$ rpki-client -vvf repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft File: E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft (raw, json) Hash identifier: p2/ARRb1WITjoPCzUj4GVF/ppSOZWV/tus+FqlBSgK4= Subject key identifier: A3:9E:4C:39:20:CA:86:E1:46:89:BA:64:52:A3:72:05:42:D3:E8:B1 Authority key identifier: E0:03:E8:50:B7:7C:76:F0:E0:24:F1:DA:6E:FB:D8:76:7B:41:1A:81 Certificate issuer: /CN=E003E850B77C76F0E024F1DA6EFBD8767B411A81 Certificate serial: 31FD96F65A1A315FE44D2030FF1F306AEBECB531 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E003E850B77C76F0E024F1DA6EFBD8767B411A81.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft Manifest number: 027E Signing time: Tue 24 Mar 2026 22:11:53 +0000 Manifest this update: Tue 24 Mar 2026 22:06:53 +0000 Manifest next update: Sat 28 Mar 2026 08:14:53 +0000 Files and hashes: 1: 3130332e3135362e37342e302f32332d3234203d3e20313431303832.roa (hash: MC4A5+D6SNqarshQJZ1rQAWQNgzbfnlg0wjJs81Ja6E=) 2: E003E850B77C76F0E024F1DA6EFBD8767B411A81.crl (hash: aiAToJcK8Xr0jHMiPqInaMHkv54aFbfuf36cP92xpj4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.crl rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E003E850B77C76F0E024F1DA6EFBD8767B411A81.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 08:14:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:fd:96:f6:5a:1a:31:5f:e4:4d:20:30:ff:1f:30:6a:eb:ec:b5:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E003E850B77C76F0E024F1DA6EFBD8767B411A81 Validity Not Before: Mar 24 22:06:53 2026 GMT Not After : Mar 28 08:14:53 2026 GMT Subject: CN=A39E4C3920CA86E14689BA6452A3720542D3E8B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:80:e8:c1:a0:b3:1a:ea:52:2f:77:27:86:9b: ec:53:f7:c6:c9:3c:10:5e:31:fd:ab:69:72:4e:19: af:f1:ef:9e:35:67:1a:2b:38:d3:5e:6b:b9:d9:8a: ae:d8:b5:92:57:10:2b:be:34:89:a3:65:b2:32:96: 81:9a:f6:eb:bd:25:69:12:26:29:54:8f:65:ae:f0: 96:58:05:40:75:bd:41:df:1d:8a:9d:48:0a:66:07: df:e8:8a:e4:64:79:fc:25:08:b0:47:66:57:24:e0: a5:63:e8:d2:32:4c:ab:d8:d8:a5:d3:cc:a6:56:21: 4c:cf:e2:a7:40:f7:75:af:48:54:d3:3a:88:b1:7c: ad:c9:b3:0d:ba:dd:a3:3f:15:ae:b1:1f:e9:44:c9: b7:ec:86:b4:7c:ae:9e:d9:0d:69:48:6e:97:ea:3b: 8d:8d:b1:59:88:79:70:0c:e1:f0:e8:66:af:d3:59: 38:d3:49:36:be:c8:06:e0:1d:83:4f:2c:a7:09:07: c2:e8:ee:92:ac:5a:dc:41:9c:d2:35:6b:b5:59:df: d2:e5:53:c1:67:74:61:c8:42:f3:a9:61:eb:0b:b7: 53:a0:a6:63:44:c9:fc:cf:a1:3a:ee:dc:b5:f1:ac: 94:61:c2:3d:fd:1e:ad:9c:6e:98:a8:de:2b:a3:2a: 13:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:9E:4C:39:20:CA:86:E1:46:89:BA:64:52:A3:72:05:42:D3:E8:B1 X509v3 Authority Key Identifier: keyid:E0:03:E8:50:B7:7C:76:F0:E0:24:F1:DA:6E:FB:D8:76:7B:41:1A:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E003E850B77C76F0E024F1DA6EFBD8767B411A81.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:c1:08:99:40:b9:a6:02:62:0d:b8:53:8c:ff:99:05:92:fa: 8f:b2:04:57:03:76:a9:de:ae:33:ed:34:4f:f6:fb:e7:f8:21: 1f:c6:34:c4:2c:cd:92:e6:5f:3f:c9:20:d4:8c:91:c3:8a:2b: 5e:d0:15:c1:b5:e2:54:ce:26:90:8a:95:06:a0:ea:86:be:00: ae:e5:f9:53:20:2c:82:31:9a:5c:cb:6e:aa:40:77:2f:b0:5e: 67:f6:8a:ee:9a:6a:b6:8a:84:ed:db:1f:b2:da:35:88:dd:02: c5:5c:4a:92:64:c7:87:00:15:c5:53:a2:c8:5e:9b:9f:08:34: 10:8f:de:f3:9c:2e:98:69:ee:d0:48:f5:55:4c:e6:7d:3e:32: c6:ff:f8:2c:50:4f:80:c4:18:0a:33:d4:6c:37:a0:cf:2f:09: 30:c4:c1:b9:90:09:2d:1c:60:9e:da:34:f2:f2:91:a6:42:0b: 97:9f:12:d9:bd:92:1d:65:27:64:7e:2c:32:68:4e:09:39:c4: cf:78:4b:6d:0f:21:25:5d:e3:56:8c:ca:38:df:f5:6a:51:09: 8c:39:d4:e2:7d:5c:79:5b:96:d7:65:66:1b:b2:29:b7:36:cc: 6c:83:69:c5:55:e9:92:47:1a:b9:a1:d9:bd:bb:5f:4c:0e:87: 93:af:2c:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMf2W9loaMV/kTSAw/x8wauvstTEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTAwM0U4NTBCNzdDNzZGMEUwMjRGMURBNkVGQkQ4NzY3 QjQxMUE4MTAeFw0yNjAzMjQyMjA2NTNaFw0yNjAzMjgwODE0NTNaMDMxMTAvBgNV BAMTKEEzOUU0QzM5MjBDQTg2RTE0Njg5QkE2NDUyQTM3MjA1NDJEM0U4QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYgOjBoLMa6lIvdyeGm+xT98bJ PBBeMf2raXJOGa/x7541ZxorONNea7nZiq7YtZJXECu+NImjZbIyloGa9uu9JWkS JilUj2Wu8JZYBUB1vUHfHYqdSApmB9/oiuRkefwlCLBHZlck4KVj6NIyTKvY2KXT zKZWIUzP4qdA93WvSFTTOoixfK3Jsw263aM/Fa6xH+lEybfshrR8rp7ZDWlIbpfq O42NsVmIeXAM4fDoZq/TWTjTSTa+yAbgHYNPLKcJB8Lo7pKsWtxBnNI1a7VZ39Ll U8FndGHIQvOpYesLt1OgpmNEyfzPoTru3LXxrJRhwj39Hq2cbpio3iujKhMZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo55MOSDKhuFGibpkUqNyBULT6LEwHwYDVR0j BBgwFoAU4APoULd8dvDgJPHabvvYdntBGoEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDAxMDJkMC03MTRmLTRiNTItOWJlNS1kZWQxNmVkZmU0YTIvMC9FMDAzRTg1MEI3 N0M3NkYwRTAyNEYxREE2RUZCRDg3NjdCNDExQTgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTAwM0U4NTBCNzdDNzZGMEUwMjRGMURBNkVGQkQ4NzY3QjQx MUE4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjAwMTAyZDAtNzE0Zi00YjUyLTli ZTUtZGVkMTZlZGZlNGEyLzAvRTAwM0U4NTBCNzdDNzZGMEUwMjRGMURBNkVGQkQ4 NzY3QjQxMUE4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG3BCJlAuaYCYg24U4z/mQWS+o+yBFcDdqne rjPtNE/2++f4IR/GNMQszZLmXz/JINSMkcOKK17QFcG14lTOJpCKlQag6oa+AK7l +VMgLIIxmlzLbqpAdy+wXmf2iu6aaraKhO3bH7LaNYjdAsVcSpJkx4cAFcVToshe m58INBCP3vOcLphp7tBI9VVM5n0+Msb/+CxQT4DEGAoz1Gw3oM8vCTDEwbmQCS0c YJ7aNPLykaZCC5efEtm9kh1lJ2R+LDJoTgk5xM94S20PISVd41aMyjjf9WpRCYw5 1OJ9XHlbltdlZhuyKbc2zGyDacVV6ZJHGrmh2b27X0wOh5OvLDM= -----END CERTIFICATE-----Generated at Thu Mar 26 06:00:44 2026 by rpki-client