$ rpki-client -vvf repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft File: E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft (raw, json) Hash identifier: ZXNyMpahJkR/WA0DyG3mZb580V2pkpaq0OxjISKrlE4= Subject key identifier: CF:D2:61:27:F4:8D:06:D8:2A:89:35:05:55:03:DE:BF:83:1C:EC:92 Authority key identifier: E0:FB:A0:3D:6B:68:95:CE:B5:37:22:CE:FD:B9:4C:56:01:BD:EA:42 Certificate issuer: /CN=E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42 Certificate serial: 323A22D967C13808E09A84A6BA41557FE3DD13E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft Manifest number: 056E Signing time: Wed 15 Apr 2026 22:20:06 +0000 Manifest this update: Wed 15 Apr 2026 22:15:06 +0000 Manifest next update: Sun 19 Apr 2026 05:13:06 +0000 Files and hashes: 1: E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.crl (hash: PTpcWukSGeNYKwqF6XeUP7SMYrmoLkh/p6hkRmwW+OM=) 2: 35392e3135332e32342e302f32332d3233203d3e203539323835.roa (hash: 1SizngiTVzIbRBWH1t3CjVmzzkPKhWLCfAxINTFYNoo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.crl rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 05:13:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:3a:22:d9:67:c1:38:08:e0:9a:84:a6:ba:41:55:7f:e3:dd:13:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42 Validity Not Before: Apr 15 22:15:06 2026 GMT Not After : Apr 19 05:13:06 2026 GMT Subject: CN=CFD26127F48D06D82A8935055503DEBF831CEC92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:55:d4:62:a7:e8:84:5a:32:c1:92:4d:39:bb: 44:8f:f6:36:c9:eb:16:75:ea:19:68:ea:39:f5:3a: 59:cc:7c:ea:70:5a:32:94:81:ab:54:4e:79:f4:06: 91:f3:16:a7:78:b1:e6:d1:ee:2f:ad:f4:53:64:42: d9:b5:12:9d:a1:67:78:d3:a7:e2:9f:8e:2b:e1:65: 92:83:eb:02:50:36:2a:6f:a0:de:c3:d4:14:84:c0: e9:83:35:f8:40:28:c8:50:3c:7e:00:bd:f4:e5:e4: ba:c4:dd:bc:db:b8:3e:e3:66:f2:64:54:d4:0c:1d: 5d:c6:b3:91:ea:25:fe:9e:1e:9c:90:91:b5:ba:1e: 05:7a:ae:f0:9f:5c:63:4d:33:aa:45:2d:c4:91:83: ac:2c:57:c6:9f:8b:74:7c:04:12:16:a9:49:8f:80: 55:7e:f8:1b:00:d9:69:95:63:f7:4e:61:77:1d:cf: 39:1a:23:0a:99:ee:e9:3d:72:af:f7:93:a5:b0:84: 77:57:8d:49:ec:83:69:d1:2b:64:f4:1d:27:98:f8: 8a:b7:8e:d1:f2:40:89:0a:01:48:42:4d:30:eb:8b: f3:23:60:d1:ce:94:28:21:87:4d:1c:c9:e9:d2:9d: 5f:9a:bc:20:8b:ed:e0:b7:3e:f9:1e:1d:1b:00:e1: 0d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D2:61:27:F4:8D:06:D8:2A:89:35:05:55:03:DE:BF:83:1C:EC:92 X509v3 Authority Key Identifier: keyid:E0:FB:A0:3D:6B:68:95:CE:B5:37:22:CE:FD:B9:4C:56:01:BD:EA:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:a8:8e:1e:95:e2:15:98:f4:88:21:96:7b:38:52:c5:2b:48: d8:76:05:82:ac:6d:90:a0:58:21:f1:85:50:68:0f:1f:7d:99: 5d:d8:0c:67:e8:6f:0a:fa:37:44:16:97:a8:82:3c:31:a2:4c: ad:41:c3:90:65:00:b5:93:6b:71:71:94:66:3f:09:e9:a9:2a: 87:f4:84:85:24:c9:de:d2:6a:96:ad:e0:b7:ef:88:0c:a2:40: 02:bb:f9:37:cc:35:f9:03:43:4b:08:17:62:b4:39:98:15:54: a4:30:ac:0a:93:6d:78:7f:f7:2a:11:27:42:7e:9d:43:ee:58: 2f:59:97:24:03:04:d1:35:fd:b2:f1:cf:bc:8e:9d:cf:3f:e6: 52:6f:76:db:f2:d6:06:31:35:d0:5e:45:42:2e:ee:54:51:7b: e8:b9:9c:4f:5c:04:73:d4:94:79:18:0a:44:5a:9a:7d:28:52: ba:a7:c8:14:f2:39:a7:79:68:db:a5:eb:e4:b7:58:d1:7c:0a: a1:9a:df:5a:92:49:f5:53:cb:14:bb:70:a3:ef:75:95:f8:51: 85:70:44:57:9a:e7:44:49:a1:8f:3e:14:65:01:c8:e6:ab:00: 70:f8:b7:08:62:f6:a6:79:05:af:b2:f6:6f:4c:28:82:5b:91: 8f:3f:b4:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMjoi2WfBOAjgmoSmukFVf+PdE+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBGQkEwM0Q2QjY4OTVDRUI1MzcyMkNFRkRCOTRDNTYw MUJERUE0MjAeFw0yNjA0MTUyMjE1MDZaFw0yNjA0MTkwNTEzMDZaMDMxMTAvBgNV BAMTKENGRDI2MTI3RjQ4RDA2RDgyQTg5MzUwNTU1MDNERUJGODMxQ0VDOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIVdRip+iEWjLBkk05u0SP9jbJ 6xZ16hlo6jn1OlnMfOpwWjKUgatUTnn0BpHzFqd4sebR7i+t9FNkQtm1Ep2hZ3jT p+KfjivhZZKD6wJQNipvoN7D1BSEwOmDNfhAKMhQPH4AvfTl5LrE3bzbuD7jZvJk VNQMHV3Gs5HqJf6eHpyQkbW6HgV6rvCfXGNNM6pFLcSRg6wsV8afi3R8BBIWqUmP gFV++BsA2WmVY/dOYXcdzzkaIwqZ7uk9cq/3k6WwhHdXjUnsg2nRK2T0HSeY+Iq3 jtHyQIkKAUhCTTDri/MjYNHOlCghh00cyenSnV+avCCL7eC3PvkeHRsA4Q2bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz9JhJ/SNBtgqiTUFVQPev4Mc7JIwHwYDVR0j BBgwFoAU4PugPWtolc61NyLO/blMVgG96kIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTFmM2IzNy1iZDU0LTQ5MTEtOTA1Yi0zNjU0OTY2ODdjOGQvMC9FMEZCQTAzRDZC Njg5NUNFQjUzNzIyQ0VGREI5NEM1NjAxQkRFQTQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTBGQkEwM0Q2QjY4OTVDRUI1MzcyMkNFRkRCOTRDNTYwMUJE RUE0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ExZjNiMzctYmQ1NC00OTExLTkw NWItMzY1NDk2Njg3YzhkLzAvRTBGQkEwM0Q2QjY4OTVDRUI1MzcyMkNFRkRCOTRD NTYwMUJERUE0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACGojh6V4hWY9Ighlns4UsUrSNh2BYKsbZCg WCHxhVBoDx99mV3YDGfobwr6N0QWl6iCPDGiTK1Bw5BlALWTa3FxlGY/CempKof0 hIUkyd7Sapat4LfviAyiQAK7+TfMNfkDQ0sIF2K0OZgVVKQwrAqTbXh/9yoRJ0J+ nUPuWC9ZlyQDBNE1/bLxz7yOnc8/5lJvdtvy1gYxNdBeRUIu7lRRe+i5nE9cBHPU lHkYCkRamn0oUrqnyBTyOad5aNul6+S3WNF8CqGa31qSSfVTyxS7cKPvdZX4UYVw RFea50RJoY8+FGUByOarAHD4twhi9qZ5Ba+y9m9MKIJbkY8/tAA= -----END CERTIFICATE-----Generated at Fri Apr 17 19:07:17 2026 by rpki-client