$ rpki-client -vvf repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft File: 0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft (raw, json) Hash identifier: 6BME/e5RZNDDR9/VTl4gLDU86Za76+sks7N9DvdtrDc= Subject key identifier: 59:0A:A6:1F:EE:85:E9:EB:ED:D5:36:EF:24:5C:79:8F:BC:B5:A1:53 Authority key identifier: 0E:2E:7A:9C:F1:1C:69:2E:C8:E5:6F:03:52:7B:DF:92:FA:00:1A:4E Certificate issuer: /CN=0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E Certificate serial: 0604E5BA3400C4332D0B9BCB4716A075BFFFE3C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft Manifest number: 01ED Signing time: Sat 28 Feb 2026 15:21:08 +0000 Manifest this update: Sat 28 Feb 2026 15:16:08 +0000 Manifest next update: Tue 03 Mar 2026 16:32:08 +0000 Files and hashes: 1: 3130332e342e38302e302f32332d3233203d3e20313530323034.roa (hash: sAxyAacrSqW6mHWffMKLhhk3JgkihWYb7S14LaFMATc=) 2: 3130332e342e38302e302f32342d3234203d3e20313530323034.roa (hash: KnPDrY7Tqy+sU3wNCKUDVoZ9WQhkJdY8RVjgQku10bc=) 3: 3130332e342e38312e302f32342d3234203d3e20313530323034.roa (hash: lkSfYrODyHMpEekQgH4/krwxQF80Ua2eqSFXhHKZbPA=) 4: 0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.crl (hash: Am8e4VOWOrJG9flIMpD9ExXOmHKI63grDytAsvlNV04=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.crl rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 16:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:04:e5:ba:34:00:c4:33:2d:0b:9b:cb:47:16:a0:75:bf:ff:e3:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E Validity Not Before: Feb 28 15:16:08 2026 GMT Not After : Mar 3 16:32:08 2026 GMT Subject: CN=590AA61FEE85E9EBEDD536EF245C798FBCB5A153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a0:32:72:7b:0b:6a:62:54:3b:7e:89:28:3d: a1:4a:ba:2d:aa:dc:4b:d3:23:61:a9:59:88:9d:ee: f8:6d:73:45:e0:48:04:6c:86:3a:19:3e:3a:b6:1e: 02:83:eb:90:dd:6b:bf:60:75:db:7d:e0:21:81:d5: 87:c4:84:87:87:cc:5f:2e:a0:2f:5c:42:5e:eb:60: 76:48:47:a6:e0:6d:4f:bd:3d:12:97:57:a2:c0:30: f1:ae:39:e1:bc:3d:73:d7:f4:fc:00:4c:bc:26:05: 91:6d:5a:ea:82:64:15:e2:87:d2:d7:26:ac:90:ad: 6e:9e:44:12:89:c6:d0:b8:14:3c:e1:18:26:84:d7: 68:04:a9:dc:2a:db:e9:3d:ea:fa:f8:a8:c9:9b:1a: 28:ea:e6:89:fd:25:9e:3d:ea:f1:2d:36:0f:44:26: 2a:06:df:d0:1b:c9:1f:1c:55:10:9b:b5:1a:af:aa: b7:56:c8:03:b3:ed:e2:10:d0:0d:cf:08:06:25:2e: 99:dd:3b:1f:ba:b9:76:1c:4b:d2:50:70:d8:2a:ea: 5c:86:f6:f6:d7:a1:c7:7a:da:fb:32:49:67:5f:8a: 0e:24:dc:3a:8c:2d:46:c3:01:b1:59:75:7a:4a:38: 73:13:5b:cd:4c:59:54:e2:a1:58:a7:0b:3a:7d:13: 14:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:0A:A6:1F:EE:85:E9:EB:ED:D5:36:EF:24:5C:79:8F:BC:B5:A1:53 X509v3 Authority Key Identifier: keyid:0E:2E:7A:9C:F1:1C:69:2E:C8:E5:6F:03:52:7B:DF:92:FA:00:1A:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:02:7c:dd:7d:4f:08:76:d0:51:cb:99:a9:18:1a:58:6b:9e: 3b:91:68:79:2b:d8:7d:27:b1:18:eb:2c:7d:f5:b3:58:0f:a2: 4e:d6:05:a4:3c:f0:f9:04:d3:ab:a1:e1:82:e4:4d:8f:08:f8: 57:24:73:7e:f1:e8:bb:b6:c6:99:56:50:03:94:8b:9c:dc:b6: 95:c9:ae:5b:2d:e4:e0:9f:ba:3d:a3:75:a7:9a:54:b9:99:32: 91:58:15:c5:e9:ff:89:da:d5:37:67:16:42:af:40:81:a6:a6: 09:9a:3f:6a:b0:ed:1a:0c:13:37:47:f3:0c:1f:35:e5:a1:01: 2c:9b:77:0a:9b:f1:8e:7d:ff:4f:24:c6:00:4a:24:be:e0:ca: 8b:94:03:ad:8d:67:ac:a9:8c:bd:76:5b:e7:e5:ad:0a:be:ab: 32:5c:49:dd:25:8e:9b:34:8a:c6:1e:3a:3d:37:f4:21:a3:23: f0:a6:03:13:be:8d:64:99:ac:71:90:a8:ab:7e:e6:a4:28:b7: 3d:c8:b4:3d:57:88:e5:16:f9:5d:e2:1a:87:ec:85:1c:66:e3: 0e:b9:b8:cd:d8:33:07:00:8e:2e:70:73:fa:32:04:1d:81:5e: 3d:a5:bd:2d:69:ca:f7:8b:b4:ec:0c:4f:77:9e:02:2b:f2:23: 95:ad:54:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBgTlujQAxDMtC5vLRxagdb//48YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUyRTdBOUNGMTFDNjkyRUM4RTU2RjAzNTI3QkRGOTJG QTAwMUE0RTAeFw0yNjAyMjgxNTE2MDhaFw0yNjAzMDMxNjMyMDhaMDMxMTAvBgNV BAMTKDU5MEFBNjFGRUU4NUU5RUJFREQ1MzZFRjI0NUM3OThGQkNCNUExNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNoDJyewtqYlQ7fokoPaFKui2q 3EvTI2GpWYid7vhtc0XgSARshjoZPjq2HgKD65Dda79gddt94CGB1YfEhIeHzF8u oC9cQl7rYHZIR6bgbU+9PRKXV6LAMPGuOeG8PXPX9PwATLwmBZFtWuqCZBXih9LX JqyQrW6eRBKJxtC4FDzhGCaE12gEqdwq2+k96vr4qMmbGijq5on9JZ496vEtNg9E JioG39AbyR8cVRCbtRqvqrdWyAOz7eIQ0A3PCAYlLpndOx+6uXYcS9JQcNgq6lyG 9vbXocd62vsySWdfig4k3DqMLUbDAbFZdXpKOHMTW81MWVTioVinCzp9ExS7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWQqmH+6F6evt1TbvJFx5j7y1oVMwHwYDVR0j BBgwFoAUDi56nPEcaS7I5W8DUnvfkvoAGk4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDE5NTg5YS1kNTI1LTQwZmMtODk0YS0xMmU0NDAxMGUzZTQvMC8wRTJFN0E5Q0Yx MUM2OTJFQzhFNTZGMDM1MjdCREY5MkZBMDAxQTRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEUyRTdBOUNGMTFDNjkyRUM4RTU2RjAzNTI3QkRGOTJGQTAw MUE0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTAxOTU4OWEtZDUyNS00MGZjLTg5 NGEtMTJlNDQwMTBlM2U0LzAvMEUyRTdBOUNGMTFDNjkyRUM4RTU2RjAzNTI3QkRG OTJGQTAwMUE0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEsCfN19Twh20FHLmakYGlhrnjuRaHkr2H0n sRjrLH31s1gPok7WBaQ88PkE06uh4YLkTY8I+Fckc37x6Lu2xplWUAOUi5zctpXJ rlst5OCfuj2jdaeaVLmZMpFYFcXp/4na1TdnFkKvQIGmpgmaP2qw7RoMEzdH8wwf NeWhASybdwqb8Y59/08kxgBKJL7gyouUA62NZ6ypjL12W+flrQq+qzJcSd0ljps0 isYeOj039CGjI/CmAxO+jWSZrHGQqKt+5qQotz3ItD1XiOUW+V3iGofshRxm4w65 uM3YMwcAji5wc/oyBB2BXj2lvS1pyveLtOwMT3eeAivyI5WtVGg= -----END CERTIFICATE-----Generated at Mon Mar 2 13:23:37 2026 by rpki-client