$ rpki-client -vvf repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft File: EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft (raw, json) Hash identifier: TWkx+hfxxoo3CDvuug5mnkIcFN9QBgTlYZNmg33CoXU= Subject key identifier: 27:7A:41:6E:79:EA:AC:41:A9:43:CB:EA:73:A0:2A:92:E4:09:B7:92 Authority key identifier: EA:5E:33:0B:F8:DC:FF:6D:09:DF:49:07:4B:46:B2:2E:BD:FB:D4:54 Certificate issuer: /CN=EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454 Certificate serial: 166EF337E57A9CAE57CF73A9470A59CDF9AE5D09 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft Manifest number: 0211 Signing time: Mon 23 Mar 2026 22:41:39 +0000 Manifest this update: Mon 23 Mar 2026 22:36:39 +0000 Manifest next update: Fri 27 Mar 2026 05:45:39 +0000 Files and hashes: 1: EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.crl (hash: p68JDd4qEnpIdacLOB5ry0ZvAF1ek5/W4HP0CLqUYKo=) 2: 3230322e34372e39322e302f32332d3234203d3e203137393935.roa (hash: 80MS0ZuTW+5iQNzQYBDQPZfjWsQsANAR7yyCgQ7zGBU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.crl rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Mar 2026 09:57:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:6e:f3:37:e5:7a:9c:ae:57:cf:73:a9:47:0a:59:cd:f9:ae:5d:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454 Validity Not Before: Mar 23 22:36:39 2026 GMT Not After : Mar 27 05:45:39 2026 GMT Subject: CN=277A416E79EAAC41A943CBEA73A02A92E409B792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:d7:b3:44:3c:d8:c3:dc:05:ba:22:6d:b4:7e: a4:eb:85:c4:c3:76:bb:f0:6c:e7:57:b5:6c:68:5f: cb:bd:4e:8c:19:aa:d7:8d:2d:75:da:f5:33:6f:82: d6:c7:51:64:88:97:3e:8e:b1:7b:38:9e:41:75:82: 47:47:b7:55:11:06:93:c5:09:88:85:5c:e6:2b:0a: 7b:52:d1:57:d5:de:23:1b:7e:73:0a:20:39:e9:07: 54:55:d0:63:7c:03:0f:36:af:7e:ac:30:ff:ae:0b: 2e:ee:2e:c5:71:ac:00:e8:e3:36:19:72:74:f4:36: ee:22:0e:1d:4b:86:f4:7d:60:c9:b5:60:0f:46:71: 46:79:41:67:00:e8:be:26:3b:ff:4f:1f:dd:ab:b6: 75:26:ba:52:e6:a7:c5:c6:21:a3:fc:cd:73:4a:96: 45:49:9f:e8:8c:3d:64:e9:5c:df:67:7b:a1:91:b4: 1b:6a:b5:df:88:f9:e9:f7:af:8b:b7:b5:ef:5f:dd: 65:f5:aa:3c:06:46:8a:f3:87:6f:31:33:78:a5:c1: 9e:0e:4e:f2:8f:fb:b0:a0:66:91:b7:49:91:13:42: 47:73:96:02:79:73:b8:ed:b3:d1:4a:56:72:58:e0: 2e:c8:62:33:8f:ec:fd:c9:9d:44:2b:a4:6b:37:04: 2a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:7A:41:6E:79:EA:AC:41:A9:43:CB:EA:73:A0:2A:92:E4:09:B7:92 X509v3 Authority Key Identifier: keyid:EA:5E:33:0B:F8:DC:FF:6D:09:DF:49:07:4B:46:B2:2E:BD:FB:D4:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:e4:bf:4b:b6:ca:f1:8b:89:dd:32:4b:46:9c:cd:2f:a1:6e: 85:94:73:51:de:26:0c:26:8c:f7:cf:96:6c:05:1a:33:86:a4: 52:31:26:98:5c:5d:d5:c8:6a:b9:9b:f7:b6:7b:cd:20:a9:6f: 73:3f:b0:8f:60:b8:53:fa:dd:88:37:22:80:fe:de:8e:22:1c: 75:bd:10:69:79:83:5a:cf:84:a1:fe:b4:e9:01:a2:a5:25:fd: 84:4e:2b:1a:6c:9c:95:df:b1:cf:5b:cd:12:d3:22:6e:b1:45: 6d:74:f8:6f:46:0e:82:fc:fc:7c:e3:bf:b0:65:92:c8:5d:4e: 58:9d:7b:3f:33:dd:2a:24:b8:70:9c:11:dd:ef:0b:14:5d:e2: 46:99:98:d4:e5:ed:23:52:9f:0c:13:3b:46:1b:6c:ea:91:50: 54:9a:60:45:b8:de:85:64:d0:72:f0:69:36:ee:65:c8:f7:b5: 0c:0a:d5:71:ae:5c:9e:83:e5:06:b2:06:62:e4:0d:93:1e:f0: a3:09:a6:0e:fa:48:de:57:7e:7d:e1:52:91:3b:6c:93:47:9f: f5:ce:5a:6c:0b:3e:e7:8a:3c:35:92:a0:96:db:bb:a2:61:72: a7:3e:70:4b:42:89:1f:87:f1:f8:4a:52:9b:c4:8c:c4:cf:9d: bb:13:cc:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFm7zN+V6nK5Xz3OpRwpZzfmuXQkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUE1RTMzMEJGOERDRkY2RDA5REY0OTA3NEI0NkIyMkVC REZCRDQ1NDAeFw0yNjAzMjMyMjM2MzlaFw0yNjAzMjcwNTQ1MzlaMDMxMTAvBgNV BAMTKDI3N0E0MTZFNzlFQUFDNDFBOTQzQ0JFQTczQTAyQTkyRTQwOUI3OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu17NEPNjD3AW6Im20fqTrhcTD drvwbOdXtWxoX8u9TowZqteNLXXa9TNvgtbHUWSIlz6OsXs4nkF1gkdHt1URBpPF CYiFXOYrCntS0VfV3iMbfnMKIDnpB1RV0GN8Aw82r36sMP+uCy7uLsVxrADo4zYZ cnT0Nu4iDh1LhvR9YMm1YA9GcUZ5QWcA6L4mO/9PH92rtnUmulLmp8XGIaP8zXNK lkVJn+iMPWTpXN9ne6GRtBtqtd+I+en3r4u3te9f3WX1qjwGRorzh28xM3ilwZ4O TvKP+7CgZpG3SZETQkdzlgJ5c7jts9FKVnJY4C7IYjOP7P3JnUQrpGs3BCrrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ3pBbnnqrEGpQ8vqc6AqkuQJt5IwHwYDVR0j BBgwFoAU6l4zC/jc/20J30kHS0ayLr371FQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzcxZGI5Yi03YzQwLTQ5NjYtOTkxYi01MTM4YjM2OTMyNDYvMC9FQTVFMzMwQkY4 RENGRjZEMDlERjQ5MDc0QjQ2QjIyRUJERkJENDU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUE1RTMzMEJGOERDRkY2RDA5REY0OTA3NEI0NkIyMkVCREZC RDQ1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM3MWRiOWItN2M0MC00OTY2LTk5 MWItNTEzOGIzNjkzMjQ2LzAvRUE1RTMzMEJGOERDRkY2RDA5REY0OTA3NEI0NkIy MkVCREZCRDQ1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAELkv0u2yvGLid0yS0aczS+hboWUc1HeJgwm jPfPlmwFGjOGpFIxJphcXdXIarmb97Z7zSCpb3M/sI9guFP63Yg3IoD+3o4iHHW9 EGl5g1rPhKH+tOkBoqUl/YROKxpsnJXfsc9bzRLTIm6xRW10+G9GDoL8/Hzjv7Bl kshdTlidez8z3SokuHCcEd3vCxRd4kaZmNTl7SNSnwwTO0YbbOqRUFSaYEW43oVk 0HLwaTbuZcj3tQwK1XGuXJ6D5QayBmLkDZMe8KMJpg76SN5Xfn3hUpE7bJNHn/XO WmwLPueKPDWSoJbbu6Jhcqc+cEtCiR+H8fhKUpvEjMTPnbsTzOI= -----END CERTIFICATE-----Generated at Tue Mar 24 01:52:59 2026 by rpki-client