$ rpki-client -vvf repo-rpki.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.mft File: 82EABF24EF91106C28ACF9483B2EF11B2EA5319D.mft (raw, json) Hash identifier: Eubx9+s4iEmT59VqvHAdUbFafecIEENI18Rg5DtTr+Y= Subject key identifier: 53:66:D8:4C:E6:8C:63:AF:8C:7F:A7:DA:A0:2D:3F:51:C0:07:42:34 Authority key identifier: 82:EA:BF:24:EF:91:10:6C:28:AC:F9:48:3B:2E:F1:1B:2E:A5:31:9D Certificate issuer: /CN=82EABF24EF91106C28ACF9483B2EF11B2EA5319D Certificate serial: 2C1C8BA7BB30B9264CBA7F1D85DC323CDCFA3A7A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.mft Manifest number: E3 Signing time: Thu 16 Apr 2026 16:11:01 +0000 Manifest this update: Thu 16 Apr 2026 16:06:01 +0000 Manifest next update: Sun 19 Apr 2026 19:02:01 +0000 Files and hashes: 1: 3130332e3137322e34332e302f32342d3234203d3e20313432333835.roa (hash: kJKEjz2D3G1RJer7Y7hYkLjIkHGT1MOdybvh9xHf4rg=) 2: 82EABF24EF91106C28ACF9483B2EF11B2EA5319D.crl (hash: t9/ybNkqMw4ZrwAfzUuRT9+q5aV+cTnzkaDtU9JVVF0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.crl rsync://repo-rpki.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 19:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:1c:8b:a7:bb:30:b9:26:4c:ba:7f:1d:85:dc:32:3c:dc:fa:3a:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82EABF24EF91106C28ACF9483B2EF11B2EA5319D Validity Not Before: Apr 16 16:06:01 2026 GMT Not After : Apr 19 19:02:01 2026 GMT Subject: CN=5366D84CE68C63AF8C7FA7DAA02D3F51C0074234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9d:11:f5:cc:93:d9:e3:bb:33:f1:3d:c4:54: 15:cf:3a:4f:49:06:af:01:97:fa:8b:25:6f:cb:9d: 17:16:16:e9:ae:ad:d2:ea:6d:11:aa:4f:68:68:a7: 9f:82:4e:e8:5c:52:ab:ad:6a:86:a7:85:1b:4a:5b: 86:cb:e2:d6:74:c0:9b:97:bd:a9:dd:2c:4f:d8:83: 7e:0f:5a:92:a8:53:91:ee:24:da:25:d3:a2:2a:ae: d7:84:df:e3:29:0a:78:e6:ea:bc:4d:50:0e:51:f8: 89:91:f7:39:77:87:cf:ff:f0:0b:6a:e3:48:bb:17: 5d:cb:79:2d:4c:2c:a6:ff:3a:fb:93:84:b1:45:25: 74:3b:50:2e:91:cb:91:a3:0b:2f:a5:32:3c:a7:7f: 06:fb:4a:91:f0:75:ce:62:03:f5:b9:18:73:7a:79: cd:8f:67:96:2b:55:97:e1:e7:5f:36:a8:bf:41:ef: 24:5e:47:9f:8a:26:0a:9f:ad:83:8a:29:a7:5a:89: bd:b7:e9:15:31:5d:13:0d:08:9a:5e:29:3b:4c:bc: ef:4a:42:36:9b:dc:d5:32:99:97:34:78:75:05:d2: 3a:7b:85:22:86:15:52:c8:81:cf:e1:5e:26:1e:5a: 45:14:04:60:1d:2f:93:71:0f:a1:27:55:dd:95:8e: 48:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:66:D8:4C:E6:8C:63:AF:8C:7F:A7:DA:A0:2D:3F:51:C0:07:42:34 X509v3 Authority Key Identifier: keyid:82:EA:BF:24:EF:91:10:6C:28:AC:F9:48:3B:2E:F1:1B:2E:A5:31:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:64:1c:3e:90:14:b1:83:4b:c8:75:de:9b:a4:42:22:43:42: 9a:1c:53:9b:9b:fc:11:8b:c3:e0:54:11:b9:70:94:0a:b4:50: b5:1f:9c:05:a1:d8:1d:61:c9:45:20:9a:bc:4d:ab:31:71:5f: aa:02:68:90:b5:41:b9:f6:81:c6:b7:6a:43:6b:9d:a1:60:81: 92:4f:fa:23:21:8c:15:0b:8c:b6:66:be:2c:7e:42:a7:50:c4: 9a:bf:d0:ea:f9:b2:b4:85:9d:ba:9e:db:0c:ba:a1:19:57:e4: fa:35:0c:63:f0:1e:ac:91:91:0d:1c:fa:6c:9a:13:00:e9:7e: 5c:0c:2a:35:30:29:c7:0f:f1:fc:bd:64:ed:94:cb:f5:10:e7: 71:ae:fc:60:bf:80:11:72:ef:28:3b:37:7b:1a:40:17:5d:8d: 7a:69:d1:f0:89:0a:97:5b:2b:ee:1b:a7:4e:6e:85:b3:b1:60: 2a:ea:c1:98:5d:21:2a:78:bd:39:85:3f:97:a5:cd:2f:99:09: ae:03:b9:eb:58:30:d7:f2:f9:a2:af:80:fc:25:5f:c3:a1:5f: 8d:79:e4:19:39:5d:67:12:b6:1b:bf:6f:2b:fb:95:f3:95:ab: b2:17:8a:b0:97:63:d3:82:cc:da:2e:fe:cd:5b:0c:76:c5:21: 42:90:d3:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULByLp7swuSZMun8dhdwyPNz6OnowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODJFQUJGMjRFRjkxMTA2QzI4QUNGOTQ4M0IyRUYxMUIy RUE1MzE5RDAeFw0yNjA0MTYxNjA2MDFaFw0yNjA0MTkxOTAyMDFaMDMxMTAvBgNV BAMTKDUzNjZEODRDRTY4QzYzQUY4QzdGQTdEQUEwMkQzRjUxQzAwNzQyMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcnRH1zJPZ47sz8T3EVBXPOk9J Bq8Bl/qLJW/LnRcWFumurdLqbRGqT2hop5+CTuhcUqutaoanhRtKW4bL4tZ0wJuX vandLE/Yg34PWpKoU5HuJNol06IqrteE3+MpCnjm6rxNUA5R+ImR9zl3h8//8Atq 40i7F13LeS1MLKb/OvuThLFFJXQ7UC6Ry5GjCy+lMjynfwb7SpHwdc5iA/W5GHN6 ec2PZ5YrVZfh5182qL9B7yReR5+KJgqfrYOKKadaib236RUxXRMNCJpeKTtMvO9K Qjab3NUymZc0eHUF0jp7hSKGFVLIgc/hXiYeWkUUBGAdL5NxD6EnVd2Vjkh3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU2bYTOaMY6+Mf6faoC0/UcAHQjQwHwYDVR0j BBgwFoAUguq/JO+REGworPlIOy7xGy6lMZ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTMxYzY5YS1iNzkyLTQwYTQtYTE0NC0yMzRiNWExZGRlNTIvMC84MkVBQkYyNEVG OTExMDZDMjhBQ0Y5NDgzQjJFRjExQjJFQTUzMTlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODJFQUJGMjRFRjkxMTA2QzI4QUNGOTQ4M0IyRUYxMUIyRUE1 MzE5RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGUzMWM2OWEtYjc5Mi00MGE0LWEx NDQtMjM0YjVhMWRkZTUyLzAvODJFQUJGMjRFRjkxMTA2QzI4QUNGOTQ4M0IyRUYx MUIyRUE1MzE5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHZkHD6QFLGDS8h13pukQiJDQpocU5ub/BGL w+BUEblwlAq0ULUfnAWh2B1hyUUgmrxNqzFxX6oCaJC1Qbn2gca3akNrnaFggZJP +iMhjBULjLZmvix+QqdQxJq/0Or5srSFnbqe2wy6oRlX5Po1DGPwHqyRkQ0c+mya EwDpflwMKjUwKccP8fy9ZO2Uy/UQ53Gu/GC/gBFy7yg7N3saQBddjXpp0fCJCpdb K+4bp05uhbOxYCrqwZhdISp4vTmFP5elzS+ZCa4DuetYMNfy+aKvgPwlX8OhX415 5Bk5XWcSthu/byv7lfOVq7IXirCXY9OCzNou/s1bDHbFIUKQ06A= -----END CERTIFICATE-----Generated at Fri Apr 17 22:23:55 2026 by rpki-client