$ rpki-client -vvf repo-rpki.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.mft File: E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.mft (raw, json) Hash identifier: WAjy4XIu6INjTeopWuNP2R9vd0j9Szkk6Da+OVEXMxc= Subject key identifier: 02:91:3B:EE:50:AD:39:82:ED:51:34:D2:FD:90:86:2F:E0:0B:0C:DD Authority key identifier: E8:4D:B4:4F:00:08:62:4F:8E:76:93:BC:3B:E1:F9:BF:CD:DF:A2:80 Certificate issuer: /CN=E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280 Certificate serial: 7DDA622D2FCB542852944BFFE34CAC62A31E340F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.mft Manifest number: 052A Signing time: Wed 18 Mar 2026 12:41:23 +0000 Manifest this update: Wed 18 Mar 2026 12:36:22 +0000 Manifest next update: Sat 21 Mar 2026 15:08:22 +0000 Files and hashes: 1: E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.crl (hash: 7h82+bgLpU1+du3yMHKjxNusGNjBHIteyvJ97ZgUAGk=) 2: 3130332e3132302e3133382e302f32342d3234203d3e20313338303537.roa (hash: i3kLGZdC4b7g0r22OaWIQLyO15cZEfzn1gqotYUiYWU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.crl rsync://repo-rpki.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 15:08:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:da:62:2d:2f:cb:54:28:52:94:4b:ff:e3:4c:ac:62:a3:1e:34:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280 Validity Not Before: Mar 18 12:36:22 2026 GMT Not After : Mar 21 15:08:22 2026 GMT Subject: CN=02913BEE50AD3982ED5134D2FD90862FE00B0CDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c2:da:20:12:fe:7f:f3:d9:28:4d:67:12:9b: 72:9a:b5:03:61:3b:ae:a4:cf:7c:8d:50:61:bb:1a: 45:58:4d:2f:31:05:45:36:03:8d:0c:2d:ba:f0:91: 49:94:96:6b:da:39:83:f3:cf:db:a7:74:fe:17:6e: e4:08:de:30:9d:41:2d:91:9f:24:c1:91:0c:c1:bf: 38:89:49:92:86:a1:17:0d:2a:58:7f:52:30:83:22: fa:96:be:85:f0:6c:9e:99:b3:1c:e8:ad:c0:b3:0c: 3a:fe:fe:eb:da:ea:40:f1:fd:06:0e:36:2c:36:4c: d0:5b:c6:21:63:19:24:72:1e:61:48:ad:e3:17:8e: 8a:0e:4a:9f:4c:48:c9:d8:f0:0d:60:a2:e5:a2:20: 85:4b:e6:6b:9b:da:35:d0:25:18:86:e6:a9:63:61: db:01:98:e2:71:11:14:3d:d2:2d:f1:5e:a2:1b:b6: 85:31:d6:2b:8e:a4:6d:04:83:e5:03:21:2b:03:ab: 63:82:93:2a:30:6d:e6:40:c2:b3:cc:95:37:bf:24: b6:a2:c5:e6:84:d6:10:ec:0d:6e:e6:ca:31:b2:36: 42:db:7d:4f:41:aa:f2:7a:a6:11:80:d7:4a:70:de: 36:ec:e6:25:2d:ee:8a:9d:6b:f6:a7:82:22:b4:f5: ca:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:91:3B:EE:50:AD:39:82:ED:51:34:D2:FD:90:86:2F:E0:0B:0C:DD X509v3 Authority Key Identifier: keyid:E8:4D:B4:4F:00:08:62:4F:8E:76:93:BC:3B:E1:F9:BF:CD:DF:A2:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:84:83:50:e4:5e:4a:c9:5b:2e:1a:52:a8:c2:ab:4c:df:b6: d8:bd:e2:08:26:4e:29:7d:d4:f5:25:a6:12:76:6b:b8:3b:e4: b7:f3:1a:23:57:4c:45:66:e8:38:27:e9:31:eb:40:0a:0f:50: f7:77:52:a6:79:a4:7f:c8:bc:16:52:bb:eb:91:4c:3b:50:85: ce:cc:42:03:18:61:2d:94:9e:0d:2d:72:82:cd:ed:ef:8d:71: 1b:01:e2:d9:93:69:89:f2:62:59:e9:47:3c:ba:52:47:bf:b8: ef:70:c6:60:fb:60:31:2a:19:c1:f5:ad:bf:1d:30:22:fe:75: 42:93:13:a0:84:53:46:1c:a1:cb:63:9d:d2:f2:e6:98:e8:f9: cb:41:b0:a6:5b:2b:32:f4:42:59:f4:2c:ac:41:17:31:86:45: 6a:a5:97:45:a7:84:79:0c:f7:1f:5c:16:40:d4:bc:9c:f6:35: 0d:4d:79:17:22:61:bf:07:df:ef:3e:b9:97:b4:10:4e:3f:0c: c5:4a:81:8d:9d:e5:13:b8:43:15:b5:7b:3b:b4:64:b4:3e:7d: fa:0f:64:c6:28:3c:df:a3:08:94:3e:f1:22:78:9d:94:48:a7: 00:93:42:0a:ec:0d:1b:26:96:44:32:5a:a9:d4:9d:79:19:9e: 33:6b:99:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfdpiLS/LVChSlEv/40ysYqMeNA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg0REI0NEYwMDA4NjI0RjhFNzY5M0JDM0JFMUY5QkZD RERGQTI4MDAeFw0yNjAzMTgxMjM2MjJaFw0yNjAzMjExNTA4MjJaMDMxMTAvBgNV BAMTKDAyOTEzQkVFNTBBRDM5ODJFRDUxMzREMkZEOTA4NjJGRTAwQjBDREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+wtogEv5/89koTWcSm3KatQNh O66kz3yNUGG7GkVYTS8xBUU2A40MLbrwkUmUlmvaOYPzz9undP4XbuQI3jCdQS2R nyTBkQzBvziJSZKGoRcNKlh/UjCDIvqWvoXwbJ6ZsxzorcCzDDr+/uva6kDx/QYO Niw2TNBbxiFjGSRyHmFIreMXjooOSp9MSMnY8A1gouWiIIVL5mub2jXQJRiG5qlj YdsBmOJxERQ90i3xXqIbtoUx1iuOpG0Eg+UDISsDq2OCkyowbeZAwrPMlTe/JLai xeaE1hDsDW7myjGyNkLbfU9BqvJ6phGA10pw3jbs5iUt7oqda/angiK09crdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUApE77lCtOYLtUTTS/ZCGL+ALDN0wHwYDVR0j BBgwFoAU6E20TwAIYk+OdpO8O+H5v83fooAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWI5NjAwNS04M2E5LTQxZTQtYWY1Yi1mM2VhYThmMjM2NTEvMC9FODREQjQ0RjAw MDg2MjRGOEU3NjkzQkMzQkUxRjlCRkNEREZBMjgwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTg0REI0NEYwMDA4NjI0RjhFNzY5M0JDM0JFMUY5QkZDRERG QTI4MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGViOTYwMDUtODNhOS00MWU0LWFm NWItZjNlYWE4ZjIzNjUxLzAvRTg0REI0NEYwMDA4NjI0RjhFNzY5M0JDM0JFMUY5 QkZDRERGQTI4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJKEg1DkXkrJWy4aUqjCq0zftti94ggmTil9 1PUlphJ2a7g75LfzGiNXTEVm6Dgn6THrQAoPUPd3UqZ5pH/IvBZSu+uRTDtQhc7M QgMYYS2Ung0tcoLN7e+NcRsB4tmTaYnyYlnpRzy6Uke/uO9wxmD7YDEqGcH1rb8d MCL+dUKTE6CEU0YcoctjndLy5pjo+ctBsKZbKzL0Qln0LKxBFzGGRWqll0WnhHkM 9x9cFkDUvJz2NQ1NeRciYb8H3+8+uZe0EE4/DMVKgY2d5RO4QxW1ezu0ZLQ+ffoP ZMYoPN+jCJQ+8SJ4nZRIpwCTQgrsDRsmlkQyWqnUnXkZnjNrmUo= -----END CERTIFICATE-----Generated at Thu Mar 19 09:39:28 2026 by rpki-client