$ rpki-client -vvf repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft File: E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft (raw, json) Hash identifier: xPHBkSVHV9AugCdylFKw+elTqH3FmfD3UHfizusQu1Q= Subject key identifier: E9:88:5F:6D:28:48:D5:DA:D2:FA:38:97:09:5E:81:C7:25:87:8C:73 Authority key identifier: E0:FB:A0:3D:6B:68:95:CE:B5:37:22:CE:FD:B9:4C:56:01:BD:EA:42 Certificate issuer: /CN=E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42 Certificate serial: 04A13754F3A310BBED217838C60871B7CD935FBA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft Manifest number: 055A Signing time: Sun 01 Mar 2026 09:00:06 +0000 Manifest this update: Sun 01 Mar 2026 08:55:06 +0000 Manifest next update: Wed 04 Mar 2026 09:43:06 +0000 Files and hashes: 1: 35392e3135332e32342e302f32332d3233203d3e203539323835.roa (hash: 1SizngiTVzIbRBWH1t3CjVmzzkPKhWLCfAxINTFYNoo=) 2: E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.crl (hash: k17/e4sYkNmSxhI+8gcx10Qr9jDXylbdPcCmc9czizg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.crl rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 09:43:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:a1:37:54:f3:a3:10:bb:ed:21:78:38:c6:08:71:b7:cd:93:5f:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42 Validity Not Before: Mar 1 08:55:06 2026 GMT Not After : Mar 4 09:43:06 2026 GMT Subject: CN=E9885F6D2848D5DAD2FA3897095E81C725878C73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:43:19:87:cf:e5:e4:93:c9:ef:5d:41:20:4e: 48:49:40:27:42:46:5f:4e:11:01:de:b1:0a:b8:6b: 8f:2b:c1:fc:03:10:fc:00:69:ef:df:8e:54:5b:74: 47:26:6e:ef:23:a4:9f:20:3c:35:ea:98:0a:cb:b7: 81:1b:23:85:b1:cf:f5:ab:5e:73:b5:44:db:88:e2: 65:08:1e:f7:b3:44:3b:d1:f6:3b:22:42:74:7b:01: 3a:0f:a2:9a:f9:02:93:8b:f9:d7:10:f3:de:30:4d: 77:8c:b9:bf:1c:05:94:c0:a0:ad:6d:b1:5f:cb:5c: b4:29:32:3b:de:87:11:c3:7a:61:6e:c6:fe:2a:5c: c3:1d:cb:9f:f8:9f:84:a8:7a:54:2b:e7:09:b7:ff: 5e:1e:34:fa:58:64:f0:d1:8c:37:84:b3:15:7d:3f: 78:50:d1:d6:d2:9f:2f:bc:87:19:0b:08:13:80:d3: e8:7d:30:8e:ce:1c:4e:fc:a7:46:b0:b0:7e:71:57: a9:0d:98:91:77:4d:60:39:a8:54:b7:5b:32:6d:b2: 7f:30:25:e9:3d:29:52:e1:b5:9b:26:1a:29:27:69: 57:c0:fc:c9:3f:c3:4a:40:98:f0:bb:19:75:11:6e: 71:2a:8f:79:d0:4e:1b:08:8d:05:e9:f5:4b:0a:80: f4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:88:5F:6D:28:48:D5:DA:D2:FA:38:97:09:5E:81:C7:25:87:8C:73 X509v3 Authority Key Identifier: keyid:E0:FB:A0:3D:6B:68:95:CE:B5:37:22:CE:FD:B9:4C:56:01:BD:EA:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:be:22:97:a9:8f:2b:43:7f:45:83:25:06:21:58:2f:5b:1b: 8b:3e:68:86:28:0b:b6:6f:0d:bf:90:3e:20:60:fe:8e:5e:2f: 41:f1:41:f6:53:b3:49:7a:aa:d1:2f:90:2d:38:e0:41:f0:df: 0d:81:f3:11:45:a5:10:67:01:cd:92:0b:cb:44:58:65:07:95: f7:ef:76:5e:9d:3b:51:8a:10:26:56:4c:aa:89:e6:aa:19:a2: 00:ff:c3:87:ec:3e:35:45:5f:42:72:85:96:50:02:96:d4:99: d0:6f:4e:ef:c1:a6:b3:59:f8:41:b4:8b:26:ca:20:07:56:15: 7e:a0:fe:74:36:88:8a:4e:e9:cc:f8:2c:91:a7:6e:d7:cf:5f: 5f:52:25:e9:e8:ab:d7:29:84:e1:0c:61:36:63:5a:16:b7:08: 24:da:62:3a:6f:b3:23:36:49:24:7d:03:c9:85:3e:3c:b5:d7: a5:3c:3c:23:d6:36:63:44:7c:af:7d:c9:a2:2c:97:f3:58:10: 82:22:a2:79:06:7d:8b:dd:d9:79:99:08:7c:98:db:7f:cd:30: 6e:ff:58:1e:00:a3:ea:76:83:c9:d1:0b:1b:8f:9a:19:20:30: bb:a9:6f:97:34:fb:a1:e2:aa:6a:a0:09:c0:33:2c:72:73:7c: 30:60:36:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBKE3VPOjELvtIXg4xghxt82TX7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBGQkEwM0Q2QjY4OTVDRUI1MzcyMkNFRkRCOTRDNTYw MUJERUE0MjAeFw0yNjAzMDEwODU1MDZaFw0yNjAzMDQwOTQzMDZaMDMxMTAvBgNV BAMTKEU5ODg1RjZEMjg0OEQ1REFEMkZBMzg5NzA5NUU4MUM3MjU4NzhDNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmQxmHz+Xkk8nvXUEgTkhJQCdC Rl9OEQHesQq4a48rwfwDEPwAae/fjlRbdEcmbu8jpJ8gPDXqmArLt4EbI4Wxz/Wr XnO1RNuI4mUIHvezRDvR9jsiQnR7AToPopr5ApOL+dcQ894wTXeMub8cBZTAoK1t sV/LXLQpMjvehxHDemFuxv4qXMMdy5/4n4SoelQr5wm3/14eNPpYZPDRjDeEsxV9 P3hQ0dbSny+8hxkLCBOA0+h9MI7OHE78p0awsH5xV6kNmJF3TWA5qFS3WzJtsn8w Jek9KVLhtZsmGiknaVfA/Mk/w0pAmPC7GXURbnEqj3nQThsIjQXp9UsKgPQzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6YhfbShI1drS+jiXCV6BxyWHjHMwHwYDVR0j BBgwFoAU4PugPWtolc61NyLO/blMVgG96kIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTFmM2IzNy1iZDU0LTQ5MTEtOTA1Yi0zNjU0OTY2ODdjOGQvMC9FMEZCQTAzRDZC Njg5NUNFQjUzNzIyQ0VGREI5NEM1NjAxQkRFQTQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTBGQkEwM0Q2QjY4OTVDRUI1MzcyMkNFRkRCOTRDNTYwMUJE RUE0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ExZjNiMzctYmQ1NC00OTExLTkw NWItMzY1NDk2Njg3YzhkLzAvRTBGQkEwM0Q2QjY4OTVDRUI1MzcyMkNFRkRCOTRD NTYwMUJERUE0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAq+IpepjytDf0WDJQYhWC9bG4s+aIYoC7Zv Db+QPiBg/o5eL0HxQfZTs0l6qtEvkC044EHw3w2B8xFFpRBnAc2SC8tEWGUHlffv dl6dO1GKECZWTKqJ5qoZogD/w4fsPjVFX0JyhZZQApbUmdBvTu/BprNZ+EG0iybK IAdWFX6g/nQ2iIpO6cz4LJGnbtfPX19SJenoq9cphOEMYTZjWha3CCTaYjpvsyM2 SSR9A8mFPjy116U8PCPWNmNEfK99yaIsl/NYEIIionkGfYvd2XmZCHyY23/NMG7/ WB4Ao+p2g8nRCxuPmhkgMLupb5c0+6HiqmqgCcAzLHJzfDBgNuE= -----END CERTIFICATE-----Generated at Mon Mar 2 15:16:26 2026 by rpki-client