$ rpki-client -vvf repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft File: E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft (raw, json) Hash identifier: qaM6lwi3fRynVpf1eQvIL7PChvsP360BQ2SftcauT+s= Subject key identifier: BC:8A:76:1F:91:EA:05:EC:09:F4:7A:88:A8:89:67:84:2C:E5:14:1D Authority key identifier: E4:85:8A:26:15:47:AA:C0:65:CD:F9:6C:21:F8:A9:A2:C3:6C:EE:65 Certificate issuer: /CN=E4858A261547AAC065CDF96C21F8A9A2C36CEE65 Certificate serial: 2D133644EC5927665D42199943FF88890B8CA320 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft Manifest number: FE Signing time: Tue 24 Mar 2026 21:22:06 +0000 Manifest this update: Tue 24 Mar 2026 21:17:06 +0000 Manifest next update: Sat 28 Mar 2026 01:10:06 +0000 Files and hashes: 1: 3130332e3134312e3233342e302f32342d3234203d3e20313339333634.roa (hash: S22ChZGEvJ5gAYFztY/TYC839FBrS83Y5ZysrOVb4ss=) 2: E4858A261547AAC065CDF96C21F8A9A2C36CEE65.crl (hash: kd6Czx7/FG7qSwdGMaagD4OGwmI16HC4rGET4ahxDcU=) 3: 3130332e3136392e3230302e302f32342d3234203d3e20313339333634.roa (hash: jU/SQlHFg0i0t2XT427YG+4xTKw9TASNvTEDlba6svA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.crl rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 01:10:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:13:36:44:ec:59:27:66:5d:42:19:99:43:ff:88:89:0b:8c:a3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4858A261547AAC065CDF96C21F8A9A2C36CEE65 Validity Not Before: Mar 24 21:17:06 2026 GMT Not After : Mar 28 01:10:06 2026 GMT Subject: CN=BC8A761F91EA05EC09F47A88A88967842CE5141D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:fc:65:ea:b9:01:a7:ef:68:53:c7:3a:0f:e3: 5c:b6:78:51:f0:0f:16:44:43:e3:a1:d7:39:42:96: 6f:36:8f:42:23:05:9c:83:b7:3d:c0:5b:53:a7:71: 98:f0:c7:5b:e6:ec:c6:6c:d8:fe:1f:c0:4b:5b:f4: c0:42:0d:9a:0e:94:9a:4d:fa:53:3a:1f:b9:d5:4f: 80:7d:0b:32:7c:9e:53:3e:01:a7:99:0d:28:a5:ff: c3:40:39:4c:9b:6a:3d:a6:55:a5:78:30:7b:62:7b: 45:bd:db:7d:2d:3c:5e:49:34:cb:0c:bd:62:9f:c3: cc:ef:31:ea:78:b0:73:82:54:da:2e:3a:e9:87:2c: 71:be:6f:d5:01:1c:5c:79:58:90:d9:43:78:f4:d6: 10:e6:2a:01:c1:51:49:e3:66:98:3b:50:db:4d:03: cf:f3:d1:12:c2:cc:46:84:b1:fa:81:4b:75:16:87: ba:00:7d:ab:c2:c5:e3:0b:d5:35:e3:86:73:f6:6c: 4b:d4:62:c0:7f:18:6f:b2:74:9f:1e:88:d3:a6:d0: 4f:bf:92:75:0f:94:cc:01:e4:84:83:bf:d7:db:45: 4b:b0:71:8a:25:03:43:70:2d:d0:47:4b:4f:31:c3: e8:35:c6:16:b4:31:32:95:12:e0:77:68:42:c7:cd: ed:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:8A:76:1F:91:EA:05:EC:09:F4:7A:88:A8:89:67:84:2C:E5:14:1D X509v3 Authority Key Identifier: keyid:E4:85:8A:26:15:47:AA:C0:65:CD:F9:6C:21:F8:A9:A2:C3:6C:EE:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:83:a7:c6:b6:04:dc:0c:b4:2b:6e:74:5b:39:a3:70:df:cb: bb:5c:4a:d0:1e:41:da:f9:bb:9e:20:49:ff:f7:e6:62:4e:fb: 57:f7:4b:8b:fb:34:c8:e8:0f:85:66:7e:06:55:3d:bb:6d:63: 6d:fa:53:40:97:a5:f1:3c:cd:63:22:f8:97:08:dc:86:d8:84: f9:92:e8:0c:98:d1:d2:54:6f:b2:ac:fb:11:5f:db:41:75:5a: fd:18:d8:64:cb:6d:1f:72:7c:36:3a:6e:2e:0d:6e:14:14:6d: 2b:be:88:86:4e:b2:ae:5f:49:bd:2c:b1:f0:09:78:a3:c6:d8: b3:4a:d5:10:8e:71:3e:04:3b:34:33:7a:ff:ff:3d:64:7c:91: 00:e0:2b:88:b5:66:04:da:5b:6a:b9:97:11:1b:df:8b:4a:cc: 94:c4:3a:df:83:f5:31:27:d4:cc:50:69:1a:f0:ab:92:1d:d6: 5f:7e:93:c2:52:76:5a:8d:ab:aa:4d:57:9f:e5:b4:ec:15:64: 66:94:79:3a:3b:a2:16:44:d2:3d:d8:76:24:82:3c:e7:25:c5: fd:28:a4:95:07:3f:72:ef:38:09:50:e8:aa:c0:1c:57:19:e3: 02:b4:70:0e:82:19:53:ff:df:23:e5:2d:c5:6e:6c:de:c6:2f: dc:cd:4a:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULRM2ROxZJ2ZdQhmZQ/+IiQuMoyAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ4NThBMjYxNTQ3QUFDMDY1Q0RGOTZDMjFGOEE5QTJD MzZDRUU2NTAeFw0yNjAzMjQyMTE3MDZaFw0yNjAzMjgwMTEwMDZaMDMxMTAvBgNV BAMTKEJDOEE3NjFGOTFFQTA1RUMwOUY0N0E4OEE4ODk2Nzg0MkNFNTE0MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc/GXquQGn72hTxzoP41y2eFHw DxZEQ+Oh1zlClm82j0IjBZyDtz3AW1OncZjwx1vm7MZs2P4fwEtb9MBCDZoOlJpN +lM6H7nVT4B9CzJ8nlM+AaeZDSil/8NAOUybaj2mVaV4MHtie0W9230tPF5JNMsM vWKfw8zvMep4sHOCVNouOumHLHG+b9UBHFx5WJDZQ3j01hDmKgHBUUnjZpg7UNtN A8/z0RLCzEaEsfqBS3UWh7oAfavCxeML1TXjhnP2bEvUYsB/GG+ydJ8eiNOm0E+/ knUPlMwB5ISDv9fbRUuwcYolA0NwLdBHS08xw+g1xha0MTKVEuB3aELHze2ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvIp2H5HqBewJ9HqIqIlnhCzlFB0wHwYDVR0j BBgwFoAU5IWKJhVHqsBlzflsIfiposNs7mUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzI4YWFjMy0wMDk0LTQyMWYtYTIwMS0yNGQ4MjBlMmFiM2QvMC9FNDg1OEEyNjE1 NDdBQUMwNjVDREY5NkMyMUY4QTlBMkMzNkNFRTY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQ4NThBMjYxNTQ3QUFDMDY1Q0RGOTZDMjFGOEE5QTJDMzZD RUU2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTMyOGFhYzMtMDA5NC00MjFmLWEy MDEtMjRkODIwZTJhYjNkLzAvRTQ4NThBMjYxNTQ3QUFDMDY1Q0RGOTZDMjFGOEE5 QTJDMzZDRUU2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADSDp8a2BNwMtCtudFs5o3Dfy7tcStAeQdr5 u54gSf/35mJO+1f3S4v7NMjoD4VmfgZVPbttY236U0CXpfE8zWMi+JcI3IbYhPmS 6AyY0dJUb7Ks+xFf20F1Wv0Y2GTLbR9yfDY6bi4NbhQUbSu+iIZOsq5fSb0ssfAJ eKPG2LNK1RCOcT4EOzQzev//PWR8kQDgK4i1ZgTaW2q5lxEb34tKzJTEOt+D9TEn 1MxQaRrwq5Id1l9+k8JSdlqNq6pNV5/ltOwVZGaUeTo7ohZE0j3YdiSCPOclxf0o pJUHP3LvOAlQ6KrAHFcZ4wK0cA6CGVP/3yPlLcVubN7GL9zNSjI= -----END CERTIFICATE-----Generated at Thu Mar 26 13:10:22 2026 by rpki-client