$ rpki-client -vvf repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft File: E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft (raw, json) Hash identifier: D87FucDjhgZ/W5S715K5rxtf/qseU+qr0caovhoQcKM= Subject key identifier: B6:58:2D:2E:DB:91:21:C2:0D:44:D6:17:04:3E:BE:14:C7:1D:13:3F Authority key identifier: E1:FE:69:A3:42:16:C2:4D:18:70:F5:CE:D3:A4:30:92:34:A0:F1:B2 Certificate issuer: /CN=E1FE69A34216C24D1870F5CED3A4309234A0F1B2 Certificate serial: 27F8C263DC8AD2A55AD3E0869EB6D119A81FD4C1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft Manifest number: 018D Signing time: Thu 16 Apr 2026 16:12:44 +0000 Manifest this update: Thu 16 Apr 2026 16:07:44 +0000 Manifest next update: Mon 20 Apr 2026 00:21:44 +0000 Files and hashes: 1: 3130332e3138392e3232332e302f32342d3234203d3e20313439383831.roa (hash: Y71EeD959aIr9ucCZApJALClmCCepz1YWwy1H6B20+w=) 2: 3130332e3138392e3232322e302f32342d3234203d3e20313439383831.roa (hash: LJVWK744DaCLalz0/Sl7Gt/PYQWV0FOVmOX8NAlnD4I=) 3: 323030313a6466313a396563303a3a2f34382d3438203d3e20313439383831.roa (hash: icoM+EmZmnaUSNYe+M3YT7QPi2377uDTJ5GrlCTs7Lw=) 4: E1FE69A34216C24D1870F5CED3A4309234A0F1B2.crl (hash: Jv70I3VwOn+dliqjZauiAvl56gVM9DyzuLkPtuEG+xk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.crl rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 00:21:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:f8:c2:63:dc:8a:d2:a5:5a:d3:e0:86:9e:b6:d1:19:a8:1f:d4:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1FE69A34216C24D1870F5CED3A4309234A0F1B2 Validity Not Before: Apr 16 16:07:44 2026 GMT Not After : Apr 20 00:21:44 2026 GMT Subject: CN=B6582D2EDB9121C20D44D617043EBE14C71D133F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:bf:a3:30:31:90:65:fc:45:6e:61:e3:d2:8c: 15:37:85:f0:30:cc:0f:c8:20:70:cf:f5:8f:50:1e: 71:9f:fe:07:0e:e7:d3:0c:e6:22:b9:51:15:fc:63: c7:16:a6:81:f5:28:a5:50:a1:fe:5b:0f:58:ec:bc: c2:58:0f:eb:b6:34:3a:f9:d7:6a:59:20:0b:56:76: fd:ef:d5:ba:26:ca:23:c6:07:c5:52:6c:34:f0:f0: ab:89:58:37:ed:4b:62:26:a9:46:80:54:cb:20:85: 9a:6d:1d:60:88:69:c9:2b:68:2d:63:f2:73:e2:87: 0a:21:71:8e:c1:8d:51:83:8c:c2:4c:dc:c9:6e:71: d5:10:54:e1:72:e5:1e:d1:12:9c:1b:0b:84:73:35: 85:ef:01:7c:54:c7:ae:6f:2f:a9:01:bb:d3:0d:59: 87:7b:a0:44:79:62:57:c2:b5:9a:89:97:80:48:ae: 80:f2:4c:d4:cc:33:82:da:ff:bc:8a:f4:d7:d9:cd: bd:5d:ff:82:bf:15:df:3b:ab:1e:68:30:87:e1:e3: 9d:6d:2c:11:ef:d1:22:76:4f:36:75:36:fd:a8:ed: da:49:9e:e7:17:b2:ae:e4:47:c4:fa:ac:d2:22:d9: 80:5f:e8:bc:ad:0e:81:d9:cd:2b:78:5f:f4:8d:ee: 55:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:58:2D:2E:DB:91:21:C2:0D:44:D6:17:04:3E:BE:14:C7:1D:13:3F X509v3 Authority Key Identifier: keyid:E1:FE:69:A3:42:16:C2:4D:18:70:F5:CE:D3:A4:30:92:34:A0:F1:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:ff:bf:98:00:ef:4b:7f:39:80:26:e3:6a:21:5a:27:5d:8d: 30:a7:36:a1:2b:db:f4:c0:6f:05:4f:2c:08:3d:85:d5:3d:f4: 3d:b9:bb:7b:86:c3:88:3d:3c:16:55:fb:67:31:5c:c0:81:61: 1f:cf:5a:30:9a:f8:4b:9d:d6:36:6b:6b:59:b8:73:4a:d7:9e: 1c:43:90:7e:fa:6b:cd:da:02:69:e6:93:5a:ce:d3:c3:e2:90: 4d:c4:51:d6:fa:01:9e:3a:ae:e0:4a:dc:c7:58:49:66:90:88: db:f3:4b:fb:76:58:d4:d4:18:dc:f4:de:c9:2c:21:99:bb:06: 10:9a:a2:63:54:34:c7:e1:1e:a6:6f:f2:5b:e7:d0:4c:4a:a9: 1b:eb:c9:4b:65:48:27:62:b9:85:c1:ab:d6:51:db:2e:cb:25: d0:86:aa:3a:dd:83:92:bc:96:43:b6:0b:af:33:7e:9c:15:2e: f4:ba:dc:ac:8b:86:7c:1a:d7:12:aa:12:43:db:a2:cf:81:bd: 1a:8f:5e:6b:03:5f:67:68:5d:70:52:e3:c5:27:0a:63:e5:ae: c8:d0:3e:ce:04:fa:46:50:38:e8:68:a5:19:77:83:7a:9d:ac: bf:7d:b6:31:96:13:92:95:63:95:d2:f6:53:37:55:16:22:27: 19:ab:75:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ/jCY9yK0qVa0+CGnrbRGagf1MEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFGRTY5QTM0MjE2QzI0RDE4NzBGNUNFRDNBNDMwOTIz NEEwRjFCMjAeFw0yNjA0MTYxNjA3NDRaFw0yNjA0MjAwMDIxNDRaMDMxMTAvBgNV BAMTKEI2NTgyRDJFREI5MTIxQzIwRDQ0RDYxNzA0M0VCRTE0QzcxRDEzM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPv6MwMZBl/EVuYePSjBU3hfAw zA/IIHDP9Y9QHnGf/gcO59MM5iK5URX8Y8cWpoH1KKVQof5bD1jsvMJYD+u2NDr5 12pZIAtWdv3v1bomyiPGB8VSbDTw8KuJWDftS2ImqUaAVMsghZptHWCIackraC1j 8nPihwohcY7BjVGDjMJM3MlucdUQVOFy5R7REpwbC4RzNYXvAXxUx65vL6kBu9MN WYd7oER5YlfCtZqJl4BIroDyTNTMM4La/7yK9NfZzb1d/4K/Fd87qx5oMIfh451t LBHv0SJ2TzZ1Nv2o7dpJnucXsq7kR8T6rNIi2YBf6LytDoHZzSt4X/SN7lWNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtlgtLtuRIcINRNYXBD6+FMcdEz8wHwYDVR0j BBgwFoAU4f5po0IWwk0YcPXO06QwkjSg8bIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODhlM2ExNy0xYzkxLTQ3OTMtODNjNC0yMTFkNDIxMGFlYTgvMC9FMUZFNjlBMzQy MTZDMjREMTg3MEY1Q0VEM0E0MzA5MjM0QTBGMUIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTFGRTY5QTM0MjE2QzI0RDE4NzBGNUNFRDNBNDMwOTIzNEEw RjFCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTg4ZTNhMTctMWM5MS00NzkzLTgz YzQtMjExZDQyMTBhZWE4LzAvRTFGRTY5QTM0MjE2QzI0RDE4NzBGNUNFRDNBNDMw OTIzNEEwRjFCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFb/v5gA70t/OYAm42ohWiddjTCnNqEr2/TA bwVPLAg9hdU99D25u3uGw4g9PBZV+2cxXMCBYR/PWjCa+Eud1jZra1m4c0rXnhxD kH76a83aAmnmk1rO08PikE3EUdb6AZ46ruBK3MdYSWaQiNvzS/t2WNTUGNz03sks IZm7BhCaomNUNMfhHqZv8lvn0ExKqRvryUtlSCdiuYXBq9ZR2y7LJdCGqjrdg5K8 lkO2C68zfpwVLvS63KyLhnwa1xKqEkPbos+BvRqPXmsDX2doXXBS48UnCmPlrsjQ Ps4E+kZQOOhopRl3g3qdrL99tjGWE5KVY5XS9lM3VRYiJxmrdb0= -----END CERTIFICATE-----Generated at Fri Apr 17 20:44:01 2026 by rpki-client