$ rpki-client -vvf repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft File: E2111F10F01C17C4A322DAF5076425FBD824219D.mft (raw, json) Hash identifier: qfXAfluTARt5re7iosbRXbZs7t4QV/LSrCOFi6NlhjA= Subject key identifier: C9:AD:61:A2:36:89:16:79:80:CC:76:62:E7:3C:2E:B4:3A:EF:F8:20 Authority key identifier: E2:11:1F:10:F0:1C:17:C4:A3:22:DA:F5:07:64:25:FB:D8:24:21:9D Certificate issuer: /CN=E2111F10F01C17C4A322DAF5076425FBD824219D Certificate serial: 4639EAF377AA42CC1FEA1DB7F3CFB0549B4C0E26 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft Manifest number: 0532 Signing time: Sun 26 Apr 2026 17:01:17 +0000 Manifest this update: Sun 26 Apr 2026 16:56:17 +0000 Manifest next update: Thu 30 Apr 2026 00:51:17 +0000 Files and hashes: 1: 3230332e3136312e32342e302f32312d3234203d3e20313338383233.roa (hash: pFuk/AGngpWFrOWsfA6YRJueZJFWOC8v02Ywbm8rUMw=) 2: E2111F10F01C17C4A322DAF5076425FBD824219D.crl (hash: Ngs5tJUeFs5D0QMxmtCa9zs6gMXJzsCp3MHp+6zU7LY=) 3: 323430353a633963303a3a2f33322d3438203d3e20313338383233.roa (hash: fAuWxeE7ImjYp2a97WPBMhqeHz7I3/dQp2udhbh8G2w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.crl rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Apr 2026 00:51:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:39:ea:f3:77:aa:42:cc:1f:ea:1d:b7:f3:cf:b0:54:9b:4c:0e:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2111F10F01C17C4A322DAF5076425FBD824219D Validity Not Before: Apr 26 16:56:17 2026 GMT Not After : Apr 30 00:51:17 2026 GMT Subject: CN=C9AD61A23689167980CC7662E73C2EB43AEFF820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:99:77:43:58:53:58:38:88:60:9d:da:0b:8b: 4d:65:d9:bb:26:98:ee:30:81:5e:22:83:dc:20:29: ff:cd:0e:3b:cd:88:08:8e:f6:fb:c5:77:32:f6:4e: b7:00:3f:96:55:69:14:69:99:be:04:c8:8e:f8:26: 84:34:16:e6:f6:3a:a5:db:c3:ca:26:2c:d3:36:1b: 02:2f:7f:41:7a:16:d2:6b:b0:82:b8:d5:15:d7:ec: b4:96:ac:77:0a:68:ba:8e:dd:4b:8c:b4:53:50:34: d3:26:fd:2c:dd:af:01:d6:c9:67:5a:3c:89:19:d4: 7a:f0:7e:8b:b3:3f:75:08:b1:42:e4:16:4c:56:9e: e5:cb:a3:7c:c7:11:0d:ac:d2:48:6c:be:27:93:60: 04:e2:1f:6b:42:13:d8:d5:91:b4:c4:ca:db:fc:d8: e8:94:a0:29:0a:b9:0f:87:20:c2:fb:20:c2:88:12: 9d:42:85:26:1f:e2:9d:c6:6a:40:e1:a4:c7:b0:f7: 46:3e:c3:e8:41:e7:66:ef:35:ec:a0:ca:05:c3:1c: 38:15:0b:28:84:43:34:93:a3:98:96:14:5f:c6:66: 79:a0:aa:b3:cd:52:22:49:7f:91:e7:8b:7c:d3:f7: 51:a4:59:fa:84:78:0b:21:70:a2:7c:30:81:5b:a5: 5b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:AD:61:A2:36:89:16:79:80:CC:76:62:E7:3C:2E:B4:3A:EF:F8:20 X509v3 Authority Key Identifier: keyid:E2:11:1F:10:F0:1C:17:C4:A3:22:DA:F5:07:64:25:FB:D8:24:21:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:84:09:ff:7c:6a:d3:86:14:25:0e:e9:e7:d5:8e:71:2a:67: 07:bb:1e:1a:7b:33:a0:ad:67:16:07:b4:45:48:a8:c4:43:48: e4:3b:f3:b9:d7:6b:57:71:96:e6:f7:7b:a8:1c:01:81:d1:01: da:64:3a:43:0d:99:8b:08:68:c2:dd:1e:22:48:a3:32:dc:3f: 21:d3:97:e8:1f:d6:26:d8:a0:5d:7f:91:9f:f3:8a:66:77:03: 1f:89:87:4a:84:6b:9e:09:8c:29:31:68:73:47:f3:58:80:bc: fd:04:ff:fc:05:d9:20:61:8d:f9:db:ae:4e:e9:b2:90:7f:d2: 92:38:54:05:88:6d:e5:04:98:c2:39:3a:1a:8b:14:99:58:2b: 18:b7:f8:9c:01:af:5f:a9:0c:c9:97:f5:b2:e9:ed:79:98:ec: dd:8a:9f:b4:ed:6a:11:93:37:d3:fe:38:c0:7a:59:ad:6d:95: 8a:9d:f9:bf:cb:8e:72:62:e4:b8:00:67:2d:8c:66:d6:01:a1: 02:e0:ad:fb:e8:d7:51:be:24:11:94:db:9f:f1:1c:6c:6e:c3: 47:3d:b5:da:8f:f5:2a:97:6c:70:e1:79:7e:91:56:20:34:3c: ca:aa:3c:87:e7:50:84:c7:f4:02:ac:4a:e1:c6:6c:e1:23:96: 98:36:81:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURjnq83eqQswf6h2388+wVJtMDiYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTIxMTFGMTBGMDFDMTdDNEEzMjJEQUY1MDc2NDI1RkJE ODI0MjE5RDAeFw0yNjA0MjYxNjU2MTdaFw0yNjA0MzAwMDUxMTdaMDMxMTAvBgNV BAMTKEM5QUQ2MUEyMzY4OTE2Nzk4MENDNzY2MkU3M0MyRUI0M0FFRkY4MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDmXdDWFNYOIhgndoLi01l2bsm mO4wgV4ig9wgKf/NDjvNiAiO9vvFdzL2TrcAP5ZVaRRpmb4EyI74JoQ0Fub2OqXb w8omLNM2GwIvf0F6FtJrsIK41RXX7LSWrHcKaLqO3UuMtFNQNNMm/SzdrwHWyWda PIkZ1HrwfouzP3UIsULkFkxWnuXLo3zHEQ2s0khsvieTYATiH2tCE9jVkbTEytv8 2OiUoCkKuQ+HIML7IMKIEp1ChSYf4p3GakDhpMew90Y+w+hB52bvNeygygXDHDgV CyiEQzSTo5iWFF/GZnmgqrPNUiJJf5Hni3zT91GkWfqEeAshcKJ8MIFbpVuXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUya1hojaJFnmAzHZi5zwutDrv+CAwHwYDVR0j BBgwFoAU4hEfEPAcF8SjItr1B2Ql+9gkIZ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjE1OGFlYy01MjgxLTQyZTYtOTc5Yi1mY2E2MWQ0N2M4NDUvMC9FMjExMUYxMEYw MUMxN0M0QTMyMkRBRjUwNzY0MjVGQkQ4MjQyMTlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTIxMTFGMTBGMDFDMTdDNEEzMjJEQUY1MDc2NDI1RkJEODI0 MjE5RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDIxNThhZWMtNTI4MS00MmU2LTk3 OWItZmNhNjFkNDdjODQ1LzAvRTIxMTFGMTBGMDFDMTdDNEEzMjJEQUY1MDc2NDI1 RkJEODI0MjE5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALCECf98atOGFCUO6efVjnEqZwe7Hhp7M6Ct ZxYHtEVIqMRDSOQ787nXa1dxlub3e6gcAYHRAdpkOkMNmYsIaMLdHiJIozLcPyHT l+gf1ibYoF1/kZ/zimZ3Ax+Jh0qEa54JjCkxaHNH81iAvP0E//wF2SBhjfnbrk7p spB/0pI4VAWIbeUEmMI5OhqLFJlYKxi3+JwBr1+pDMmX9bLp7XmY7N2Kn7TtahGT N9P+OMB6Wa1tlYqd+b/LjnJi5LgAZy2MZtYBoQLgrfvo11G+JBGU25/xHGxuw0c9 tdqP9SqXbHDheX6RViA0PMqqPIfnUITH9AKsSuHGbOEjlpg2gUU= -----END CERTIFICATE-----Generated at Mon Apr 27 12:39:41 2026 by rpki-client