$ rpki-client -vvf repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.mft File: E0B3E049B031308B3778BB685FD3D149FA69DD3B.mft (raw, json) Hash identifier: srJzVNg01KiCzeHldVW9m2yYN6rN986x2gzD2+EEP6w= Subject key identifier: EE:68:7C:A3:4F:79:C9:95:50:00:40:D9:72:99:91:87:35:03:A7:86 Authority key identifier: E0:B3:E0:49:B0:31:30:8B:37:78:BB:68:5F:D3:D1:49:FA:69:DD:3B Certificate issuer: /CN=E0B3E049B031308B3778BB685FD3D149FA69DD3B Certificate serial: 580EAC0A2086C99B4412FBD7DD9ED165D608DFDC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0B3E049B031308B3778BB685FD3D149FA69DD3B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.mft Manifest number: 0173 Signing time: Sun 01 Mar 2026 10:32:19 +0000 Manifest this update: Sun 01 Mar 2026 10:27:19 +0000 Manifest next update: Wed 04 Mar 2026 22:22:19 +0000 Files and hashes: 1: E0B3E049B031308B3778BB685FD3D149FA69DD3B.crl (hash: XrGdlY5LRonQEZPxJ/UvnKWHSgZBnOzNEc2Eny6m5Pc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.crl rsync://repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0B3E049B031308B3778BB685FD3D149FA69DD3B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 22:22:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:0e:ac:0a:20:86:c9:9b:44:12:fb:d7:dd:9e:d1:65:d6:08:df:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0B3E049B031308B3778BB685FD3D149FA69DD3B Validity Not Before: Mar 1 10:27:19 2026 GMT Not After : Mar 4 22:22:19 2026 GMT Subject: CN=EE687CA34F79C995500040D9729991873503A786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:49:ca:88:3c:29:90:56:0f:ae:ad:bf:9a:01: 59:29:62:71:ba:c3:af:0d:15:bf:14:8e:ae:d3:d7: f1:9b:00:c7:b4:7b:bb:08:d9:1b:f4:72:c0:86:13: 75:e0:28:7d:9b:f6:f0:04:c4:12:69:eb:16:b8:aa: 87:e2:9b:a0:75:cb:f4:3b:68:1e:25:f7:9e:44:52: ac:a6:00:8c:59:d2:c0:74:ee:f2:d7:91:b3:90:f1: 35:53:5f:29:74:27:2a:f9:f9:49:64:f9:98:c7:70: 0d:02:88:c9:f4:23:85:db:d4:7f:d5:db:10:fa:b8: 6b:b7:88:5b:d1:8a:68:1a:9a:b3:16:e2:ec:b9:25: 7c:0e:e8:03:d6:60:a2:96:50:b6:45:29:71:88:22: 8c:3f:6e:4b:87:13:58:f5:3f:aa:5f:bc:3e:bb:52: d8:c2:22:c7:30:d3:d5:49:97:03:c2:58:02:4d:c0: 50:d9:6f:9c:49:df:6b:7c:83:27:94:05:a8:ef:62: 80:80:d7:7e:88:2d:4c:91:42:e4:a7:62:67:bf:eb: af:19:71:ed:ef:cb:40:b1:e3:56:b1:ae:b1:fa:4b: 73:08:c3:a2:00:f3:b9:56:bb:40:dc:18:41:ca:32: a2:60:3d:e8:e2:a8:db:7b:e9:47:a4:a9:40:11:62: f1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:68:7C:A3:4F:79:C9:95:50:00:40:D9:72:99:91:87:35:03:A7:86 X509v3 Authority Key Identifier: keyid:E0:B3:E0:49:B0:31:30:8B:37:78:BB:68:5F:D3:D1:49:FA:69:DD:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0B3E049B031308B3778BB685FD3D149FA69DD3B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:6e:87:a9:c6:3f:4d:7b:c9:b0:46:ab:93:c3:46:18:76:a1: 6f:d5:17:c1:d1:0f:c7:b7:0e:d7:99:c9:0e:35:11:60:94:f5: 2b:ad:50:ab:6a:2a:60:33:72:64:9c:c1:a0:d7:5a:ee:6f:fd: f0:aa:bf:09:3b:6c:f4:03:13:93:2f:fc:25:40:86:89:0b:21: 2b:c5:1f:6f:94:98:91:b2:d3:73:d6:e5:c5:2b:0d:e6:51:26: 74:37:0a:04:dd:de:bd:ab:4d:50:0c:e7:b5:82:30:7f:16:74: ed:c4:0d:99:be:e8:7c:07:70:93:c2:4b:4e:c1:17:13:2d:06: ee:56:05:76:6c:7f:0c:1d:cd:23:c8:99:f3:ba:ce:cb:99:69: b2:f9:b1:90:c4:42:83:61:fe:67:43:a9:cd:5e:3c:a6:e4:24: 90:1c:e4:a9:1c:6b:15:2e:21:4b:79:21:91:a9:e4:7f:68:1c: c5:4e:f6:ca:0f:61:d3:a4:13:e2:35:a2:d1:ca:5f:c4:b3:58: c1:78:57:98:bf:10:aa:63:e1:d5:33:0c:9a:d7:e0:78:53:7d: e4:58:32:8b:bc:eb:6e:8b:a2:cd:cd:6a:08:16:6d:68:2c:d6: f2:46:d5:a6:00:68:8b:3d:e6:0b:09:16:21:37:4c:69:2f:d1: 0a:9a:04:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWA6sCiCGyZtEEvvX3Z7RZdYI39wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBCM0UwNDlCMDMxMzA4QjM3NzhCQjY4NUZEM0QxNDlG QTY5REQzQjAeFw0yNjAzMDExMDI3MTlaFw0yNjAzMDQyMjIyMTlaMDMxMTAvBgNV BAMTKEVFNjg3Q0EzNEY3OUM5OTU1MDAwNDBEOTcyOTk5MTg3MzUwM0E3ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdScqIPCmQVg+urb+aAVkpYnG6 w68NFb8Ujq7T1/GbAMe0e7sI2Rv0csCGE3XgKH2b9vAExBJp6xa4qofim6B1y/Q7 aB4l955EUqymAIxZ0sB07vLXkbOQ8TVTXyl0Jyr5+Ulk+ZjHcA0CiMn0I4Xb1H/V 2xD6uGu3iFvRimgamrMW4uy5JXwO6APWYKKWULZFKXGIIow/bkuHE1j1P6pfvD67 UtjCIscw09VJlwPCWAJNwFDZb5xJ32t8gyeUBajvYoCA136ILUyRQuSnYme/668Z ce3vy0Cx41axrrH6S3MIw6IA87lWu0DcGEHKMqJgPejiqNt76UekqUARYvHvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7mh8o095yZVQAEDZcpmRhzUDp4YwHwYDVR0j BBgwFoAU4LPgSbAxMIs3eLtoX9PRSfpp3TswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MWM3ZTgzMy02YzU0LTRlMGItODMxYy0xYzFhNzEwY2U4ZTMvMC9FMEIzRTA0OUIw MzEzMDhCMzc3OEJCNjg1RkQzRDE0OUZBNjlERDNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTBCM0UwNDlCMDMxMzA4QjM3NzhCQjY4NUZEM0QxNDlGQTY5 REQzQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjFjN2U4MzMtNmM1NC00ZTBiLTgz MWMtMWMxYTcxMGNlOGUzLzAvRTBCM0UwNDlCMDMxMzA4QjM3NzhCQjY4NUZEM0Qx NDlGQTY5REQzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGNuh6nGP017ybBGq5PDRhh2oW/VF8HRD8e3 DteZyQ41EWCU9SutUKtqKmAzcmScwaDXWu5v/fCqvwk7bPQDE5Mv/CVAhokLISvF H2+UmJGy03PW5cUrDeZRJnQ3CgTd3r2rTVAM57WCMH8WdO3EDZm+6HwHcJPCS07B FxMtBu5WBXZsfwwdzSPImfO6zsuZabL5sZDEQoNh/mdDqc1ePKbkJJAc5KkcaxUu IUt5IZGp5H9oHMVO9soPYdOkE+I1otHKX8SzWMF4V5i/EKpj4dUzDJrX4HhTfeRY Mou8626Los3NaggWbWgs1vJG1aYAaIs95gsJFiE3TGkv0QqaBBs= -----END CERTIFICATE-----Generated at Mon Mar 2 13:06:32 2026 by rpki-client