$ rpki-client -vvf repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft File: EAAF14D74C27E1502835CCF1541D5D92498C8427.mft (raw, json) Hash identifier: x9LWonR66OF4UFeoGCzZIVcN4/iRSao/KT9po1F8gMM= Subject key identifier: D2:7F:F1:D6:5F:65:7E:DD:B2:2D:21:FF:7F:F7:9F:25:1D:76:0E:D0 Authority key identifier: EA:AF:14:D7:4C:27:E1:50:28:35:CC:F1:54:1D:5D:92:49:8C:84:27 Certificate issuer: /CN=EAAF14D74C27E1502835CCF1541D5D92498C8427 Certificate serial: 5E9254EF01ED208A4B098BD79E42CDEB392B5DFE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAAF14D74C27E1502835CCF1541D5D92498C8427.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft Manifest number: 0146 Signing time: Wed 25 Mar 2026 17:32:06 +0000 Manifest this update: Wed 25 Mar 2026 17:27:06 +0000 Manifest next update: Sun 29 Mar 2026 03:47:06 +0000 Files and hashes: 1: 323030313a6466333a393263303a3a2f34382d3438203d3e20313532343231.roa (hash: Re1BfpdFyUDYjfrU456vx+e4oEcGnjf9fKai/wOjz5g=) 2: EAAF14D74C27E1502835CCF1541D5D92498C8427.crl (hash: po20IUhRAi8d92lqA/aZL6gom7W+CKCcTccJoBzDydE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.crl rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAAF14D74C27E1502835CCF1541D5D92498C8427.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 03:47:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:92:54:ef:01:ed:20:8a:4b:09:8b:d7:9e:42:cd:eb:39:2b:5d:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAAF14D74C27E1502835CCF1541D5D92498C8427 Validity Not Before: Mar 25 17:27:06 2026 GMT Not After : Mar 29 03:47:06 2026 GMT Subject: CN=D27FF1D65F657EDDB22D21FF7FF79F251D760ED0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:12:30:3b:e8:24:92:c0:3b:4f:3f:32:3c:c0: 4b:b2:e8:fa:ec:d9:ea:7c:fa:e0:30:4c:62:7f:af: 87:64:a0:a3:dd:e9:71:db:99:c2:1e:bb:84:84:ac: 7e:96:5b:5f:39:fe:9c:5e:99:4b:6f:66:36:50:82: 85:2b:62:c5:9c:27:10:9f:49:3d:db:ee:8b:9f:03: 9b:a6:2f:3b:ab:cb:50:ff:0d:96:eb:5c:d9:20:3f: d8:3a:c0:2b:7c:a4:8f:21:e0:e1:4e:e9:69:b6:62: b3:44:20:42:bf:4f:10:aa:01:38:04:b1:58:0c:1a: ba:5a:5d:80:3a:7c:80:82:15:b4:34:f8:7f:37:4a: 9b:00:19:f3:c8:f1:39:eb:a0:b3:94:25:e2:e0:74: 26:e8:db:d0:b8:1c:c6:33:ea:2e:8e:c0:6e:36:0b: ca:46:4d:94:8f:ad:d0:2a:c4:e3:b1:ee:1d:a5:c9: 1a:47:15:4b:95:a7:35:3e:19:9f:e8:4d:25:4e:1a: 83:10:c4:55:bb:0e:89:01:88:4a:ce:c1:2a:42:b9: 4b:e8:2d:fb:23:19:3d:f9:e5:c5:c4:29:c6:4b:c9: c3:35:7e:64:d4:5c:24:bd:2f:2c:c5:26:a9:ee:17: d4:ed:a0:22:94:97:44:c5:6f:b2:a1:d0:76:a2:23: e9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:7F:F1:D6:5F:65:7E:DD:B2:2D:21:FF:7F:F7:9F:25:1D:76:0E:D0 X509v3 Authority Key Identifier: keyid:EA:AF:14:D7:4C:27:E1:50:28:35:CC:F1:54:1D:5D:92:49:8C:84:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAAF14D74C27E1502835CCF1541D5D92498C8427.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:15:e8:e0:50:5b:c0:aa:3f:4f:7e:ba:1e:29:c4:1c:84:0e: 54:5d:8c:5c:2a:90:de:7f:f9:77:d7:57:c6:65:5e:6f:fc:75: 17:75:ef:c1:dd:38:52:48:72:41:b9:bf:11:83:71:d8:4d:44: d7:d8:02:a7:fe:cb:db:6c:5e:84:d0:a8:c9:d4:60:9c:f7:f8: e1:55:66:8c:64:94:2d:22:29:b3:c1:3b:c3:af:3b:b0:d2:bd: bd:f8:4b:a6:8f:7b:8c:d5:94:8e:e9:83:c5:09:78:2b:cf:02: 71:e0:7a:d6:92:c4:2b:75:ae:7f:cd:9f:84:33:d4:97:6a:0c: 90:b4:5e:d5:48:9b:a4:af:36:1b:6d:e4:58:02:15:27:54:b2: 26:a5:2f:96:1d:67:34:e3:31:19:1f:23:38:04:69:9c:58:45: 49:55:ea:bd:2d:50:47:3b:36:20:da:71:cf:d2:1b:ed:08:88: 6d:bf:3a:cb:37:bf:db:b6:68:20:db:d3:c5:9c:7b:e8:ed:52: 06:80:80:ad:8f:a0:8e:7b:a9:37:90:ca:f8:a8:80:e1:26:9b: 5f:a2:d0:3b:53:fb:48:db:c5:a2:2f:3d:23:e9:fb:6c:3a:72: 21:8e:cf:5a:1e:56:09:0f:f8:f5:09:61:2d:d4:5b:8b:c5:9a: 0d:94:db:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXpJU7wHtIIpLCYvXnkLN6zkrXf4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFBRjE0RDc0QzI3RTE1MDI4MzVDQ0YxNTQxRDVEOTI0 OThDODQyNzAeFw0yNjAzMjUxNzI3MDZaFw0yNjAzMjkwMzQ3MDZaMDMxMTAvBgNV BAMTKEQyN0ZGMUQ2NUY2NTdFRERCMjJEMjFGRjdGRjc5RjI1MUQ3NjBFRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjEjA76CSSwDtPPzI8wEuy6Prs 2ep8+uAwTGJ/r4dkoKPd6XHbmcIeu4SErH6WW185/pxemUtvZjZQgoUrYsWcJxCf ST3b7oufA5umLzury1D/DZbrXNkgP9g6wCt8pI8h4OFO6Wm2YrNEIEK/TxCqATgE sVgMGrpaXYA6fICCFbQ0+H83SpsAGfPI8TnroLOUJeLgdCbo29C4HMYz6i6OwG42 C8pGTZSPrdAqxOOx7h2lyRpHFUuVpzU+GZ/oTSVOGoMQxFW7DokBiErOwSpCuUvo LfsjGT355cXEKcZLycM1fmTUXCS9LyzFJqnuF9TtoCKUl0TFb7Kh0HaiI+k1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0n/x1l9lft2yLSH/f/efJR12DtAwHwYDVR0j BBgwFoAU6q8U10wn4VAoNczxVB1dkkmMhCcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTRmNzkzNC1jZGM3LTQwODItODNmYi1kZjdkNGY4MjE5YWYvMS9FQUFGMTRENzRD MjdFMTUwMjgzNUNDRjE1NDFENUQ5MjQ5OEM4NDI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUFBRjE0RDc0QzI3RTE1MDI4MzVDQ0YxNTQxRDVEOTI0OThD ODQyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE0Zjc5MzQtY2RjNy00MDgyLTgz ZmItZGY3ZDRmODIxOWFmLzEvRUFBRjE0RDc0QzI3RTE1MDI4MzVDQ0YxNTQxRDVE OTI0OThDODQyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEUV6OBQW8CqP09+uh4pxByEDlRdjFwqkN5/ +XfXV8ZlXm/8dRd178HdOFJIckG5vxGDcdhNRNfYAqf+y9tsXoTQqMnUYJz3+OFV ZoxklC0iKbPBO8OvO7DSvb34S6aPe4zVlI7pg8UJeCvPAnHgetaSxCt1rn/Nn4Qz 1JdqDJC0XtVIm6SvNhtt5FgCFSdUsialL5YdZzTjMRkfIzgEaZxYRUlV6r0tUEc7 NiDacc/SG+0IiG2/Oss3v9u2aCDb08Wce+jtUgaAgK2PoI57qTeQyviogOEmm1+i 0DtT+0jbxaIvPSPp+2w6ciGOz1oeVgkP+PUJYS3UW4vFmg2U238= -----END CERTIFICATE-----Generated at Thu Mar 26 13:25:12 2026 by rpki-client