$ rpki-client -vvf repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft File: E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft (raw, json) Hash identifier: HK37ouTSfrhzAhhcgUehb019FGv6H4KTWb+heaJ4OXI= Subject key identifier: 71:A5:A8:D3:F8:1B:ED:F0:40:BE:2E:B4:43:4D:FF:50:F1:55:72:AE Authority key identifier: E2:AE:EC:7D:F8:97:A9:D6:E4:F0:D1:D1:C4:31:2A:03:FA:F5:75:6F Certificate issuer: /CN=E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F Certificate serial: 2A393ADE83E67A9DA7426FDEEA1FCF278619A5CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft Manifest number: 0207 Signing time: Fri 17 Apr 2026 11:52:07 +0000 Manifest this update: Fri 17 Apr 2026 11:47:07 +0000 Manifest next update: Mon 20 Apr 2026 19:11:07 +0000 Files and hashes: 1: E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.crl (hash: KK1SnkJBuFz/U/BoADhiWIbOULPNJzjNW6nkUL7h0lc=) 2: 3130332e3137322e3234332e302f32342d3234203d3e20313437303836.roa (hash: PNsGrsunNYvLcLEfdpgZYxKAz1Ra4qJ7YYKHTqQZiJg=) 3: 3130332e3137322e3234322e302f32342d3234203d3e20313437303836.roa (hash: 3lqgIQzyR6/7cSCmR5iJslHIsmApf6ImpEqOGdjCApk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.crl rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 19:11:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:39:3a:de:83:e6:7a:9d:a7:42:6f:de:ea:1f:cf:27:86:19:a5:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F Validity Not Before: Apr 17 11:47:07 2026 GMT Not After : Apr 20 19:11:07 2026 GMT Subject: CN=71A5A8D3F81BEDF040BE2EB4434DFF50F15572AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:37:7a:a8:b1:87:b4:f1:da:bc:ff:18:b8:05: 40:d4:6d:56:e1:1b:2f:4b:fb:9c:8a:ff:0b:fa:dd: 73:9b:87:2b:da:80:15:24:84:87:32:e4:50:c8:f5: 23:8f:7e:78:8b:fe:eb:f6:5e:1c:d8:86:0c:48:ea: dd:17:8b:30:98:4f:b5:7c:7f:28:b3:0c:21:e9:b3: e9:cc:17:f3:19:50:57:bc:e2:a0:00:b7:33:13:5b: 15:f2:df:c5:5e:a7:87:49:8f:61:9f:0b:ba:74:a6: 8a:62:84:73:84:e5:3a:0a:0d:43:6c:e8:27:fd:5c: 43:6f:5c:92:87:11:78:c9:37:18:ef:b1:f3:61:24: 7c:90:ce:d6:6d:6a:86:0b:cd:81:39:ed:0b:80:c8: 1c:ff:59:68:32:05:6a:43:42:a8:95:57:0b:2c:0c: 0c:97:07:0f:a9:fe:2e:93:c2:e9:26:97:ae:e7:d7: 20:8f:39:ae:16:4a:46:98:04:90:20:62:72:4f:70: d4:ec:9e:5f:9c:4e:d1:d6:7b:74:83:89:47:34:dd: e0:50:0e:6b:27:ea:e9:1b:96:59:ed:f5:45:b1:aa: 5a:0a:a2:fb:fb:5b:dc:b8:ee:6c:e5:af:73:cc:19: c5:1a:2a:8f:05:d5:5c:45:47:8b:1c:2f:4b:cd:10: 19:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:A5:A8:D3:F8:1B:ED:F0:40:BE:2E:B4:43:4D:FF:50:F1:55:72:AE X509v3 Authority Key Identifier: keyid:E2:AE:EC:7D:F8:97:A9:D6:E4:F0:D1:D1:C4:31:2A:03:FA:F5:75:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:d3:82:f3:dc:92:62:d5:be:df:43:9b:70:5a:a6:63:43:29: f5:ae:2f:91:ed:d6:a0:92:87:24:d3:38:f2:18:ab:2d:1b:bb: 25:1a:b4:b3:72:cf:38:f6:b8:0a:39:69:8b:f6:ac:a3:0d:1f: ad:3d:76:b3:b3:42:25:ec:3e:e3:5d:22:42:f7:33:4b:d7:ef: 7f:f8:d5:86:c9:c3:13:fb:91:15:c3:5c:82:8f:52:09:88:c7: bc:2d:96:da:b0:95:80:0f:c0:9c:75:79:32:1e:cb:9d:5c:17: 20:0c:32:23:9c:f6:f9:d3:f1:1e:76:5d:26:46:eb:bf:19:31: 7a:48:91:6a:06:05:f8:30:07:7c:fb:24:18:af:65:08:96:49: 35:7f:9a:a3:9c:38:73:ea:7d:f9:16:ab:12:f6:67:53:7a:ce: b7:21:24:e2:68:f6:52:fb:7f:4c:28:10:5e:70:35:12:9f:d7: d6:b2:8a:dd:61:36:84:44:d4:f0:13:06:96:b0:f9:77:59:dd: e0:c2:af:ff:07:34:86:85:dd:ee:10:37:ea:3b:c3:98:56:09: 34:eb:51:63:53:17:93:42:58:9c:a7:3f:d7:fb:31:bb:cd:5e: 12:17:d3:39:c5:fe:66:30:25:10:65:ee:e7:b3:af:8d:c4:04: bf:81:d4:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKjk63oPmep2nQm/e6h/PJ4YZpc0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTJBRUVDN0RGODk3QTlENkU0RjBEMUQxQzQzMTJBMDNG QUY1NzU2RjAeFw0yNjA0MTcxMTQ3MDdaFw0yNjA0MjAxOTExMDdaMDMxMTAvBgNV BAMTKDcxQTVBOEQzRjgxQkVERjA0MEJFMkVCNDQzNERGRjUwRjE1NTcyQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrN3qosYe08dq8/xi4BUDUbVbh Gy9L+5yK/wv63XObhyvagBUkhIcy5FDI9SOPfniL/uv2XhzYhgxI6t0XizCYT7V8 fyizDCHps+nMF/MZUFe84qAAtzMTWxXy38Vep4dJj2GfC7p0popihHOE5ToKDUNs 6Cf9XENvXJKHEXjJNxjvsfNhJHyQztZtaoYLzYE57QuAyBz/WWgyBWpDQqiVVwss DAyXBw+p/i6Twukml67n1yCPOa4WSkaYBJAgYnJPcNTsnl+cTtHWe3SDiUc03eBQ Dmsn6ukbllnt9UWxqloKovv7W9y47mzlr3PMGcUaKo8F1VxFR4scL0vNEBnNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcaWo0/gb7fBAvi60Q03/UPFVcq4wHwYDVR0j BBgwFoAU4q7sffiXqdbk8NHRxDEqA/r1dW8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjZkOGY5Ny1jODA2LTQ3OTktODVlMC04Y2NmMThkYmJiMzEvMC9FMkFFRUM3REY4 OTdBOUQ2RTRGMEQxRDFDNDMxMkEwM0ZBRjU3NTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTJBRUVDN0RGODk3QTlENkU0RjBEMUQxQzQzMTJBMDNGQUY1 NzU2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI2ZDhmOTctYzgwNi00Nzk5LTg1 ZTAtOGNjZjE4ZGJiYjMxLzAvRTJBRUVDN0RGODk3QTlENkU0RjBEMUQxQzQzMTJB MDNGQUY1NzU2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANrTgvPckmLVvt9Dm3BapmNDKfWuL5Ht1qCS hyTTOPIYqy0buyUatLNyzzj2uAo5aYv2rKMNH609drOzQiXsPuNdIkL3M0vX73/4 1YbJwxP7kRXDXIKPUgmIx7wtltqwlYAPwJx1eTIey51cFyAMMiOc9vnT8R52XSZG 678ZMXpIkWoGBfgwB3z7JBivZQiWSTV/mqOcOHPqffkWqxL2Z1N6zrchJOJo9lL7 f0woEF5wNRKf19ayit1hNoRE1PATBpaw+XdZ3eDCr/8HNIaF3e4QN+o7w5hWCTTr UWNTF5NCWJynP9f7MbvNXhIX0znF/mYwJRBl7uezr43EBL+B1I8= -----END CERTIFICATE-----Generated at Sun Apr 19 13:01:31 2026 by rpki-client