$ rpki-client -vvf repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft File: E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft (raw, json) Hash identifier: TR+Iw7okaspz6iBPwtp4FsLIoPBSA4zt1JgurhUprYc= Subject key identifier: 90:F7:60:35:B3:B1:5B:98:BF:CB:DD:65:7B:73:22:36:93:79:01:69 Authority key identifier: E1:41:ED:0B:8F:1B:83:AB:AC:98:B8:DB:75:8C:25:18:8C:6E:65:A5 Certificate issuer: /CN=E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5 Certificate serial: 6F8581AD844FA2FD66E485BA76FE617D8F66BEEA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft Manifest number: 0140 Signing time: Wed 25 Mar 2026 00:42:16 +0000 Manifest this update: Wed 25 Mar 2026 00:37:16 +0000 Manifest next update: Sat 28 Mar 2026 08:49:16 +0000 Files and hashes: 1: E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.crl (hash: TfL4Xr1frK5MNU8lYwIJy/300/NnDnR5yQsNnaP/q28=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.crl rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 08:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:85:81:ad:84:4f:a2:fd:66:e4:85:ba:76:fe:61:7d:8f:66:be:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5 Validity Not Before: Mar 25 00:37:16 2026 GMT Not After : Mar 28 08:49:16 2026 GMT Subject: CN=90F76035B3B15B98BFCBDD657B73223693790169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:26:c3:81:5b:9a:c9:8a:e5:ea:a0:9d:33:dc: 19:88:b8:05:8d:b2:43:f5:8b:59:be:86:43:c2:c0: 78:90:44:93:92:ee:10:52:60:39:3f:78:44:d6:65: 40:78:2d:b0:8d:61:b7:0d:58:5f:ae:ea:1f:a1:05: a7:f5:d5:09:2c:56:7c:fd:ae:9e:58:0d:25:ea:a1: 87:88:ee:74:ff:dd:5b:0b:d2:19:22:ec:98:32:40: cc:20:ca:e4:74:55:e8:d9:f2:aa:55:4b:69:5f:ab: 50:f9:c3:97:96:1c:85:1f:f1:bd:f0:d7:02:63:de: a5:9a:ae:b5:00:f0:1a:98:b4:14:dd:22:05:c4:93: f2:b2:0e:4b:12:d8:84:6a:86:c9:46:db:7c:5e:82: 46:0e:d6:ba:87:91:a5:8e:e7:f7:2a:46:b3:57:e2: 6d:4e:29:95:64:f7:dd:30:9d:af:5f:8e:d0:08:c3: c9:81:4f:49:d4:bd:d0:58:24:4b:44:cd:5c:d4:af: ab:fb:d8:75:26:31:0d:e5:ac:0f:a8:1f:9d:c7:bf: 7f:65:cd:9f:9b:36:d4:2a:1f:a9:be:a4:d4:97:7b: a4:b2:99:96:79:3f:e8:a4:2e:97:a8:4f:12:93:e8: 2d:8d:3a:70:50:36:e4:46:a8:64:4b:83:30:67:09: f6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:F7:60:35:B3:B1:5B:98:BF:CB:DD:65:7B:73:22:36:93:79:01:69 X509v3 Authority Key Identifier: keyid:E1:41:ED:0B:8F:1B:83:AB:AC:98:B8:DB:75:8C:25:18:8C:6E:65:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:39:e2:61:53:35:97:6a:d3:88:7c:5f:3f:c5:95:ea:12:ac: 78:62:b3:a0:59:47:3d:90:5a:d1:69:13:16:b3:53:de:52:3b: e7:99:57:df:43:8b:29:30:c9:82:38:ac:98:12:3e:f4:7a:37: 9f:8e:72:54:25:4b:09:e1:96:50:5d:f2:1f:55:87:ed:99:bb: 6a:a6:74:6e:9f:0c:93:8e:c4:96:d5:c9:43:04:44:50:26:6c: a3:f0:3d:92:23:a4:96:f3:b9:52:a9:1a:74:e3:30:f5:05:8a: 42:47:ce:c0:a1:c3:1b:10:37:00:82:ea:23:94:19:8f:d7:3b: 80:55:02:28:3a:1d:e0:2e:77:42:d2:c4:ae:22:f9:6a:8a:f0: 9a:57:ef:0b:d1:26:be:45:96:04:2d:1e:35:8a:9e:1e:59:fb: 9f:b7:22:79:f5:4a:4c:c1:18:04:92:ac:8a:32:3e:84:d0:1a: e5:21:09:cb:a6:0f:a0:6a:08:be:4a:1f:30:13:84:19:cf:b0: ea:ac:05:ad:35:43:47:8a:86:8b:08:2e:27:ae:52:d7:18:e9: c9:f7:3d:0b:cc:99:29:33:55:e2:a8:e5:2e:c9:fb:83:21:43: e4:2c:a6:1c:6e:b0:8d:8c:cd:4a:ad:83:57:17:6c:df:df:e8: 32:4e:76:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb4WBrYRPov1m5IW6dv5hfY9mvuowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE0MUVEMEI4RjFCODNBQkFDOThCOERCNzU4QzI1MTg4 QzZFNjVBNTAeFw0yNjAzMjUwMDM3MTZaFw0yNjAzMjgwODQ5MTZaMDMxMTAvBgNV BAMTKDkwRjc2MDM1QjNCMTVCOThCRkNCREQ2NTdCNzMyMjM2OTM3OTAxNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeJsOBW5rJiuXqoJ0z3BmIuAWN skP1i1m+hkPCwHiQRJOS7hBSYDk/eETWZUB4LbCNYbcNWF+u6h+hBaf11QksVnz9 rp5YDSXqoYeI7nT/3VsL0hki7JgyQMwgyuR0VejZ8qpVS2lfq1D5w5eWHIUf8b3w 1wJj3qWarrUA8BqYtBTdIgXEk/KyDksS2IRqhslG23xegkYO1rqHkaWO5/cqRrNX 4m1OKZVk990wna9fjtAIw8mBT0nUvdBYJEtEzVzUr6v72HUmMQ3lrA+oH53Hv39l zZ+bNtQqH6m+pNSXe6SymZZ5P+ikLpeoTxKT6C2NOnBQNuRGqGRLgzBnCfYDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkPdgNbOxW5i/y91le3MiNpN5AWkwHwYDVR0j BBgwFoAU4UHtC48bg6usmLjbdYwlGIxuZaUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzFlNjkzYy0yZmQ3LTRmNGMtYWY2My1mZWU2OTA3NmUwZDEvMC9FMTQxRUQwQjhG MUI4M0FCQUM5OEI4REI3NThDMjUxODhDNkU2NUE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTE0MUVEMEI4RjFCODNBQkFDOThCOERCNzU4QzI1MTg4QzZF NjVBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTMxZTY5M2MtMmZkNy00ZjRjLWFm NjMtZmVlNjkwNzZlMGQxLzAvRTE0MUVEMEI4RjFCODNBQkFDOThCOERCNzU4QzI1 MTg4QzZFNjVBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFk54mFTNZdq04h8Xz/FleoSrHhis6BZRz2Q WtFpExazU95SO+eZV99DiykwyYI4rJgSPvR6N5+OclQlSwnhllBd8h9Vh+2Zu2qm dG6fDJOOxJbVyUMERFAmbKPwPZIjpJbzuVKpGnTjMPUFikJHzsChwxsQNwCC6iOU GY/XO4BVAig6HeAud0LSxK4i+WqK8JpX7wvRJr5FlgQtHjWKnh5Z+5+3Inn1SkzB GASSrIoyPoTQGuUhCcumD6BqCL5KHzAThBnPsOqsBa01Q0eKhosILieuUtcY6cn3 PQvMmSkzVeKo5S7J+4MhQ+QsphxusI2MzUqtg1cXbN/f6DJOdsA= -----END CERTIFICATE-----Generated at Thu Mar 26 08:08:36 2026 by rpki-client