$ rpki-client -vvf repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.mft File: E82AE8B691C7C53E1CE0B396D8975747F15604D5.mft (raw, json) Hash identifier: sgIK+Pau5fk2AWaXwPPLxa2+JPlq/lHzSZLqMF8fU5k= Subject key identifier: F7:45:FC:31:E0:46:05:E0:36:B2:FB:A3:46:F6:6A:9A:BA:05:D2:AE Authority key identifier: E8:2A:E8:B6:91:C7:C5:3E:1C:E0:B3:96:D8:97:57:47:F1:56:04:D5 Certificate issuer: /CN=E82AE8B691C7C53E1CE0B396D8975747F15604D5 Certificate serial: 5E2F2D74C0A360858E0160735C5234CDEF570EF0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E82AE8B691C7C53E1CE0B396D8975747F15604D5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.mft Manifest number: 0256 Signing time: Thu 26 Mar 2026 00:03:27 +0000 Manifest this update: Wed 25 Mar 2026 23:58:27 +0000 Manifest next update: Sun 29 Mar 2026 10:29:27 +0000 Files and hashes: 1: 3130332e3137362e3235322e302f32332d3234203d3e20313437313433.roa (hash: 0eR/sossty6R9CW6sl77Vt0ZhuUxrN0f/0JSjyj94i0=) 2: E82AE8B691C7C53E1CE0B396D8975747F15604D5.crl (hash: ImEJjf5ib5VH/1eswANsrUfi6frqOC//LHGY2jZPuWA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.crl rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E82AE8B691C7C53E1CE0B396D8975747F15604D5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 10:29:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:2f:2d:74:c0:a3:60:85:8e:01:60:73:5c:52:34:cd:ef:57:0e:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E82AE8B691C7C53E1CE0B396D8975747F15604D5 Validity Not Before: Mar 25 23:58:27 2026 GMT Not After : Mar 29 10:29:27 2026 GMT Subject: CN=F745FC31E04605E036B2FBA346F66A9ABA05D2AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:0a:3f:3a:c7:c1:89:1b:b7:da:d2:72:f8:52: ba:7d:b1:70:3f:de:cc:16:64:42:52:bb:d9:40:6d: 3e:76:b5:e0:04:e1:d7:cc:59:3d:5b:fb:23:5d:20: 0e:c8:9d:fb:9d:5b:f6:c5:a0:f1:54:d4:e5:1c:15: 67:2a:65:26:12:bb:bf:c8:fb:1a:49:10:5b:90:fa: 6f:65:6c:66:8e:e5:36:16:cd:b1:03:c0:10:d2:fc: 95:f9:88:23:cc:4e:8e:7c:06:05:14:84:23:26:37: 7f:4a:89:07:bb:e7:69:e1:76:7e:10:51:3b:64:f6: 9b:3a:b2:c4:bd:3c:81:52:4f:68:0b:10:a5:d9:67: ff:4b:b8:dc:aa:7f:bf:c6:6f:82:20:be:92:fb:db: f0:e6:45:37:98:23:57:d7:fd:99:ba:54:3d:17:b9: 9c:64:9e:e1:77:6a:8b:c3:86:22:a7:5e:74:76:d1: 4e:a9:7e:20:5f:b4:45:90:6c:52:af:9e:d3:8c:9d: c5:70:dc:b3:0a:cf:ab:1b:68:af:f8:1f:4f:a0:10: 88:32:04:3e:4c:9b:06:8a:d8:c2:06:e0:43:6f:53: 8e:e2:cc:66:06:88:4e:f3:53:e8:25:bc:e8:ab:04: 2b:52:a0:7a:27:ba:63:56:3a:63:57:26:3f:13:60: 95:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:45:FC:31:E0:46:05:E0:36:B2:FB:A3:46:F6:6A:9A:BA:05:D2:AE X509v3 Authority Key Identifier: keyid:E8:2A:E8:B6:91:C7:C5:3E:1C:E0:B3:96:D8:97:57:47:F1:56:04:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E82AE8B691C7C53E1CE0B396D8975747F15604D5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:19:e5:59:11:8c:74:cb:89:96:cd:59:3c:e2:4d:12:fb:47: 34:7a:16:29:e1:1a:35:04:3a:a3:c8:53:67:27:23:49:94:5a: c7:ce:0f:cd:0b:d5:4c:61:00:9c:39:e4:2c:43:cf:68:89:7c: e9:d8:98:4a:54:7b:13:24:9e:65:41:0c:fc:67:c4:3d:d1:4d: 08:85:7f:1e:cd:d8:25:c0:19:93:67:13:c9:58:19:72:8a:9a: 9a:8f:6f:78:66:8b:72:7a:7e:5f:ae:21:57:41:dd:bc:3f:d1: 42:6c:a5:8b:95:cc:5a:93:cf:bb:3c:f5:f0:4a:13:96:89:f9: de:11:db:13:a8:f3:5b:eb:58:bd:3f:ba:53:ae:93:ab:0b:1d: e9:17:c2:6a:1a:f3:86:44:46:bb:fe:9d:35:0d:18:ee:84:48: e0:ed:2e:3e:79:23:bc:30:84:94:4b:91:ef:a3:f9:72:8a:05: c8:2a:ff:9d:60:8f:6d:79:29:58:f9:0f:61:52:66:93:94:17: 4e:17:f5:5a:bb:c1:96:e5:4e:3f:0d:f4:3f:52:23:4a:7b:9b: 87:a2:63:ce:4d:0e:5f:89:45:24:a3:0e:e8:fc:02:dc:34:f9: fe:da:9c:f9:9a:ca:97:a7:ab:d7:dd:50:7f:29:56:f6:74:0c: 91:b8:71:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXi8tdMCjYIWOAWBzXFI0ze9XDvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTgyQUU4QjY5MUM3QzUzRTFDRTBCMzk2RDg5NzU3NDdG MTU2MDRENTAeFw0yNjAzMjUyMzU4MjdaFw0yNjAzMjkxMDI5MjdaMDMxMTAvBgNV BAMTKEY3NDVGQzMxRTA0NjA1RTAzNkIyRkJBMzQ2RjY2QTlBQkEwNUQyQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhCj86x8GJG7fa0nL4Urp9sXA/ 3swWZEJSu9lAbT52teAE4dfMWT1b+yNdIA7InfudW/bFoPFU1OUcFWcqZSYSu7/I +xpJEFuQ+m9lbGaO5TYWzbEDwBDS/JX5iCPMTo58BgUUhCMmN39KiQe752nhdn4Q UTtk9ps6ssS9PIFST2gLEKXZZ/9LuNyqf7/Gb4IgvpL72/DmRTeYI1fX/Zm6VD0X uZxknuF3aovDhiKnXnR20U6pfiBftEWQbFKvntOMncVw3LMKz6sbaK/4H0+gEIgy BD5MmwaK2MIG4ENvU47izGYGiE7zU+glvOirBCtSoHonumNWOmNXJj8TYJVXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU90X8MeBGBeA2svujRvZqmroF0q4wHwYDVR0j BBgwFoAU6CrotpHHxT4c4LOW2JdXR/FWBNUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OWZmYjQzYi1mOGI1LTRmMWYtOWI4Zi01YjAyZGRiYjZmY2YvMC9FODJBRThCNjkx QzdDNTNFMUNFMEIzOTZEODk3NTc0N0YxNTYwNEQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTgyQUU4QjY5MUM3QzUzRTFDRTBCMzk2RDg5NzU3NDdGMTU2 MDRENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTlmZmI0M2ItZjhiNS00ZjFmLTli OGYtNWIwMmRkYmI2ZmNmLzAvRTgyQUU4QjY5MUM3QzUzRTFDRTBCMzk2RDg5NzU3 NDdGMTU2MDRENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAYZ5VkRjHTLiZbNWTziTRL7RzR6FinhGjUE OqPIU2cnI0mUWsfOD80L1UxhAJw55CxDz2iJfOnYmEpUexMknmVBDPxnxD3RTQiF fx7N2CXAGZNnE8lYGXKKmpqPb3hmi3J6fl+uIVdB3bw/0UJspYuVzFqTz7s89fBK E5aJ+d4R2xOo81vrWL0/ulOuk6sLHekXwmoa84ZERrv+nTUNGO6ESODtLj55I7ww hJRLke+j+XKKBcgq/51gj215KVj5D2FSZpOUF04X9Vq7wZblTj8N9D9SI0p7m4ei Y85NDl+JRSSjDuj8Atw0+f7anPmaypenq9fdUH8pVvZ0DJG4cc8= -----END CERTIFICATE-----Generated at Thu Mar 26 10:56:11 2026 by rpki-client