$ rpki-client -vvf repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft File: E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft (raw, json) Hash identifier: cKQN8Djeu3uZYMHVO3xBOE/ChQPYN9dh1Zrr+2FtVcY= Subject key identifier: B2:E5:0C:C2:FE:E5:D0:5E:9A:F4:88:90:5F:3B:5B:44:55:5F:0B:08 Authority key identifier: E0:9D:0E:1D:26:3D:BD:91:4D:0C:4E:0C:AA:7E:5E:50:D0:22:46:F1 Certificate issuer: /CN=E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1 Certificate serial: 60E4999738A1629E49D2BB1733C90362C010D783 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft Manifest number: 02EB Signing time: Fri 17 Apr 2026 02:01:37 +0000 Manifest this update: Fri 17 Apr 2026 01:56:37 +0000 Manifest next update: Mon 20 Apr 2026 06:45:37 +0000 Files and hashes: 1: E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.crl (hash: /ytAbcrLcOS7Z+rFZ1PxWHfcdI1o1dYr62fZWL3IFqQ=) 2: 3130332e3137382e3137302e302f32342d3234203d3e20313339393532.roa (hash: h1Tx5XQe9PTjaWSuT2kvzlzqF3kndx9Hsu7Upo8uOTc=) 3: 3130332e3137382e3137312e302f32342d3234203d3e20313339393532.roa (hash: 3NX1nBGV/FMmtvaiqzRzW9XslyN0NpXTPsReHhO0GFQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.crl rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 06:45:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:e4:99:97:38:a1:62:9e:49:d2:bb:17:33:c9:03:62:c0:10:d7:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1 Validity Not Before: Apr 17 01:56:37 2026 GMT Not After : Apr 20 06:45:37 2026 GMT Subject: CN=B2E50CC2FEE5D05E9AF488905F3B5B44555F0B08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b1:a1:99:ba:f8:e5:40:15:42:d6:c3:5f:82: 94:6d:19:3e:1d:c2:3a:26:75:e6:78:95:fd:f9:e2: f5:87:ad:47:6f:74:01:aa:00:26:f0:17:82:69:56: ae:a2:67:a7:c9:f2:13:e9:34:f4:c4:6b:35:d6:d4: fc:4e:51:17:9d:e5:7a:70:08:66:07:d0:98:1a:19: 5a:48:38:58:8c:f3:a8:34:25:e1:ea:cd:8e:a5:82: bd:27:4b:0d:7f:83:db:32:a0:ab:c3:8c:26:70:2a: 78:f3:4f:36:28:42:28:a0:6d:85:0a:58:93:64:51: 66:e5:16:ff:8e:fd:84:f0:75:38:38:4f:73:da:1e: 87:de:c1:c0:95:a1:eb:2b:8b:21:d9:56:f2:a5:f6: 54:f9:e9:b8:41:ed:c2:f0:ee:b0:26:1a:32:11:fb: 36:ab:49:51:b3:44:06:a4:a5:1a:1a:93:66:3d:91: 85:76:d5:06:eb:9e:f5:e7:a0:ea:19:1a:41:61:3c: 8b:21:4b:0d:bb:2b:2c:10:50:6d:a7:0f:a8:03:30: bd:f0:a0:bc:e3:fe:1c:ad:21:41:e3:75:15:a1:e7: dc:8e:aa:7f:f8:00:4e:7f:88:b0:99:d1:0f:f9:ee: d1:ee:19:90:0b:18:a5:9a:4e:f0:91:e7:2a:e8:47: 5d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E5:0C:C2:FE:E5:D0:5E:9A:F4:88:90:5F:3B:5B:44:55:5F:0B:08 X509v3 Authority Key Identifier: keyid:E0:9D:0E:1D:26:3D:BD:91:4D:0C:4E:0C:AA:7E:5E:50:D0:22:46:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:8a:e0:b5:8f:a0:e9:fc:7f:98:97:92:e5:d0:56:b6:f9:ca: 5f:e5:c9:27:92:fe:fd:82:19:b8:45:43:39:91:f5:27:fd:fe: 44:d4:19:63:7f:12:8b:34:b7:ed:a0:b3:22:d1:38:8a:11:db: 4a:94:34:e0:2a:86:41:57:c6:26:c5:ec:e7:b2:96:18:71:f6: 14:c7:3d:2e:c1:ef:66:fb:64:9f:a0:3a:29:7a:cf:f2:2a:db: aa:2e:65:a0:a1:ff:da:fb:d0:8c:e4:19:30:f6:15:7f:66:d7: 37:ea:01:be:08:a2:5f:e1:e7:37:e7:a2:ac:97:83:6f:38:fd: ed:c5:b8:6a:0d:b5:88:61:65:76:59:c7:7a:a5:df:b3:05:ec: 84:12:60:e7:55:9b:30:5c:a4:91:45:fc:f9:18:ed:60:d9:1e: 64:79:d6:9c:4f:cf:c0:d3:77:7e:ad:96:00:00:b3:c5:49:c0: 63:62:44:7f:73:36:1c:11:ea:db:e9:3c:3e:18:7e:f7:52:c4: df:2e:5e:b5:1b:37:11:40:1b:d1:d2:67:c8:6a:1d:2b:ad:e2: 1f:79:3e:2e:91:bc:4f:54:ec:3c:39:69:34:50:ba:fd:07:d8: 97:0e:10:50:6f:57:6c:e4:93:92:f9:48:0c:53:87:32:4e:09: 3f:af:15:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYOSZlzihYp5J0rsXM8kDYsAQ14MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTA5RDBFMUQyNjNEQkQ5MTREMEM0RTBDQUE3RTVFNTBE MDIyNDZGMTAeFw0yNjA0MTcwMTU2MzdaFw0yNjA0MjAwNjQ1MzdaMDMxMTAvBgNV BAMTKEIyRTUwQ0MyRkVFNUQwNUU5QUY0ODg5MDVGM0I1QjQ0NTU1RjBCMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgsaGZuvjlQBVC1sNfgpRtGT4d wjomdeZ4lf354vWHrUdvdAGqACbwF4JpVq6iZ6fJ8hPpNPTEazXW1PxOURed5Xpw CGYH0JgaGVpIOFiM86g0JeHqzY6lgr0nSw1/g9syoKvDjCZwKnjzTzYoQiigbYUK WJNkUWblFv+O/YTwdTg4T3PaHofewcCVoesriyHZVvKl9lT56bhB7cLw7rAmGjIR +zarSVGzRAakpRoak2Y9kYV21QbrnvXnoOoZGkFhPIshSw27KywQUG2nD6gDML3w oLzj/hytIUHjdRWh59yOqn/4AE5/iLCZ0Q/57tHuGZALGKWaTvCR5yroR11zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsuUMwv7l0F6a9IiQXztbRFVfCwgwHwYDVR0j BBgwFoAU4J0OHSY9vZFNDE4Mqn5eUNAiRvEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzAxZmQ0NC04Y2Q2LTRkOWYtOWJkMS04MzY3YWQ5Y2Q5ZWEvMC9FMDlEMEUxRDI2 M0RCRDkxNEQwQzRFMENBQTdFNUU1MEQwMjI0NkYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTA5RDBFMUQyNjNEQkQ5MTREMEM0RTBDQUE3RTVFNTBEMDIy NDZGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMwMWZkNDQtOGNkNi00ZDlmLTli ZDEtODM2N2FkOWNkOWVhLzAvRTA5RDBFMUQyNjNEQkQ5MTREMEM0RTBDQUE3RTVF NTBEMDIyNDZGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALGK4LWPoOn8f5iXkuXQVrb5yl/lySeS/v2C GbhFQzmR9Sf9/kTUGWN/Eos0t+2gsyLROIoR20qUNOAqhkFXxibF7Oeylhhx9hTH PS7B72b7ZJ+gOil6z/Iq26ouZaCh/9r70IzkGTD2FX9m1zfqAb4Iol/h5zfnoqyX g284/e3FuGoNtYhhZXZZx3ql37MF7IQSYOdVmzBcpJFF/PkY7WDZHmR51pxPz8DT d36tlgAAs8VJwGNiRH9zNhwR6tvpPD4YfvdSxN8uXrUbNxFAG9HSZ8hqHSut4h95 Pi6RvE9U7Dw5aTRQuv0H2JcOEFBvV2zkk5L5SAxThzJOCT+vFf8= -----END CERTIFICATE-----Generated at Fri Apr 17 22:43:26 2026 by rpki-client