$ rpki-client -vvf repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.mft File: E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.mft (raw, json) Hash identifier: rwAqvOTHNokh98mRARUVgBQa7Ak6Ur9SMTxRT1f+4EQ= Subject key identifier: A9:E6:B7:89:C9:75:85:F2:7B:3E:A8:03:27:90:EF:1D:C5:8A:84:94 Authority key identifier: E3:5D:44:33:8E:59:37:B4:AE:26:9D:DD:CD:A4:0A:28:F8:7F:3E:C8 Certificate issuer: /CN=E35D44338E5937B4AE269DDDCDA40A28F87F3EC8 Certificate serial: 069DD1A7A51E2979A81A09690854A4A6DC30FB15 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.mft Manifest number: 023E Signing time: Sat 28 Feb 2026 07:12:03 +0000 Manifest this update: Sat 28 Feb 2026 07:07:03 +0000 Manifest next update: Tue 03 Mar 2026 17:44:03 +0000 Files and hashes: 1: 3130332e32312e3139352e302f32342d3234203d3e20313439393637.roa (hash: ztOieajHr1k+CIYjNgErkUbe6vEvP2EXx+nQ8S+WL90=) 2: E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.crl (hash: gkYu49jnJvlWLGOJh/ls9ZXBqKhjWp5xCr48sVScls4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.crl rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 17:44:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:9d:d1:a7:a5:1e:29:79:a8:1a:09:69:08:54:a4:a6:dc:30:fb:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E35D44338E5937B4AE269DDDCDA40A28F87F3EC8 Validity Not Before: Feb 28 07:07:03 2026 GMT Not After : Mar 3 17:44:03 2026 GMT Subject: CN=A9E6B789C97585F27B3EA8032790EF1DC58A8494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d2:fb:47:9d:8c:df:35:02:98:58:59:f6:66: a0:d0:70:76:d7:66:e3:08:99:b0:0f:4a:7c:a1:e6: e9:06:a0:8b:da:a7:93:19:96:d9:84:98:04:5b:80: 65:e1:9a:94:3e:51:c4:91:0b:8f:fb:5b:36:24:25: 66:8e:48:6f:72:83:d4:84:b9:70:2f:0a:be:f1:f2: 60:c3:a6:ed:a6:67:33:ef:1b:ca:c9:be:8a:68:7d: c3:13:fb:26:95:52:e7:95:8d:61:55:b2:ae:26:45: a2:6c:bc:ba:8a:6f:6b:03:97:ae:39:ef:eb:98:4f: 98:d4:a3:2e:07:3a:bf:74:59:e9:15:ae:4e:2a:fb: 2c:56:0c:4f:f3:96:d6:d3:73:75:10:90:e8:83:35: ed:85:b0:57:42:52:c5:30:b0:04:20:fa:84:c6:e8: 07:41:aa:1f:59:3d:cf:29:64:ae:42:35:dd:88:18: bd:de:3d:76:11:88:21:a2:0d:a2:84:cc:16:c7:85: 94:7d:1a:df:1f:83:23:27:19:c5:a1:d2:25:96:51: f2:95:d0:f1:f9:39:1d:6c:ba:5e:06:d2:cf:e2:ce: 04:94:d5:70:51:7f:d3:95:31:2c:6a:67:9b:d4:3e: ae:ed:eb:59:bb:78:c5:6f:68:6a:72:06:11:16:65: da:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E6:B7:89:C9:75:85:F2:7B:3E:A8:03:27:90:EF:1D:C5:8A:84:94 X509v3 Authority Key Identifier: keyid:E3:5D:44:33:8E:59:37:B4:AE:26:9D:DD:CD:A4:0A:28:F8:7F:3E:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:97:65:64:0d:59:9a:ed:d7:2c:77:58:47:18:0a:47:7f:6b: 85:08:f6:79:8e:0f:ae:e9:a9:bc:c1:de:59:10:3c:a0:9d:2c: 24:fb:0d:3e:1b:15:08:f3:85:e4:9a:0b:d1:26:df:05:1d:93: 3d:0d:90:ed:7a:1f:f3:69:bc:48:73:c8:e0:2b:f0:b2:82:69: 27:57:36:0d:31:c8:11:39:f7:ec:ab:71:d5:5c:f9:78:92:7f: 41:19:fe:8d:24:ae:b2:a9:5e:bd:b1:8d:d0:ae:54:a1:6a:a0: 8c:ad:5a:69:63:bb:1b:d8:34:58:e3:17:c5:86:01:fe:33:b6: f1:cf:1e:6a:31:8a:4d:98:2a:27:8e:9d:30:ef:2f:82:6f:07: 0d:6d:35:c1:5a:31:f9:2a:00:23:04:5e:c8:83:e7:b8:48:62: ed:f5:18:91:bd:f7:cf:ec:a5:9b:62:75:ed:e4:47:8a:43:9c: 88:54:8b:d4:19:27:57:dc:11:e3:23:4e:66:3d:93:81:95:27: 32:e0:15:80:f2:65:5f:b6:8c:d2:23:20:41:a7:d4:3d:54:8e: 2d:24:e0:dd:9c:37:ec:19:17:57:c2:61:f5:f4:71:b9:75:52: c6:9a:f0:d6:01:30:bc:3b:00:89:7c:49:91:18:29:28:7b:51: e0:e9:2a:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBp3Rp6UeKXmoGglpCFSkptww+xUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM1RDQ0MzM4RTU5MzdCNEFFMjY5REREQ0RBNDBBMjhG ODdGM0VDODAeFw0yNjAyMjgwNzA3MDNaFw0yNjAzMDMxNzQ0MDNaMDMxMTAvBgNV BAMTKEE5RTZCNzg5Qzk3NTg1RjI3QjNFQTgwMzI3OTBFRjFEQzU4QTg0OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC90vtHnYzfNQKYWFn2ZqDQcHbX ZuMImbAPSnyh5ukGoIvap5MZltmEmARbgGXhmpQ+UcSRC4/7WzYkJWaOSG9yg9SE uXAvCr7x8mDDpu2mZzPvG8rJvopofcMT+yaVUueVjWFVsq4mRaJsvLqKb2sDl645 7+uYT5jUoy4HOr90WekVrk4q+yxWDE/zltbTc3UQkOiDNe2FsFdCUsUwsAQg+oTG 6AdBqh9ZPc8pZK5CNd2IGL3ePXYRiCGiDaKEzBbHhZR9Gt8fgyMnGcWh0iWWUfKV 0PH5OR1sul4G0s/izgSU1XBRf9OVMSxqZ5vUPq7t61m7eMVvaGpyBhEWZdpTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqea3icl1hfJ7PqgDJ5DvHcWKhJQwHwYDVR0j BBgwFoAU411EM45ZN7SuJp3dzaQKKPh/PsgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjgzYjI3Yy1hNzMwLTQwMDItOTFiOC1kMDM2NmRmYWM3N2UvMC9FMzVENDQzMzhF NTkzN0I0QUUyNjlERERDREE0MEEyOEY4N0YzRUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTM1RDQ0MzM4RTU5MzdCNEFFMjY5REREQ0RBNDBBMjhGODdG M0VDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTY4M2IyN2MtYTczMC00MDAyLTkx YjgtZDAzNjZkZmFjNzdlLzAvRTM1RDQ0MzM4RTU5MzdCNEFFMjY5REREQ0RBNDBB MjhGODdGM0VDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIqXZWQNWZrt1yx3WEcYCkd/a4UI9nmOD67p qbzB3lkQPKCdLCT7DT4bFQjzheSaC9Em3wUdkz0NkO16H/NpvEhzyOAr8LKCaSdX Ng0xyBE59+yrcdVc+XiSf0EZ/o0krrKpXr2xjdCuVKFqoIytWmljuxvYNFjjF8WG Af4ztvHPHmoxik2YKieOnTDvL4JvBw1tNcFaMfkqACMEXsiD57hIYu31GJG998/s pZtide3kR4pDnIhUi9QZJ1fcEeMjTmY9k4GVJzLgFYDyZV+2jNIjIEGn1D1Uji0k 4N2cN+wZF1fCYfX0cbl1Usaa8NYBMLw7AIl8SZEYKSh7UeDpKqM= -----END CERTIFICATE-----Generated at Mon Mar 2 09:15:00 2026 by rpki-client