$ rpki-client -vvf repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft File: EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft (raw, json) Hash identifier: eWZSVfBknfRHa2+eAhX8/RFgain6CVpD0iDnZavPCV0= Subject key identifier: 7E:16:C1:C3:6A:EA:A7:45:6D:07:41:9A:28:6A:C9:6F:19:A5:2A:B8 Authority key identifier: EA:01:C9:15:11:C5:E3:47:C7:C1:1E:A4:64:9B:0F:04:1A:5D:05:20 Certificate issuer: /CN=EA01C91511C5E347C7C11EA4649B0F041A5D0520 Certificate serial: 1EAF458BF9BED273103CB961748AC37E63FFD072 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft Manifest number: 01FD Signing time: Sat 28 Feb 2026 13:00:02 +0000 Manifest this update: Sat 28 Feb 2026 12:55:02 +0000 Manifest next update: Tue 03 Mar 2026 20:48:02 +0000 Files and hashes: 1: EA01C91511C5E347C7C11EA4649B0F041A5D0520.crl (hash: wjwYLYn3RrKMEutyJFYip84MX48zHRdmalu5Ks0S/PE=) 2: 3130332e3132302e3231382e302f32342d3234203d3e20313338303832.roa (hash: XXDfIIYOEglBKxR32q76DP0xk41MtlD2sFhZIbxce4A=) 3: 3130332e3137392e38322e302f32342d3234203d3e20313338303832.roa (hash: GfoRbCqzzEwM+JaSR+jL9jpyyrybmpGlShF5wsNuV5w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.crl rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 20:48:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:af:45:8b:f9:be:d2:73:10:3c:b9:61:74:8a:c3:7e:63:ff:d0:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA01C91511C5E347C7C11EA4649B0F041A5D0520 Validity Not Before: Feb 28 12:55:02 2026 GMT Not After : Mar 3 20:48:02 2026 GMT Subject: CN=7E16C1C36AEAA7456D07419A286AC96F19A52AB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:42:67:3a:d1:51:05:b7:d5:c5:26:58:c3:eb: 7a:67:fc:22:ee:7c:ac:4d:45:0f:30:b1:e5:d3:7b: b5:3e:05:82:57:37:17:a2:4e:a3:6f:1c:fe:cb:2c: 6f:ae:34:f2:32:9c:45:38:1e:a4:22:98:2c:9e:29: e4:80:c0:2d:dd:97:5d:1b:f8:b1:ab:e2:df:72:ef: 25:ec:a1:5a:07:98:ba:02:4b:7e:d8:d0:1b:02:d1: 9d:7b:f8:30:da:c5:99:3c:01:13:3e:15:de:12:21: c8:db:87:3e:5b:4a:24:65:5b:8a:97:66:89:9e:f3: c3:7f:bb:d6:50:e5:53:28:8d:96:d9:7c:42:27:dc: 06:ad:ce:46:5f:bc:54:8e:5e:eb:dd:a8:5b:6e:e3: f4:ab:07:03:bf:d7:df:ff:99:b4:ab:f9:6a:7d:52: 18:2a:ef:1c:b3:15:2f:68:3c:98:ee:32:35:4d:ca: c8:78:d9:e3:48:29:a8:5c:6f:37:a9:e3:33:4b:d5: 90:c6:df:1f:9d:87:96:70:48:a8:50:d7:fb:b1:99: c3:1b:12:b3:d2:e0:29:6c:52:f3:f1:42:54:5e:7f: a3:ec:d9:aa:70:90:d3:50:95:45:75:e2:8b:02:dd: 8d:60:fd:25:30:0b:c8:ad:83:7e:ce:f9:79:ff:03: 11:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:16:C1:C3:6A:EA:A7:45:6D:07:41:9A:28:6A:C9:6F:19:A5:2A:B8 X509v3 Authority Key Identifier: keyid:EA:01:C9:15:11:C5:E3:47:C7:C1:1E:A4:64:9B:0F:04:1A:5D:05:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:20:48:8b:08:8e:a4:3c:44:bc:2e:97:86:a9:e5:52:79:f6: 33:73:fc:09:7f:ea:f4:28:d9:05:18:68:f0:98:21:b4:0c:b2: a5:c2:62:ac:ea:30:4e:c1:f9:5d:78:30:88:11:6d:7c:d2:9b: 52:a6:8d:c5:e6:a5:5e:2c:9b:c2:3e:2f:d4:9c:cd:b9:05:b0: b5:ea:64:0f:3c:3a:01:8f:df:f6:68:83:44:4a:1a:c6:26:4c: b3:8e:1c:4b:89:51:77:d5:fa:54:73:56:d6:a5:d0:1d:8f:3c: 9b:c0:0b:d8:24:64:30:e0:b4:7c:8a:81:2c:e1:16:af:d2:fa: de:2f:8c:3f:64:4b:60:27:d6:67:dc:50:f0:fc:00:89:ad:43: cd:15:20:44:1c:aa:78:00:69:e2:ad:49:e6:bb:b7:7b:c4:87: 3b:4c:79:8f:14:d1:70:cf:83:e4:f9:bf:cd:b4:cb:48:e3:b6: 83:73:e2:6c:fa:c4:b1:6c:9a:83:81:1e:20:64:f5:08:99:2c: 83:64:bb:c4:79:2d:ab:c0:f3:8d:1c:54:fb:5a:f9:54:c0:1f: b2:2d:ab:9a:e4:66:cb:5e:78:5b:b1:56:88:e4:38:e9:bb:1a: f4:2b:1b:d6:6b:3f:db:b7:95:57:b4:69:44:35:92:55:23:89: 5b:0c:8d:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHq9Fi/m+0nMQPLlhdIrDfmP/0HIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUEwMUM5MTUxMUM1RTM0N0M3QzExRUE0NjQ5QjBGMDQx QTVEMDUyMDAeFw0yNjAyMjgxMjU1MDJaFw0yNjAzMDMyMDQ4MDJaMDMxMTAvBgNV BAMTKDdFMTZDMUMzNkFFQUE3NDU2RDA3NDE5QTI4NkFDOTZGMTlBNTJBQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzQmc60VEFt9XFJljD63pn/CLu fKxNRQ8wseXTe7U+BYJXNxeiTqNvHP7LLG+uNPIynEU4HqQimCyeKeSAwC3dl10b +LGr4t9y7yXsoVoHmLoCS37Y0BsC0Z17+DDaxZk8ARM+Fd4SIcjbhz5bSiRlW4qX Zome88N/u9ZQ5VMojZbZfEIn3AatzkZfvFSOXuvdqFtu4/SrBwO/19//mbSr+Wp9 Uhgq7xyzFS9oPJjuMjVNysh42eNIKahcbzep4zNL1ZDG3x+dh5ZwSKhQ1/uxmcMb ErPS4ClsUvPxQlRef6Ps2apwkNNQlUV14osC3Y1g/SUwC8itg37O+Xn/AxHRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfhbBw2rqp0VtB0GaKGrJbxmlKrgwHwYDVR0j BBgwFoAU6gHJFRHF40fHwR6kZJsPBBpdBSAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w Y2QyNGU4Mi1mMzA2LTQ0MDAtYjAwYS1kNTliNDFlMjg2YmIvMC9FQTAxQzkxNTEx QzVFMzQ3QzdDMTFFQTQ2NDlCMEYwNDFBNUQwNTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUEwMUM5MTUxMUM1RTM0N0M3QzExRUE0NjQ5QjBGMDQxQTVE MDUyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGNkMjRlODItZjMwNi00NDAwLWIw MGEtZDU5YjQxZTI4NmJiLzAvRUEwMUM5MTUxMUM1RTM0N0M3QzExRUE0NjQ5QjBG MDQxQTVEMDUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKEgSIsIjqQ8RLwul4ap5VJ59jNz/Al/6vQo 2QUYaPCYIbQMsqXCYqzqME7B+V14MIgRbXzSm1KmjcXmpV4sm8I+L9SczbkFsLXq ZA88OgGP3/Zog0RKGsYmTLOOHEuJUXfV+lRzVtal0B2PPJvAC9gkZDDgtHyKgSzh Fq/S+t4vjD9kS2An1mfcUPD8AImtQ80VIEQcqngAaeKtSea7t3vEhztMeY8U0XDP g+T5v820y0jjtoNz4mz6xLFsmoOBHiBk9QiZLINku8R5LavA840cVPta+VTAH7It q5rkZsteeFuxVojkOOm7GvQrG9ZrP9u3lVe0aUQ1klUjiVsMjWQ= -----END CERTIFICATE-----Generated at Mon Mar 2 12:25:04 2026 by rpki-client