$ rpki-client -vvf repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft File: E94D4099064713F1C3A5E211E817CFC2A40E6370.mft (raw, json) Hash identifier: DpiHLfJosg4fOTs0p0P5EvyqwnBj+iC3V+3CUdOVnj0= Subject key identifier: 35:2C:01:55:BF:87:CA:61:7B:D9:A3:A4:45:67:E2:31:75:E6:F0:4A Authority key identifier: E9:4D:40:99:06:47:13:F1:C3:A5:E2:11:E8:17:CF:C2:A4:0E:63:70 Certificate issuer: /CN=E94D4099064713F1C3A5E211E817CFC2A40E6370 Certificate serial: 206CB157E8BAAB35AF631BBCDAB3A863D7D879F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft Manifest number: 0215 Signing time: Sun 22 Mar 2026 22:31:39 +0000 Manifest this update: Sun 22 Mar 2026 22:26:39 +0000 Manifest next update: Thu 26 Mar 2026 01:09:39 +0000 Files and hashes: 1: 3130332e3136342e31342e302f32332d3234203d3e20313532303537.roa (hash: TODEDun2Zl+j5gm95jSV7b8fVwk7R83jzCkXAd4YUh0=) 2: E94D4099064713F1C3A5E211E817CFC2A40E6370.crl (hash: WVTHWzBCVdxysgukV5JnhRzNRSZ1L7cjGdjNe8wHPO4=) 3: 3131302e39322e37322e302f32332d3234203d3e203137393935.roa (hash: Tj+rZXXICw5VIXsxuWhO+B1070IpmB9rr/NwmKii+rg=) 4: 34392e302e32342e302f32332d3234203d3e203137393935.roa (hash: G15jhzfZRAvw44ZtH89JpUZ7Q4CGTBRIfeHqxNKeprc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.crl rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Mar 2026 01:09:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:6c:b1:57:e8:ba:ab:35:af:63:1b:bc:da:b3:a8:63:d7:d8:79:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E94D4099064713F1C3A5E211E817CFC2A40E6370 Validity Not Before: Mar 22 22:26:39 2026 GMT Not After : Mar 26 01:09:39 2026 GMT Subject: CN=352C0155BF87CA617BD9A3A44567E23175E6F04A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d7:7f:1e:12:eb:b5:bb:56:64:0f:f8:da:1a: 89:1d:c9:16:e9:c5:14:92:8a:5e:82:ba:0e:c3:85: ce:5c:85:a0:22:ab:4a:94:38:f7:64:a4:37:28:42: 88:4b:5e:ec:8a:2e:87:2a:49:cf:f7:d6:e3:2b:ce: 89:cd:14:32:00:ee:70:05:c9:b5:a9:b3:5f:f2:fe: 39:a3:81:4b:84:90:5f:14:8a:25:93:bc:8d:95:86: 22:30:43:eb:72:f6:76:bf:ed:cf:33:bc:b8:7b:e4: 78:80:84:af:cb:c3:25:7f:ee:93:94:d8:57:4a:b0: dc:89:76:b2:4c:a8:c9:67:96:e7:bc:35:1c:9c:a3: c9:2d:e2:50:a6:b6:ed:da:b8:70:85:79:00:01:ae: 27:6c:8f:d1:e1:e4:c2:37:54:16:12:25:b3:d9:c9: ee:cb:ff:a2:7f:e5:4e:1b:8d:da:c6:b7:09:30:ae: 7e:b0:6c:d8:0d:fd:e0:0f:85:17:8a:e6:bb:cc:21: 40:20:f3:45:4a:32:e9:44:f7:36:ef:36:5c:dd:75: a2:77:a8:20:a7:ba:56:40:f6:b0:20:af:8d:f6:42: d5:ac:bd:95:4f:fe:56:27:1a:f1:62:a9:b8:50:05: d3:7c:db:df:df:20:8b:6f:fc:6e:f4:e6:60:ee:2e: 15:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:2C:01:55:BF:87:CA:61:7B:D9:A3:A4:45:67:E2:31:75:E6:F0:4A X509v3 Authority Key Identifier: keyid:E9:4D:40:99:06:47:13:F1:C3:A5:E2:11:E8:17:CF:C2:A4:0E:63:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:48:5e:60:de:a8:3c:7f:cd:96:16:44:6f:65:84:a3:8b:18: 95:b5:9d:03:50:59:49:dc:05:f0:e7:e3:b3:47:f0:1d:ca:35: 50:ff:47:7e:87:6e:67:b7:41:5b:20:84:e9:1f:5d:ff:f4:87: 3a:96:d6:69:92:80:ed:9f:fb:20:b1:db:bc:fb:03:6b:3f:26: f6:fe:1d:16:13:41:7a:03:f0:71:6e:15:50:61:cc:4b:c8:17: a0:ad:e7:00:26:39:5d:8d:d2:84:01:a6:f9:12:cd:cc:ca:66: 1f:b7:2f:3c:29:bb:bf:1b:ae:b5:bb:af:c4:1f:50:57:1e:22: 1d:8c:47:68:db:9b:b9:67:3c:5f:8a:84:60:e8:ed:52:c9:1c: 7e:46:8c:29:83:82:78:03:73:b9:a1:1a:dc:65:a4:47:80:39: 24:43:5c:a4:64:a4:38:ef:e3:e8:67:94:5c:d1:15:5a:f3:11: 9e:20:4a:7c:e4:f9:d1:c3:99:a6:bd:94:ef:40:86:25:e6:0b: f1:61:d3:15:61:6c:2e:b9:f3:cb:04:75:8c:02:23:97:6f:1b: c7:68:bb:3e:21:1c:46:d7:bb:69:f0:c4:be:b8:31:cb:e8:25: 86:6b:d9:cb:05:ae:f3:72:95:40:c5:87:1a:05:c0:ab:ec:56: 78:17:de:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIGyxV+i6qzWvYxu82rOoY9fYefcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk0RDQwOTkwNjQ3MTNGMUMzQTVFMjExRTgxN0NGQzJB NDBFNjM3MDAeFw0yNjAzMjIyMjI2MzlaFw0yNjAzMjYwMTA5MzlaMDMxMTAvBgNV BAMTKDM1MkMwMTU1QkY4N0NBNjE3QkQ5QTNBNDQ1NjdFMjMxNzVFNkYwNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5138eEuu1u1ZkD/jaGokdyRbp xRSSil6Cug7Dhc5chaAiq0qUOPdkpDcoQohLXuyKLocqSc/31uMrzonNFDIA7nAF ybWps1/y/jmjgUuEkF8UiiWTvI2VhiIwQ+ty9na/7c8zvLh75HiAhK/LwyV/7pOU 2FdKsNyJdrJMqMlnlue8NRyco8kt4lCmtu3auHCFeQABridsj9Hh5MI3VBYSJbPZ ye7L/6J/5U4bjdrGtwkwrn6wbNgN/eAPhReK5rvMIUAg80VKMulE9zbvNlzddaJ3 qCCnulZA9rAgr432QtWsvZVP/lYnGvFiqbhQBdN829/fIItv/G705mDuLhVVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNSwBVb+HymF72aOkRWfiMXXm8EowHwYDVR0j BBgwFoAU6U1AmQZHE/HDpeIR6BfPwqQOY3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjdhZTgyZi01MzdlLTQ2MjYtYmU5ZS0zMzM5NGEyZGM5NjkvMC9FOTRENDA5OTA2 NDcxM0YxQzNBNUUyMTFFODE3Q0ZDMkE0MEU2MzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTk0RDQwOTkwNjQ3MTNGMUMzQTVFMjExRTgxN0NGQzJBNDBF NjM3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmY3YWU4MmYtNTM3ZS00NjI2LWJl OWUtMzMzOTRhMmRjOTY5LzAvRTk0RDQwOTkwNjQ3MTNGMUMzQTVFMjExRTgxN0NG QzJBNDBFNjM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANRIXmDeqDx/zZYWRG9lhKOLGJW1nQNQWUnc BfDn47NH8B3KNVD/R36Hbme3QVsghOkfXf/0hzqW1mmSgO2f+yCx27z7A2s/Jvb+ HRYTQXoD8HFuFVBhzEvIF6Ct5wAmOV2N0oQBpvkSzczKZh+3Lzwpu78brrW7r8Qf UFceIh2MR2jbm7lnPF+KhGDo7VLJHH5GjCmDgngDc7mhGtxlpEeAOSRDXKRkpDjv 4+hnlFzRFVrzEZ4gSnzk+dHDmaa9lO9AhiXmC/Fh0xVhbC6588sEdYwCI5dvG8do uz4hHEbXu2nwxL64McvoJYZr2csFrvNylUDFhxoFwKvsVngX3jY= -----END CERTIFICATE-----Generated at Tue Mar 24 03:17:58 2026 by rpki-client