$ rpki-client -vvf repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.mft File: E4C33FFA425046D044E7F503AC8065468BAF739E.mft (raw, json) Hash identifier: /hVe/hVgvwiNk2tClQ0G4iayDWGetrV9fUwmLhz7bps= Subject key identifier: A4:8B:FB:C9:DD:76:82:A8:98:2A:22:2C:2B:00:15:95:42:1E:37:37 Authority key identifier: E4:C3:3F:FA:42:50:46:D0:44:E7:F5:03:AC:80:65:46:8B:AF:73:9E Certificate issuer: /CN=E4C33FFA425046D044E7F503AC8065468BAF739E Certificate serial: 07DCF71948BD2E5B51E2E072ABA5D97CC592A3DA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C33FFA425046D044E7F503AC8065468BAF739E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.mft Manifest number: 0214 Signing time: Wed 25 Mar 2026 12:52:21 +0000 Manifest this update: Wed 25 Mar 2026 12:47:21 +0000 Manifest next update: Sat 28 Mar 2026 17:16:21 +0000 Files and hashes: 1: 3130332e39392e32372e302f32342d3234203d3e20313530323739.roa (hash: fFWzPgou/ECKiXU5DKj/fTCFyECWSQWhIu1tavvJN+Q=) 2: E4C33FFA425046D044E7F503AC8065468BAF739E.crl (hash: jToAt50PlYtXCAaVoy9VXQwj5kgBI1BXdozWnheYAVM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.crl rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C33FFA425046D044E7F503AC8065468BAF739E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 17:16:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:dc:f7:19:48:bd:2e:5b:51:e2:e0:72:ab:a5:d9:7c:c5:92:a3:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4C33FFA425046D044E7F503AC8065468BAF739E Validity Not Before: Mar 25 12:47:21 2026 GMT Not After : Mar 28 17:16:21 2026 GMT Subject: CN=A48BFBC9DD7682A8982A222C2B001595421E3737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ea:5d:39:eb:9e:03:9d:f7:cd:ee:a0:33:a8: 3d:a3:8d:4b:58:d6:1d:7d:58:6b:84:51:77:4b:e2: ca:6c:6b:90:05:af:65:f3:ec:97:40:72:60:2c:88: ce:4f:97:ef:95:ce:65:f9:c6:5f:10:e3:d5:b8:dc: 38:06:e0:3f:a5:13:89:c8:22:16:81:ad:24:13:91: 6c:c8:bd:66:aa:af:99:26:b8:bd:c5:b0:0c:6b:1a: b4:2e:5e:b8:2c:e7:ac:7a:ab:4a:af:d7:ab:11:2b: e4:92:2a:fa:17:77:b6:a0:68:0c:1d:a2:21:32:84: 4c:50:84:26:ef:db:63:18:46:c0:f9:d2:0d:34:0c: de:9a:17:f1:5a:09:23:6a:5c:7d:06:10:36:48:d0: df:4c:db:27:da:b6:24:8d:bd:81:0a:10:67:4d:67: fa:fb:81:68:7f:d1:f1:b1:24:48:de:e7:db:21:2f: ed:fa:f1:69:b5:3e:d2:92:40:5a:17:e3:d8:16:b1: 68:16:8a:76:38:cf:b3:30:af:bf:4c:23:a2:3e:fe: 47:9c:8b:77:94:d3:9b:38:79:67:0f:27:08:5b:75: 5d:0f:ba:24:15:d1:90:cd:65:8b:ca:91:97:5e:c2: a0:fb:90:d8:8d:69:dc:e5:40:97:25:04:94:73:33: 0a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:8B:FB:C9:DD:76:82:A8:98:2A:22:2C:2B:00:15:95:42:1E:37:37 X509v3 Authority Key Identifier: keyid:E4:C3:3F:FA:42:50:46:D0:44:E7:F5:03:AC:80:65:46:8B:AF:73:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C33FFA425046D044E7F503AC8065468BAF739E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:38:ba:c3:a0:e8:b0:b7:18:6a:77:ca:fb:b8:51:ca:a7:b4: b3:c9:94:d2:77:27:05:00:c2:a4:78:c3:f7:43:79:eb:e3:06: ca:fb:5d:61:a9:8c:96:25:ff:5d:2c:e3:4f:99:ca:1f:ec:9f: 22:57:71:af:59:b5:07:8a:ed:45:e6:5d:cb:f4:6c:65:8a:40: 3a:6b:31:7e:4f:fb:84:37:45:ac:f8:ae:ad:fb:2b:0a:39:7a: b1:74:e7:f2:df:5c:8e:0b:16:5a:43:4a:45:9e:ce:90:a4:f6: 71:b8:c6:d3:51:e1:7b:43:1f:9b:67:73:fd:e7:8d:27:f0:87: 16:6f:be:e8:52:df:91:26:63:b3:07:9b:17:3d:70:74:fa:bf: 2a:05:d8:66:af:7a:83:4c:a6:b7:bd:6d:83:9e:87:ac:48:3f: 4d:99:75:b4:8b:20:05:32:58:df:89:1a:14:dd:51:23:53:da: af:5e:2f:57:84:72:b1:d9:9d:f4:15:3b:55:12:12:86:bd:23: 72:a6:13:9f:22:1d:d9:2e:8c:28:01:e0:1f:ce:7b:7c:d2:22: e5:45:93:6f:e4:d9:df:19:94:7a:4f:a3:99:fb:e4:6d:f2:94: 0a:24:5f:0f:b3:94:da:0d:df:a5:ea:18:f9:0c:d7:0d:ab:9a: 41:28:21:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB9z3GUi9LltR4uByq6XZfMWSo9owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTRDMzNGRkE0MjUwNDZEMDQ0RTdGNTAzQUM4MDY1NDY4 QkFGNzM5RTAeFw0yNjAzMjUxMjQ3MjFaFw0yNjAzMjgxNzE2MjFaMDMxMTAvBgNV BAMTKEE0OEJGQkM5REQ3NjgyQTg5ODJBMjIyQzJCMDAxNTk1NDIxRTM3MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ6l05654DnffN7qAzqD2jjUtY 1h19WGuEUXdL4spsa5AFr2Xz7JdAcmAsiM5Pl++VzmX5xl8Q49W43DgG4D+lE4nI IhaBrSQTkWzIvWaqr5kmuL3FsAxrGrQuXrgs56x6q0qv16sRK+SSKvoXd7agaAwd oiEyhExQhCbv22MYRsD50g00DN6aF/FaCSNqXH0GEDZI0N9M2yfatiSNvYEKEGdN Z/r7gWh/0fGxJEje59shL+368Wm1PtKSQFoX49gWsWgWinY4z7Mwr79MI6I+/kec i3eU05s4eWcPJwhbdV0PuiQV0ZDNZYvKkZdewqD7kNiNadzlQJclBJRzMwpnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpIv7yd12gqiYKiIsKwAVlUIeNzcwHwYDVR0j BBgwFoAU5MM/+kJQRtBE5/UDrIBlRouvc54wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDk3NmUyNi05NTEzLTQ4ZmYtOWY3Zi1lYTNmZGNmM2UyZTgvMC9FNEMzM0ZGQTQy NTA0NkQwNDRFN0Y1MDNBQzgwNjU0NjhCQUY3MzlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTRDMzNGRkE0MjUwNDZEMDQ0RTdGNTAzQUM4MDY1NDY4QkFG NzM5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjA5NzZlMjYtOTUxMy00OGZmLTlm N2YtZWEzZmRjZjNlMmU4LzAvRTRDMzNGRkE0MjUwNDZEMDQ0RTdGNTAzQUM4MDY1 NDY4QkFGNzM5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK44usOg6LC3GGp3yvu4UcqntLPJlNJ3JwUA wqR4w/dDeevjBsr7XWGpjJYl/10s40+Zyh/snyJXca9ZtQeK7UXmXcv0bGWKQDpr MX5P+4Q3Raz4rq37Kwo5erF05/LfXI4LFlpDSkWezpCk9nG4xtNR4XtDH5tnc/3n jSfwhxZvvuhS35EmY7MHmxc9cHT6vyoF2GaveoNMpre9bYOeh6xIP02ZdbSLIAUy WN+JGhTdUSNT2q9eL1eEcrHZnfQVO1USEoa9I3KmE58iHdkujCgB4B/Oe3zSIuVF k2/k2d8ZlHpPo5n75G3ylAokXw+zlNoN36XqGPkM1w2rmkEoIe4= -----END CERTIFICATE-----Generated at Thu Mar 26 08:49:54 2026 by rpki-client