$ rpki-client -vvf repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft File: E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft (raw, json) Hash identifier: +/D5d1zspHfwJXV2mjL3ImiGx+KWvSnwZ2XN7HgwKo8= Subject key identifier: 5B:C9:D3:6E:62:08:D0:91:78:20:18:FE:E5:6A:F7:3A:F8:8F:51:24 Authority key identifier: E2:AE:EC:7D:F8:97:A9:D6:E4:F0:D1:D1:C4:31:2A:03:FA:F5:75:6F Certificate issuer: /CN=E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F Certificate serial: 041DBF97E56A681732A95E199D594B547ED09714 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft Manifest number: 01F2 Signing time: Sat 28 Feb 2026 20:50:57 +0000 Manifest this update: Sat 28 Feb 2026 20:45:57 +0000 Manifest next update: Tue 03 Mar 2026 20:50:57 +0000 Files and hashes: 1: 3130332e3137322e3234322e302f32342d3234203d3e20313437303836.roa (hash: 3lqgIQzyR6/7cSCmR5iJslHIsmApf6ImpEqOGdjCApk=) 2: E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.crl (hash: pXYuDHtiYPyskKdgputICpi1a+3fEGbMns3vZR3NpNU=) 3: 3130332e3137322e3234332e302f32342d3234203d3e20313437303836.roa (hash: PNsGrsunNYvLcLEfdpgZYxKAz1Ra4qJ7YYKHTqQZiJg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.crl rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 20:50:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:1d:bf:97:e5:6a:68:17:32:a9:5e:19:9d:59:4b:54:7e:d0:97:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F Validity Not Before: Feb 28 20:45:57 2026 GMT Not After : Mar 3 20:50:57 2026 GMT Subject: CN=5BC9D36E6208D091782018FEE56AF73AF88F5124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7d:1f:3d:5d:a0:82:30:34:7e:59:09:46:d2: 60:31:35:34:50:46:b3:d0:55:7e:e0:a4:01:cc:4c: 98:67:86:d7:b8:d4:cb:a4:26:93:1e:a9:7e:58:01: 28:ec:bb:5a:e9:d3:16:0f:43:52:42:3d:86:4d:2a: 82:32:1d:7f:b1:b9:04:5f:bc:82:d7:c4:ae:81:9f: f3:7a:62:55:f4:13:22:03:b0:0b:e8:52:90:92:8b: 53:1f:6f:cf:37:47:c5:52:ad:11:ba:24:ce:bf:c9: 3c:d4:c8:c1:d3:01:a6:49:ba:26:77:7b:cb:5f:36: cb:12:92:1d:10:88:7d:23:7e:fa:c1:70:d3:95:7c: 8c:13:2f:16:7e:a0:d0:16:62:bb:7e:81:30:7b:c2: 2d:fb:6a:df:43:15:40:66:09:15:a7:ad:f5:8e:d2: 50:59:18:c6:e7:e2:b4:33:98:80:9c:e6:67:72:9a: 7d:fb:4d:d7:ec:8c:97:51:c2:8a:02:35:d4:7a:fb: fc:01:8f:e6:b9:72:85:67:c3:a9:05:92:e4:ec:56: 3e:35:51:e6:a6:53:7f:fa:e7:3f:57:99:3a:60:bc: 3f:58:99:aa:4a:03:fa:be:59:ed:3d:5b:c3:4f:16: a3:e5:82:a0:02:07:25:4f:07:b7:d2:ff:38:fe:55: 35:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:C9:D3:6E:62:08:D0:91:78:20:18:FE:E5:6A:F7:3A:F8:8F:51:24 X509v3 Authority Key Identifier: keyid:E2:AE:EC:7D:F8:97:A9:D6:E4:F0:D1:D1:C4:31:2A:03:FA:F5:75:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:a9:fe:ac:30:27:2d:3b:6e:62:8a:0a:5c:d1:6f:35:14:c0: f4:b1:5a:1e:12:fd:e9:1f:e7:2f:b0:7b:ad:a8:0f:53:b4:65: a6:dd:c0:63:ed:c6:bc:64:18:c9:ab:50:db:de:10:c8:58:93: b6:5b:cc:7e:75:c1:a7:d3:3a:f1:f5:25:33:48:6d:6e:b9:ff: 94:da:32:97:60:18:29:a9:22:66:c7:79:08:93:bd:14:38:83: 4b:49:1c:31:5a:1b:3f:84:9e:bf:9f:c2:e3:b9:b4:0e:53:8e: e2:55:59:a3:d4:c8:2f:ea:f1:33:04:58:45:92:94:d0:df:c4: a5:00:27:62:9a:95:5a:0f:17:30:96:57:27:b6:3f:57:a2:89: a2:ef:df:a3:fa:b5:a2:4f:0c:60:c5:91:9e:09:61:5b:85:47: 5e:5c:7a:c7:40:c0:61:0e:d9:f5:c4:01:8b:8d:ae:51:d6:a7: 7d:84:ba:51:a0:4e:eb:1d:83:55:e7:d3:dc:78:64:cd:ee:4a: e8:dd:75:8e:5d:35:d5:ca:18:df:5b:a5:8c:03:fd:b5:66:f2: 56:7f:6a:17:94:fd:60:2b:a1:fa:e5:44:00:d4:05:b8:c1:3a: 52:70:6c:a8:63:a2:0f:dc:3e:9a:fd:f3:0f:0d:38:c9:14:f8: f1:46:75:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBB2/l+VqaBcyqV4ZnVlLVH7QlxQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTJBRUVDN0RGODk3QTlENkU0RjBEMUQxQzQzMTJBMDNG QUY1NzU2RjAeFw0yNjAyMjgyMDQ1NTdaFw0yNjAzMDMyMDUwNTdaMDMxMTAvBgNV BAMTKDVCQzlEMzZFNjIwOEQwOTE3ODIwMThGRUU1NkFGNzNBRjg4RjUxMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJfR89XaCCMDR+WQlG0mAxNTRQ RrPQVX7gpAHMTJhnhte41MukJpMeqX5YASjsu1rp0xYPQ1JCPYZNKoIyHX+xuQRf vILXxK6Bn/N6YlX0EyIDsAvoUpCSi1Mfb883R8VSrRG6JM6/yTzUyMHTAaZJuiZ3 e8tfNssSkh0QiH0jfvrBcNOVfIwTLxZ+oNAWYrt+gTB7wi37at9DFUBmCRWnrfWO 0lBZGMbn4rQzmICc5mdymn37TdfsjJdRwooCNdR6+/wBj+a5coVnw6kFkuTsVj41 UeamU3/65z9XmTpgvD9YmapKA/q+We09W8NPFqPlgqACByVPB7fS/zj+VTV9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW8nTbmII0JF4IBj+5Wr3OviPUSQwHwYDVR0j BBgwFoAU4q7sffiXqdbk8NHRxDEqA/r1dW8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjZkOGY5Ny1jODA2LTQ3OTktODVlMC04Y2NmMThkYmJiMzEvMC9FMkFFRUM3REY4 OTdBOUQ2RTRGMEQxRDFDNDMxMkEwM0ZBRjU3NTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTJBRUVDN0RGODk3QTlENkU0RjBEMUQxQzQzMTJBMDNGQUY1 NzU2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI2ZDhmOTctYzgwNi00Nzk5LTg1 ZTAtOGNjZjE4ZGJiYjMxLzAvRTJBRUVDN0RGODk3QTlENkU0RjBEMUQxQzQzMTJB MDNGQUY1NzU2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKOp/qwwJy07bmKKClzRbzUUwPSxWh4S/ekf 5y+we62oD1O0ZabdwGPtxrxkGMmrUNveEMhYk7ZbzH51wafTOvH1JTNIbW65/5Ta MpdgGCmpImbHeQiTvRQ4g0tJHDFaGz+Enr+fwuO5tA5TjuJVWaPUyC/q8TMEWEWS lNDfxKUAJ2KalVoPFzCWVye2P1eiiaLv36P6taJPDGDFkZ4JYVuFR15cesdAwGEO 2fXEAYuNrlHWp32EulGgTusdg1Xn09x4ZM3uSujddY5dNdXKGN9bpYwD/bVm8lZ/ aheU/WArofrlRADUBbjBOlJwbKhjog/cPpr98w8NOMkU+PFGdQM= -----END CERTIFICATE-----Generated at Mon Mar 2 09:10:20 2026 by rpki-client