$ rpki-client -vvf repo-rpki.idnic.net/repo/544cfaac-5d11-4142-b1f3-88fcc41b338a/0/E306D62165BEB9609E6DD25466BDD9071B1F23CF.mft File: E306D62165BEB9609E6DD25466BDD9071B1F23CF.mft (raw, json) Hash identifier: +XDVCQQKUg/WtRrX4BgXo+XF4PwduUzJCDFnPABL+rE= Subject key identifier: AE:06:04:09:FF:7F:93:9C:CE:F8:62:C5:43:70:61:32:9A:41:60:A5 Authority key identifier: E3:06:D6:21:65:BE:B9:60:9E:6D:D2:54:66:BD:D9:07:1B:1F:23:CF Certificate issuer: /CN=E306D62165BEB9609E6DD25466BDD9071B1F23CF Certificate serial: 125D49776E8812A19941A305A9A039ECF2F60C46 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E306D62165BEB9609E6DD25466BDD9071B1F23CF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/544cfaac-5d11-4142-b1f3-88fcc41b338a/0/E306D62165BEB9609E6DD25466BDD9071B1F23CF.mft Manifest number: 020E Signing time: Sun 01 Mar 2026 11:32:35 +0000 Manifest this update: Sun 01 Mar 2026 11:27:35 +0000 Manifest next update: Wed 04 Mar 2026 22:40:35 +0000 Files and hashes: 1: 3130332e3231312e38322e302f32342d3234203d3e20313334363630.roa (hash: Nh+HiVLmMcDNhbKCLKBivfmLyDAXlG86o04scwdSgPc=) 2: E306D62165BEB9609E6DD25466BDD9071B1F23CF.crl (hash: 9OLrFbR0ERuvfxeJ/T4rZOswYII5OgN9rOpQARnCPjQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/544cfaac-5d11-4142-b1f3-88fcc41b338a/0/E306D62165BEB9609E6DD25466BDD9071B1F23CF.crl rsync://repo-rpki.idnic.net/repo/544cfaac-5d11-4142-b1f3-88fcc41b338a/0/E306D62165BEB9609E6DD25466BDD9071B1F23CF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E306D62165BEB9609E6DD25466BDD9071B1F23CF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 22:40:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:5d:49:77:6e:88:12:a1:99:41:a3:05:a9:a0:39:ec:f2:f6:0c:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E306D62165BEB9609E6DD25466BDD9071B1F23CF Validity Not Before: Mar 1 11:27:35 2026 GMT Not After : Mar 4 22:40:35 2026 GMT Subject: CN=AE060409FF7F939CCEF862C5437061329A4160A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:04:b0:eb:ed:69:7a:16:ad:1c:34:2e:d6:5a: e9:b2:1c:20:25:f6:e5:1a:6e:b5:8b:a4:3c:6b:5c: 9d:f3:38:23:0d:81:c2:b8:98:59:1d:2a:9a:c3:1c: f0:42:00:c3:c9:5f:b3:bd:29:7b:35:56:c8:eb:2e: b3:e9:f3:a1:37:b4:c9:05:dc:61:7e:87:bf:cb:00: 81:c0:e6:19:a1:b0:1e:d7:1a:63:b0:06:ac:4e:21: db:99:76:39:f2:35:85:3d:75:53:fe:ba:10:e1:9f: c8:ba:06:d4:5c:44:29:20:db:7b:48:ae:ce:c8:d5: c8:65:e0:c6:53:fa:68:fa:3a:18:c6:65:69:7a:06: 1e:76:cb:8c:4f:36:a4:aa:af:38:8f:4d:0f:17:29: e2:fd:f3:34:bf:0e:cf:2c:02:28:b5:dd:54:47:38: 04:37:0a:08:07:23:3e:d1:d8:64:6d:80:02:d3:df: 5a:f4:0c:7f:17:97:b6:6a:b9:3c:f9:ba:ac:33:da: 4c:e5:bb:96:56:5c:d6:a1:0a:e0:2e:a0:86:ed:fb: b9:ef:dd:c1:4b:34:e9:66:74:f4:e7:f7:72:bd:18: 89:35:d7:31:b5:5d:7e:f6:c0:ed:a9:64:ac:ea:aa: 40:21:b6:27:aa:57:e5:2b:91:d3:c1:99:80:3b:c9: 7a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:06:04:09:FF:7F:93:9C:CE:F8:62:C5:43:70:61:32:9A:41:60:A5 X509v3 Authority Key Identifier: keyid:E3:06:D6:21:65:BE:B9:60:9E:6D:D2:54:66:BD:D9:07:1B:1F:23:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/544cfaac-5d11-4142-b1f3-88fcc41b338a/0/E306D62165BEB9609E6DD25466BDD9071B1F23CF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E306D62165BEB9609E6DD25466BDD9071B1F23CF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/544cfaac-5d11-4142-b1f3-88fcc41b338a/0/E306D62165BEB9609E6DD25466BDD9071B1F23CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:a4:18:17:93:eb:d4:b8:33:7b:5a:3b:23:04:a5:2b:4b:13: 36:b5:c2:4b:1a:19:c5:62:b2:a0:f1:b0:51:1b:a7:37:59:69: fd:32:17:4b:83:97:59:c0:42:96:f3:61:a3:e1:27:c6:4a:21: 77:1b:51:db:35:b3:c0:ae:5f:4e:77:36:6a:25:05:e8:37:b9: 62:52:f0:37:35:61:ef:e2:81:5c:f7:e5:12:26:d0:83:a4:eb: 50:f4:a1:37:f1:fa:20:44:ff:b6:8e:90:ee:48:78:05:a9:11: 98:b4:07:4a:10:f9:b6:17:69:4c:df:c0:ac:95:ef:76:62:d8: 3d:f3:56:13:c8:94:f6:75:18:07:3b:4e:6b:a9:8d:99:e5:7c: 08:e3:26:e5:94:0a:d2:9e:8b:b4:34:69:d4:20:8b:66:20:1d: 7c:6a:d1:63:a9:50:b5:9b:44:2e:79:97:d9:67:53:ff:f8:b6: 4f:ed:1d:0d:7e:fa:39:86:8a:2a:22:20:b7:7c:24:50:65:25: ee:cd:21:9e:2c:ae:7b:a2:d2:82:9d:19:80:37:ab:80:97:09: 27:a9:ce:94:a2:65:95:08:61:8a:29:ec:aa:53:18:48:62:c6: a2:b9:28:12:03:d8:dd:97:b2:c8:e3:ce:9d:27:2b:6c:11:58: 44:dd:ed:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEl1Jd26IEqGZQaMFqaA57PL2DEYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTMwNkQ2MjE2NUJFQjk2MDlFNkREMjU0NjZCREQ5MDcx QjFGMjNDRjAeFw0yNjAzMDExMTI3MzVaFw0yNjAzMDQyMjQwMzVaMDMxMTAvBgNV BAMTKEFFMDYwNDA5RkY3RjkzOUNDRUY4NjJDNTQzNzA2MTMyOUE0MTYwQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcBLDr7Wl6Fq0cNC7WWumyHCAl 9uUabrWLpDxrXJ3zOCMNgcK4mFkdKprDHPBCAMPJX7O9KXs1VsjrLrPp86E3tMkF 3GF+h7/LAIHA5hmhsB7XGmOwBqxOIduZdjnyNYU9dVP+uhDhn8i6BtRcRCkg23tI rs7I1chl4MZT+mj6OhjGZWl6Bh52y4xPNqSqrziPTQ8XKeL98zS/Ds8sAii13VRH OAQ3CggHIz7R2GRtgALT31r0DH8Xl7ZquTz5uqwz2kzlu5ZWXNahCuAuoIbt+7nv 3cFLNOlmdPTn93K9GIk11zG1XX72wO2pZKzqqkAhtieqV+UrkdPBmYA7yXqfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrgYECf9/k5zO+GLFQ3BhMppBYKUwHwYDVR0j BBgwFoAU4wbWIWW+uWCebdJUZr3ZBxsfI88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NDRjZmFhYy01ZDExLTQxNDItYjFmMy04OGZjYzQxYjMzOGEvMC9FMzA2RDYyMTY1 QkVCOTYwOUU2REQyNTQ2NkJERDkwNzFCMUYyM0NGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTMwNkQ2MjE2NUJFQjk2MDlFNkREMjU0NjZCREQ5MDcxQjFG MjNDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTQ0Y2ZhYWMtNWQxMS00MTQyLWIx ZjMtODhmY2M0MWIzMzhhLzAvRTMwNkQ2MjE2NUJFQjk2MDlFNkREMjU0NjZCREQ5 MDcxQjFGMjNDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACSkGBeT69S4M3taOyMEpStLEza1wksaGcVi sqDxsFEbpzdZaf0yF0uDl1nAQpbzYaPhJ8ZKIXcbUds1s8CuX053NmolBeg3uWJS 8Dc1Ye/igVz35RIm0IOk61D0oTfx+iBE/7aOkO5IeAWpEZi0B0oQ+bYXaUzfwKyV 73Zi2D3zVhPIlPZ1GAc7TmupjZnlfAjjJuWUCtKei7Q0adQgi2YgHXxq0WOpULWb RC55l9lnU//4tk/tHQ1++jmGiioiILd8JFBlJe7NIZ4srnui0oKdGYA3q4CXCSep zpSiZZUIYYop7KpTGEhixqK5KBID2N2Xssjjzp0nK2wRWETd7cY= -----END CERTIFICATE-----Generated at Mon Mar 2 14:16:12 2026 by rpki-client