$ rpki-client -vvf repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.mft File: E4C33FFA425046D044E7F503AC8065468BAF739E.mft (raw, json) Hash identifier: IpwB0BhbNvBnaGVNJ3BZl07DtYWRCt7kvBAQsU7n5uk= Subject key identifier: CF:9A:22:91:C7:6D:EE:A4:33:3F:03:94:5C:54:A1:3A:34:A4:DA:68 Authority key identifier: E4:C3:3F:FA:42:50:46:D0:44:E7:F5:03:AC:80:65:46:8B:AF:73:9E Certificate issuer: /CN=E4C33FFA425046D044E7F503AC8065468BAF739E Certificate serial: 12C04FE58849F95A3C1DEB3021FA8210AB7D93AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C33FFA425046D044E7F503AC8065468BAF739E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.mft Manifest number: 0211 Signing time: Wed 18 Mar 2026 19:42:20 +0000 Manifest this update: Wed 18 Mar 2026 19:37:20 +0000 Manifest next update: Sat 21 Mar 2026 22:35:20 +0000 Files and hashes: 1: E4C33FFA425046D044E7F503AC8065468BAF739E.crl (hash: zQBcrmxs2v49I+dwspHuhbHLNMa7drYv2V4AtGrGSek=) 2: 3130332e39392e32372e302f32342d3234203d3e20313530323739.roa (hash: fFWzPgou/ECKiXU5DKj/fTCFyECWSQWhIu1tavvJN+Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.crl rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C33FFA425046D044E7F503AC8065468BAF739E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 22:35:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:c0:4f:e5:88:49:f9:5a:3c:1d:eb:30:21:fa:82:10:ab:7d:93:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4C33FFA425046D044E7F503AC8065468BAF739E Validity Not Before: Mar 18 19:37:20 2026 GMT Not After : Mar 21 22:35:20 2026 GMT Subject: CN=CF9A2291C76DEEA4333F03945C54A13A34A4DA68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a4:45:8c:4d:4a:76:3e:af:a2:1e:4a:b9:e7: 13:de:22:61:35:58:fb:8f:1d:7a:e6:5a:e8:2a:03: e4:80:fe:ff:79:0d:ba:d9:58:9e:e6:91:06:af:12: 3c:b7:89:ed:4f:9d:f3:94:bf:54:fa:90:eb:c8:2b: a0:7f:94:79:58:c9:cc:be:da:d0:28:69:e6:c8:94: e8:0a:c9:02:fe:77:80:ed:70:f2:3a:9f:3f:5c:a0: d5:e6:a8:d6:b9:16:72:46:cd:00:8b:2d:8e:37:45: 20:0c:81:67:50:09:0a:ad:8d:65:73:d3:5d:43:63: 9c:34:53:76:a7:74:09:68:09:b7:94:7a:e9:b3:bf: 33:ed:d2:71:5c:ee:65:f5:51:28:86:fe:7e:24:01: 6c:0e:57:86:6c:f7:76:f1:2f:d3:ca:0f:10:cb:02: 6a:56:63:c8:dc:b9:af:b9:9d:d6:4a:5b:4c:a4:93: c9:4c:66:4c:5f:5a:b3:7d:87:e2:07:2e:92:c9:6c: df:40:f8:cd:5d:79:4e:37:dc:93:20:63:a5:25:33: 88:70:dc:4c:33:da:06:4b:b5:79:2b:ae:13:72:16: 29:0a:a8:3d:86:1d:f4:51:33:24:21:38:c6:05:19: c3:22:b8:88:79:e9:98:95:c2:e6:97:bd:d6:56:48: 3b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:9A:22:91:C7:6D:EE:A4:33:3F:03:94:5C:54:A1:3A:34:A4:DA:68 X509v3 Authority Key Identifier: keyid:E4:C3:3F:FA:42:50:46:D0:44:E7:F5:03:AC:80:65:46:8B:AF:73:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C33FFA425046D044E7F503AC8065468BAF739E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:50:ca:e0:24:1c:bc:ae:5b:63:52:c2:ff:fd:6c:8d:76:a7: 6b:33:0a:23:66:e6:25:83:10:dd:a0:65:c6:f7:42:59:90:a4: 11:18:79:88:07:9b:d3:46:85:45:b2:41:9a:5e:22:bb:25:49: 29:ab:29:e4:38:7a:88:44:16:ff:2d:5a:44:b8:1e:8e:81:d1: 42:3a:b2:8d:de:1c:81:d7:5a:dc:20:c8:a8:6a:ed:11:b8:bc: 53:70:79:3f:a7:c5:ef:fc:c2:d6:1b:d2:b1:3c:1f:fd:32:76: 15:d3:bf:43:4d:48:28:47:dd:c0:88:83:c1:be:f5:d6:82:04: f2:68:f9:ad:f7:bd:97:cd:1d:5d:10:96:9e:99:bb:38:43:53: eb:7e:8e:49:3c:2b:3e:dd:c2:c6:0d:d6:0a:52:99:ca:3b:f1: cd:9f:29:c3:fc:b7:20:6d:99:32:9b:6c:a0:62:d5:10:40:6b: 96:bf:0b:91:35:00:25:f1:8c:36:e9:64:f1:19:79:bb:ef:7d: 76:e4:de:c2:f7:7e:df:82:00:fd:e1:5c:1d:5d:04:93:1b:ae: ca:95:2a:af:54:72:96:95:eb:62:24:ca:2b:47:b2:6e:32:58: 6c:23:30:e7:d1:46:14:c6:30:59:b8:68:74:df:1d:6c:74:56: 70:5c:3a:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEsBP5YhJ+Vo8HeswIfqCEKt9k60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTRDMzNGRkE0MjUwNDZEMDQ0RTdGNTAzQUM4MDY1NDY4 QkFGNzM5RTAeFw0yNjAzMTgxOTM3MjBaFw0yNjAzMjEyMjM1MjBaMDMxMTAvBgNV BAMTKENGOUEyMjkxQzc2REVFQTQzMzNGMDM5NDVDNTRBMTNBMzRBNERBNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDepEWMTUp2Pq+iHkq55xPeImE1 WPuPHXrmWugqA+SA/v95DbrZWJ7mkQavEjy3ie1PnfOUv1T6kOvIK6B/lHlYycy+ 2tAoaebIlOgKyQL+d4DtcPI6nz9coNXmqNa5FnJGzQCLLY43RSAMgWdQCQqtjWVz 011DY5w0U3andAloCbeUeumzvzPt0nFc7mX1USiG/n4kAWwOV4Zs93bxL9PKDxDL AmpWY8jcua+5ndZKW0ykk8lMZkxfWrN9h+IHLpLJbN9A+M1deU433JMgY6UlM4hw 3Ewz2gZLtXkrrhNyFikKqD2GHfRRMyQhOMYFGcMiuIh56ZiVwuaXvdZWSDvzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz5oikcdt7qQzPwOUXFShOjSk2mgwHwYDVR0j BBgwFoAU5MM/+kJQRtBE5/UDrIBlRouvc54wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDk3NmUyNi05NTEzLTQ4ZmYtOWY3Zi1lYTNmZGNmM2UyZTgvMC9FNEMzM0ZGQTQy NTA0NkQwNDRFN0Y1MDNBQzgwNjU0NjhCQUY3MzlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTRDMzNGRkE0MjUwNDZEMDQ0RTdGNTAzQUM4MDY1NDY4QkFG NzM5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjA5NzZlMjYtOTUxMy00OGZmLTlm N2YtZWEzZmRjZjNlMmU4LzAvRTRDMzNGRkE0MjUwNDZEMDQ0RTdGNTAzQUM4MDY1 NDY4QkFGNzM5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJlQyuAkHLyuW2NSwv/9bI12p2szCiNm5iWD EN2gZcb3QlmQpBEYeYgHm9NGhUWyQZpeIrslSSmrKeQ4eohEFv8tWkS4Ho6B0UI6 so3eHIHXWtwgyKhq7RG4vFNweT+nxe/8wtYb0rE8H/0ydhXTv0NNSChH3cCIg8G+ 9daCBPJo+a33vZfNHV0Qlp6ZuzhDU+t+jkk8Kz7dwsYN1gpSmco78c2fKcP8tyBt mTKbbKBi1RBAa5a/C5E1ACXxjDbpZPEZebvvfXbk3sL3ft+CAP3hXB1dBJMbrsqV Kq9UcpaV62IkyitHsm4yWGwjMOfRRhTGMFm4aHTfHWx0VnBcOv0= -----END CERTIFICATE-----Generated at Thu Mar 19 09:38:15 2026 by rpki-client