$ rpki-client -vvf repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft File: E94D4099064713F1C3A5E211E817CFC2A40E6370.mft (raw, json) Hash identifier: L/GFpzynYDN42bj6G7K2/GjYr1FKlD5afnxEL3j3WQU= Subject key identifier: 5D:36:3F:B4:BB:BD:76:37:8D:D3:52:67:20:C6:0D:24:61:A9:A5:70 Authority key identifier: E9:4D:40:99:06:47:13:F1:C3:A5:E2:11:E8:17:CF:C2:A4:0E:63:70 Certificate issuer: /CN=E94D4099064713F1C3A5E211E817CFC2A40E6370 Certificate serial: 0A069A6475D5AF5B71E83918CB0D9EF103C51182 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft Manifest number: 0216 Signing time: Wed 25 Mar 2026 01:11:39 +0000 Manifest this update: Wed 25 Mar 2026 01:06:39 +0000 Manifest next update: Sat 28 Mar 2026 09:16:39 +0000 Files and hashes: 1: 3130332e3136342e31342e302f32332d3234203d3e20313532303537.roa (hash: TODEDun2Zl+j5gm95jSV7b8fVwk7R83jzCkXAd4YUh0=) 2: E94D4099064713F1C3A5E211E817CFC2A40E6370.crl (hash: v5EtulDZm+GaLYNRZ9oCb25F6Etuz27qIHmTF023QNQ=) 3: 3131302e39322e37322e302f32332d3234203d3e203137393935.roa (hash: Tj+rZXXICw5VIXsxuWhO+B1070IpmB9rr/NwmKii+rg=) 4: 34392e302e32342e302f32332d3234203d3e203137393935.roa (hash: G15jhzfZRAvw44ZtH89JpUZ7Q4CGTBRIfeHqxNKeprc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.crl rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 09:16:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:06:9a:64:75:d5:af:5b:71:e8:39:18:cb:0d:9e:f1:03:c5:11:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E94D4099064713F1C3A5E211E817CFC2A40E6370 Validity Not Before: Mar 25 01:06:39 2026 GMT Not After : Mar 28 09:16:39 2026 GMT Subject: CN=5D363FB4BBBD76378DD3526720C60D2461A9A570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:08:b9:ba:a3:c2:bb:e8:dc:a7:ec:f0:2a:cb: d8:18:86:8d:7c:ec:d1:ae:3e:6b:37:e7:2a:a5:1b: b1:ae:53:8a:97:d7:bb:a1:6e:94:03:48:aa:a7:7a: b9:7c:58:2f:7d:81:87:03:87:45:97:5e:ce:38:a9: 34:a3:61:07:36:aa:a8:ad:9f:90:26:90:71:8e:c3: 0a:10:13:26:4a:8f:72:a8:f3:fc:ef:8a:02:62:4e: fb:99:2b:f9:07:65:4b:35:2f:da:11:06:16:65:68: 71:2a:12:3e:34:cc:c3:17:83:14:0b:13:34:f6:14: d1:06:19:3a:02:20:3d:e8:31:19:54:00:6d:b8:32: c1:1b:b0:22:c2:dc:7f:a0:20:8b:35:03:07:14:dc: c4:64:f9:77:8c:7a:0f:a5:e6:18:14:5e:4c:bb:41: d7:07:15:f6:f7:4d:ef:79:4f:33:bb:d0:63:b3:bb: b6:c0:3f:54:0e:71:cb:54:33:dd:c5:d8:29:a9:92: 07:21:16:4e:bf:1c:50:15:f5:13:2d:a4:37:93:6a: 41:f4:7a:e4:1f:02:44:b1:5f:3f:1c:73:cd:e7:9f: 5a:1d:93:59:4f:95:23:29:98:de:a4:52:a3:64:91: 21:e5:c9:fa:df:54:9a:df:b8:28:d9:84:9d:e8:94: cd:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:36:3F:B4:BB:BD:76:37:8D:D3:52:67:20:C6:0D:24:61:A9:A5:70 X509v3 Authority Key Identifier: keyid:E9:4D:40:99:06:47:13:F1:C3:A5:E2:11:E8:17:CF:C2:A4:0E:63:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:df:51:2b:dc:f3:18:60:79:e0:ab:22:5e:db:ea:12:e0:73: 88:a3:1c:9a:a4:8b:24:01:92:30:58:f8:35:5a:60:2d:a3:71: f4:f8:a6:18:5e:8b:0a:72:56:6d:4f:f6:8a:cd:dd:c0:15:7a: 7a:3a:aa:19:c9:c3:19:91:f7:05:c0:f6:49:bc:2c:01:6c:04: 5e:d4:04:14:ee:a2:75:cc:e1:31:94:f6:a4:48:2b:19:20:a1: f7:73:c3:96:44:3b:79:0e:0a:2a:69:5a:79:a3:57:cc:f3:fc: de:0e:36:27:39:9e:01:92:cb:b7:60:46:67:88:b5:9b:26:d7: da:a3:11:f5:84:f8:1a:e6:7b:dd:68:76:be:05:6a:49:11:18: 60:01:82:f4:43:8f:05:4a:1b:71:02:68:c4:cb:4d:00:67:d3: 99:9e:47:0c:9e:00:47:63:f9:be:d4:1a:2a:be:c7:09:d2:84: dc:91:07:a9:ea:8f:5e:26:ad:86:03:0b:ce:a8:c2:85:a1:c4: 18:6e:bf:d7:87:4e:f4:23:bb:4c:47:ec:10:b9:f2:84:09:81: 19:fa:2e:e0:aa:f8:da:0e:6c:77:a6:59:ce:50:81:d0:6a:d9: 4a:04:8a:24:8d:8e:73:df:e5:a4:6d:4b:46:ee:cf:1f:c2:20: 89:f3:c7:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCgaaZHXVr1tx6DkYyw2e8QPFEYIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk0RDQwOTkwNjQ3MTNGMUMzQTVFMjExRTgxN0NGQzJB NDBFNjM3MDAeFw0yNjAzMjUwMTA2MzlaFw0yNjAzMjgwOTE2MzlaMDMxMTAvBgNV BAMTKDVEMzYzRkI0QkJCRDc2Mzc4REQzNTI2NzIwQzYwRDI0NjFBOUE1NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdCLm6o8K76Nyn7PAqy9gYho18 7NGuPms35yqlG7GuU4qX17uhbpQDSKqnerl8WC99gYcDh0WXXs44qTSjYQc2qqit n5AmkHGOwwoQEyZKj3Ko8/zvigJiTvuZK/kHZUs1L9oRBhZlaHEqEj40zMMXgxQL EzT2FNEGGToCID3oMRlUAG24MsEbsCLC3H+gIIs1AwcU3MRk+XeMeg+l5hgUXky7 QdcHFfb3Te95TzO70GOzu7bAP1QOcctUM93F2CmpkgchFk6/HFAV9RMtpDeTakH0 euQfAkSxXz8cc83nn1odk1lPlSMpmN6kUqNkkSHlyfrfVJrfuCjZhJ3olM3dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXTY/tLu9djeN01JnIMYNJGGppXAwHwYDVR0j BBgwFoAU6U1AmQZHE/HDpeIR6BfPwqQOY3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjdhZTgyZi01MzdlLTQ2MjYtYmU5ZS0zMzM5NGEyZGM5NjkvMC9FOTRENDA5OTA2 NDcxM0YxQzNBNUUyMTFFODE3Q0ZDMkE0MEU2MzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTk0RDQwOTkwNjQ3MTNGMUMzQTVFMjExRTgxN0NGQzJBNDBF NjM3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmY3YWU4MmYtNTM3ZS00NjI2LWJl OWUtMzMzOTRhMmRjOTY5LzAvRTk0RDQwOTkwNjQ3MTNGMUMzQTVFMjExRTgxN0NG QzJBNDBFNjM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAzfUSvc8xhgeeCrIl7b6hLgc4ijHJqkiyQB kjBY+DVaYC2jcfT4phheiwpyVm1P9orN3cAVeno6qhnJwxmR9wXA9km8LAFsBF7U BBTuonXM4TGU9qRIKxkgofdzw5ZEO3kOCippWnmjV8zz/N4ONic5ngGSy7dgRmeI tZsm19qjEfWE+Brme91odr4FakkRGGABgvRDjwVKG3ECaMTLTQBn05meRwyeAEdj +b7UGiq+xwnShNyRB6nqj14mrYYDC86owoWhxBhuv9eHTvQju0xH7BC58oQJgRn6 LuCq+NoObHemWc5QgdBq2UoEiiSNjnPf5aRtS0buzx/CIInzx6U= -----END CERTIFICATE-----Generated at Thu Mar 26 18:51:31 2026 by rpki-client