$ rpki-client -vvf repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft File: E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft (raw, json) Hash identifier: FSzKaT57vfvgbwLlHBUYCgX79NnPNxEiP1012CfcWYg= Subject key identifier: 21:D7:AA:FE:9B:97:A8:75:E4:FC:A0:78:C6:0C:0C:88:D4:7D:75:5A Authority key identifier: E0:AC:9F:73:54:2C:4F:A1:E5:2F:9E:56:5E:ED:95:2D:45:28:AB:D5 Certificate issuer: /CN=E0AC9F73542C4FA1E52F9E565EED952D4528ABD5 Certificate serial: 43778E99B672495CD07A3DA4FE9D1BB8D6DDEE88 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft Manifest number: 01FA Signing time: Mon 20 Apr 2026 00:02:10 +0000 Manifest this update: Sun 19 Apr 2026 23:57:10 +0000 Manifest next update: Thu 23 Apr 2026 08:42:10 +0000 Files and hashes: 1: 3130332e3130312e3231382e302f32332d3234203d3e20313432333437.roa (hash: 2zfFRFwk/C19Fo4LWjVGEDAydcqPi8NpYbWAmcFYAik=) 2: E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.crl (hash: 9jPuocJTLW6k62R4t4ZKYG6ouOBb76jkH2eyMJSkeWE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.crl rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 08:42:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:77:8e:99:b6:72:49:5c:d0:7a:3d:a4:fe:9d:1b:b8:d6:dd:ee:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0AC9F73542C4FA1E52F9E565EED952D4528ABD5 Validity Not Before: Apr 19 23:57:10 2026 GMT Not After : Apr 23 08:42:10 2026 GMT Subject: CN=21D7AAFE9B97A875E4FCA078C60C0C88D47D755A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cf:da:4c:64:cd:53:f4:9d:d8:b7:dc:8d:26: f6:b1:54:de:20:32:53:ef:95:36:37:92:1f:d8:34: 02:b7:41:75:7e:e4:24:a3:9c:76:01:d1:68:f9:76: 66:4d:61:f3:67:67:54:6d:23:51:d2:48:1d:1e:88: a8:34:2c:23:fc:60:dd:05:f4:aa:22:1b:35:78:1d: 58:b2:f9:ed:79:2b:4b:fe:b1:58:56:0f:02:07:4e: e1:3f:8b:1f:2b:d0:99:6a:bd:d1:ef:e8:37:51:05: 6d:54:f0:f0:89:1a:fd:20:8d:b0:8e:59:53:22:ef: ae:8a:d6:61:e6:00:5e:19:d5:8d:6b:93:fe:0c:8d: 75:62:f1:e2:c5:9a:6a:c3:44:93:8b:37:58:04:cb: 46:69:47:64:b4:a7:03:04:b8:71:8e:8b:e3:21:e5: 16:e0:bb:e9:33:56:62:d2:bb:47:7c:92:9f:04:dc: ce:93:74:f2:98:97:f2:82:85:44:3b:34:f6:30:e9: aa:c8:7f:97:86:3a:a9:d4:6c:20:9a:52:85:6a:ef: bc:2a:ba:af:d3:52:e0:be:25:60:35:d3:5c:ef:5c: 43:dd:67:dd:bb:06:8a:2a:c2:1d:cf:9b:ef:a5:e9: bd:c1:bb:82:72:36:aa:ac:88:ff:51:2f:ce:2a:bb: ac:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:D7:AA:FE:9B:97:A8:75:E4:FC:A0:78:C6:0C:0C:88:D4:7D:75:5A X509v3 Authority Key Identifier: keyid:E0:AC:9F:73:54:2C:4F:A1:E5:2F:9E:56:5E:ED:95:2D:45:28:AB:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:93:2b:19:d7:f9:de:cb:04:58:ed:d6:8b:2d:77:7c:71:45: 65:1f:f7:9f:92:3a:a9:9b:dd:52:4a:ce:a8:4d:59:f4:93:f7: e7:9c:56:d0:50:53:da:1a:7f:35:94:06:0f:6f:09:b3:bf:e0: 5c:d6:7b:eb:32:cf:9a:ff:fc:87:3a:84:f6:be:ef:81:85:93: 6b:e8:cd:5d:8a:6b:3c:0e:7e:c4:f8:25:81:85:5c:fc:0e:a2: 03:eb:43:c2:d8:92:65:96:ec:00:eb:64:c9:58:e3:7c:f9:8a: e6:c5:91:18:a3:2c:9c:70:8f:18:7a:aa:c2:c2:ab:cf:81:96: ca:8d:2c:11:b1:46:b6:08:ee:4d:2d:a1:81:07:95:6b:c6:de: e2:84:eb:e5:d1:8f:fd:73:85:14:cc:fb:b6:fc:19:c5:33:cb: 58:54:e5:db:a3:c9:cf:ba:83:31:e4:0d:a0:6e:09:9e:6c:54: f6:83:3a:7e:3d:c7:25:bb:27:cc:59:14:d7:7c:9e:bb:de:64: ea:e0:e4:03:f2:07:0e:76:37:09:b7:e9:34:67:60:58:0f:91: fb:57:0a:26:39:d0:1c:29:80:58:93:de:5e:a0:e2:b8:3b:e6: 71:62:48:c1:dc:b0:d5:5c:7e:bf:f4:b3:82:1b:f4:30:2a:c7: 77:8c:75:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ3eOmbZySVzQej2k/p0buNbd7ogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBBQzlGNzM1NDJDNEZBMUU1MkY5RTU2NUVFRDk1MkQ0 NTI4QUJENTAeFw0yNjA0MTkyMzU3MTBaFw0yNjA0MjMwODQyMTBaMDMxMTAvBgNV BAMTKDIxRDdBQUZFOUI5N0E4NzVFNEZDQTA3OEM2MEMwQzg4RDQ3RDc1NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxz9pMZM1T9J3Yt9yNJvaxVN4g MlPvlTY3kh/YNAK3QXV+5CSjnHYB0Wj5dmZNYfNnZ1RtI1HSSB0eiKg0LCP8YN0F 9KoiGzV4HViy+e15K0v+sVhWDwIHTuE/ix8r0JlqvdHv6DdRBW1U8PCJGv0gjbCO WVMi766K1mHmAF4Z1Y1rk/4MjXVi8eLFmmrDRJOLN1gEy0ZpR2S0pwMEuHGOi+Mh 5Rbgu+kzVmLSu0d8kp8E3M6TdPKYl/KChUQ7NPYw6arIf5eGOqnUbCCaUoVq77wq uq/TUuC+JWA101zvXEPdZ927Booqwh3Pm++l6b3Bu4JyNqqsiP9RL84qu6yJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIdeq/puXqHXk/KB4xgwMiNR9dVowHwYDVR0j BBgwFoAU4Kyfc1QsT6HlL55WXu2VLUUoq9UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZWYwMDEzYi01OWE2LTQ3MzMtODlmOC0yOGZhM2Q4ODU3OWYvMC9FMEFDOUY3MzU0 MkM0RkExRTUyRjlFNTY1RUVEOTUyRDQ1MjhBQkQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTBBQzlGNzM1NDJDNEZBMUU1MkY5RTU2NUVFRDk1MkQ0NTI4 QUJENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmVmMDAxM2ItNTlhNi00NzMzLTg5 ZjgtMjhmYTNkODg1NzlmLzAvRTBBQzlGNzM1NDJDNEZBMUU1MkY5RTU2NUVFRDk1 MkQ0NTI4QUJENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGmTKxnX+d7LBFjt1ostd3xxRWUf95+SOqmb 3VJKzqhNWfST9+ecVtBQU9oafzWUBg9vCbO/4FzWe+syz5r//Ic6hPa+74GFk2vo zV2KazwOfsT4JYGFXPwOogPrQ8LYkmWW7ADrZMlY43z5iubFkRijLJxwjxh6qsLC q8+BlsqNLBGxRrYI7k0toYEHlWvG3uKE6+XRj/1zhRTM+7b8GcUzy1hU5dujyc+6 gzHkDaBuCZ5sVPaDOn49xyW7J8xZFNd8nrveZOrg5APyBw52Nwm36TRnYFgPkftX CiY50BwpgFiT3l6g4rg75nFiSMHcsNVcfr/0s4Ib9DAqx3eMdXk= -----END CERTIFICATE-----Generated at Wed Apr 22 07:25:53 2026 by rpki-client