5b:5d:94:8f:6c:8d:3c:1e:e9:a2:00:88:e3: 25:e3:e3:85:2b:24:33:1c:4f:e8:84:f4:b0:e0:50: cc:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:BB:52:21:A0:99:47:42:16:2D:34:4B:E9:4D:BD:ED:CD:C8:B3:81 X509v3 Authority Key Identifier: keyid:0E:7B:F2:CE:27:D8:99:D8:E9:85:DB:D9:31:1D:F8:B2:50:C5:85:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:31:69:ce:81:72:05:ec:f5:06:9f:7e:4b:4f:84:df:fd:11: 17:e7:ee:5d:3f:d7:d8:ea:73:18:07:0d:9d:94:64:b1:f8:15: a0:ff:e3:3a:05:62:da:b4:d6:b8:52:73:27:ee:ff:97:07:35: 43:1e:5d:8c:62:b3:fe:09:d3:f3:5a:75:32:bb:5b:e2:05:86: 61:c6:11:65:d1:25:73:07:86:65:21:c9:1a:7c:9e:7e:3c:13: 73:11:da:2b:4f:ff:ad:6c:2c:fa:62:d9:d1:6f:c9:b1:2b:c3: 0c:27:ed:b5:5e:0c:2c:4c:9c:cc:b9:85:6b:f5:8f:c1:14:5c: 0a:c5:07:11:6e:ae:fb:8e:d1:f3:4b:84:0d:21:00:96:be:c2: cd:81:ea:0d:0d:1f:6c:37:5b:81:f0:98:2e:6a:38:d9:4c:0a: 7b:47:92:ff:fc:28:0f:3d:cd:19:48:2a:0a:5a:2a:d5:3b:d8: 7b:e9:82:e7:40:eb:a9:db:29:15:9a:f6:c5:e0:1b:62:1f:1f: 57:63:ce:c8:ac:87:2a:ae:21:58:ae:9a:08:5f:32:0d:d6:ca: 5d:15:e4:9f:5e:66:89:20:4a:72:a2:84:a8:fa:b8:09:82:bc: 43:57:f2:4d:c3:5d:59:8d:0a:e9:1f:2c:5f:b2:49:8f:b4:8b: 19:7a:42:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNGTivuNUxHF6J8yvr1P/D9d/RdAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU3QkYyQ0UyN0Q4OTlEOEU5ODVEQkQ5MzExREY4QjI1 MEM1ODU4MTAeFw0yNjAzMjUxNTM2MzBaFw0yNjAzMjkwMzMyMzBaMDMxMTAvBgNV BAMTKEMyQkI1MjIxQTA5OTQ3NDIxNjJEMzQ0QkU5NERCREVEQ0RDOEIzODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiJLjlCO3laOQW4GZqmFth/Kll N/CUfMbNYjm9KM9/s0uo7NW5LVDFxGsKpP6GzJnV7NxbVAgvimiXTKmpzloAlG60 hhrnSfKDRHbvqPh2Ee8SBkJ+MmxM0HOQ6YCRDi0klU5hytXfkZz7CUQSwmGnERnq YkTeYTuh5V7CfZ7dflDW2AbEDS5VD/wOeWgP7W4V7UHk382TKKOQL4fKx1dO1k2z hBQyH5XO02d94Fes4JHpc9JktYTIK7IJMD0oYzQwHBhtAhT8ikuwYZ2e96G8NHW1 /5+/BJVu0Xf6jN8RdY9HW12Uj2yNPB7pogCI4yXj44UrJDMcT+iE9LDgUMxPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwrtSIaCZR0IWLTRL6U297c3Is4EwHwYDVR0j BBgwFoAUDnvyzifYmdjphdvZMR34slDFhYEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MGM1NTAzNC01ZjM2LTQxNzMtYjY0Yy1hOTc1ZTMyMzEzOGEvMC8wRTdCRjJDRTI3 RDg5OUQ4RTk4NURCRDkzMTFERjhCMjUwQzU4NTgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEU3QkYyQ0UyN0Q4OTlEOEU5ODVEQkQ5MzExREY4QjI1MEM1 ODU4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTBjNTUwMzQtNWYzNi00MTczLWI2 NGMtYTk3NWUzMjMxMzhhLzAvMEU3QkYyQ0UyN0Q4OTlEOEU5ODVEQkQ5MzExREY4 QjI1MEM1ODU4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACAxac6BcgXs9QaffktPhN/9ERfn7l0/19jq cxgHDZ2UZLH4FaD/4zoFYtq01rhScyfu/5cHNUMeXYxis/4J0/NadTK7W+IFhmHG EWXRJXMHhmUhyRp8nn48E3MR2itP/61sLPpi2dFvybErwwwn7bVeDCxMnMy5hWv1 j8EUXArFBxFurvuO0fNLhA0hAJa+ws2B6g0NH2w3W4HwmC5qONlMCntHkv/8KA89 zRlIKgpaKtU72HvpgudA66nbKRWa9sXgG2IfH1djzsishyquIViumghfMg3Wyl0V 5J9eZokgSnKihKj6uAmCvENX8k3DXVmNCukfLF+ySY+0ixl6QiA= -----END CERTIFICATE-----Generated at Thu Mar 26 19:44:15 2026 by rpki-client