$ rpki-client -vvf repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft File: E2111F10F01C17C4A322DAF5076425FBD824219D.mft (raw, json) Hash identifier: 1FwPc5g5c3+EvaEYXgUytNzPfTgZKd6wp56UKmuVeRI= Subject key identifier: 6A:CA:61:1F:DD:06:10:DC:BF:68:C0:33:44:35:2D:20:C8:72:DA:F2 Authority key identifier: E2:11:1F:10:F0:1C:17:C4:A3:22:DA:F5:07:64:25:FB:D8:24:21:9D Certificate issuer: /CN=E2111F10F01C17C4A322DAF5076425FBD824219D Certificate serial: 30AB9301883DBC3683F99ABF20C9FB6DB3509EA0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft Manifest number: 052E Signing time: Fri 17 Apr 2026 21:41:17 +0000 Manifest this update: Fri 17 Apr 2026 21:36:17 +0000 Manifest next update: Tue 21 Apr 2026 02:12:17 +0000 Files and hashes: 1: 323430353a633963303a3a2f33322d3438203d3e20313338383233.roa (hash: fAuWxeE7ImjYp2a97WPBMhqeHz7I3/dQp2udhbh8G2w=) 2: 3230332e3136312e32342e302f32312d3234203d3e20313338383233.roa (hash: pFuk/AGngpWFrOWsfA6YRJueZJFWOC8v02Ywbm8rUMw=) 3: E2111F10F01C17C4A322DAF5076425FBD824219D.crl (hash: AR1pQYhMQOLpJlXBjseAP/NCxBXGZD6Mr5nqWy065UI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.crl rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 02:12:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:ab:93:01:88:3d:bc:36:83:f9:9a:bf:20:c9:fb:6d:b3:50:9e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2111F10F01C17C4A322DAF5076425FBD824219D Validity Not Before: Apr 17 21:36:17 2026 GMT Not After : Apr 21 02:12:17 2026 GMT Subject: CN=6ACA611FDD0610DCBF68C03344352D20C872DAF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c4:84:78:72:89:ee:51:70:e2:c2:68:3f:d3: 34:60:61:f8:49:7f:a2:db:3f:ec:d5:77:4e:91:0e: 51:2f:ea:83:b0:6b:68:ac:19:5e:11:e9:eb:d2:e2: 3b:0c:3a:73:f8:e8:8e:b8:14:dc:eb:40:77:98:7c: a8:b4:51:27:27:63:c1:2e:42:b9:d0:49:79:a6:73: 12:0d:f5:44:a2:0d:01:31:8f:7b:71:88:87:ea:a9: 81:d6:66:03:6f:2f:bb:bb:0b:e7:62:e1:95:f5:dc: 24:19:30:f2:6a:15:68:bc:fe:21:1f:da:ad:19:1b: 4e:75:62:86:c7:cd:b9:0d:a6:bd:3b:e2:79:f0:8c: 42:33:66:f0:ab:03:65:39:26:17:dc:ee:f7:4f:f2: c3:3c:17:52:6a:ea:b4:fd:04:5f:23:bc:79:97:98: c1:1c:cf:98:ef:5a:59:09:ae:7c:84:62:a7:e9:15: ae:00:77:d2:16:1b:dd:14:c7:a2:8b:5b:bf:20:de: 29:c3:99:09:ba:5e:9e:68:19:90:3a:93:d3:b9:4b: 53:3b:4a:04:65:2e:a4:f2:62:90:74:90:27:a6:e1: d2:87:35:24:be:d0:a8:2f:91:f9:22:b3:dd:1b:49: d0:13:56:d7:50:ac:3e:0e:8e:b2:d2:66:79:b5:b7: d6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:CA:61:1F:DD:06:10:DC:BF:68:C0:33:44:35:2D:20:C8:72:DA:F2 X509v3 Authority Key Identifier: keyid:E2:11:1F:10:F0:1C:17:C4:A3:22:DA:F5:07:64:25:FB:D8:24:21:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:a7:5f:4a:36:d0:f4:85:73:60:11:b9:66:21:84:73:dc:bf: 98:6e:37:0b:4e:15:94:05:12:fe:41:8b:c0:88:fd:4a:25:44: b3:c3:46:d5:27:64:f8:d9:39:ca:ca:f2:b0:ec:8c:5e:9f:53: 8b:8f:3f:1b:bf:82:7c:5b:fe:cc:56:e7:29:7d:10:5d:2c:7f: da:af:94:f9:26:da:08:b6:61:bf:a0:72:e3:5f:4e:f5:ab:2d: 43:ac:0f:7c:88:be:1c:d9:c6:9c:d6:3b:42:65:77:8c:da:88: 93:58:95:89:aa:70:85:d2:84:ec:ce:4c:37:99:57:77:01:e9: 19:87:1a:01:bc:a7:1e:00:6a:cc:4d:c2:2d:54:43:81:71:9b: 1c:31:19:95:27:1b:80:69:43:0e:77:48:a0:5d:21:b4:5c:13: d0:81:78:87:74:0c:a9:90:ad:ef:6e:18:58:6d:a7:b8:38:e1: 67:76:7d:92:c9:18:e2:45:8b:53:f2:00:b0:de:ec:28:cd:69: fa:6b:38:e0:8d:2a:2b:11:2a:44:d4:14:37:d9:6d:a1:a9:6b: f0:46:23:8b:5e:8b:5d:ff:42:86:d1:09:4a:8c:ab:9b:21:1a: 01:8f:a6:9a:6d:74:fd:f8:a5:83:bd:fb:02:95:cb:9c:3d:e4: d2:1d:fc:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMKuTAYg9vDaD+Zq/IMn7bbNQnqAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTIxMTFGMTBGMDFDMTdDNEEzMjJEQUY1MDc2NDI1RkJE ODI0MjE5RDAeFw0yNjA0MTcyMTM2MTdaFw0yNjA0MjEwMjEyMTdaMDMxMTAvBgNV BAMTKDZBQ0E2MTFGREQwNjEwRENCRjY4QzAzMzQ0MzUyRDIwQzg3MkRBRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyxIR4conuUXDiwmg/0zRgYfhJ f6LbP+zVd06RDlEv6oOwa2isGV4R6evS4jsMOnP46I64FNzrQHeYfKi0UScnY8Eu QrnQSXmmcxIN9USiDQExj3txiIfqqYHWZgNvL7u7C+di4ZX13CQZMPJqFWi8/iEf 2q0ZG051YobHzbkNpr074nnwjEIzZvCrA2U5Jhfc7vdP8sM8F1Jq6rT9BF8jvHmX mMEcz5jvWlkJrnyEYqfpFa4Ad9IWG90Ux6KLW78g3inDmQm6Xp5oGZA6k9O5S1M7 SgRlLqTyYpB0kCem4dKHNSS+0Kgvkfkis90bSdATVtdQrD4OjrLSZnm1t9bLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUasphH90GENy/aMAzRDUtIMhy2vIwHwYDVR0j BBgwFoAU4hEfEPAcF8SjItr1B2Ql+9gkIZ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjE1OGFlYy01MjgxLTQyZTYtOTc5Yi1mY2E2MWQ0N2M4NDUvMC9FMjExMUYxMEYw MUMxN0M0QTMyMkRBRjUwNzY0MjVGQkQ4MjQyMTlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTIxMTFGMTBGMDFDMTdDNEEzMjJEQUY1MDc2NDI1RkJEODI0 MjE5RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDIxNThhZWMtNTI4MS00MmU2LTk3 OWItZmNhNjFkNDdjODQ1LzAvRTIxMTFGMTBGMDFDMTdDNEEzMjJEQUY1MDc2NDI1 RkJEODI0MjE5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABOnX0o20PSFc2ARuWYhhHPcv5huNwtOFZQF Ev5Bi8CI/UolRLPDRtUnZPjZOcrK8rDsjF6fU4uPPxu/gnxb/sxW5yl9EF0sf9qv lPkm2gi2Yb+gcuNfTvWrLUOsD3yIvhzZxpzWO0Jld4zaiJNYlYmqcIXShOzOTDeZ V3cB6RmHGgG8px4AasxNwi1UQ4FxmxwxGZUnG4BpQw53SKBdIbRcE9CBeId0DKmQ re9uGFhtp7g44Wd2fZLJGOJFi1PyALDe7CjNafprOOCNKisRKkTUFDfZbaGpa/BG I4tei13/QobRCUqMq5shGgGPppptdP34pYO9+wKVy5w95NId/CM= -----END CERTIFICATE-----Generated at Sat Apr 18 04:00:05 2026 by rpki-client