$ rpki-client -vvf repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.mft File: E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.mft (raw, json) Hash identifier: zHx2JcEHiBmwv7/dgtHDzbFD4q1qsm5lj3g5o648Kvw= Subject key identifier: 53:97:EF:7B:83:21:3A:C0:CA:3C:CB:12:8F:3D:5C:76:B2:CE:2E:50 Authority key identifier: E9:31:43:07:AD:14:30:2D:F4:0D:E1:A8:ED:0B:5D:48:D6:F7:3F:AF Certificate issuer: /CN=E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF Certificate serial: 031158A21C2510F263088694B5AE3479F0162E87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.mft Manifest number: 021A Signing time: Mon 02 Mar 2026 03:10:01 +0000 Manifest this update: Mon 02 Mar 2026 03:05:01 +0000 Manifest next update: Thu 05 Mar 2026 10:27:01 +0000 Files and hashes: 1: 3130332e3138312e3234362e302f32342d3234203d3e20313439333935.roa (hash: GXjT7wgYQoqsV9FwN2D35bHHkEGQ5XElgoRdLgqO+WM=) 2: 3130332e3138312e3234372e302f32342d3234203d3e20313439333935.roa (hash: ykDDbErsTEyYEAWcxIDo6kykbUOZgrgxzipcqNdNSTc=) 3: E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.crl (hash: WGYjqjRy/SHoRvyk22wsHpLFbI5a5FfL0PcunZTkEts=) 4: 323030313a6466303a376263303a3a2f34382d3438203d3e20313439333935.roa (hash: k8Mluks9NLDeIH36Z86fJ5gozvV2Rw7S1TNUUAWYhlE=) 5: 3130332e3138312e3234362e302f32332d3234203d3e20313439333935.roa (hash: f+QBOOF3ku4fnd+hE7xgl+gv5MnJPh+aT9iEef7iDl8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.crl rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:11:58:a2:1c:25:10:f2:63:08:86:94:b5:ae:34:79:f0:16:2e:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF Validity Not Before: Mar 2 03:05:01 2026 GMT Not After : Mar 5 10:27:01 2026 GMT Subject: CN=5397EF7B83213AC0CA3CCB128F3D5C76B2CE2E50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:da:f6:63:2a:9b:1d:17:9f:f1:d5:32:7d:de: f3:4e:a5:30:f0:64:ed:71:9a:14:9f:7e:c7:9d:7d: 95:76:d8:d5:5c:0a:31:38:a3:36:80:3f:7a:d3:19: 30:7a:77:bc:5d:9e:c6:26:74:6f:15:5a:ab:38:d6: af:d6:33:e7:0f:0c:4b:7b:3e:5b:6a:11:74:7b:42: ad:3c:4a:fe:41:e1:40:cf:29:35:37:a8:10:f0:12: f7:6e:6c:7c:da:e5:54:76:20:3d:70:63:2b:90:b6: 91:d7:8f:1c:a8:c2:03:f7:a9:96:42:f1:08:23:c7: 9a:1a:ff:aa:39:fb:3e:ea:57:9d:5e:86:74:80:ec: 9c:2a:bc:14:00:a8:9d:00:60:7e:5b:88:3b:84:ca: 29:6c:11:7a:0e:52:f2:81:a9:cd:8c:6a:c9:91:75: 74:2c:b6:7c:78:60:7a:2a:a1:85:ea:d5:2c:54:9d: 44:e5:f7:c7:bf:ee:dd:49:25:b0:fa:6c:1b:17:f1: e9:ff:2f:b6:7e:fd:81:ba:2c:a0:15:56:82:64:dc: 38:09:6a:42:26:f6:7e:5e:b5:71:9b:61:ef:07:b0: 14:07:c4:4c:ee:36:fd:fd:e3:09:fb:c8:3b:62:33: ed:44:ac:88:a8:2b:c5:e3:96:5c:a1:11:b6:b9:1e: 4e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:97:EF:7B:83:21:3A:C0:CA:3C:CB:12:8F:3D:5C:76:B2:CE:2E:50 X509v3 Authority Key Identifier: keyid:E9:31:43:07:AD:14:30:2D:F4:0D:E1:A8:ED:0B:5D:48:D6:F7:3F:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:68:92:b9:ab:04:f9:e1:b6:ad:b8:f2:d7:fa:19:4d:36:78: 3a:33:65:9c:1d:80:a8:72:7f:ce:b8:8f:27:d0:8e:3e:6e:46: 8a:aa:d4:2f:d9:fe:b0:80:e6:2b:ed:a9:ed:18:62:71:14:fd: 6f:b7:7a:44:8c:da:8e:a4:e4:5d:b6:cd:58:0a:86:fd:54:d5: 43:13:98:39:ec:86:e1:eb:a0:96:df:99:b4:e5:67:05:47:73: 4d:7b:cd:fa:53:5f:b5:26:6d:06:9f:b0:46:02:89:58:1f:16: 5e:f0:49:b5:07:ea:25:38:4c:44:85:82:32:4e:f5:fb:c9:0c: b3:6c:3b:57:2c:a8:50:e8:ef:3f:81:70:43:33:42:6b:ac:96: b6:d8:a9:ff:ce:20:0c:c5:cf:5f:84:3f:d4:56:6f:41:01:50: 8f:b4:98:06:69:26:1e:ce:2d:6a:e0:58:b5:8d:99:02:bd:16: 98:10:4c:22:9a:c6:3d:ac:16:cd:86:8b:71:e8:a9:d4:14:9b: ff:29:33:9a:a1:32:ec:be:dd:12:8e:02:8a:08:07:2c:29:d0: 29:88:68:fb:a8:4f:84:64:1f:48:60:eb:f4:ac:ca:43:2c:6d: cf:cb:fe:0e:f1:db:2c:62:1f:08:62:1b:b1:78:54:e5:98:57: 9a:62:3d:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAxFYohwlEPJjCIaUta40efAWLocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTkzMTQzMDdBRDE0MzAyREY0MERFMUE4RUQwQjVENDhE NkY3M0ZBRjAeFw0yNjAzMDIwMzA1MDFaFw0yNjAzMDUxMDI3MDFaMDMxMTAvBgNV BAMTKDUzOTdFRjdCODMyMTNBQzBDQTNDQ0IxMjhGM0Q1Qzc2QjJDRTJFNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC22vZjKpsdF5/x1TJ93vNOpTDw ZO1xmhSffsedfZV22NVcCjE4ozaAP3rTGTB6d7xdnsYmdG8VWqs41q/WM+cPDEt7 PltqEXR7Qq08Sv5B4UDPKTU3qBDwEvdubHza5VR2ID1wYyuQtpHXjxyowgP3qZZC 8Qgjx5oa/6o5+z7qV51ehnSA7JwqvBQAqJ0AYH5biDuEyilsEXoOUvKBqc2MasmR dXQstnx4YHoqoYXq1SxUnUTl98e/7t1JJbD6bBsX8en/L7Z+/YG6LKAVVoJk3DgJ akIm9n5etXGbYe8HsBQHxEzuNv394wn7yDtiM+1ErIioK8XjllyhEba5Hk6tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU5fve4MhOsDKPMsSjz1cdrLOLlAwHwYDVR0j BBgwFoAU6TFDB60UMC30DeGo7QtdSNb3P68wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDFlMDhlZi0zYWU2LTRiOTAtYjQ3Ny0wZTkxNDBkMDQzODAvMC9FOTMxNDMwN0FE MTQzMDJERjQwREUxQThFRDBCNUQ0OEQ2RjczRkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTkzMTQzMDdBRDE0MzAyREY0MERFMUE4RUQwQjVENDhENkY3 M0ZBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQxZTA4ZWYtM2FlNi00YjkwLWI0 NzctMGU5MTQwZDA0MzgwLzAvRTkzMTQzMDdBRDE0MzAyREY0MERFMUE4RUQwQjVE NDhENkY3M0ZBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFBokrmrBPnhtq248tf6GU02eDozZZwdgKhy f864jyfQjj5uRoqq1C/Z/rCA5ivtqe0YYnEU/W+3ekSM2o6k5F22zVgKhv1U1UMT mDnshuHroJbfmbTlZwVHc017zfpTX7UmbQafsEYCiVgfFl7wSbUH6iU4TESFgjJO 9fvJDLNsO1csqFDo7z+BcEMzQmuslrbYqf/OIAzFz1+EP9RWb0EBUI+0mAZpJh7O LWrgWLWNmQK9FpgQTCKaxj2sFs2Gi3HoqdQUm/8pM5qhMuy+3RKOAooIBywp0CmI aPuoT4RkH0hg6/SsykMsbc/L/g7x2yxiHwhiG7F4VOWYV5piPT4= -----END CERTIFICATE-----Generated at Mon Mar 2 14:12:46 2026 by rpki-client