$ rpki-client -vvf repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.mft File: E82AE8B691C7C53E1CE0B396D8975747F15604D5.mft (raw, json) Hash identifier: PM9svkajh87a/SQ5qys/+3MW5eOPy2gQnG+GbA/Qmic= Subject key identifier: E1:03:80:33:9B:98:13:EF:86:71:1E:62:AE:31:CE:71:32:A5:66:40 Authority key identifier: E8:2A:E8:B6:91:C7:C5:3E:1C:E0:B3:96:D8:97:57:47:F1:56:04:D5 Certificate issuer: /CN=E82AE8B691C7C53E1CE0B396D8975747F15604D5 Certificate serial: 20ACA8E59CFF6C1A060EEFBD47DD2A551CFB9EDC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E82AE8B691C7C53E1CE0B396D8975747F15604D5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.mft Manifest number: 0253 Signing time: Thu 19 Mar 2026 06:21:06 +0000 Manifest this update: Thu 19 Mar 2026 06:16:06 +0000 Manifest next update: Sun 22 Mar 2026 12:05:06 +0000 Files and hashes: 1: 3130332e3137362e3235322e302f32332d3234203d3e20313437313433.roa (hash: 0eR/sossty6R9CW6sl77Vt0ZhuUxrN0f/0JSjyj94i0=) 2: E82AE8B691C7C53E1CE0B396D8975747F15604D5.crl (hash: qDpTtWFBY6qqRlcrEaMDAIIlmeS22+V8tI5SJ4ZPSGA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.crl rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E82AE8B691C7C53E1CE0B396D8975747F15604D5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 09:37:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:ac:a8:e5:9c:ff:6c:1a:06:0e:ef:bd:47:dd:2a:55:1c:fb:9e:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E82AE8B691C7C53E1CE0B396D8975747F15604D5 Validity Not Before: Mar 19 06:16:06 2026 GMT Not After : Mar 22 12:05:06 2026 GMT Subject: CN=E10380339B9813EF86711E62AE31CE7132A56640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:67:fb:e2:89:0f:63:68:eb:a3:97:ae:2e:e9: e4:0b:bc:02:36:ce:dd:02:1c:af:89:0d:fb:76:d2: c8:97:3b:06:f4:6c:1d:b3:0a:dc:a1:d3:dc:f7:23: 64:1d:c0:21:b4:6c:d5:f9:bf:74:87:db:f3:65:0f: a1:db:e7:f0:31:19:9e:80:49:53:9e:55:23:41:f4: 4c:b1:e6:3a:c2:2d:7d:dd:23:a3:f8:41:d5:04:13: 71:3b:15:62:94:85:8c:c8:1a:56:33:7a:0d:9a:fd: de:e2:5a:90:07:57:b3:2a:8f:38:79:cb:c6:7a:fd: 2c:25:c7:d3:a3:7e:6f:bd:60:d8:11:43:9d:c5:84: 21:90:1e:75:31:ec:51:fb:9d:2b:80:05:80:61:41: ce:b6:d3:54:45:fb:b7:10:4d:e5:a1:82:56:85:af: 58:9d:42:ae:ab:0e:9f:0d:ba:44:20:2c:9b:46:f0: 3d:aa:de:94:50:5f:cc:2e:2d:d8:c3:04:46:56:1a: 87:1f:3a:d4:29:07:04:2f:11:ef:f2:b0:f6:61:66: c4:09:78:8e:4d:8e:11:be:22:93:6a:a7:f4:b4:f6: 04:e1:d3:61:4d:89:b3:7b:81:64:85:77:c1:75:8b: 85:d4:9c:8c:7d:ba:80:53:1b:3d:61:c6:88:c5:6e: 6a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:03:80:33:9B:98:13:EF:86:71:1E:62:AE:31:CE:71:32:A5:66:40 X509v3 Authority Key Identifier: keyid:E8:2A:E8:B6:91:C7:C5:3E:1C:E0:B3:96:D8:97:57:47:F1:56:04:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E82AE8B691C7C53E1CE0B396D8975747F15604D5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:9d:4a:73:fc:e4:ad:b6:b7:66:f0:f1:01:ed:94:5f:02:51: 62:90:2e:0f:89:a8:9f:f8:85:f8:dd:66:6e:d9:7d:94:7d:e3: 9b:bd:d9:3c:97:45:e7:6c:de:76:ef:5b:87:21:62:62:97:fc: d1:d2:58:c3:5b:5a:02:18:de:a6:3b:48:2c:c3:a8:43:24:8c: a0:16:a8:61:9d:b8:c0:96:6a:ed:73:09:3b:58:14:03:08:34: 54:5c:e2:51:eb:4c:59:7b:90:46:fd:bb:14:5a:10:51:17:0b: 3a:c1:75:38:49:b8:35:ac:43:3e:d1:15:59:56:b9:ef:1d:8a: 25:84:b9:bb:0b:99:ea:c2:30:5e:ed:7f:1f:d9:98:7b:ee:eb: 9f:fe:2c:23:1a:bc:bb:5a:32:bb:7a:d3:bc:21:a9:5e:d6:9a: a2:86:55:f5:9e:d1:be:26:c0:02:6f:9d:2b:19:e1:f7:8e:a8: fc:73:a7:5d:b6:d7:80:f0:14:80:5c:3f:4f:39:9e:fb:24:ff: 59:03:47:84:12:3c:5c:bb:91:a6:c5:ea:40:e5:57:66:f3:78: dd:18:2d:2d:bc:dc:44:f4:ce:c8:d5:6f:ab:ef:f4:35:9c:80: 8c:7b:6f:99:a7:6c:ab:3e:4f:54:b6:36:12:2f:96:a2:87:81: ae:f3:08:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIKyo5Zz/bBoGDu+9R90qVRz7ntwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTgyQUU4QjY5MUM3QzUzRTFDRTBCMzk2RDg5NzU3NDdG MTU2MDRENTAeFw0yNjAzMTkwNjE2MDZaFw0yNjAzMjIxMjA1MDZaMDMxMTAvBgNV BAMTKEUxMDM4MDMzOUI5ODEzRUY4NjcxMUU2MkFFMzFDRTcxMzJBNTY2NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdZ/viiQ9jaOujl64u6eQLvAI2 zt0CHK+JDft20siXOwb0bB2zCtyh09z3I2QdwCG0bNX5v3SH2/NlD6Hb5/AxGZ6A SVOeVSNB9Eyx5jrCLX3dI6P4QdUEE3E7FWKUhYzIGlYzeg2a/d7iWpAHV7Mqjzh5 y8Z6/Swlx9Ojfm+9YNgRQ53FhCGQHnUx7FH7nSuABYBhQc6201RF+7cQTeWhglaF r1idQq6rDp8NukQgLJtG8D2q3pRQX8wuLdjDBEZWGocfOtQpBwQvEe/ysPZhZsQJ eI5NjhG+IpNqp/S09gTh02FNibN7gWSFd8F1i4XUnIx9uoBTGz1hxojFbmotAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4QOAM5uYE++GcR5irjHOcTKlZkAwHwYDVR0j BBgwFoAU6CrotpHHxT4c4LOW2JdXR/FWBNUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OWZmYjQzYi1mOGI1LTRmMWYtOWI4Zi01YjAyZGRiYjZmY2YvMC9FODJBRThCNjkx QzdDNTNFMUNFMEIzOTZEODk3NTc0N0YxNTYwNEQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTgyQUU4QjY5MUM3QzUzRTFDRTBCMzk2RDg5NzU3NDdGMTU2 MDRENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTlmZmI0M2ItZjhiNS00ZjFmLTli OGYtNWIwMmRkYmI2ZmNmLzAvRTgyQUU4QjY5MUM3QzUzRTFDRTBCMzk2RDg5NzU3 NDdGMTU2MDRENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMKdSnP85K22t2bw8QHtlF8CUWKQLg+JqJ/4 hfjdZm7ZfZR945u92TyXReds3nbvW4chYmKX/NHSWMNbWgIY3qY7SCzDqEMkjKAW qGGduMCWau1zCTtYFAMINFRc4lHrTFl7kEb9uxRaEFEXCzrBdThJuDWsQz7RFVlW ue8diiWEubsLmerCMF7tfx/ZmHvu65/+LCMavLtaMrt607whqV7WmqKGVfWe0b4m wAJvnSsZ4feOqPxzp12214DwFIBcP085nvsk/1kDR4QSPFy7kabF6kDlV2bzeN0Y LS283ET0zsjVb6vv9DWcgIx7b5mnbKs+T1S2NhIvlqKHga7zCIo= -----END CERTIFICATE-----Generated at Thu Mar 19 09:39:44 2026 by rpki-client