$ rpki-client -vvf repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft File: E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft (raw, json) Hash identifier: p/mzvaFineaJNaIeQ5GL1DdoA25fzpppP9FlRZSqjmU= Subject key identifier: A6:36:29:CB:8B:92:0D:07:33:A8:B6:F4:A0:04:1C:26:5A:AB:AD:8E Authority key identifier: E3:36:CD:49:5C:4F:48:0E:C4:FA:92:EB:0B:59:42:D9:8D:E4:B8:8C Certificate issuer: /CN=E336CD495C4F480EC4FA92EB0B5942D98DE4B88C Certificate serial: 0342A6B7B9C2008E533CF95F104AC6F85B63F471 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft Manifest number: 0155 Signing time: Sat 28 Feb 2026 17:52:17 +0000 Manifest this update: Sat 28 Feb 2026 17:47:17 +0000 Manifest next update: Tue 03 Mar 2026 19:41:17 +0000 Files and hashes: 1: E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.crl (hash: ohX+JR9dod00bVlYiFnvkK9fPgn3GTLvOsNaRVx5uNM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.crl rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 19:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:42:a6:b7:b9:c2:00:8e:53:3c:f9:5f:10:4a:c6:f8:5b:63:f4:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E336CD495C4F480EC4FA92EB0B5942D98DE4B88C Validity Not Before: Feb 28 17:47:17 2026 GMT Not After : Mar 3 19:41:17 2026 GMT Subject: CN=A63629CB8B920D0733A8B6F4A0041C265AABAD8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:23:a9:e5:5b:d7:ff:c9:05:16:57:07:73:d6: 1b:69:99:aa:d0:ff:75:30:ab:a1:1d:df:74:3c:51: 4d:50:0e:38:d7:de:13:72:10:10:bd:57:5e:e5:4a: e3:c6:2a:ee:69:bd:66:51:0d:7b:96:5e:b5:44:e9: a5:05:90:a8:a1:e5:94:a7:57:8a:2d:31:c4:a5:a0: 58:fc:23:85:55:06:29:5f:d9:1e:32:06:80:4a:00: 21:51:0e:8c:b2:4c:b3:58:b3:90:18:86:89:1c:bc: 3f:a1:cf:46:c3:86:2e:85:9c:ba:40:a5:5d:7f:0e: 78:b7:04:de:b6:c5:c9:d1:b7:61:f9:7a:3f:16:6d: c2:ee:fa:c6:d9:0b:2f:96:1b:85:61:63:2e:b3:13: 37:a7:1a:49:85:a9:d4:7b:1c:84:71:f0:ef:c2:7f: f6:34:5d:ea:ff:d4:9b:f6:d8:f6:f6:85:fb:a5:73: 87:99:16:32:87:ca:c5:20:83:37:65:60:a1:0a:cf: 89:f7:d3:39:1b:18:22:4d:7b:a8:a9:06:a5:75:a8: 9b:e3:0d:4c:10:6a:0d:51:40:84:3f:fe:ae:6e:24: c3:54:a4:2b:9b:b5:44:36:77:18:96:a6:ad:bb:c5: 13:34:c7:ce:8d:bd:bb:4e:c5:27:fd:7f:09:7e:9b: bf:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:36:29:CB:8B:92:0D:07:33:A8:B6:F4:A0:04:1C:26:5A:AB:AD:8E X509v3 Authority Key Identifier: keyid:E3:36:CD:49:5C:4F:48:0E:C4:FA:92:EB:0B:59:42:D9:8D:E4:B8:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:9d:62:87:8d:32:34:82:c3:5b:dd:ea:78:68:d7:7e:06:54: e1:00:9f:76:c1:a4:9c:e4:65:29:f0:d5:0d:15:b2:12:b8:96: 79:dc:ac:8a:77:f4:4c:2d:73:6f:d5:31:bb:54:df:cf:10:85: 39:26:b6:32:d7:13:3c:6f:c5:c1:40:4b:6c:aa:3e:85:08:da: e7:cd:c9:07:a7:39:a9:ea:5e:f3:29:a9:ea:b3:02:57:d6:8f: 85:47:19:0e:ca:23:81:5a:ab:45:dd:5a:ff:40:4f:b8:fa:51: d2:33:84:7d:4f:b6:8b:78:12:3e:03:2f:3e:f5:84:83:8c:bd: a4:81:44:f0:31:76:0a:1f:03:a1:7c:8f:83:c2:eb:2c:d4:77: 8d:38:3e:10:14:3e:0b:de:a2:94:66:82:57:b5:6e:d9:15:d9: e2:db:fa:95:97:a1:3d:26:e4:c8:8e:5c:26:cb:34:b0:da:99: 64:6b:d4:53:b8:0f:7b:3e:09:33:76:3f:25:b8:95:45:5d:43: c6:78:f9:9f:24:c6:2c:16:79:fd:98:b2:cd:ca:25:cf:1a:64: 03:35:5e:85:09:a5:e6:03:52:1e:d2:78:f2:45:b1:e5:fc:8d: 82:b6:7d:d9:2a:c5:06:bd:3c:24:18:dc:d4:5d:9f:b9:bc:98: aa:bf:6d:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA0Kmt7nCAI5TPPlfEErG+Ftj9HEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTMzNkNENDk1QzRGNDgwRUM0RkE5MkVCMEI1OTQyRDk4 REU0Qjg4QzAeFw0yNjAyMjgxNzQ3MTdaFw0yNjAzMDMxOTQxMTdaMDMxMTAvBgNV BAMTKEE2MzYyOUNCOEI5MjBEMDczM0E4QjZGNEEwMDQxQzI2NUFBQkFEOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSI6nlW9f/yQUWVwdz1htpmarQ /3Uwq6Ed33Q8UU1QDjjX3hNyEBC9V17lSuPGKu5pvWZRDXuWXrVE6aUFkKih5ZSn V4otMcSloFj8I4VVBilf2R4yBoBKACFRDoyyTLNYs5AYhokcvD+hz0bDhi6FnLpA pV1/Dni3BN62xcnRt2H5ej8WbcLu+sbZCy+WG4VhYy6zEzenGkmFqdR7HIRx8O/C f/Y0Xer/1Jv22Pb2hfulc4eZFjKHysUggzdlYKEKz4n30zkbGCJNe6ipBqV1qJvj DUwQag1RQIQ//q5uJMNUpCubtUQ2dxiWpq27xRM0x86NvbtOxSf9fwl+m7+jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpjYpy4uSDQczqLb0oAQcJlqrrY4wHwYDVR0j BBgwFoAU4zbNSVxPSA7E+pLrC1lC2Y3kuIwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZjdiZDk0NC0wMTdhLTQzYTMtOTRmMy1mZjQ3YWYwMzg5ODAvMC9FMzM2Q0Q0OTVD NEY0ODBFQzRGQTkyRUIwQjU5NDJEOThERTRCODhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTMzNkNENDk1QzRGNDgwRUM0RkE5MkVCMEI1OTQyRDk4REU0 Qjg4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2Y3YmQ5NDQtMDE3YS00M2EzLTk0 ZjMtZmY0N2FmMDM4OTgwLzAvRTMzNkNENDk1QzRGNDgwRUM0RkE5MkVCMEI1OTQy RDk4REU0Qjg4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADudYoeNMjSCw1vd6nho134GVOEAn3bBpJzk ZSnw1Q0VshK4lnncrIp39Ewtc2/VMbtU388QhTkmtjLXEzxvxcFAS2yqPoUI2ufN yQenOanqXvMpqeqzAlfWj4VHGQ7KI4Faq0XdWv9AT7j6UdIzhH1Ptot4Ej4DLz71 hIOMvaSBRPAxdgofA6F8j4PC6yzUd404PhAUPgveopRmgle1btkV2eLb+pWXoT0m 5MiOXCbLNLDamWRr1FO4D3s+CTN2PyW4lUVdQ8Z4+Z8kxiwWef2Yss3KJc8aZAM1 XoUJpeYDUh7SePJFseX8jYK2fdkqxQa9PCQY3NRdn7m8mKq/bfM= -----END CERTIFICATE-----Generated at Mon Mar 2 11:22:26 2026 by rpki-client