$ rpki-client -vvf repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.mft File: 1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.mft (raw, json) Hash identifier: nrDhYLZ/zVxTVUkACDNdfWza7KqSE05kKrrqs/h8mDs= Subject key identifier: B8:29:6D:AB:33:EA:2A:48:72:41:C5:1E:3D:65:33:5E:84:56:52:F1 Authority key identifier: 1E:AF:FD:F7:6C:26:1A:0C:98:01:D9:F2:B0:2D:5B:A1:49:67:F3:CD Certificate issuer: /CN=1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD Certificate serial: 0543782F8CB7010D45251188883CC4E8067608DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.mft Manifest number: 01EA Signing time: Sat 28 Feb 2026 10:31:31 +0000 Manifest this update: Sat 28 Feb 2026 10:26:31 +0000 Manifest next update: Tue 03 Mar 2026 16:48:31 +0000 Files and hashes: 1: 1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.crl (hash: p5+Ituu3Miop6PAWjQv065TQniAh4qY+GKELfjOeYSg=) 2: 3130332e3139302e39342e302f32342d3234203d3e20313530353531.roa (hash: XvrWKabUzo+8QdekV/WCEKHm2CO1S57vakuFbZ2xMyY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.crl rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 16:48:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:43:78:2f:8c:b7:01:0d:45:25:11:88:88:3c:c4:e8:06:76:08:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD Validity Not Before: Feb 28 10:26:31 2026 GMT Not After : Mar 3 16:48:31 2026 GMT Subject: CN=B8296DAB33EA2A487241C51E3D65335E845652F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9d:9f:a4:15:22:1a:52:fe:76:97:a5:58:a4: fd:f0:8f:74:60:d1:23:df:73:70:a8:d9:7f:f0:c8: 06:50:44:99:ff:cd:57:c0:38:9f:10:96:fa:c5:23: 80:5d:39:33:78:d0:b4:aa:45:b9:89:30:54:28:c5: a1:61:6d:32:48:b3:a2:e4:ed:2f:f3:78:6f:dc:84: 2e:e9:0b:29:c3:50:7e:0d:49:84:3c:19:c5:9a:8d: d5:f4:37:98:bb:bc:f4:26:69:b4:59:90:62:1d:f2: 45:32:dc:5f:d8:25:05:40:02:02:41:3a:ac:b5:b7: 22:30:a4:b1:13:ac:3c:e6:13:28:84:9d:9e:d9:5b: b9:72:29:32:93:67:d1:3c:28:3d:91:f3:4a:1a:24: 75:8a:ee:ce:d9:27:4d:59:69:76:0a:18:9e:18:81: 01:22:cc:63:cf:ed:8c:f5:c6:ce:04:87:9d:dc:19: 9a:31:33:14:3c:28:c7:8a:86:ae:0e:f4:f8:d4:71: 4c:29:39:22:b5:c9:a6:76:49:0c:18:b4:69:2e:9b: 82:71:3d:67:f6:54:20:b8:3b:0c:4c:58:b4:9c:7d: aa:0c:1e:07:81:a8:06:16:c6:ac:64:3e:63:8d:9f: 0e:cc:ff:87:71:f1:14:5b:f2:ef:7f:dd:8b:e1:0c: 5a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:29:6D:AB:33:EA:2A:48:72:41:C5:1E:3D:65:33:5E:84:56:52:F1 X509v3 Authority Key Identifier: keyid:1E:AF:FD:F7:6C:26:1A:0C:98:01:D9:F2:B0:2D:5B:A1:49:67:F3:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:6c:93:e3:4e:d5:17:d4:94:c6:fa:ef:ef:1b:4b:f4:a7:10: 03:d3:46:ac:d8:e5:d6:f5:55:ee:5b:41:05:22:b4:13:37:3a: 2d:94:ed:db:5c:1f:6b:a9:f7:2f:72:cc:fa:a6:27:41:01:34: 70:27:a7:de:84:73:09:bd:4b:89:28:58:09:2f:6f:85:b7:cb: e9:26:55:6c:e9:06:eb:62:d5:e5:b4:db:b4:6f:72:24:35:3e: 31:66:9b:72:10:c0:9b:d3:b5:c7:14:d3:c1:93:e3:9e:73:94: 6d:c4:3b:4e:b2:7a:b1:5d:36:99:2e:1b:70:8f:e4:4f:82:e1: eb:6d:88:8f:c7:4b:6e:a9:a9:06:cb:18:dc:86:87:a1:ab:e7: 13:4a:c3:78:0f:1b:61:be:b8:ec:29:1a:75:1d:5a:2a:de:8b: ff:bc:d0:1d:75:d1:a8:09:5a:d0:fd:30:74:75:8d:dc:d6:e7: 99:3b:d4:8d:ad:76:2a:70:20:cb:fd:a8:8e:e6:ed:22:52:63: 34:20:28:a2:89:4d:d2:4a:ad:f2:86:6c:79:2d:8b:d4:cc:0f: 56:63:b8:f1:74:fd:d9:4c:f7:4f:38:09:eb:b2:34:29:83:e1: 8d:d3:f6:47:5f:d3:57:52:25:e4:97:13:0d:e9:9f:d8:58:4a: c1:c6:fe:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBUN4L4y3AQ1FJRGIiDzE6AZ2CN8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVBRkZERjc2QzI2MUEwQzk4MDFEOUYyQjAyRDVCQTE0 OTY3RjNDRDAeFw0yNjAyMjgxMDI2MzFaFw0yNjAzMDMxNjQ4MzFaMDMxMTAvBgNV BAMTKEI4Mjk2REFCMzNFQTJBNDg3MjQxQzUxRTNENjUzMzVFODQ1NjUyRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8nZ+kFSIaUv52l6VYpP3wj3Rg 0SPfc3Co2X/wyAZQRJn/zVfAOJ8QlvrFI4BdOTN40LSqRbmJMFQoxaFhbTJIs6Lk 7S/zeG/chC7pCynDUH4NSYQ8GcWajdX0N5i7vPQmabRZkGId8kUy3F/YJQVAAgJB Oqy1tyIwpLETrDzmEyiEnZ7ZW7lyKTKTZ9E8KD2R80oaJHWK7s7ZJ01ZaXYKGJ4Y gQEizGPP7Yz1xs4Eh53cGZoxMxQ8KMeKhq4O9PjUcUwpOSK1yaZ2SQwYtGkum4Jx PWf2VCC4OwxMWLScfaoMHgeBqAYWxqxkPmONnw7M/4dx8RRb8u9/3YvhDFpNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuCltqzPqKkhyQcUePWUzXoRWUvEwHwYDVR0j BBgwFoAUHq/992wmGgyYAdnysC1boUln880wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Nzk4MDkxZS1jMWFlLTQwNDktOTZkMi1jNGNlMzdmZGMzNWIvMC8xRUFGRkRGNzZD MjYxQTBDOTgwMUQ5RjJCMDJENUJBMTQ5NjdGM0NELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUVBRkZERjc2QzI2MUEwQzk4MDFEOUYyQjAyRDVCQTE0OTY3 RjNDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDc5ODA5MWUtYzFhZS00MDQ5LTk2 ZDItYzRjZTM3ZmRjMzViLzAvMUVBRkZERjc2QzI2MUEwQzk4MDFEOUYyQjAyRDVC QTE0OTY3RjNDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAFsk+NO1RfUlMb67+8bS/SnEAPTRqzY5db1 Ve5bQQUitBM3Oi2U7dtcH2up9y9yzPqmJ0EBNHAnp96Ecwm9S4koWAkvb4W3y+km VWzpButi1eW027RvciQ1PjFmm3IQwJvTtccU08GT455zlG3EO06yerFdNpkuG3CP 5E+C4ettiI/HS26pqQbLGNyGh6Gr5xNKw3gPG2G+uOwpGnUdWirei/+80B110agJ WtD9MHR1jdzW55k71I2tdipwIMv9qI7m7SJSYzQgKKKJTdJKrfKGbHkti9TMD1Zj uPF0/dlM9084CeuyNCmD4Y3T9kdf01dSJeSXEw3pn9hYSsHG/hw= -----END CERTIFICATE-----Generated at Mon Mar 2 03:55:46 2026 by rpki-client