$ rpki-client -vvf repo-rpki.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/E118E8E6144A59677DB6D05BDF713DB23BC61342.mft File: E118E8E6144A59677DB6D05BDF713DB23BC61342.mft (raw, json) Hash identifier: MYr91Kdemj2XkAEiG+WHVcIcC4fCAlPu2MknoqdmM+g= Subject key identifier: D2:FF:A2:AC:05:5F:22:E4:DB:07:A4:0D:EA:86:8B:18:EE:BA:DC:DD Authority key identifier: E1:18:E8:E6:14:4A:59:67:7D:B6:D0:5B:DF:71:3D:B2:3B:C6:13:42 Certificate issuer: /CN=E118E8E6144A59677DB6D05BDF713DB23BC61342 Certificate serial: 1E2ABDB016E3AADB80F34CA4BBA4CC1D4C9AC610 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E118E8E6144A59677DB6D05BDF713DB23BC61342.cer Subject info access: rsync://repo-rpki.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/E118E8E6144A59677DB6D05BDF713DB23BC61342.mft Manifest number: 034D Signing time: Fri 20 Mar 2026 13:22:07 +0000 Manifest this update: Fri 20 Mar 2026 13:17:07 +0000 Manifest next update: Mon 23 Mar 2026 15:52:07 +0000 Files and hashes: 1: 3130332e3137342e31382e302f32332d3234203d3e20313331313131.roa (hash: EPfbuzMbv4cF+h934ARntwSyGoDJC9dJTM001arffsg=) 2: E118E8E6144A59677DB6D05BDF713DB23BC61342.crl (hash: 4k53MT6yBFzRdY+sf7BR/v0FeBtvOV28coAxr1DPEIY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/E118E8E6144A59677DB6D05BDF713DB23BC61342.crl rsync://repo-rpki.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/E118E8E6144A59677DB6D05BDF713DB23BC61342.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E118E8E6144A59677DB6D05BDF713DB23BC61342.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Mar 2026 15:52:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:2a:bd:b0:16:e3:aa:db:80:f3:4c:a4:bb:a4:cc:1d:4c:9a:c6:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E118E8E6144A59677DB6D05BDF713DB23BC61342 Validity Not Before: Mar 20 13:17:07 2026 GMT Not After : Mar 23 15:52:07 2026 GMT Subject: CN=D2FFA2AC055F22E4DB07A40DEA868B18EEBADCDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:18:f0:82:16:bc:38:6c:6b:1d:2c:aa:06:ce: 8f:94:39:4c:cf:26:bb:41:64:8c:2a:ad:78:86:f3: bf:c9:e5:8c:ef:a5:3b:fd:38:00:0f:35:30:35:b7: 16:8a:06:d6:6c:e1:f2:35:5f:97:ad:46:9c:ad:c0: 5d:cb:92:03:7a:2e:c0:14:df:c4:ae:c7:d1:5a:5f: 1d:d5:6e:e1:fb:58:54:e0:14:e9:67:2c:9f:a2:86: 8b:a3:60:c3:28:2b:b3:d4:5d:e8:ce:0d:56:81:43: 59:42:dc:b3:66:e4:9e:86:69:8e:b8:3a:72:2a:af: 92:d2:79:9e:81:bb:b8:84:40:8d:70:45:2f:2a:68: ad:9d:94:7c:71:31:75:96:6c:a0:76:d1:65:5a:a5: b0:ab:18:be:a1:a0:4c:c1:2f:1d:b4:82:ae:e2:f8: e6:47:df:c4:92:8f:63:57:35:c1:9a:a1:2a:42:4f: 49:0d:db:a6:a1:7f:c9:d9:77:da:58:ad:fa:1e:d1: c7:12:e6:de:42:f4:f2:98:85:de:d7:ac:4e:df:a7: 79:ee:e3:d6:86:a1:fc:31:88:91:c3:ed:8b:52:24: c6:6a:f3:51:8d:13:e5:0c:04:63:d3:09:52:95:d1: de:84:22:a2:f7:4e:52:4d:5a:aa:0e:89:bc:8e:1f: db:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:FF:A2:AC:05:5F:22:E4:DB:07:A4:0D:EA:86:8B:18:EE:BA:DC:DD X509v3 Authority Key Identifier: keyid:E1:18:E8:E6:14:4A:59:67:7D:B6:D0:5B:DF:71:3D:B2:3B:C6:13:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/E118E8E6144A59677DB6D05BDF713DB23BC61342.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E118E8E6144A59677DB6D05BDF713DB23BC61342.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/E118E8E6144A59677DB6D05BDF713DB23BC61342.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:a1:ff:b4:32:69:c6:3b:73:51:e4:dd:bf:0a:7b:25:c8:d0: d7:64:94:da:b6:ef:58:d8:68:19:37:b4:ae:2a:e0:fb:e1:25: b0:34:5e:73:a8:92:9f:ba:4a:ba:36:4d:f0:73:78:5d:7f:57: 55:f8:b3:c1:65:8b:2c:51:3a:ee:a4:22:86:52:b2:bb:ec:60: 65:13:2a:31:ef:a0:b5:7d:b8:a3:1a:6e:99:35:94:41:78:cb: de:d0:d9:c0:a4:e0:7d:85:17:2b:14:8f:d3:36:28:24:4d:66: 8b:6d:1b:42:1e:8f:69:da:db:3f:ab:b2:2e:06:0e:51:9f:e2: 67:ce:d0:a0:4c:39:2a:30:2d:92:15:11:ae:ca:8d:3f:2f:bd: c2:ec:f8:01:d2:fd:df:6f:7d:a9:cf:03:4d:c0:9c:07:6c:70: fd:29:9c:a8:5b:0d:69:c2:4d:41:d0:cd:ec:72:9b:54:63:5f: 5b:6b:e7:b1:0d:dc:1f:e4:03:45:9b:09:3e:a2:02:14:61:15: 35:73:dc:e0:9c:dd:ee:ff:86:43:fa:88:4b:41:0b:4a:dd:22: 04:57:a8:01:40:50:f4:c2:f5:ef:d1:95:43:8f:dd:1a:77:5d: b0:86:cd:03:8a:49:5b:05:df:7c:a6:33:fe:02:f1:e1:a5:71: 24:a4:49:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHiq9sBbjqtuA80yku6TMHUyaxhAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTExOEU4RTYxNDRBNTk2NzdEQjZEMDVCREY3MTNEQjIz QkM2MTM0MjAeFw0yNjAzMjAxMzE3MDdaFw0yNjAzMjMxNTUyMDdaMDMxMTAvBgNV BAMTKEQyRkZBMkFDMDU1RjIyRTREQjA3QTQwREVBODY4QjE4RUVCQURDREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0GPCCFrw4bGsdLKoGzo+UOUzP JrtBZIwqrXiG87/J5YzvpTv9OAAPNTA1txaKBtZs4fI1X5etRpytwF3LkgN6LsAU 38Sux9FaXx3VbuH7WFTgFOlnLJ+ihoujYMMoK7PUXejODVaBQ1lC3LNm5J6GaY64 OnIqr5LSeZ6Bu7iEQI1wRS8qaK2dlHxxMXWWbKB20WVapbCrGL6hoEzBLx20gq7i +OZH38SSj2NXNcGaoSpCT0kN26ahf8nZd9pYrfoe0ccS5t5C9PKYhd7XrE7fp3nu 49aGofwxiJHD7YtSJMZq81GNE+UMBGPTCVKV0d6EIqL3TlJNWqoOibyOH9tzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0v+irAVfIuTbB6QN6oaLGO663N0wHwYDVR0j BBgwFoAU4Rjo5hRKWWd9ttBb33E9sjvGE0IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MDFkYmFmYy1jMGNjLTQ5NmEtYjVlMC00ZjQ4YmE5NDZjZDMvMC9FMTE4RThFNjE0 NEE1OTY3N0RCNkQwNUJERjcxM0RCMjNCQzYxMzQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTExOEU4RTYxNDRBNTk2NzdEQjZEMDVCREY3MTNEQjIzQkM2 MTM0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTAxZGJhZmMtYzBjYy00OTZhLWI1 ZTAtNGY0OGJhOTQ2Y2QzLzAvRTExOEU4RTYxNDRBNTk2NzdEQjZEMDVCREY3MTNE QjIzQkM2MTM0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIWh/7QyacY7c1Hk3b8KeyXI0NdklNq271jY aBk3tK4q4PvhJbA0XnOokp+6Sro2TfBzeF1/V1X4s8FliyxROu6kIoZSsrvsYGUT KjHvoLV9uKMabpk1lEF4y97Q2cCk4H2FFysUj9M2KCRNZottG0Iej2na2z+rsi4G DlGf4mfO0KBMOSowLZIVEa7KjT8vvcLs+AHS/d9vfanPA03AnAdscP0pnKhbDWnC TUHQzexym1RjX1tr57EN3B/kA0WbCT6iAhRhFTVz3OCc3e7/hkP6iEtBC0rdIgRX qAFAUPTC9e/RlUOP3Rp3XbCGzQOKSVsF33ymM/4C8eGlcSSkSbM= -----END CERTIFICATE-----Generated at Fri Mar 20 21:59:54 2026 by rpki-client