$ rpki-client -vvf repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft File: EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft (raw, json) Hash identifier: iRcmU1AR4NyuqTmOfPLQzCpRDyNaF0Qpx5H+HrQhLuk= Subject key identifier: 58:BA:B1:F6:E3:35:8A:CE:14:3B:DE:88:1F:C9:91:EC:70:13:BF:80 Authority key identifier: EA:5E:33:0B:F8:DC:FF:6D:09:DF:49:07:4B:46:B2:2E:BD:FB:D4:54 Certificate issuer: /CN=EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454 Certificate serial: 6D3EF456F61C78F19966F7714A290FD5614B074F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft Manifest number: 0207 Signing time: Sun 01 Mar 2026 05:42:44 +0000 Manifest this update: Sun 01 Mar 2026 05:37:44 +0000 Manifest next update: Wed 04 Mar 2026 15:32:44 +0000 Files and hashes: 1: 3230322e34372e39322e302f32332d3234203d3e203137393935.roa (hash: 80MS0ZuTW+5iQNzQYBDQPZfjWsQsANAR7yyCgQ7zGBU=) 2: EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.crl (hash: 4prktgnYvFHyzTz+SZQVLMV2OxC3z74zt7Hagl4utWM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.crl rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 15:32:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:3e:f4:56:f6:1c:78:f1:99:66:f7:71:4a:29:0f:d5:61:4b:07:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454 Validity Not Before: Mar 1 05:37:44 2026 GMT Not After : Mar 4 15:32:44 2026 GMT Subject: CN=58BAB1F6E3358ACE143BDE881FC991EC7013BF80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c9:5a:d3:a5:ba:46:c8:76:17:44:1e:20:c4: 64:9b:82:b2:4f:e7:5e:3f:8e:e8:54:26:80:73:cf: 5d:68:bc:4f:32:e3:c7:fd:b5:5f:45:e0:1d:46:51: 9c:f0:31:82:3b:1f:6b:99:1d:2a:12:46:98:22:c4: f3:78:ae:fd:30:98:1e:83:9e:db:cf:a4:c9:c2:1a: b1:30:01:ef:1f:75:33:ee:e5:96:44:e6:d8:7e:f1: 07:33:03:80:3e:bf:51:d3:1f:46:95:4d:50:9c:b2: ad:81:6f:5d:38:06:77:7b:b7:54:ea:8d:3d:fa:8e: 78:fe:22:87:55:78:63:b4:d6:9e:fd:a7:53:7c:0c: ea:1c:38:8e:db:cb:0e:4c:de:3f:09:98:a9:0b:a2: cb:6a:a4:8e:11:dc:36:2d:96:f4:46:1f:8d:ec:07: ff:5a:32:c3:08:9f:68:9b:af:3e:fa:b3:20:9d:1a: db:de:f4:63:09:3b:3e:1a:ff:d1:df:26:bc:be:9c: bf:34:37:47:c0:fd:3e:e2:4c:32:7e:a5:50:4d:c6: 50:ba:7c:38:e3:e6:ee:32:0a:f2:7b:db:10:b8:d0: 2c:f1:1c:9c:e3:d8:ed:ea:a8:27:9d:22:45:2c:fb: b2:32:08:b1:cf:69:06:18:8f:64:03:6a:e1:e9:b4: 48:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:BA:B1:F6:E3:35:8A:CE:14:3B:DE:88:1F:C9:91:EC:70:13:BF:80 X509v3 Authority Key Identifier: keyid:EA:5E:33:0B:F8:DC:FF:6D:09:DF:49:07:4B:46:B2:2E:BD:FB:D4:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:d8:13:64:b2:94:33:87:f4:59:7e:e2:d9:b7:0a:d9:d3:b4: 00:24:38:31:5c:e4:5a:39:bb:8d:5a:78:8d:5c:c7:ed:d3:72: 77:fd:4f:9e:59:2c:67:d6:3c:5b:3c:a0:7c:bf:36:35:81:2f: 19:30:21:00:8d:c4:b5:73:e5:47:e2:54:e5:20:b2:07:6b:53: 4a:6f:54:57:04:5b:24:44:3d:c2:65:bb:82:6d:b6:df:9a:d2: 41:7e:20:f1:32:b1:ea:0d:2a:65:86:07:af:10:c0:e5:e0:4e: 09:ba:eb:41:97:86:70:22:7b:93:d2:ad:4e:e2:8f:35:e9:f5: f0:e7:da:3e:22:94:28:53:0c:d4:e8:d6:41:4a:e4:8e:b5:eb: af:cd:87:fe:9a:d4:24:d3:a1:c1:50:36:1b:84:aa:67:22:6c: 88:21:c9:15:84:88:a3:de:4c:eb:5d:39:28:67:82:dd:49:9f: f3:ad:35:c1:da:a6:84:16:b8:8e:91:03:44:c7:2e:ef:7b:93: 1e:f2:0f:91:a9:e3:e8:3b:cf:4d:b5:89:b6:0e:37:d6:a6:b5: ec:b4:10:d2:93:b5:52:fa:69:90:34:86:b4:db:af:2d:51:47: 46:57:36:98:04:d3:d3:fa:5c:85:ba:fc:5b:91:34:61:20:ae: ef:36:e0:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbT70VvYcePGZZvdxSikP1WFLB08wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUE1RTMzMEJGOERDRkY2RDA5REY0OTA3NEI0NkIyMkVC REZCRDQ1NDAeFw0yNjAzMDEwNTM3NDRaFw0yNjAzMDQxNTMyNDRaMDMxMTAvBgNV BAMTKDU4QkFCMUY2RTMzNThBQ0UxNDNCREU4ODFGQzk5MUVDNzAxM0JGODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKyVrTpbpGyHYXRB4gxGSbgrJP 514/juhUJoBzz11ovE8y48f9tV9F4B1GUZzwMYI7H2uZHSoSRpgixPN4rv0wmB6D ntvPpMnCGrEwAe8fdTPu5ZZE5th+8QczA4A+v1HTH0aVTVCcsq2Bb104Bnd7t1Tq jT36jnj+IodVeGO01p79p1N8DOocOI7byw5M3j8JmKkLostqpI4R3DYtlvRGH43s B/9aMsMIn2ibrz76syCdGtve9GMJOz4a/9HfJry+nL80N0fA/T7iTDJ+pVBNxlC6 fDjj5u4yCvJ72xC40CzxHJzj2O3qqCedIkUs+7IyCLHPaQYYj2QDauHptEjhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWLqx9uM1is4UO96IH8mR7HATv4AwHwYDVR0j BBgwFoAU6l4zC/jc/20J30kHS0ayLr371FQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzcxZGI5Yi03YzQwLTQ5NjYtOTkxYi01MTM4YjM2OTMyNDYvMC9FQTVFMzMwQkY4 RENGRjZEMDlERjQ5MDc0QjQ2QjIyRUJERkJENDU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUE1RTMzMEJGOERDRkY2RDA5REY0OTA3NEI0NkIyMkVCREZC RDQ1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM3MWRiOWItN2M0MC00OTY2LTk5 MWItNTEzOGIzNjkzMjQ2LzAvRUE1RTMzMEJGOERDRkY2RDA5REY0OTA3NEI0NkIy MkVCREZCRDQ1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHzYE2SylDOH9Fl+4tm3CtnTtAAkODFc5Fo5 u41aeI1cx+3Tcnf9T55ZLGfWPFs8oHy/NjWBLxkwIQCNxLVz5UfiVOUgsgdrU0pv VFcEWyREPcJlu4Jttt+a0kF+IPEyseoNKmWGB68QwOXgTgm660GXhnAie5PSrU7i jzXp9fDn2j4ilChTDNTo1kFK5I6166/Nh/6a1CTTocFQNhuEqmcibIghyRWEiKPe TOtdOShngt1Jn/OtNcHapoQWuI6RA0THLu97kx7yD5Gp4+g7z021ibYON9amtey0 ENKTtVL6aZA0hrTbry1RR0ZXNpgE09P6XIW6/FuRNGEgru824JY= -----END CERTIFICATE-----Generated at Mon Mar 2 23:25:28 2026 by rpki-client