$ rpki-client -vvf repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft File: E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft (raw, json) Hash identifier: HnowbwnwWpbpnCWsxQGGYc7lefqr0rUTC5rNoNjG6t0= Subject key identifier: 99:99:AE:2B:F5:91:74:25:2B:1A:19:C0:7A:AC:51:9B:E3:FF:58:C7 Authority key identifier: E7:23:1D:1A:3E:05:1B:D9:03:DB:86:D7:DE:00:77:C2:33:3E:BB:58 Certificate issuer: /CN=E7231D1A3E051BD903DB86D7DE0077C2333EBB58 Certificate serial: 4C92065F7754BDE1014DA0BBD6D2B4C2066C4900 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft Manifest number: 03B9 Signing time: Wed 15 Apr 2026 23:32:09 +0000 Manifest this update: Wed 15 Apr 2026 23:27:09 +0000 Manifest next update: Sun 19 Apr 2026 10:17:09 +0000 Files and hashes: 1: E7231D1A3E051BD903DB86D7DE0077C2333EBB58.crl (hash: 8mpLXQC3QlX2xYjkGC6npRKG9qnk065m736F2fgKaBM=) 2: 3130332e3136342e3233302e302f32332d3233203d3e20313431393133.roa (hash: VM9sk3wPbIboMaUlLzlpEXvDMKEDXbcMGqcnhAyiBBk=) 3: 3130332e3136342e3233312e302f32342d3234203d3e20313431393133.roa (hash: xjxPtSW9QVDNEyfrpgBmOYq6f8YRggWfUzl7yk7Dxe4=) 4: 3130332e3136342e3233302e302f32342d3234203d3e20313431393133.roa (hash: pKlBaXyIgyfojCUnlgCrIBURDkMptmxsGcEdz1CjbSY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.crl rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 10:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:92:06:5f:77:54:bd:e1:01:4d:a0:bb:d6:d2:b4:c2:06:6c:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7231D1A3E051BD903DB86D7DE0077C2333EBB58 Validity Not Before: Apr 15 23:27:09 2026 GMT Not After : Apr 19 10:17:09 2026 GMT Subject: CN=9999AE2BF59174252B1A19C07AAC519BE3FF58C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:4c:dc:e9:56:03:4c:76:87:f3:08:ee:95:79: aa:06:01:1b:27:e3:0f:63:26:d3:48:6a:ca:da:4d: b0:6c:c2:1e:3a:a9:6f:4f:2d:eb:92:60:65:a0:18: 43:e3:d2:d3:f8:c9:95:49:38:df:0f:d7:a1:fe:7d: 5a:fd:ad:e5:fc:ee:88:48:59:26:fd:b9:e2:9f:bd: 74:f7:ed:b0:d5:67:a3:e2:6f:6a:3d:9f:16:54:f1: df:bd:2a:e9:a8:e9:d7:2e:d9:7c:cd:6c:50:05:78: d0:fb:38:93:c4:85:ca:69:a6:ff:9b:76:db:aa:92: a3:82:83:db:4f:56:2c:74:3f:48:9d:ab:ea:d1:ff: 62:6e:1e:1d:64:f9:c7:6f:e5:04:eb:be:58:9d:85: 6a:1b:8e:92:dd:79:c6:6e:9f:53:6a:8f:ee:2e:04: 63:5a:ae:f7:8b:1d:b1:92:00:8d:f3:b5:ba:e7:ab: a0:74:5f:a9:db:74:37:01:fe:6d:81:9e:df:cb:e0: 38:7e:da:1e:74:9a:4a:d0:fb:df:6a:9b:32:e8:2e: ae:9e:84:0f:28:fa:ba:8e:c4:6c:31:0b:a0:dc:10: f4:3c:31:f8:53:4d:46:46:60:28:11:c1:03:d2:53: dc:85:01:37:6c:c8:91:b1:ac:7d:ca:fb:19:f9:98: 48:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:99:AE:2B:F5:91:74:25:2B:1A:19:C0:7A:AC:51:9B:E3:FF:58:C7 X509v3 Authority Key Identifier: keyid:E7:23:1D:1A:3E:05:1B:D9:03:DB:86:D7:DE:00:77:C2:33:3E:BB:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:31:67:e0:3f:d9:d4:ae:0f:53:e6:76:4f:eb:27:1d:44:99: ac:54:ae:f7:9d:ec:52:7a:09:84:9d:c4:cc:ac:fd:60:f6:75: ed:45:d8:8b:e5:75:cc:40:c9:e0:c4:ff:78:7f:7a:58:d6:a6: 76:d2:b8:b3:fd:a7:de:05:1f:1f:56:e1:c5:79:0b:9b:75:06: 69:a3:77:1c:27:a6:ae:0a:01:aa:c9:d3:08:2b:08:25:78:71: 31:95:4e:4d:65:83:3b:31:28:b4:59:1b:c2:51:41:de:c5:11: ae:48:c5:e3:ae:e7:16:34:e6:22:e4:fe:59:a6:db:0b:00:c8: 8c:9c:09:77:a2:3b:b4:8d:95:84:30:96:c6:77:0b:4e:c5:37: 85:48:16:bc:77:35:aa:d4:d8:15:d1:47:a7:96:09:f5:4c:d1: 04:6e:d3:b0:32:fd:50:23:96:58:e6:9a:6e:32:41:08:06:2f: a0:c5:88:f3:4f:ea:6e:b7:8d:78:bd:85:57:70:d6:66:b0:bf: 84:2b:9b:c4:98:51:61:48:c9:16:bc:16:f2:2f:bb:c7:31:62: 19:0d:47:86:fc:f0:6d:a6:7c:e4:2d:87:b9:1d:b1:c7:2f:2b: a8:37:bc:70:d1:31:f1:e6:6a:cb:76:3a:6f:32:79:87:ca:da: bc:b5:dc:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTJIGX3dUveEBTaC71tK0wgZsSQAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcyMzFEMUEzRTA1MUJEOTAzREI4NkQ3REUwMDc3QzIz MzNFQkI1ODAeFw0yNjA0MTUyMzI3MDlaFw0yNjA0MTkxMDE3MDlaMDMxMTAvBgNV BAMTKDk5OTlBRTJCRjU5MTc0MjUyQjFBMTlDMDdBQUM1MTlCRTNGRjU4QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1TNzpVgNMdofzCO6VeaoGARsn 4w9jJtNIasraTbBswh46qW9PLeuSYGWgGEPj0tP4yZVJON8P16H+fVr9reX87ohI WSb9ueKfvXT37bDVZ6Pib2o9nxZU8d+9Kumo6dcu2XzNbFAFeND7OJPEhcpppv+b dtuqkqOCg9tPVix0P0idq+rR/2JuHh1k+cdv5QTrvlidhWobjpLdecZun1Nqj+4u BGNarveLHbGSAI3ztbrnq6B0X6nbdDcB/m2Bnt/L4Dh+2h50mkrQ+99qmzLoLq6e hA8o+rqOxGwxC6DcEPQ8MfhTTUZGYCgRwQPSU9yFATdsyJGxrH3K+xn5mEgRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmZmuK/WRdCUrGhnAeqxRm+P/WMcwHwYDVR0j BBgwFoAU5yMdGj4FG9kD24bX3gB3wjM+u1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YTE3OTRhYS0zMjkxLTQ4M2ItYWMwYi03YmM3YjFhNjdjYzYvMC9FNzIzMUQxQTNF MDUxQkQ5MDNEQjg2RDdERTAwNzdDMjMzM0VCQjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTcyMzFEMUEzRTA1MUJEOTAzREI4NkQ3REUwMDc3QzIzMzNF QkI1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWExNzk0YWEtMzI5MS00ODNiLWFj MGItN2JjN2IxYTY3Y2M2LzAvRTcyMzFEMUEzRTA1MUJEOTAzREI4NkQ3REUwMDc3 QzIzMzNFQkI1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMsxZ+A/2dSuD1Pmdk/rJx1EmaxUrved7FJ6 CYSdxMys/WD2de1F2IvldcxAyeDE/3h/eljWpnbSuLP9p94FHx9W4cV5C5t1Bmmj dxwnpq4KAarJ0wgrCCV4cTGVTk1lgzsxKLRZG8JRQd7FEa5IxeOu5xY05iLk/lmm 2wsAyIycCXeiO7SNlYQwlsZ3C07FN4VIFrx3NarU2BXRR6eWCfVM0QRu07Ay/VAj lljmmm4yQQgGL6DFiPNP6m63jXi9hVdw1mawv4Qrm8SYUWFIyRa8FvIvu8cxYhkN R4b88G2mfOQth7kdsccvK6g3vHDRMfHmast2Om8yeYfK2ry13Gw= -----END CERTIFICATE-----Generated at Sat Apr 18 02:33:45 2026 by rpki-client