$ rpki-client -vvf repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft File: E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft (raw, json) Hash identifier: TLbocAfbii6AP+8pXiQJLpl23eK82Ch+fXkuWf9bI50= Subject key identifier: 15:1F:94:1D:F5:51:0B:28:93:03:A5:18:98:DA:30:5D:52:CD:C2:1B Authority key identifier: E1:41:ED:0B:8F:1B:83:AB:AC:98:B8:DB:75:8C:25:18:8C:6E:65:A5 Certificate issuer: /CN=E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5 Certificate serial: 521EEBABF7D15DABA4B357B659DFCB6FC20D5650 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft Manifest number: 013D Signing time: Wed 18 Mar 2026 05:12:18 +0000 Manifest this update: Wed 18 Mar 2026 05:07:18 +0000 Manifest next update: Sat 21 Mar 2026 06:22:18 +0000 Files and hashes: 1: E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.crl (hash: sJ1dPZtu7janPSeF+YZZ272wc96e+Uy2GjDYFrCMWuo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.crl rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 06:22:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:1e:eb:ab:f7:d1:5d:ab:a4:b3:57:b6:59:df:cb:6f:c2:0d:56:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5 Validity Not Before: Mar 18 05:07:18 2026 GMT Not After : Mar 21 06:22:18 2026 GMT Subject: CN=151F941DF5510B289303A51898DA305D52CDC21B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ce:a5:c8:52:b6:e1:c6:76:d5:35:39:aa:2c: 1c:13:22:21:1c:b2:dd:cc:a5:36:b7:bf:c6:c5:01: 54:4e:f0:b3:15:8b:98:0c:d2:6a:89:cc:30:3c:e8: 8a:5c:09:58:00:43:da:f5:54:a5:52:52:ba:50:cb: b1:28:54:81:26:d4:18:17:30:b9:20:34:9e:8d:ca: 78:8f:9b:0f:1d:23:99:51:96:b1:8d:e8:b3:76:b1: 85:e9:f0:2b:98:6f:5f:06:d1:90:8d:10:1f:5d:cb: 56:30:65:14:39:1d:e6:d8:f9:b6:56:9d:9b:6b:75: d2:63:2f:a7:cf:bd:5f:fe:03:8f:3d:fb:f1:9b:27: 86:40:20:28:9a:43:84:ab:56:38:cc:15:d0:1b:12: cb:ae:07:3d:b1:b7:50:30:4f:27:d7:34:ec:67:d1: 31:53:9e:65:c6:20:cf:c0:17:f4:e5:74:1a:7f:7a: 98:fb:61:bd:6a:01:39:c4:17:d1:26:5f:f9:a8:b3: 33:e8:bc:d0:e0:de:c6:27:c3:6d:fa:1d:e1:c5:d4: 0a:b6:49:da:ab:41:73:47:69:51:e6:88:da:48:3c: 8e:f5:b4:08:b2:c1:dd:00:99:61:90:83:74:c8:8c: 25:c6:1b:fe:d6:62:0f:9c:0d:ef:50:a4:11:c7:27: 6f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:1F:94:1D:F5:51:0B:28:93:03:A5:18:98:DA:30:5D:52:CD:C2:1B X509v3 Authority Key Identifier: keyid:E1:41:ED:0B:8F:1B:83:AB:AC:98:B8:DB:75:8C:25:18:8C:6E:65:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:89:e5:95:dc:bd:8c:3b:24:2e:18:77:91:db:83:53:c4:9c: 41:c2:4a:c4:90:bb:4f:2c:8e:39:23:a5:94:2d:23:f8:5a:fc: b5:47:a3:a4:a0:44:70:a7:8e:4f:85:c8:78:93:52:64:d0:ad: 37:f3:55:88:b9:45:45:1c:c9:5a:6e:d3:c2:8b:05:12:af:64: 51:b9:f9:1b:1d:7d:b1:40:12:40:c8:71:59:25:17:98:78:9c: 26:17:6c:ed:ef:eb:ae:84:39:f3:d0:7b:8e:e8:1e:fc:2f:8a: d8:6d:f8:3f:bb:fa:dd:36:26:f1:c8:d4:b6:78:e2:ac:e8:f6: 02:27:da:88:30:2b:60:9f:38:fb:3c:d4:7c:6c:52:b1:f0:b2: 5d:a0:c0:9f:9c:45:71:d5:db:b7:ce:9e:d3:6d:02:53:31:ed: 17:09:7a:6b:8b:7d:d7:e8:00:be:a7:51:c1:b3:1f:7a:5f:a1: 18:af:50:45:7f:e1:73:72:d9:d7:4a:ea:33:b7:20:56:cd:ea: 57:da:ea:f1:91:77:44:18:b0:ff:fa:f0:02:af:eb:48:23:e8: 84:3c:23:8d:24:38:87:79:10:17:4d:7b:87:9a:1e:ea:aa:7a: 4a:22:08:0b:6b:c7:ab:ad:ec:d1:e7:b4:01:68:f1:79:bd:75: da:41:16:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUh7rq/fRXauks1e2Wd/Lb8INVlAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE0MUVEMEI4RjFCODNBQkFDOThCOERCNzU4QzI1MTg4 QzZFNjVBNTAeFw0yNjAzMTgwNTA3MThaFw0yNjAzMjEwNjIyMThaMDMxMTAvBgNV BAMTKDE1MUY5NDFERjU1MTBCMjg5MzAzQTUxODk4REEzMDVENTJDREMyMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDczqXIUrbhxnbVNTmqLBwTIiEc st3MpTa3v8bFAVRO8LMVi5gM0mqJzDA86IpcCVgAQ9r1VKVSUrpQy7EoVIEm1BgX MLkgNJ6NyniPmw8dI5lRlrGN6LN2sYXp8CuYb18G0ZCNEB9dy1YwZRQ5HebY+bZW nZtrddJjL6fPvV/+A489+/GbJ4ZAICiaQ4SrVjjMFdAbEsuuBz2xt1AwTyfXNOxn 0TFTnmXGIM/AF/TldBp/epj7Yb1qATnEF9EmX/moszPovNDg3sYnw236HeHF1Aq2 SdqrQXNHaVHmiNpIPI71tAiywd0AmWGQg3TIjCXGG/7WYg+cDe9QpBHHJ291AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFR+UHfVRCyiTA6UYmNowXVLNwhswHwYDVR0j BBgwFoAU4UHtC48bg6usmLjbdYwlGIxuZaUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzFlNjkzYy0yZmQ3LTRmNGMtYWY2My1mZWU2OTA3NmUwZDEvMC9FMTQxRUQwQjhG MUI4M0FCQUM5OEI4REI3NThDMjUxODhDNkU2NUE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTE0MUVEMEI4RjFCODNBQkFDOThCOERCNzU4QzI1MTg4QzZF NjVBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTMxZTY5M2MtMmZkNy00ZjRjLWFm NjMtZmVlNjkwNzZlMGQxLzAvRTE0MUVEMEI4RjFCODNBQkFDOThCOERCNzU4QzI1 MTg4QzZFNjVBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACSJ5ZXcvYw7JC4Yd5Hbg1PEnEHCSsSQu08s jjkjpZQtI/ha/LVHo6SgRHCnjk+FyHiTUmTQrTfzVYi5RUUcyVpu08KLBRKvZFG5 +RsdfbFAEkDIcVklF5h4nCYXbO3v666EOfPQe47oHvwvitht+D+7+t02JvHI1LZ4 4qzo9gIn2ogwK2CfOPs81HxsUrHwsl2gwJ+cRXHV27fOntNtAlMx7RcJemuLfdfo AL6nUcGzH3pfoRivUEV/4XNy2ddK6jO3IFbN6lfa6vGRd0QYsP/68AKv60gj6IQ8 I40kOId5EBdNe4eaHuqqekoiCAtrx6ut7NHntAFo8Xm9ddpBFgQ= -----END CERTIFICATE-----Generated at Thu Mar 19 09:41:31 2026 by rpki-client