$ rpki-client -vvf repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft File: 0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft (raw, json) Hash identifier: k5LY4jBVmoVD4TZRD1zecnPVjbqrGlHWFi75HjizaaM= Subject key identifier: 93:5A:5B:92:FD:05:6C:2A:15:60:BC:8D:95:4B:E2:76:A0:40:79:2E Authority key identifier: 0E:2E:7A:9C:F1:1C:69:2E:C8:E5:6F:03:52:7B:DF:92:FA:00:1A:4E Certificate issuer: /CN=0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E Certificate serial: 6E372E96243B52402E63EF0AA0475DBADB5D75D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft Manifest number: 0202 Signing time: Fri 17 Apr 2026 14:21:09 +0000 Manifest this update: Fri 17 Apr 2026 14:16:09 +0000 Manifest next update: Mon 20 Apr 2026 15:56:09 +0000 Files and hashes: 1: 3130332e342e38312e302f32342d3234203d3e20313530323034.roa (hash: lkSfYrODyHMpEekQgH4/krwxQF80Ua2eqSFXhHKZbPA=) 2: 3130332e342e38302e302f32342d3234203d3e20313530323034.roa (hash: KnPDrY7Tqy+sU3wNCKUDVoZ9WQhkJdY8RVjgQku10bc=) 3: 0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.crl (hash: 62oxCe8E4rzBxIKHpV5lkQbzu2Xuu+mNiGkZtnXdYCY=) 4: 3130332e342e38302e302f32332d3233203d3e20313530323034.roa (hash: sAxyAacrSqW6mHWffMKLhhk3JgkihWYb7S14LaFMATc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.crl rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 15:56:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:37:2e:96:24:3b:52:40:2e:63:ef:0a:a0:47:5d:ba:db:5d:75:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E Validity Not Before: Apr 17 14:16:09 2026 GMT Not After : Apr 20 15:56:09 2026 GMT Subject: CN=935A5B92FD056C2A1560BC8D954BE276A040792E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0b:77:86:8b:cb:f0:36:4a:e2:84:6f:5c:28: fb:f3:43:31:0d:d6:39:1e:2f:07:36:df:07:eb:43: 0d:71:2d:33:b8:1a:50:65:df:f9:23:14:7e:8d:ca: 44:ed:0c:68:62:e6:a3:7c:a5:e3:f5:aa:74:b7:57: 05:db:2c:1d:b1:39:ee:ac:a5:cb:24:ff:75:67:08: b7:b7:f2:3a:bf:20:44:a4:c2:c3:59:53:a0:e2:07: 51:76:b3:c6:09:85:51:48:84:87:b7:31:62:f4:f3: 45:8e:70:4f:79:6b:3d:19:7b:bd:d5:11:d6:19:8d: c3:11:17:d0:84:f9:db:dc:4a:96:b9:6c:24:89:95: 93:2c:e4:51:ec:97:32:1b:5d:45:55:d7:98:55:88: 34:a7:f8:25:ff:30:c8:ab:3a:26:f2:98:ae:b9:df: a0:68:bf:9b:12:78:2c:91:b1:65:19:eb:c0:26:e8: 98:b6:7e:96:53:6c:d0:bb:b7:0d:ee:d0:09:a7:de: 3b:54:9d:16:a1:c1:12:b6:26:93:1b:9c:92:28:bc: d9:7a:b6:f7:e0:c8:7e:56:1a:1c:a5:9d:c2:30:eb: ad:96:21:28:72:e8:ae:8d:86:80:d1:2a:2f:89:6c: a5:17:6c:66:5f:5e:67:7c:95:fb:35:e7:20:bc:a9: 72:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:5A:5B:92:FD:05:6C:2A:15:60:BC:8D:95:4B:E2:76:A0:40:79:2E X509v3 Authority Key Identifier: keyid:0E:2E:7A:9C:F1:1C:69:2E:C8:E5:6F:03:52:7B:DF:92:FA:00:1A:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:1f:2f:c2:c8:ca:a9:2b:a2:0d:f9:d1:3f:0e:99:71:b7:06: ab:61:c7:1a:08:7e:4e:dc:ed:3f:11:70:d3:95:0f:f7:36:78: 0a:6b:31:ce:56:60:a2:9e:9b:c7:13:b9:a0:df:0f:6d:88:62: 3f:1c:1b:5e:f9:38:ff:fb:77:fc:5e:a3:d5:e3:0c:a2:6e:75: a1:f9:c5:dd:48:a1:61:09:5c:4e:57:4b:5b:9d:fb:80:be:d8: 3a:44:c7:94:74:27:c9:6c:3f:6a:82:a6:4e:41:ba:4e:84:11: 57:eb:1f:ff:a3:35:bb:1b:4b:a9:db:59:ef:4b:d5:f2:17:09: 8d:56:e6:d0:d8:9b:d0:0d:9e:41:f3:05:cc:88:23:71:3d:96: 84:58:38:9c:24:97:55:9e:df:76:a1:4c:0f:84:a8:57:a6:2c: 7f:82:fa:df:c6:78:89:ce:db:2d:c2:ff:9b:7a:0e:c3:6f:bd: 57:7a:d3:6b:af:4a:6a:dc:df:ac:da:64:58:11:e3:06:19:b3: f4:0a:89:e0:80:a4:97:7b:56:52:fc:7f:42:a4:8e:49:5c:fd: 9d:ee:f4:a0:64:cb:14:10:ea:65:cc:f1:79:7e:27:cb:e1:b9: 5f:f3:93:6c:41:c1:8d:c2:3e:1b:be:43:42:33:e3:33:ac:66: 7e:1e:4f:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbjculiQ7UkAuY+8KoEdduttdddkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUyRTdBOUNGMTFDNjkyRUM4RTU2RjAzNTI3QkRGOTJG QTAwMUE0RTAeFw0yNjA0MTcxNDE2MDlaFw0yNjA0MjAxNTU2MDlaMDMxMTAvBgNV BAMTKDkzNUE1QjkyRkQwNTZDMkExNTYwQkM4RDk1NEJFMjc2QTA0MDc5MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/C3eGi8vwNkrihG9cKPvzQzEN 1jkeLwc23wfrQw1xLTO4GlBl3/kjFH6NykTtDGhi5qN8peP1qnS3VwXbLB2xOe6s pcsk/3VnCLe38jq/IESkwsNZU6DiB1F2s8YJhVFIhIe3MWL080WOcE95az0Ze73V EdYZjcMRF9CE+dvcSpa5bCSJlZMs5FHslzIbXUVV15hViDSn+CX/MMirOibymK65 36Bov5sSeCyRsWUZ68Am6Ji2fpZTbNC7tw3u0Amn3jtUnRahwRK2JpMbnJIovNl6 tvfgyH5WGhylncIw662WIShy6K6NhoDRKi+JbKUXbGZfXmd8lfs15yC8qXJBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk1pbkv0FbCoVYLyNlUvidqBAeS4wHwYDVR0j BBgwFoAUDi56nPEcaS7I5W8DUnvfkvoAGk4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDE5NTg5YS1kNTI1LTQwZmMtODk0YS0xMmU0NDAxMGUzZTQvMC8wRTJFN0E5Q0Yx MUM2OTJFQzhFNTZGMDM1MjdCREY5MkZBMDAxQTRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEUyRTdBOUNGMTFDNjkyRUM4RTU2RjAzNTI3QkRGOTJGQTAw MUE0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTAxOTU4OWEtZDUyNS00MGZjLTg5 NGEtMTJlNDQwMTBlM2U0LzAvMEUyRTdBOUNGMTFDNjkyRUM4RTU2RjAzNTI3QkRG OTJGQTAwMUE0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHYfL8LIyqkrog350T8OmXG3BqthxxoIfk7c 7T8RcNOVD/c2eAprMc5WYKKem8cTuaDfD22IYj8cG175OP/7d/xeo9XjDKJudaH5 xd1IoWEJXE5XS1ud+4C+2DpEx5R0J8lsP2qCpk5Buk6EEVfrH/+jNbsbS6nbWe9L 1fIXCY1W5tDYm9ANnkHzBcyII3E9loRYOJwkl1We33ahTA+EqFemLH+C+t/GeInO 2y3C/5t6DsNvvVd602uvSmrc36zaZFgR4wYZs/QKieCApJd7VlL8f0Kkjklc/Z3u 9KBkyxQQ6mXM8Xl+J8vhuV/zk2xBwY3CPhu+Q0Iz4zOsZn4eT48= -----END CERTIFICATE-----Generated at Fri Apr 17 20:53:22 2026 by rpki-client