$ rpki-client -vvf repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft File: E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft (raw, json) Hash identifier: Z+Iwb5V4ns2Pd762D5jZ7mDNy+BGdT+9CpWaqpaXa+0= Subject key identifier: AC:39:BE:12:59:63:01:B5:0E:2A:98:CD:C1:86:6A:63:E4:54:03:60 Authority key identifier: E9:8B:5C:8D:E6:CD:8A:83:09:2F:B5:55:78:38:8B:B5:5D:80:21:A5 Certificate issuer: /CN=E98B5C8DE6CD8A83092FB55578388BB55D8021A5 Certificate serial: 2A9FF4A0294A0F5CA24E0A577A8A5AF8CC214EEE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft Manifest number: 01C8 Signing time: Sun 01 Mar 2026 18:21:32 +0000 Manifest this update: Sun 01 Mar 2026 18:16:32 +0000 Manifest next update: Thu 05 Mar 2026 03:04:32 +0000 Files and hashes: 1: E98B5C8DE6CD8A83092FB55578388BB55D8021A5.crl (hash: d6N4o5YoBSAU/pciUSv6TrD/zHKU8/6W4b5YgVCFaQA=) 2: 3130332e31372e3234382e302f32342d3234203d3e20313530393733.roa (hash: RVW6NTEFxtaBVN2tG8HTXDlbU79ZyUomhDvpDJYoqdQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.crl rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 03:04:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:9f:f4:a0:29:4a:0f:5c:a2:4e:0a:57:7a:8a:5a:f8:cc:21:4e:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E98B5C8DE6CD8A83092FB55578388BB55D8021A5 Validity Not Before: Mar 1 18:16:32 2026 GMT Not After : Mar 5 03:04:32 2026 GMT Subject: CN=AC39BE12596301B50E2A98CDC1866A63E4540360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:fe:e9:cd:09:96:c6:37:1b:c6:02:19:be:38: d4:3d:4d:0c:d4:bb:3d:27:6b:b4:1f:a6:08:11:36: 0b:4c:0e:dd:9c:5b:cd:30:70:a8:7b:ab:8b:b9:84: e5:ea:d8:9e:93:36:12:e9:cf:84:53:80:c3:0e:fe: 2e:bd:fe:68:d4:7d:36:97:70:39:69:e9:d2:6c:b1: 3d:31:b9:15:45:11:2a:3b:63:f8:3d:8b:50:03:8b: 03:68:03:4e:8d:98:0b:66:2b:ec:62:28:b2:65:5e: 60:03:bb:7e:31:ce:0a:ba:c5:5b:fa:e0:78:91:fa: a8:a1:7c:b8:de:2c:25:1f:be:86:08:dc:cc:0f:d3: 4d:fa:9f:82:65:3a:1a:a7:1e:02:b7:0a:d9:d5:4f: f6:bd:0b:f5:18:83:ee:d2:ac:18:73:86:4f:83:dd: 5c:cd:28:de:9e:9b:1f:a6:2c:0a:da:54:bd:42:f7: 5e:76:d9:a1:8b:d0:e3:79:bd:92:64:7d:80:8b:17: ce:36:41:4b:7f:99:7d:60:d1:9f:12:43:ac:6d:48: 2b:06:a2:8a:60:b7:b9:5e:55:8f:24:01:53:ec:92: 20:d8:e4:87:32:76:c3:d7:d9:6a:f3:38:7f:1c:6a: 71:24:86:48:8c:3b:d2:80:59:17:b0:90:46:cf:d5: 3b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:39:BE:12:59:63:01:B5:0E:2A:98:CD:C1:86:6A:63:E4:54:03:60 X509v3 Authority Key Identifier: keyid:E9:8B:5C:8D:E6:CD:8A:83:09:2F:B5:55:78:38:8B:B5:5D:80:21:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:ad:d9:d8:b6:ee:34:97:a5:fa:88:5f:e3:51:d9:ef:3e:54: 15:42:74:36:41:c3:1e:c1:f1:fd:7f:89:78:87:30:93:9a:f0: 88:74:b0:fe:13:ad:7b:a5:de:48:1e:07:b5:f9:37:2a:6f:97: e3:9e:12:ac:20:7e:8b:90:29:1c:87:8e:75:9b:c4:50:ae:7a: b3:e7:b4:3b:76:06:05:11:0b:f1:3e:fd:a2:1d:5d:cb:74:36: 16:fb:21:42:79:f2:cc:d9:0d:f7:d7:48:04:53:15:5b:93:e7: 22:3b:60:46:0b:ea:d3:45:89:bc:69:16:f7:a6:74:8a:6f:f4: af:3d:3a:ad:25:20:b0:45:77:66:b7:da:12:07:f0:68:b0:b1: 0f:80:53:b1:92:a5:17:da:f7:56:ef:ef:74:8c:e9:bc:b2:c1: ba:9c:de:e3:e6:f9:73:36:09:e6:27:48:96:2c:e2:06:ff:ee: 78:4a:59:e5:eb:a2:55:ce:72:32:cd:f7:f5:d1:f3:89:ea:90: cc:87:36:bb:93:47:f7:ba:04:b2:ea:a4:c2:52:23:9c:1e:4f: eb:20:43:c1:5c:b0:0a:1f:3a:f1:d5:24:c7:2c:5b:b2:87:4a: 07:64:fd:bb:42:d0:76:0b:5c:59:eb:26:bf:f7:38:b9:a2:e8: 4e:5b:63:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKp/0oClKD1yiTgpXeopa+MwhTu4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk4QjVDOERFNkNEOEE4MzA5MkZCNTU1NzgzODhCQjU1 RDgwMjFBNTAeFw0yNjAzMDExODE2MzJaFw0yNjAzMDUwMzA0MzJaMDMxMTAvBgNV BAMTKEFDMzlCRTEyNTk2MzAxQjUwRTJBOThDREMxODY2QTYzRTQ1NDAzNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn/unNCZbGNxvGAhm+ONQ9TQzU uz0na7QfpggRNgtMDt2cW80wcKh7q4u5hOXq2J6TNhLpz4RTgMMO/i69/mjUfTaX cDlp6dJssT0xuRVFESo7Y/g9i1ADiwNoA06NmAtmK+xiKLJlXmADu34xzgq6xVv6 4HiR+qihfLjeLCUfvoYI3MwP0036n4JlOhqnHgK3CtnVT/a9C/UYg+7SrBhzhk+D 3VzNKN6emx+mLAraVL1C91522aGL0ON5vZJkfYCLF842QUt/mX1g0Z8SQ6xtSCsG oopgt7leVY8kAVPskiDY5IcydsPX2WrzOH8canEkhkiMO9KAWRewkEbP1TuDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrDm+ElljAbUOKpjNwYZqY+RUA2AwHwYDVR0j BBgwFoAU6YtcjebNioMJL7VVeDiLtV2AIaUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZmRhZmU1Ni04NDM0LTRiYmEtYjE3Ni0zNWU4NzJjMWFjMTgvMC9FOThCNUM4REU2 Q0Q4QTgzMDkyRkI1NTU3ODM4OEJCNTVEODAyMUE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTk4QjVDOERFNkNEOEE4MzA5MkZCNTU1NzgzODhCQjU1RDgw MjFBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ZkYWZlNTYtODQzNC00YmJhLWIx NzYtMzVlODcyYzFhYzE4LzAvRTk4QjVDOERFNkNEOEE4MzA5MkZCNTU1NzgzODhC QjU1RDgwMjFBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA+t2di27jSXpfqIX+NR2e8+VBVCdDZBwx7B 8f1/iXiHMJOa8Ih0sP4TrXul3kgeB7X5Nypvl+OeEqwgfouQKRyHjnWbxFCuerPn tDt2BgURC/E+/aIdXct0Nhb7IUJ58szZDffXSARTFVuT5yI7YEYL6tNFibxpFvem dIpv9K89Oq0lILBFd2a32hIH8GiwsQ+AU7GSpRfa91bv73SM6byywbqc3uPm+XM2 CeYnSJYs4gb/7nhKWeXrolXOcjLN9/XR84nqkMyHNruTR/e6BLLqpMJSI5weT+sg Q8FcsAofOvHVJMcsW7KHSgdk/btC0HYLXFnrJr/3OLmi6E5bY1o= -----END CERTIFICATE-----Generated at Mon Mar 2 19:31:00 2026 by rpki-client