$ rpki-client -vvf repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft File: E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft (raw, json) Hash identifier: 3eULIaeovvkYN3m8DfGOeqE+k36PzAEkAnWZ16/ZTl8= Subject key identifier: 15:4A:41:74:DC:45:AB:0A:DD:B5:F3:13:20:E5:98:66:72:62:31:C9 Authority key identifier: E9:1D:51:E5:4A:89:C0:DD:BD:57:F0:0A:13:E9:6E:36:FA:29:AB:27 Certificate issuer: /CN=E91D51E54A89C0DDBD57F00A13E96E36FA29AB27 Certificate serial: 2A00057900935E95A85CB0913E7982AF23D21DAD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft Manifest number: 0211 Signing time: Mon 02 Mar 2026 01:21:11 +0000 Manifest this update: Mon 02 Mar 2026 01:16:11 +0000 Manifest next update: Thu 05 Mar 2026 06:37:11 +0000 Files and hashes: 1: 3130332e34372e31302e302f32342d3234203d3e203539323733.roa (hash: R73yUQxsrQ2/QYaOv8BqS7ocOQns71iqOhL/AfjwD0s=) 2: 3130332e34372e31302e302f32332d3233203d3e203539323733.roa (hash: QQ3Rh44LarCBGGxrx2/AHtC6m0nt4l2HW31clE2Q/SY=) 3: E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.crl (hash: Nj2WGD/iDaI2qDy8cmoeLUc0O62GVIKNQBhK3nJSv6w=) 4: 3130332e34372e31312e302f32342d3234203d3e203539323733.roa (hash: FYTnb6URKqil9v4UEaprZL6ZdMktcRy6nGXbNBxOe04=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.crl rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:00:05:79:00:93:5e:95:a8:5c:b0:91:3e:79:82:af:23:d2:1d:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E91D51E54A89C0DDBD57F00A13E96E36FA29AB27 Validity Not Before: Mar 2 01:16:11 2026 GMT Not After : Mar 5 06:37:11 2026 GMT Subject: CN=154A4174DC45AB0ADDB5F31320E59866726231C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2d:09:8e:dd:0a:07:16:9e:4e:8f:ca:65:0f: 09:59:af:92:9e:11:ab:90:5e:79:f4:d1:6a:ff:1c: 8d:38:ce:ec:82:b9:8e:06:bb:77:73:64:cb:6c:31: 3f:20:94:cd:81:4b:0b:c4:f9:9b:43:90:0d:82:4b: 01:a8:91:9f:42:c8:8b:f3:e1:a5:2c:47:75:ce:0f: aa:03:3a:e9:5e:dd:45:dd:a1:28:c6:0b:bc:b2:06: b0:e7:14:60:00:f3:f2:85:52:03:e8:5a:77:ff:ee: 6e:60:23:28:9f:89:30:82:9f:4e:33:a9:04:69:7d: 19:1e:af:f6:64:17:04:ab:9b:7a:37:12:01:70:55: 74:bf:74:11:d0:69:d0:09:26:bf:a8:b4:2f:4c:65: c3:49:60:6f:b2:1a:07:09:8b:c6:92:5d:a8:65:4a: ea:4f:c1:8c:94:24:d3:eb:8b:e2:6f:d2:75:d4:3f: e0:92:50:08:fa:79:9a:87:e9:69:5e:4f:30:cf:80: c8:50:cc:d4:29:5e:27:fe:d3:78:29:8c:4e:e3:29: 7d:df:dd:a5:c4:4c:8a:06:a3:8d:80:af:d7:f7:54: 5d:5b:37:c1:8e:bf:78:3f:e0:7a:05:a9:52:04:13: d9:2b:e3:20:81:b7:80:11:fd:0b:7b:85:f7:79:2c: 43:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:4A:41:74:DC:45:AB:0A:DD:B5:F3:13:20:E5:98:66:72:62:31:C9 X509v3 Authority Key Identifier: keyid:E9:1D:51:E5:4A:89:C0:DD:BD:57:F0:0A:13:E9:6E:36:FA:29:AB:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:44:c3:ed:e4:54:0f:06:a9:15:68:65:ab:51:98:03:25:25: da:56:62:97:3f:34:44:bf:e4:3a:87:66:95:eb:ec:21:c5:1a: 6a:82:7b:50:7d:ef:42:bc:9d:8b:15:3e:48:51:16:99:79:e5: 5a:b5:9c:49:bf:04:8a:b6:45:e4:a0:68:71:3c:68:51:1b:c4: 94:3f:c7:8d:fb:49:8e:fb:9d:71:bf:d9:35:ae:74:7b:79:f0: c7:22:1c:5b:37:9d:3e:ab:66:fc:b7:62:e0:92:c6:a7:a6:88: 93:02:ee:35:06:e4:ad:77:cf:33:8c:60:8c:c2:46:56:c6:8d: a8:cc:a0:f4:ad:09:23:1b:b9:17:17:c6:04:fe:46:79:92:a9: e7:ae:d1:b2:80:21:93:d7:ed:40:7d:e5:e8:30:e8:eb:da:fc: c3:40:a3:42:2b:7f:86:7e:b5:0e:18:08:45:4e:94:9f:97:5b: 82:f5:0c:a9:32:3d:18:38:ee:30:70:f5:65:82:5f:38:46:ac: dc:8d:ce:b3:d5:d8:26:7d:a4:f9:08:af:19:03:8d:c0:51:a2: b1:a0:c5:88:a0:85:a2:5b:c7:cf:40:d0:c4:58:d8:a3:c1:62: 50:f3:28:41:ee:7f:61:1a:8c:7b:39:b2:2c:87:e0:c2:ff:81: 3a:b5:b2:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKgAFeQCTXpWoXLCRPnmCryPSHa0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTkxRDUxRTU0QTg5QzBEREJENTdGMDBBMTNFOTZFMzZG QTI5QUIyNzAeFw0yNjAzMDIwMTE2MTFaFw0yNjAzMDUwNjM3MTFaMDMxMTAvBgNV BAMTKDE1NEE0MTc0REM0NUFCMEFEREI1RjMxMzIwRTU5ODY2NzI2MjMxQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCLQmO3QoHFp5Oj8plDwlZr5Ke EauQXnn00Wr/HI04zuyCuY4Gu3dzZMtsMT8glM2BSwvE+ZtDkA2CSwGokZ9CyIvz 4aUsR3XOD6oDOule3UXdoSjGC7yyBrDnFGAA8/KFUgPoWnf/7m5gIyifiTCCn04z qQRpfRker/ZkFwSrm3o3EgFwVXS/dBHQadAJJr+otC9MZcNJYG+yGgcJi8aSXahl SupPwYyUJNPri+Jv0nXUP+CSUAj6eZqH6WleTzDPgMhQzNQpXif+03gpjE7jKX3f 3aXETIoGo42Ar9f3VF1bN8GOv3g/4HoFqVIEE9kr4yCBt4AR/Qt7hfd5LEOrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFUpBdNxFqwrdtfMTIOWYZnJiMckwHwYDVR0j BBgwFoAU6R1R5UqJwN29V/AKE+luNvopqycwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NWE3MmViOS04ZTUzLTQ0NzItYTM1YS1mZWU4YmYwYWY0NmYvMC9FOTFENTFFNTRB ODlDMEREQkQ1N0YwMEExM0U5NkUzNkZBMjlBQjI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTkxRDUxRTU0QTg5QzBEREJENTdGMDBBMTNFOTZFMzZGQTI5 QUIyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjVhNzJlYjktOGU1My00NDcyLWEz NWEtZmVlOGJmMGFmNDZmLzAvRTkxRDUxRTU0QTg5QzBEREJENTdGMDBBMTNFOTZF MzZGQTI5QUIyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADFEw+3kVA8GqRVoZatRmAMlJdpWYpc/NES/ 5DqHZpXr7CHFGmqCe1B970K8nYsVPkhRFpl55Vq1nEm/BIq2ReSgaHE8aFEbxJQ/ x437SY77nXG/2TWudHt58MciHFs3nT6rZvy3YuCSxqemiJMC7jUG5K13zzOMYIzC RlbGjajMoPStCSMbuRcXxgT+RnmSqeeu0bKAIZPX7UB95egw6Ova/MNAo0Irf4Z+ tQ4YCEVOlJ+XW4L1DKkyPRg47jBw9WWCXzhGrNyNzrPV2CZ9pPkIrxkDjcBRorGg xYighaJbx89A0MRY2KPBYlDzKEHuf2EajHs5siyH4ML/gTq1sto= -----END CERTIFICATE-----Generated at Mon Mar 2 08:07:54 2026 by rpki-client