$ rpki-client -vvf repo-rpki.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.mft File: E1A24B098E9AC07C658F6AFEE0990751CDB692A4.mft (raw, json) Hash identifier: l4Fxg04VlTywJmCrYs1sx/LLaio483hOnEIWgenwr9Y= Subject key identifier: 86:BA:99:D9:C8:B7:8C:94:F8:36:6E:38:75:58:DF:5A:B7:F2:54:3D Authority key identifier: E1:A2:4B:09:8E:9A:C0:7C:65:8F:6A:FE:E0:99:07:51:CD:B6:92:A4 Certificate issuer: /CN=E1A24B098E9AC07C658F6AFEE0990751CDB692A4 Certificate serial: 12ACDDE62122658ABAFB6B6FB261C2062ADB208D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.mft Manifest number: 0321 Signing time: Fri 17 Apr 2026 10:01:41 +0000 Manifest this update: Fri 17 Apr 2026 09:56:41 +0000 Manifest next update: Mon 20 Apr 2026 15:04:41 +0000 Files and hashes: 1: 3130332e3230332e37372e302f32342d3234203d3e20313334363230.roa (hash: Kwtm71D/Z6NhSfdr0MOgpN01lazOwL/r2/rIVuBoO7I=) 2: E1A24B098E9AC07C658F6AFEE0990751CDB692A4.crl (hash: K9gYon3PWbD/ClnSXJBiNVf7knZYbd5ozu8gy1hlT7s=) 3: 3130332e3230332e37362e302f32342d3234203d3e20313334363230.roa (hash: Brdn2dLUZTxd6fnM4xWw5E67aagF7MF4tCt2gy0nMwM=) 4: 3130332e3230332e37362e302f32322d3232203d3e20313334363230.roa (hash: rkQIsU4mH+wmPkEwMYQGKlUQJZpq5skC0u2AtTeyAJY=) 5: 3130332e3230332e37382e302f32342d3234203d3e20313334363230.roa (hash: s+fqkugTUtrfTnYLMhS2gRWf2sStTpZQt4ymRPeizms=) 6: 3130332e3230332e37392e302f32342d3234203d3e20313334363230.roa (hash: XFCtvmMAAUBkMVCFTzI1cVSJed8FZNsw+FTnuaIBLa8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.crl rsync://repo-rpki.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 15:04:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:ac:dd:e6:21:22:65:8a:ba:fb:6b:6f:b2:61:c2:06:2a:db:20:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A24B098E9AC07C658F6AFEE0990751CDB692A4 Validity Not Before: Apr 17 09:56:41 2026 GMT Not After : Apr 20 15:04:41 2026 GMT Subject: CN=86BA99D9C8B78C94F8366E387558DF5AB7F2543D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a3:d7:9b:26:52:44:0e:c3:f0:71:34:4b:38: 09:87:4e:5c:3d:18:db:59:14:88:b9:6a:6b:0c:1c: b6:dc:03:4d:f9:9d:59:b1:c3:51:4a:0b:67:80:d9: 6f:6c:82:55:32:4d:66:29:74:78:81:a1:1d:5a:55: 13:ad:be:ed:b3:25:84:c7:d9:ef:16:a3:68:e4:40: c9:f4:ed:ee:99:1e:26:8f:db:5d:dd:73:d4:a7:ae: 20:60:99:47:b9:07:80:8e:c0:42:70:b1:37:12:3d: 5c:47:8d:78:21:70:40:3b:0b:0a:23:60:f4:9e:00: e1:79:c3:ad:67:b6:6a:18:ff:fb:92:1d:ec:a7:93: 15:01:76:97:7a:ee:2b:7d:9d:9d:23:01:a4:9a:2f: 9c:c3:eb:8e:8a:43:cf:91:69:db:5e:8a:6d:4e:4a: 3b:92:81:46:db:14:5b:97:a9:4f:df:16:0f:44:db: 60:04:19:ef:48:aa:46:fb:f9:5c:0a:c2:d0:a4:9b: c6:f5:15:5d:40:37:80:80:95:b8:de:b2:6e:8f:40: b5:52:6c:a3:6d:37:84:7b:f7:3e:b0:4d:c4:64:7d: d3:44:6c:85:70:88:9f:94:34:20:5d:80:6e:ba:21: 9f:b6:68:ad:35:b9:07:c8:c6:04:c3:4e:80:3f:5c: 56:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:BA:99:D9:C8:B7:8C:94:F8:36:6E:38:75:58:DF:5A:B7:F2:54:3D X509v3 Authority Key Identifier: keyid:E1:A2:4B:09:8E:9A:C0:7C:65:8F:6A:FE:E0:99:07:51:CD:B6:92:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:3e:18:7c:be:df:fe:49:db:3d:51:df:a2:6b:55:11:1c:a6: 54:45:86:ab:0e:88:59:32:f7:9e:c8:fd:5b:ce:7e:95:55:60: 83:b0:7f:af:82:5f:3a:01:be:e4:4d:bb:a6:64:05:0a:1f:eb: 20:6e:59:26:d7:fa:8c:f2:46:e1:15:4b:6f:54:37:a6:81:a1: cc:46:b8:e4:e7:18:54:84:23:df:f8:40:40:63:d0:6b:2f:22: ef:bb:42:1c:0a:66:90:63:bb:09:30:34:33:8c:8a:af:28:6d: ff:1c:fe:4b:17:fc:1b:07:22:4a:72:c1:99:5a:63:08:63:9b: e2:d8:3a:c8:12:c2:15:71:0c:35:cd:f1:16:78:b1:34:e8:fa: f7:a1:8c:9e:68:09:47:b7:db:e4:30:df:64:66:09:ba:63:63: d4:40:5a:f7:62:d3:b9:5d:48:4d:44:d7:76:f5:5f:15:7f:b8: 9c:93:77:d4:57:4b:a7:b8:5f:11:2f:0a:30:59:d0:c6:ed:a5: 22:87:f3:29:dd:aa:80:4a:2e:a3:88:d7:0b:a3:7e:04:e6:b9: d9:a4:81:d3:5b:6b:75:f9:3e:0d:d0:9d:4a:66:4b:7c:45:c7: da:c2:ea:ee:38:58:e1:c0:cd:c7:d1:6e:3a:58:3e:de:f9:69: 8a:b2:a5:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEqzd5iEiZYq6+2tvsmHCBirbII0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFBMjRCMDk4RTlBQzA3QzY1OEY2QUZFRTA5OTA3NTFD REI2OTJBNDAeFw0yNjA0MTcwOTU2NDFaFw0yNjA0MjAxNTA0NDFaMDMxMTAvBgNV BAMTKDg2QkE5OUQ5QzhCNzhDOTRGODM2NkUzODc1NThERjVBQjdGMjU0M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJo9ebJlJEDsPwcTRLOAmHTlw9 GNtZFIi5amsMHLbcA035nVmxw1FKC2eA2W9sglUyTWYpdHiBoR1aVROtvu2zJYTH 2e8Wo2jkQMn07e6ZHiaP213dc9SnriBgmUe5B4COwEJwsTcSPVxHjXghcEA7Cwoj YPSeAOF5w61ntmoY//uSHeynkxUBdpd67it9nZ0jAaSaL5zD646KQ8+Radteim1O SjuSgUbbFFuXqU/fFg9E22AEGe9Iqkb7+VwKwtCkm8b1FV1AN4CAlbjesm6PQLVS bKNtN4R79z6wTcRkfdNEbIVwiJ+UNCBdgG66IZ+2aK01uQfIxgTDToA/XFafAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhrqZ2ci3jJT4Nm44dVjfWrfyVD0wHwYDVR0j BBgwFoAU4aJLCY6awHxlj2r+4JkHUc22kqQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZGFhNGMwZi05OTkyLTQyZmMtYTU0Mi1lZmY3NDA5MWIzMzQvMC9FMUEyNEIwOThF OUFDMDdDNjU4RjZBRkVFMDk5MDc1MUNEQjY5MkE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTFBMjRCMDk4RTlBQzA3QzY1OEY2QUZFRTA5OTA3NTFDREI2 OTJBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGRhYTRjMGYtOTk5Mi00MmZjLWE1 NDItZWZmNzQwOTFiMzM0LzAvRTFBMjRCMDk4RTlBQzA3QzY1OEY2QUZFRTA5OTA3 NTFDREI2OTJBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHI+GHy+3/5J2z1R36JrVREcplRFhqsOiFky 957I/VvOfpVVYIOwf6+CXzoBvuRNu6ZkBQof6yBuWSbX+ozyRuEVS29UN6aBocxG uOTnGFSEI9/4QEBj0GsvIu+7QhwKZpBjuwkwNDOMiq8obf8c/ksX/BsHIkpywZla Ywhjm+LYOsgSwhVxDDXN8RZ4sTTo+vehjJ5oCUe32+Qw32RmCbpjY9RAWvdi07ld SE1E13b1XxV/uJyTd9RXS6e4XxEvCjBZ0MbtpSKH8yndqoBKLqOI1wujfgTmudmk gdNba3X5Pg3QnUpmS3xFx9rC6u44WOHAzcfRbjpYPt75aYqypTk= -----END CERTIFICATE-----Generated at Sun Apr 19 10:22:16 2026 by rpki-client