$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.mft File: E3FB5E3343EC63D705FF51B645113F74C7965236.mft (raw, json) Hash identifier: AQy3xiMxtYy+PJ5b6uEtR7kIQWjnF6LoVGEyGN8O++s= Subject key identifier: EE:25:40:5B:7F:AB:BF:2B:0C:99:E2:FE:A9:0A:7D:8A:3F:BE:34:CC Authority key identifier: E3:FB:5E:33:43:EC:63:D7:05:FF:51:B6:45:11:3F:74:C7:96:52:36 Certificate issuer: /CN=E3FB5E3343EC63D705FF51B645113F74C7965236 Certificate serial: 0FA9DCBA0D11494EDF154319D3E20E4A043D7BB7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E3FB5E3343EC63D705FF51B645113F74C7965236.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.mft Manifest number: 0104 Signing time: Sat 07 Mar 2026 02:31:33 +0000 Manifest this update: Sat 07 Mar 2026 02:26:33 +0000 Manifest next update: Tue 10 Mar 2026 13:22:33 +0000 Files and hashes: 1: 3136302e32352e3232322e302f32332d3233203d3e20313533303837.roa (hash: KzwY0iiHcJ5O0UVPUHPKtH6yEpVlgjbtPe1xq08+n3c=) 2: 3136302e32352e3232322e302f32342d3234203d3e20313533303837.roa (hash: pcP51KVAYXagtYkUaOdwTyhCZXZM5gMNbSSkIN9xwSo=) 3: 3136302e32352e3232332e302f32342d3234203d3e20313533303837.roa (hash: 4O9lmpHneuudT9xjvw5LwULxiETAfGvFoNCP2XYgoOQ=) 4: E3FB5E3343EC63D705FF51B645113F74C7965236.crl (hash: 20kZ4jQCyZn/e4fIMowWTw0zcgfH4oL8G01BFWGN7WY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.crl rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E3FB5E3343EC63D705FF51B645113F74C7965236.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:a9:dc:ba:0d:11:49:4e:df:15:43:19:d3:e2:0e:4a:04:3d:7b:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3FB5E3343EC63D705FF51B645113F74C7965236 Validity Not Before: Mar 7 02:26:33 2026 GMT Not After : Mar 10 13:22:33 2026 GMT Subject: CN=EE25405B7FABBF2B0C99E2FEA90A7D8A3FBE34CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:dd:8e:8d:ba:df:87:db:8f:1d:fb:41:02:1a: 50:92:29:9d:5c:13:15:ef:e7:fd:3e:2f:67:a9:75: 2a:e0:90:13:e2:6b:77:94:30:dd:b1:5c:13:47:05: 10:dc:ba:a7:2b:4f:1c:5a:ef:61:8b:e1:3b:64:43: d7:07:66:66:7d:29:d6:47:58:50:b5:89:6e:31:78: 65:58:f1:b9:0f:6b:b3:76:36:95:ef:c1:a4:fc:44: 18:72:6a:2e:92:5d:52:db:5b:e4:95:d0:6e:4d:76: 41:9d:78:12:a0:12:84:dc:80:4e:10:ff:25:eb:6d: 2a:8a:42:85:16:a2:e2:06:52:00:fa:43:5d:32:99: 38:2b:27:f5:20:86:e1:b2:fc:ac:de:48:cf:fe:3e: 21:03:c5:5a:ce:04:ae:fa:96:b0:2e:1a:ba:21:12: 54:ea:42:73:a6:ea:06:f1:9a:71:59:a4:8f:15:33: 25:aa:b1:2b:be:05:19:52:fd:10:c7:cc:9d:65:2c: 84:38:48:1d:f3:f3:09:7b:39:d1:93:88:30:a7:46: 4b:de:10:08:87:e4:2e:d8:a6:ed:17:d2:1b:d4:4e: 4d:a7:35:f0:40:94:e0:7a:4e:19:db:1a:ed:7d:32: 8a:d2:e3:61:b2:2e:08:49:20:bb:20:1c:d3:c2:57: ce:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:25:40:5B:7F:AB:BF:2B:0C:99:E2:FE:A9:0A:7D:8A:3F:BE:34:CC X509v3 Authority Key Identifier: keyid:E3:FB:5E:33:43:EC:63:D7:05:FF:51:B6:45:11:3F:74:C7:96:52:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E3FB5E3343EC63D705FF51B645113F74C7965236.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:38:52:f5:cf:3b:f3:6c:df:03:14:91:d8:5b:8e:57:f6:d7: a2:52:51:ce:5a:de:bc:a6:c0:91:83:40:20:02:84:18:5d:2e: de:b6:95:4e:b3:28:3c:9d:4a:07:dc:07:4f:a5:9b:2a:4b:bc: 0a:6e:e2:71:6e:98:d5:26:f6:bb:c8:18:b1:e8:57:59:11:5a: 0d:3c:6f:5e:10:99:09:47:71:31:c9:5e:c7:58:46:7b:15:b8: 3d:e1:ad:a5:ae:93:47:c3:38:97:31:8e:af:a5:fd:71:9b:9d: ab:57:3e:bb:dd:3c:38:44:21:51:6a:25:bc:e1:91:5d:02:9e: d8:1a:e7:16:91:7b:14:03:14:24:dd:e3:1f:88:e1:2c:e0:ec: 26:83:13:37:2c:4f:09:7e:6a:83:e2:83:b8:ff:bd:26:c5:ea: e6:0d:55:e1:49:25:b5:04:dc:2a:58:4e:67:62:ee:0c:6e:2d: bf:da:1d:ca:1b:51:49:fa:c5:72:b2:e4:85:33:7f:c7:a2:e8: 49:d7:8a:87:c7:37:8c:40:53:65:2f:30:56:fc:49:0f:3e:e3: 5a:f0:0b:d4:9a:10:6e:7c:1a:c9:34:d4:df:c8:e9:6d:81:96: 99:30:96:18:b3:89:83:4c:00:70:44:f5:95:53:88:68:da:d3: 06:6e:37:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD6ncug0RSU7fFUMZ0+IOSgQ9e7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTNGQjVFMzM0M0VDNjNENzA1RkY1MUI2NDUxMTNGNzRD Nzk2NTIzNjAeFw0yNjAzMDcwMjI2MzNaFw0yNjAzMTAxMzIyMzNaMDMxMTAvBgNV BAMTKEVFMjU0MDVCN0ZBQkJGMkIwQzk5RTJGRUE5MEE3RDhBM0ZCRTM0Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh3Y6Nut+H248d+0ECGlCSKZ1c ExXv5/0+L2epdSrgkBPia3eUMN2xXBNHBRDcuqcrTxxa72GL4TtkQ9cHZmZ9KdZH WFC1iW4xeGVY8bkPa7N2NpXvwaT8RBhyai6SXVLbW+SV0G5NdkGdeBKgEoTcgE4Q /yXrbSqKQoUWouIGUgD6Q10ymTgrJ/UghuGy/KzeSM/+PiEDxVrOBK76lrAuGroh ElTqQnOm6gbxmnFZpI8VMyWqsSu+BRlS/RDHzJ1lLIQ4SB3z8wl7OdGTiDCnRkve EAiH5C7Ypu0X0hvUTk2nNfBAlOB6ThnbGu19MorS42GyLghJILsgHNPCV84dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7iVAW3+rvysMmeL+qQp9ij++NMwwHwYDVR0j BBgwFoAU4/teM0PsY9cF/1G2RRE/dMeWUjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGVkNTgxMS1iZTUwLTRjYWEtOWY5Ni02M2QzNzIwMzExZGUvMC9FM0ZCNUUzMzQz RUM2M0Q3MDVGRjUxQjY0NTExM0Y3NEM3OTY1MjM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRTNGQjVFMzM0M0VDNjNENzA1RkY1MUI2NDUxMTNGNzRDNzk2 NTIzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRlZDU4MTEtYmU1MC00Y2FhLTlm OTYtNjNkMzcyMDMxMWRlLzAvRTNGQjVFMzM0M0VDNjNENzA1RkY1MUI2NDUxMTNG NzRDNzk2NTIzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK44UvXPO/Ns3wMUkdhbjlf216JSUc5a3rym wJGDQCAChBhdLt62lU6zKDydSgfcB0+lmypLvApu4nFumNUm9rvIGLHoV1kRWg08 b14QmQlHcTHJXsdYRnsVuD3hraWuk0fDOJcxjq+l/XGbnatXPrvdPDhEIVFqJbzh kV0Cntga5xaRexQDFCTd4x+I4Szg7CaDEzcsTwl+aoPig7j/vSbF6uYNVeFJJbUE 3CpYTmdi7gxuLb/aHcobUUn6xXKy5IUzf8ei6EnXiofHN4xAU2UvMFb8SQ8+41rw C9SaEG58Gsk01N/I6W2BlpkwlhiziYNMAHBE9ZVTiGja0wZuNzY= -----END CERTIFICATE-----Generated at Sat Mar 7 17:50:42 2026 by rpki-client