$ rpki-client -vvf repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft File: E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft (raw, json) Hash identifier: euet3/g0/p93GD20U6qcWAUf1WzedJRKbz/HEd8sTrA= Subject key identifier: F1:0D:A3:99:E9:CF:0D:80:B1:2D:D0:44:E9:7E:02:41:81:4B:81:16 Authority key identifier: E7:23:1D:1A:3E:05:1B:D9:03:DB:86:D7:DE:00:77:C2:33:3E:BB:58 Certificate issuer: /CN=E7231D1A3E051BD903DB86D7DE0077C2333EBB58 Certificate serial: 75B591514FA853A7B83D2B0CF424E200FF23D41B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft Manifest number: 03A4 Signing time: Sun 01 Mar 2026 08:12:03 +0000 Manifest this update: Sun 01 Mar 2026 08:07:03 +0000 Manifest next update: Wed 04 Mar 2026 13:42:03 +0000 Files and hashes: 1: E7231D1A3E051BD903DB86D7DE0077C2333EBB58.crl (hash: c1O0VJnZYsyQB8rZVJG06sfHB+lRGSXYe+ywmjV1baI=) 2: 3130332e3136342e3233302e302f32342d3234203d3e20313431393133.roa (hash: zTY/Xpdv3MSQoDsOl/9obTqa4WAjpeiNnIpy7In5lOI=) 3: 3130332e3136342e3233312e302f32342d3234203d3e20313431393133.roa (hash: NK0HZEK3BAxoXUs/T9BsQ+3NHYIYmmtIH82zUm/fzDk=) 4: 3130332e3136342e3233302e302f32332d3233203d3e20313431393133.roa (hash: Wwvtox4pnVKWLsRl/E/cxu7UuLzmLQJxzxgchSEOlMg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.crl rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 13:42:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:b5:91:51:4f:a8:53:a7:b8:3d:2b:0c:f4:24:e2:00:ff:23:d4:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7231D1A3E051BD903DB86D7DE0077C2333EBB58 Validity Not Before: Mar 1 08:07:03 2026 GMT Not After : Mar 4 13:42:03 2026 GMT Subject: CN=F10DA399E9CF0D80B12DD044E97E0241814B8116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ad:07:87:62:48:78:df:db:bd:df:cc:27:e0: c0:09:00:85:d5:2d:33:41:bf:16:af:f8:12:fb:b5: c4:f5:7e:6c:4d:32:62:5d:24:1f:a3:0e:a7:90:45: 40:5d:00:b3:54:58:06:cf:fa:04:4a:4f:01:7b:45: 47:5b:d2:13:df:77:86:8a:8e:f2:ae:ab:fd:49:fe: 28:65:45:91:48:d4:43:67:43:f8:47:f7:3f:dd:9e: dc:90:1d:e9:54:33:50:74:db:4a:18:2e:a3:be:68: 39:63:06:b6:bb:f9:ad:76:3c:20:6f:28:89:01:04: 83:4c:8b:3a:20:f0:81:ab:2d:25:0b:74:b7:37:fb: 60:33:ef:cd:1a:73:06:29:72:91:21:41:f9:bd:f7: 71:23:67:34:88:4e:7b:72:2b:bf:77:8c:bb:44:83: c5:de:c8:53:12:55:f0:c2:b1:e7:9c:78:b1:e3:5e: a2:62:85:22:a2:71:ea:ad:24:dc:f2:07:cf:0b:01: e9:e7:6d:3a:e9:f3:1a:d4:b0:24:63:30:8e:9e:78: 50:6c:74:4a:d3:60:da:4c:a8:94:ed:2f:ba:3f:70: 03:ad:38:4c:a0:a6:b1:e0:d0:28:91:6a:df:24:75: c1:0d:dc:25:76:89:ca:15:1f:11:bd:16:e7:d8:51: c5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:0D:A3:99:E9:CF:0D:80:B1:2D:D0:44:E9:7E:02:41:81:4B:81:16 X509v3 Authority Key Identifier: keyid:E7:23:1D:1A:3E:05:1B:D9:03:DB:86:D7:DE:00:77:C2:33:3E:BB:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:25:23:e8:28:d1:48:fe:30:17:b3:37:b9:65:53:40:04:be: d6:d4:c2:b3:0d:0e:d9:fa:38:85:d4:c0:fe:48:c5:6f:0d:8e: 1a:67:71:ae:8d:a5:1c:56:2b:f9:22:35:47:55:93:89:37:91: f6:5f:60:a9:55:c5:5d:ab:4b:e6:9f:fd:a2:1f:cf:19:30:5b: 7e:10:a1:19:0d:7a:89:2c:16:79:5f:4c:6c:a3:8d:6a:19:88: 4d:33:64:62:c0:d4:9c:23:c2:cf:bc:ab:88:7a:ce:52:7a:5d: 47:34:e8:3e:c5:80:af:27:34:3b:bd:3c:f4:d4:35:5c:b2:c8: a9:00:9d:a5:af:b2:65:d7:69:19:ae:90:fc:e2:e6:50:60:5f: 35:b4:91:95:cb:b8:a0:90:61:e0:23:6e:ff:53:86:ba:83:f8: 49:d0:cf:3c:0d:3c:0a:0b:23:5a:15:6b:37:8f:21:85:0e:6f: ad:de:20:a9:e9:2e:5c:98:01:7b:8c:38:6c:df:84:e2:1e:18: 2d:52:a0:ca:16:c6:6d:22:f2:74:61:73:d3:e9:5f:d0:4d:04: 14:ee:c0:24:8b:e1:16:b1:b8:7e:ae:bb:d8:bf:eb:45:72:b9: 56:96:fe:31:1e:e9:31:fa:eb:49:fa:e4:d4:f2:4e:4b:38:13: b2:c8:ec:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdbWRUU+oU6e4PSsM9CTiAP8j1BswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcyMzFEMUEzRTA1MUJEOTAzREI4NkQ3REUwMDc3QzIz MzNFQkI1ODAeFw0yNjAzMDEwODA3MDNaFw0yNjAzMDQxMzQyMDNaMDMxMTAvBgNV BAMTKEYxMERBMzk5RTlDRjBEODBCMTJERDA0NEU5N0UwMjQxODE0QjgxMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMrQeHYkh439u938wn4MAJAIXV LTNBvxav+BL7tcT1fmxNMmJdJB+jDqeQRUBdALNUWAbP+gRKTwF7RUdb0hPfd4aK jvKuq/1J/ihlRZFI1ENnQ/hH9z/dntyQHelUM1B020oYLqO+aDljBra7+a12PCBv KIkBBINMizog8IGrLSULdLc3+2Az780acwYpcpEhQfm993EjZzSITntyK793jLtE g8XeyFMSVfDCseeceLHjXqJihSKiceqtJNzyB88LAennbTrp8xrUsCRjMI6eeFBs dErTYNpMqJTtL7o/cAOtOEygprHg0CiRat8kdcEN3CV2icoVHxG9FufYUcWJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8Q2jmenPDYCxLdBE6X4CQYFLgRYwHwYDVR0j BBgwFoAU5yMdGj4FG9kD24bX3gB3wjM+u1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YTE3OTRhYS0zMjkxLTQ4M2ItYWMwYi03YmM3YjFhNjdjYzYvMC9FNzIzMUQxQTNF MDUxQkQ5MDNEQjg2RDdERTAwNzdDMjMzM0VCQjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTcyMzFEMUEzRTA1MUJEOTAzREI4NkQ3REUwMDc3QzIzMzNF QkI1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWExNzk0YWEtMzI5MS00ODNiLWFj MGItN2JjN2IxYTY3Y2M2LzAvRTcyMzFEMUEzRTA1MUJEOTAzREI4NkQ3REUwMDc3 QzIzMzNFQkI1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKwlI+go0Uj+MBezN7llU0AEvtbUwrMNDtn6 OIXUwP5IxW8Njhpnca6NpRxWK/kiNUdVk4k3kfZfYKlVxV2rS+af/aIfzxkwW34Q oRkNeoksFnlfTGyjjWoZiE0zZGLA1Jwjws+8q4h6zlJ6XUc06D7FgK8nNDu9PPTU NVyyyKkAnaWvsmXXaRmukPzi5lBgXzW0kZXLuKCQYeAjbv9ThrqD+EnQzzwNPAoL I1oVazePIYUOb63eIKnpLlyYAXuMOGzfhOIeGC1SoMoWxm0i8nRhc9PpX9BNBBTu wCSL4RaxuH6uu9i/60VyuVaW/jEe6TH660n65NTyTks4E7LI7Ns= -----END CERTIFICATE-----Generated at Mon Mar 2 10:42:53 2026 by rpki-client