$ rpki-client -vvf repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft File: 1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft (raw, json) Hash identifier: xbPLERm3MSwel5CRpv+iICh3yZw4u2ocML5TzmBPzWo= Subject key identifier: 77:47:09:66:74:28:99:11:BB:9E:B8:B7:61:03:D5:38:D6:A0:F6:63 Authority key identifier: 1E:8E:85:3B:D0:B0:EC:8B:2C:02:0B:97:5B:20:5A:55:6C:14:E8:E9 Certificate issuer: /CN=1E8E853BD0B0EC8B2C020B975B205A556C14E8E9 Certificate serial: 433D846D536019EBD20EFEED851B122F15B6F597 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft Manifest number: 01DD Signing time: Wed 25 Mar 2026 16:01:52 +0000 Manifest this update: Wed 25 Mar 2026 15:56:52 +0000 Manifest next update: Sat 28 Mar 2026 19:40:52 +0000 Files and hashes: 1: 1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.crl (hash: ujuHnk2KfBXbs2ith/wjAvXvFS+1jsE1i23jQ6kRQAQ=) 2: 3130332e3136352e3235322e302f32342d3234203d3e20313531353231.roa (hash: InrImlNizXyRaZ5OSZAbKYKNMEMqIX4WAQ1A/9whx7w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.crl rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 19:40:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:3d:84:6d:53:60:19:eb:d2:0e:fe:ed:85:1b:12:2f:15:b6:f5:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E8E853BD0B0EC8B2C020B975B205A556C14E8E9 Validity Not Before: Mar 25 15:56:52 2026 GMT Not After : Mar 28 19:40:52 2026 GMT Subject: CN=7747096674289911BB9EB8B76103D538D6A0F663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:63:63:76:6d:f4:04:34:6f:c0:37:6a:1c:c6: ae:77:e0:d8:c0:b3:6d:2c:c6:75:de:d1:3c:ef:c7: 9a:29:55:a5:c2:7d:8d:d2:b8:8d:50:8e:5e:23:47: e8:d1:0e:de:d1:ff:73:90:8b:65:ea:94:09:a4:88: fd:41:43:d6:ac:50:45:d4:40:89:b4:94:fd:7c:29: 99:fe:b3:fd:d8:65:e8:2b:25:44:7e:7b:a4:24:6c: 00:4e:37:aa:2f:7a:a2:ff:9d:ba:34:ce:7c:77:60: 4d:1f:ee:05:68:18:0e:8f:73:1c:a0:08:1e:52:82: 22:0c:4d:e3:58:0c:b9:0a:30:07:18:7e:e4:57:4b: 15:f4:b3:8f:23:66:01:e3:c5:ec:ed:08:dc:91:e5: bc:d5:ad:77:f9:78:4b:4a:79:c3:66:68:53:16:8e: 07:c6:1d:17:b4:91:12:5d:81:80:05:65:35:b4:cf: 84:67:1e:9b:5e:f3:6a:a4:bd:24:88:dc:73:b9:58: 96:8b:e7:db:3d:bf:5f:e7:59:4c:f3:a4:60:45:e8: 06:00:8a:10:16:b9:09:b4:ae:b2:e5:cb:7c:b3:dd: 4d:59:0a:b5:d2:da:b9:84:e8:ba:4b:8d:84:38:70: 4a:7a:cf:f0:88:39:8b:89:77:3f:5c:5e:df:48:70: a1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:47:09:66:74:28:99:11:BB:9E:B8:B7:61:03:D5:38:D6:A0:F6:63 X509v3 Authority Key Identifier: keyid:1E:8E:85:3B:D0:B0:EC:8B:2C:02:0B:97:5B:20:5A:55:6C:14:E8:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:ba:8d:01:db:58:82:9d:6f:ac:85:ca:9f:55:9f:33:a3:b0: bd:56:5a:26:81:4b:bc:87:eb:6e:e9:f9:c9:a9:31:c9:6e:3a: 14:39:0d:04:ca:2f:eb:02:d1:be:91:c1:52:82:05:1b:95:f2: 44:d6:06:f8:87:ba:32:08:1d:a7:37:d7:c9:f8:6b:ab:1c:ae: f3:8a:f1:ac:1a:aa:70:0e:41:a9:08:30:18:a3:73:95:6f:ca: ac:0c:ec:88:b8:9e:45:0a:01:f1:5a:84:0f:de:ef:ca:46:11: ed:ee:95:eb:12:61:cb:42:be:50:18:62:b3:25:52:4e:e9:d4: b3:11:36:95:aa:ea:f9:dc:ed:eb:d4:4c:d4:44:1a:a1:4e:7e: 51:ed:3f:02:97:e0:34:eb:81:16:ed:e3:51:30:4e:10:d3:1a: 12:1d:e5:ff:92:59:79:37:aa:ec:ab:2a:27:75:ad:f6:8b:83: 53:a6:46:b0:b1:4e:c2:52:1e:43:50:ae:0b:ca:6a:27:8d:db: ca:bf:40:7c:74:df:cb:08:f0:19:97:75:18:f9:d6:21:e4:3e: 3f:4d:c1:78:2f:30:42:43:3a:f6:06:ec:bf:2f:93:be:26:5b: 11:a4:a4:3e:db:37:3a:cf:5b:25:a2:31:0d:6e:92:9d:b6:75: 2e:b0:79:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQz2EbVNgGevSDv7thRsSLxW29ZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU4RTg1M0JEMEIwRUM4QjJDMDIwQjk3NUIyMDVBNTU2 QzE0RThFOTAeFw0yNjAzMjUxNTU2NTJaFw0yNjAzMjgxOTQwNTJaMDMxMTAvBgNV BAMTKDc3NDcwOTY2NzQyODk5MTFCQjlFQjhCNzYxMDNENTM4RDZBMEY2NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSY2N2bfQENG/AN2ocxq534NjA s20sxnXe0Tzvx5opVaXCfY3SuI1Qjl4jR+jRDt7R/3OQi2XqlAmkiP1BQ9asUEXU QIm0lP18KZn+s/3YZegrJUR+e6QkbABON6oveqL/nbo0znx3YE0f7gVoGA6Pcxyg CB5SgiIMTeNYDLkKMAcYfuRXSxX0s48jZgHjxeztCNyR5bzVrXf5eEtKecNmaFMW jgfGHRe0kRJdgYAFZTW0z4RnHpte82qkvSSI3HO5WJaL59s9v1/nWUzzpGBF6AYA ihAWuQm0rrLly3yz3U1ZCrXS2rmE6LpLjYQ4cEp6z/CIOYuJdz9cXt9IcKG7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd0cJZnQomRG7nri3YQPVONag9mMwHwYDVR0j BBgwFoAUHo6FO9Cw7IssAguXWyBaVWwU6OkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTBiZGNjNS00Y2Q5LTQ2YjAtOWQ3Yi1kMjMxYTllNTdiNTAvMC8xRThFODUzQkQw QjBFQzhCMkMwMjBCOTc1QjIwNUE1NTZDMTRFOEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUU4RTg1M0JEMEIwRUM4QjJDMDIwQjk3NUIyMDVBNTU2QzE0 RThFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWEwYmRjYzUtNGNkOS00NmIwLTlk N2ItZDIzMWE5ZTU3YjUwLzAvMUU4RTg1M0JEMEIwRUM4QjJDMDIwQjk3NUIyMDVB NTU2QzE0RThFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD26jQHbWIKdb6yFyp9VnzOjsL1WWiaBS7yH 627p+cmpMcluOhQ5DQTKL+sC0b6RwVKCBRuV8kTWBviHujIIHac318n4a6scrvOK 8awaqnAOQakIMBijc5VvyqwM7Ii4nkUKAfFahA/e78pGEe3ulesSYctCvlAYYrMl Uk7p1LMRNpWq6vnc7evUTNREGqFOflHtPwKX4DTrgRbt41EwThDTGhId5f+SWXk3 quyrKid1rfaLg1OmRrCxTsJSHkNQrgvKaieN28q/QHx038sI8BmXdRj51iHkPj9N wXgvMEJDOvYG7L8vk74mWxGkpD7bNzrPWyWiMQ1ukp22dS6weSs= -----END CERTIFICATE-----Generated at Thu Mar 26 14:34:11 2026 by rpki-client