$ rpki-client -vvf repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft File: E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft (raw, json) Hash identifier: WC38quyzhSnJofVVDW6a1cRkYEhj2NmO8YeLokWqvC8= Subject key identifier: 9A:28:05:EF:E8:B5:F8:03:F1:C8:B5:2F:5A:19:40:73:77:BF:60:72 Authority key identifier: E0:14:E6:ED:03:53:7E:45:35:65:D0:6E:7B:8A:31:AA:8A:05:25:A1 Certificate issuer: /CN=E014E6ED03537E453565D06E7B8A31AA8A0525A1 Certificate serial: 3D8E5F37F8505F7E62831A607AF1831628EC5E39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft Manifest number: 0332 Signing time: Sat 18 Apr 2026 04:22:37 +0000 Manifest this update: Sat 18 Apr 2026 04:17:37 +0000 Manifest next update: Tue 21 Apr 2026 06:27:37 +0000 Files and hashes: 1: 3130332e3137352e33382e302f32332d3233203d3e20323135373237.roa (hash: joRtsTzluk9HUnqI3+6HvaybpCq3OAhZ2eSjEhqFFeA=) 2: E014E6ED03537E453565D06E7B8A31AA8A0525A1.crl (hash: au2bo2EZJwXLCEHzmKZPcmQer6hHh1G/MLYCmyNeUOw=) 3: 3130332e3137352e33382e302f32332d3234203d3e20313437313038.roa (hash: JG72NXt605ww3XbVNf9DT18KzObGZzgsJOiqL+ceVSI=) 4: 3130332e3137352e33392e302f32342d3234203d3e20323135373237.roa (hash: uShV8vRhK/SDVf3Twj+hPuhHAzUhqQGJIQPtkavd13M=) 5: 3130332e3137352e33392e302f32342d3234203d3e20313534343130.roa (hash: r3WK8CrHgCN8V7Zn9QuD1b2cQJfP1EGB1oRF8Yw67HM=) 6: 3130332e3137352e33382e302f32342d3234203d3e20313534343130.roa (hash: 6lkF35ri6uYPakCCX2pr0zjkUKU+eMFqvXgf24o+vlE=) 7: 3130332e3137352e33382e302f32332d3233203d3e20313534343130.roa (hash: CguEl+Lysn/5KkRoQJibPhJwVyvdrOOvzPigdqH+W1o=) 8: 3130332e3137352e33382e302f32342d3234203d3e20323135373237.roa (hash: UUOaSFdZB1gNgfcBiLfpj8+sysFmMb8lGgAOYylAanI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.crl rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 06:27:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:8e:5f:37:f8:50:5f:7e:62:83:1a:60:7a:f1:83:16:28:ec:5e:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E014E6ED03537E453565D06E7B8A31AA8A0525A1 Validity Not Before: Apr 18 04:17:37 2026 GMT Not After : Apr 21 06:27:37 2026 GMT Subject: CN=9A2805EFE8B5F803F1C8B52F5A19407377BF6072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:b6:42:46:c6:da:29:2b:25:aa:d8:46:a6:1a: ef:1a:1d:b2:e1:37:1f:8b:31:c5:63:70:d9:41:98: 7d:a0:6d:4e:47:4b:3b:3b:0c:38:80:87:35:de:dd: ca:43:d6:a8:f8:76:09:fa:1a:d7:e0:17:8b:b8:16: 11:5d:ed:f1:18:ae:16:e7:1d:c6:ae:97:f0:30:9e: 51:c7:53:4b:25:3a:7d:f0:eb:93:fb:2b:f0:18:73: ba:97:04:bc:73:96:32:a3:bb:bc:44:e6:a8:8c:ba: 56:7f:bb:ee:51:0a:54:3f:bc:e9:08:27:aa:81:ff: 82:80:2c:5b:dd:13:29:27:c9:39:a4:1a:d8:4f:06: 5e:27:3d:19:fe:5e:c9:81:95:6a:53:73:9d:4c:93: cc:09:62:57:f9:29:4c:53:0e:8c:fb:32:c6:de:17: fa:2f:67:c4:4c:59:33:fa:ff:53:40:49:f9:ee:ba: 5b:44:12:a5:c5:df:79:dd:7a:e9:c1:dc:84:28:4f: 36:14:c3:1f:ac:a6:73:93:5b:53:de:3d:5e:12:ea: f5:66:33:35:94:f7:5b:b8:77:1f:82:37:b5:8a:3c: 5a:0d:f1:c3:50:df:ff:3a:0a:fd:7a:0b:9c:25:15: 4d:55:8a:d2:25:ed:49:51:51:ee:6c:3b:da:b3:16: 40:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:28:05:EF:E8:B5:F8:03:F1:C8:B5:2F:5A:19:40:73:77:BF:60:72 X509v3 Authority Key Identifier: keyid:E0:14:E6:ED:03:53:7E:45:35:65:D0:6E:7B:8A:31:AA:8A:05:25:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:45:ec:e5:62:89:3d:3c:91:f7:87:5e:48:ae:ff:94:37:a0: 37:3a:01:19:d0:42:3c:04:84:51:c7:85:76:2d:a5:bc:93:a3: d6:6c:06:cb:d2:a6:e0:ae:29:e2:64:92:b9:1a:ef:45:d3:bb: 8b:cb:28:a2:32:2c:64:a0:4b:3a:f4:3d:da:80:38:e1:7a:23: e9:fe:af:fe:32:cf:52:ba:24:9b:ac:a2:b0:02:8f:51:58:ad: d7:58:c7:c7:cc:02:0d:d1:7f:50:f1:ff:d4:73:6b:2a:ee:04: 95:e4:78:a7:0c:be:a0:e0:19:46:f2:d9:f8:1c:64:75:97:de: 78:e1:09:30:78:8a:16:9f:21:8b:39:75:a9:b1:23:19:0c:e9: 76:9d:40:8a:55:60:f2:55:43:a8:3d:23:91:f2:33:6c:fd:60: bb:be:fc:b8:9f:da:70:79:f1:6d:0a:5b:2d:8f:fd:45:54:b1: e2:5e:03:ff:72:59:15:dd:d2:e8:31:72:fa:f3:4e:44:8c:1d: eb:ef:c0:7b:35:6f:51:2c:ee:eb:42:71:7b:aa:a4:2f:8b:7b: da:36:fe:74:58:6a:b3:c5:7c:a6:d0:ee:41:11:a4:44:71:86: 31:99:da:62:9d:55:71:c7:73:a8:34:4c:f2:93:18:9c:c2:d2: f7:46:9f:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPY5fN/hQX35igxpgevGDFijsXjkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTAxNEU2RUQwMzUzN0U0NTM1NjVEMDZFN0I4QTMxQUE4 QTA1MjVBMTAeFw0yNjA0MTgwNDE3MzdaFw0yNjA0MjEwNjI3MzdaMDMxMTAvBgNV BAMTKDlBMjgwNUVGRThCNUY4MDNGMUM4QjUyRjVBMTk0MDczNzdCRjYwNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4tkJGxtopKyWq2EamGu8aHbLh Nx+LMcVjcNlBmH2gbU5HSzs7DDiAhzXe3cpD1qj4dgn6GtfgF4u4FhFd7fEYrhbn Hcaul/AwnlHHU0slOn3w65P7K/AYc7qXBLxzljKju7xE5qiMulZ/u+5RClQ/vOkI J6qB/4KALFvdEyknyTmkGthPBl4nPRn+XsmBlWpTc51Mk8wJYlf5KUxTDoz7Msbe F/ovZ8RMWTP6/1NASfnuultEEqXF33ndeunB3IQoTzYUwx+spnOTW1PePV4S6vVm MzWU91u4dx+CN7WKPFoN8cNQ3/86Cv16C5wlFU1VitIl7UlRUe5sO9qzFkCPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmigF7+i1+APxyLUvWhlAc3e/YHIwHwYDVR0j BBgwFoAU4BTm7QNTfkU1ZdBue4oxqooFJaEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YmIyOTM3OC00NWYwLTQ5ZDMtYTZhZi01NzNiZTdkY2E2ZDAvMC9FMDE0RTZFRDAz NTM3RTQ1MzU2NUQwNkU3QjhBMzFBQThBMDUyNUExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTAxNEU2RUQwMzUzN0U0NTM1NjVEMDZFN0I4QTMxQUE4QTA1 MjVBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGJiMjkzNzgtNDVmMC00OWQzLWE2 YWYtNTczYmU3ZGNhNmQwLzAvRTAxNEU2RUQwMzUzN0U0NTM1NjVEMDZFN0I4QTMx QUE4QTA1MjVBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGFF7OViiT08kfeHXkiu/5Q3oDc6ARnQQjwE hFHHhXYtpbyTo9ZsBsvSpuCuKeJkkrka70XTu4vLKKIyLGSgSzr0PdqAOOF6I+n+ r/4yz1K6JJusorACj1FYrddYx8fMAg3Rf1Dx/9RzayruBJXkeKcMvqDgGUby2fgc ZHWX3njhCTB4ihafIYs5damxIxkM6XadQIpVYPJVQ6g9I5HyM2z9YLu+/Lif2nB5 8W0KWy2P/UVUseJeA/9yWRXd0ugxcvrzTkSMHevvwHs1b1Es7utCcXuqpC+Le9o2 /nRYarPFfKbQ7kERpERxhjGZ2mKdVXHHc6g0TPKTGJzC0vdGn/0= -----END CERTIFICATE-----Generated at Mon Apr 20 03:29:41 2026 by rpki-client