$ rpki-client -vvf repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.mft File: E0B3E049B031308B3778BB685FD3D149FA69DD3B.mft (raw, json) Hash identifier: jUwTsSHiZAVz77ZWQgbTI9AWprIO7zfEJq4ZzgMcszA= Subject key identifier: EF:2F:93:49:69:A8:CD:7F:12:74:4E:51:00:DE:19:8A:A3:26:48:74 Authority key identifier: E0:B3:E0:49:B0:31:30:8B:37:78:BB:68:5F:D3:D1:49:FA:69:DD:3B Certificate issuer: /CN=E0B3E049B031308B3778BB685FD3D149FA69DD3B Certificate serial: 5A85868D0CA6C0FA0FEEB69667B51F12E8823FCF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0B3E049B031308B3778BB685FD3D149FA69DD3B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.mft Manifest number: 0187 Signing time: Thu 16 Apr 2026 07:02:27 +0000 Manifest this update: Thu 16 Apr 2026 06:57:27 +0000 Manifest next update: Sun 19 Apr 2026 11:46:27 +0000 Files and hashes: 1: E0B3E049B031308B3778BB685FD3D149FA69DD3B.crl (hash: Wrk9A0LugsoXKVlEVN7bCoBr4biE2opvT+SfIz4r1C4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.crl rsync://repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0B3E049B031308B3778BB685FD3D149FA69DD3B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 11:46:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:85:86:8d:0c:a6:c0:fa:0f:ee:b6:96:67:b5:1f:12:e8:82:3f:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0B3E049B031308B3778BB685FD3D149FA69DD3B Validity Not Before: Apr 16 06:57:27 2026 GMT Not After : Apr 19 11:46:27 2026 GMT Subject: CN=EF2F934969A8CD7F12744E5100DE198AA3264874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:af:68:e5:73:4f:65:66:db:84:d8:3a:c7:d4: 8f:65:f8:23:81:de:95:c6:21:e7:20:cc:cf:06:99: 2c:58:3e:7d:7d:2c:16:fa:cd:fa:c9:2c:f1:de:8f: 55:ef:36:c3:b3:47:e7:ad:0b:28:16:b1:d1:34:1a: 86:81:c5:6e:e8:17:52:56:6b:44:47:c3:4a:ff:3e: e3:26:36:8f:58:dd:49:38:e2:31:23:0e:28:87:b1: 90:1a:32:22:47:59:44:12:89:85:c4:74:c7:b4:a4: 14:78:13:56:37:fc:0c:d3:ac:26:f0:e6:98:35:fd: b5:a2:50:f2:73:52:e2:8d:a6:f8:d1:90:45:97:77: dd:5f:d9:ec:e4:8e:17:7f:b8:1c:58:f9:02:1f:6f: 52:16:71:21:42:42:3f:35:2b:b6:8f:cf:4e:bd:dc: ec:f3:5c:ac:58:64:e8:3b:04:ca:23:5d:92:fd:f1: b5:b3:7f:25:f4:54:e9:9d:0a:2f:1c:c6:09:38:09: 20:65:11:20:f6:aa:7d:69:11:29:5a:8b:04:98:5b: c1:fa:af:68:36:7c:fd:ec:01:78:46:16:f5:ad:88: 2f:32:e0:e1:dc:e3:4a:9b:cc:20:21:ba:05:1d:ff: 2b:45:00:c1:f6:12:b1:f2:ae:2a:62:32:ed:fe:41: b2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:2F:93:49:69:A8:CD:7F:12:74:4E:51:00:DE:19:8A:A3:26:48:74 X509v3 Authority Key Identifier: keyid:E0:B3:E0:49:B0:31:30:8B:37:78:BB:68:5F:D3:D1:49:FA:69:DD:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0B3E049B031308B3778BB685FD3D149FA69DD3B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:16:39:4c:8d:fa:25:fc:cb:db:bc:ff:c7:e0:1d:78:4b:ac: fe:ff:f4:72:7e:6c:65:aa:f4:4a:dd:e2:a2:ff:b0:f0:26:c4: 36:d2:1b:5b:0f:a0:fa:cb:e3:44:12:a1:d8:78:ae:30:f7:ed: 6f:70:f8:c6:22:a2:fd:cd:e6:e5:d6:0c:dd:e3:0f:74:9c:ff: a5:cf:79:78:73:6f:59:8f:7e:3f:ac:4e:ff:97:69:55:2e:bc: 02:7a:dd:66:24:82:01:84:33:85:f2:c7:65:4b:94:56:f1:fd: e1:5b:42:99:e4:42:0f:8b:ae:d2:ce:a9:92:74:02:b1:c8:bd: 52:6d:ee:3d:85:33:f3:8a:61:d1:ae:a4:0b:6f:b9:d1:49:05: d8:9f:e7:25:da:b9:8e:bd:3d:72:86:6a:95:24:ee:23:63:8e: 28:1e:b4:71:d8:81:fd:b0:8d:69:9f:d0:01:84:41:1c:d4:3e: 6a:b4:8c:1f:21:3d:0a:78:e1:b1:a9:d5:71:d7:a5:ce:c2:0d: 04:60:cc:d8:6b:bf:28:c5:51:f4:29:c6:d3:94:f3:f6:aa:ed: ac:75:83:d3:3c:c4:33:bd:1d:2c:b8:d3:7d:77:be:b9:24:29: 4f:12:b7:3e:a2:eb:0e:92:cb:c0:c2:36:a6:82:ea:9f:86:f2: 45:8f:95:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWoWGjQymwPoP7raWZ7UfEuiCP88wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBCM0UwNDlCMDMxMzA4QjM3NzhCQjY4NUZEM0QxNDlG QTY5REQzQjAeFw0yNjA0MTYwNjU3MjdaFw0yNjA0MTkxMTQ2MjdaMDMxMTAvBgNV BAMTKEVGMkY5MzQ5NjlBOENEN0YxMjc0NEU1MTAwREUxOThBQTMyNjQ4NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6r2jlc09lZtuE2DrH1I9l+COB 3pXGIecgzM8GmSxYPn19LBb6zfrJLPHej1XvNsOzR+etCygWsdE0GoaBxW7oF1JW a0RHw0r/PuMmNo9Y3Uk44jEjDiiHsZAaMiJHWUQSiYXEdMe0pBR4E1Y3/AzTrCbw 5pg1/bWiUPJzUuKNpvjRkEWXd91f2ezkjhd/uBxY+QIfb1IWcSFCQj81K7aPz069 3OzzXKxYZOg7BMojXZL98bWzfyX0VOmdCi8cxgk4CSBlESD2qn1pESlaiwSYW8H6 r2g2fP3sAXhGFvWtiC8y4OHc40qbzCAhugUd/ytFAMH2ErHyripiMu3+QbJzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7y+TSWmozX8SdE5RAN4ZiqMmSHQwHwYDVR0j BBgwFoAU4LPgSbAxMIs3eLtoX9PRSfpp3TswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MWM3ZTgzMy02YzU0LTRlMGItODMxYy0xYzFhNzEwY2U4ZTMvMC9FMEIzRTA0OUIw MzEzMDhCMzc3OEJCNjg1RkQzRDE0OUZBNjlERDNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTBCM0UwNDlCMDMxMzA4QjM3NzhCQjY4NUZEM0QxNDlGQTY5 REQzQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjFjN2U4MzMtNmM1NC00ZTBiLTgz MWMtMWMxYTcxMGNlOGUzLzAvRTBCM0UwNDlCMDMxMzA4QjM3NzhCQjY4NUZEM0Qx NDlGQTY5REQzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA4WOUyN+iX8y9u8/8fgHXhLrP7/9HJ+bGWq 9Erd4qL/sPAmxDbSG1sPoPrL40QSodh4rjD37W9w+MYiov3N5uXWDN3jD3Sc/6XP eXhzb1mPfj+sTv+XaVUuvAJ63WYkggGEM4Xyx2VLlFbx/eFbQpnkQg+LrtLOqZJ0 ArHIvVJt7j2FM/OKYdGupAtvudFJBdif5yXauY69PXKGapUk7iNjjigetHHYgf2w jWmf0AGEQRzUPmq0jB8hPQp44bGp1XHXpc7CDQRgzNhrvyjFUfQpxtOU8/aq7ax1 g9M8xDO9HSy40313vrkkKU8Stz6i6w6Sy8DCNqaC6p+G8kWPlcc= -----END CERTIFICATE-----Generated at Fri Apr 17 18:45:40 2026 by rpki-client