$ rpki-client -vvf repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft File: E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft (raw, json) Hash identifier: /sCa4sl4NqU/InWVj+zWdZYTf+PVigBC7Isnnv6654I= Subject key identifier: 50:BB:20:ED:28:94:73:DA:66:E4:CE:7A:AC:9D:45:71:72:D2:C6:77 Authority key identifier: E8:7D:91:4F:A5:36:CD:DA:1C:04:86:F0:92:3D:2B:E9:FB:FF:15:C9 Certificate issuer: /CN=E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9 Certificate serial: 3090F81BE011C9CFC0A52678D503B336DEA9195B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft Manifest number: 01DB Signing time: Sun 01 Mar 2026 08:22:27 +0000 Manifest this update: Sun 01 Mar 2026 08:17:27 +0000 Manifest next update: Wed 04 Mar 2026 16:19:27 +0000 Files and hashes: 1: 3130332e3230392e31302e302f32342d3234203d3e20313530393237.roa (hash: B5yJ9xoVUUkBKOWIFFCAU70s3XFhUz96BtRULEmOrv0=) 2: E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.crl (hash: vuwabjUAn1QEbfnKCaVZxUGRchwkgfC51LQYlyvotfY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.crl rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 16:19:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:90:f8:1b:e0:11:c9:cf:c0:a5:26:78:d5:03:b3:36:de:a9:19:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9 Validity Not Before: Mar 1 08:17:27 2026 GMT Not After : Mar 4 16:19:27 2026 GMT Subject: CN=50BB20ED289473DA66E4CE7AAC9D457172D2C677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:a5:ea:2f:57:56:ab:f1:6e:63:21:05:e9:16: 90:7c:94:2f:2a:e8:1b:8e:bd:ea:95:cb:0a:33:fa: 40:48:9c:44:9c:1b:c6:71:73:9c:0e:e4:32:4d:5c: f6:5b:ee:56:99:e1:c2:12:91:0f:dd:c2:0a:76:6f: 5e:57:2a:ab:1c:0e:a8:6c:e1:e8:17:6c:31:c7:53: 0d:14:ce:07:1d:35:79:7d:8f:d0:07:06:74:91:fd: 72:ed:d8:1f:2b:3c:43:53:87:28:60:e5:2f:05:25: 05:23:6d:44:1e:b7:d6:36:49:29:f2:9b:c2:28:52: e1:9f:54:24:0a:03:3a:81:d6:a4:ba:c1:ff:10:e4: 64:b7:9f:53:82:de:2d:8c:72:6c:91:75:4d:7c:6d: 79:0e:06:36:b5:a3:75:44:6a:b3:01:12:22:d8:89: 05:ee:4c:d5:ed:9c:f0:14:0e:a5:8a:d9:b1:f7:bd: 89:49:c5:53:2b:22:bb:fa:42:c1:24:6f:de:78:30: a9:68:a5:3d:c2:fb:48:1a:14:e9:86:2b:fe:1e:55: 08:1a:68:81:54:b2:23:67:de:9d:2a:29:24:8a:d4: 8d:ab:1b:69:10:10:84:85:14:81:54:21:21:5d:c8: 3c:d3:eb:38:b8:09:e8:cf:bf:ab:1a:3e:30:9f:c8: 72:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:BB:20:ED:28:94:73:DA:66:E4:CE:7A:AC:9D:45:71:72:D2:C6:77 X509v3 Authority Key Identifier: keyid:E8:7D:91:4F:A5:36:CD:DA:1C:04:86:F0:92:3D:2B:E9:FB:FF:15:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:72:05:eb:7e:64:7d:6a:41:b9:3d:95:26:82:b6:69:40:48: b6:52:dc:9a:d6:b1:66:fe:94:1b:13:5f:61:aa:b4:31:b5:e1: f1:06:69:f2:92:99:c3:53:f5:13:4c:6d:c9:bb:6c:6a:f5:bf: d4:7f:e8:e5:2f:19:5a:7c:e5:06:79:6b:2c:89:21:c4:19:6d: a1:fa:e8:63:03:a1:35:7f:55:7c:ae:81:44:c7:63:d0:b2:18: 40:d4:44:a2:e4:3b:be:c6:4e:26:3a:18:c5:1b:62:93:52:57: e8:18:32:64:8a:81:56:1f:19:4c:db:78:78:c5:f0:6c:fc:c3: 44:fa:d9:27:ef:8a:cb:63:ef:03:06:e2:9c:50:da:25:20:5c: c4:19:0e:a8:14:b2:b5:d4:fd:d6:91:71:a3:aa:77:8f:6b:cd: 55:49:57:05:37:56:e1:34:f7:c7:63:de:5e:b2:4d:ef:f4:ce: e3:0e:09:31:15:34:77:e3:ce:4f:a4:84:f8:cd:1d:b7:6d:00: b6:13:ac:be:5c:db:54:70:31:c8:7b:96:b4:77:b7:36:db:f6: a8:98:0c:e2:cd:f1:bc:54:15:51:7f:1a:a4:39:de:84:43:79: ec:d0:34:13:51:a8:e2:23:91:cd:c6:61:5f:92:f8:dc:b3:94: 9a:12:ec:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMJD4G+ARyc/ApSZ41QOzNt6pGVswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg3RDkxNEZBNTM2Q0REQTFDMDQ4NkYwOTIzRDJCRTlG QkZGMTVDOTAeFw0yNjAzMDEwODE3MjdaFw0yNjAzMDQxNjE5MjdaMDMxMTAvBgNV BAMTKDUwQkIyMEVEMjg5NDczREE2NkU0Q0U3QUFDOUQ0NTcxNzJEMkM2NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtpeovV1ar8W5jIQXpFpB8lC8q 6BuOveqVywoz+kBInEScG8Zxc5wO5DJNXPZb7laZ4cISkQ/dwgp2b15XKqscDqhs 4egXbDHHUw0UzgcdNXl9j9AHBnSR/XLt2B8rPENThyhg5S8FJQUjbUQet9Y2SSny m8IoUuGfVCQKAzqB1qS6wf8Q5GS3n1OC3i2McmyRdU18bXkOBja1o3VEarMBEiLY iQXuTNXtnPAUDqWK2bH3vYlJxVMrIrv6QsEkb954MKlopT3C+0gaFOmGK/4eVQga aIFUsiNn3p0qKSSK1I2rG2kQEISFFIFUISFdyDzT6zi4CejPv6saPjCfyHLpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUULsg7SiUc9pm5M56rJ1FcXLSxncwHwYDVR0j BBgwFoAU6H2RT6U2zdocBIbwkj0r6fv/FckwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Yjg0M2YwMC0yODIzLTQ3MzItOWI3Yy1kOGNmZTYzMDEwZGMvMC9FODdEOTE0RkE1 MzZDRERBMUMwNDg2RjA5MjNEMkJFOUZCRkYxNUM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTg3RDkxNEZBNTM2Q0REQTFDMDQ4NkYwOTIzRDJCRTlGQkZG MTVDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGI4NDNmMDAtMjgyMy00NzMyLTli N2MtZDhjZmU2MzAxMGRjLzAvRTg3RDkxNEZBNTM2Q0REQTFDMDQ4NkYwOTIzRDJC RTlGQkZGMTVDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEtyBet+ZH1qQbk9lSaCtmlASLZS3JrWsWb+ lBsTX2GqtDG14fEGafKSmcNT9RNMbcm7bGr1v9R/6OUvGVp85QZ5ayyJIcQZbaH6 6GMDoTV/VXyugUTHY9CyGEDURKLkO77GTiY6GMUbYpNSV+gYMmSKgVYfGUzbeHjF 8Gz8w0T62Sfvistj7wMG4pxQ2iUgXMQZDqgUsrXU/daRcaOqd49rzVVJVwU3VuE0 98dj3l6yTe/0zuMOCTEVNHfjzk+khPjNHbdtALYTrL5c21RwMch7lrR3tzbb9qiY DOLN8bxUFVF/GqQ53oRDeezQNBNRqOIjkc3GYV+S+NyzlJoS7Pw= -----END CERTIFICATE-----Generated at Mon Mar 2 04:41:50 2026 by rpki-client