$ rpki-client -vvf repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft File: E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft (raw, json) Hash identifier: sYmtsYSyGs9+kyC4fiu8d68SEDuWPIhYsrAaLEkbgzE= Subject key identifier: 45:AD:F1:9A:18:0C:49:25:3F:C0:C7:C2:1A:A6:DE:02:29:F6:25:E4 Authority key identifier: E1:41:ED:0B:8F:1B:83:AB:AC:98:B8:DB:75:8C:25:18:8C:6E:65:A5 Certificate issuer: /CN=E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5 Certificate serial: 3655A2E13FC3FB58435771E9BA8736AEE396F89B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft Manifest number: 014A Signing time: Thu 16 Apr 2026 16:32:17 +0000 Manifest this update: Thu 16 Apr 2026 16:27:17 +0000 Manifest next update: Sun 19 Apr 2026 18:08:17 +0000 Files and hashes: 1: E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.crl (hash: 0rTbUcJogqZDTr4y1cmQBlrWdN1IY7wTHoODKEhVsVs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.crl rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 18:08:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:55:a2:e1:3f:c3:fb:58:43:57:71:e9:ba:87:36:ae:e3:96:f8:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5 Validity Not Before: Apr 16 16:27:17 2026 GMT Not After : Apr 19 18:08:17 2026 GMT Subject: CN=45ADF19A180C49253FC0C7C21AA6DE0229F625E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b4:f3:80:17:be:36:bc:1e:2b:2a:a2:a4:51: 49:da:8f:24:53:08:a0:fc:6d:7d:ae:4a:0b:8c:06: d4:31:1c:a5:c6:f5:41:c3:34:5f:75:ee:8d:1e:f4: 79:21:4c:f9:c8:05:4c:59:e5:d6:45:04:04:13:ab: b5:11:81:f2:80:08:71:bd:df:e9:ed:47:49:7b:23: 3b:65:8d:43:db:57:39:ea:ea:75:82:80:6e:d2:71: ea:6f:a6:b8:61:44:aa:2f:3e:07:4f:3f:40:93:fd: 7b:e7:5d:6c:21:5c:a6:8c:10:f2:c4:cb:cb:5f:c8: 7b:a4:eb:7e:a3:cc:01:b0:ea:f4:7f:d4:a7:8e:6b: 95:ed:08:35:57:bd:ed:c9:4a:0e:82:bf:e3:13:4e: 76:20:6c:02:c8:93:af:73:a6:ab:7d:2f:d0:7a:9b: e0:5b:8c:45:90:a9:53:da:96:2b:f9:8b:cf:0b:fa: eb:bb:62:70:cb:cc:f6:5c:32:df:86:ac:86:57:de: e4:5a:95:14:d9:f4:9c:2d:e5:67:fb:f1:34:3e:11: b4:8a:ed:f9:89:c1:9b:4d:49:2e:f8:40:77:6a:ef: 6b:16:ab:28:40:bb:a2:53:f8:3f:7a:f8:19:d8:25: 72:8c:06:b4:e2:1c:a3:a3:b0:c0:76:7e:6d:50:0f: 29:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:AD:F1:9A:18:0C:49:25:3F:C0:C7:C2:1A:A6:DE:02:29:F6:25:E4 X509v3 Authority Key Identifier: keyid:E1:41:ED:0B:8F:1B:83:AB:AC:98:B8:DB:75:8C:25:18:8C:6E:65:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:c4:8e:b7:23:f5:cb:a6:d0:7b:c9:8d:3f:3d:95:44:a0:94: 23:a9:85:0c:e7:fa:55:e5:6a:8b:59:d5:67:c7:42:fa:22:50: c0:53:24:97:28:0f:7a:19:85:9e:39:eb:75:db:b8:ea:70:9c: 8b:06:ff:64:6c:8d:6b:a1:86:8e:ef:1a:70:fc:84:ec:60:3e: a9:39:08:11:22:bd:b3:87:9e:0c:fb:d8:fd:5c:3b:f5:0d:eb: b4:d9:12:c2:8f:4f:e2:e3:07:0a:b8:02:5d:98:7f:fb:a1:ea: 75:5f:f7:96:c9:68:f4:47:f3:27:72:ec:11:d2:b3:99:e5:14: 6f:33:3e:ba:e0:15:d8:cd:7d:3a:5c:0c:7f:65:a8:72:8d:e4: 97:b9:61:58:5a:e4:8e:5e:95:c0:3c:b8:a0:4b:85:2b:f3:d2: 40:be:e0:d2:f6:24:fa:64:13:4d:b0:c6:86:a2:ef:a4:03:07: f1:dc:e1:18:7e:49:98:3c:9e:21:88:dc:21:fb:f8:f3:3f:26: e3:f2:f5:c3:a1:ff:eb:09:3e:d5:df:37:66:02:d7:00:fa:50: 2c:23:0a:e9:49:a0:b7:fd:16:35:0c:c9:5e:b7:56:27:49:b2: aa:44:fa:2d:98:1f:bb:91:47:f2:bf:73:82:eb:16:fb:29:38: b7:32:eb:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNlWi4T/D+1hDV3Hpuoc2ruOW+JswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE0MUVEMEI4RjFCODNBQkFDOThCOERCNzU4QzI1MTg4 QzZFNjVBNTAeFw0yNjA0MTYxNjI3MTdaFw0yNjA0MTkxODA4MTdaMDMxMTAvBgNV BAMTKDQ1QURGMTlBMTgwQzQ5MjUzRkMwQzdDMjFBQTZERTAyMjlGNjI1RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5tPOAF742vB4rKqKkUUnajyRT CKD8bX2uSguMBtQxHKXG9UHDNF917o0e9HkhTPnIBUxZ5dZFBAQTq7URgfKACHG9 3+ntR0l7IztljUPbVznq6nWCgG7ScepvprhhRKovPgdPP0CT/XvnXWwhXKaMEPLE y8tfyHuk636jzAGw6vR/1KeOa5XtCDVXve3JSg6Cv+MTTnYgbALIk69zpqt9L9B6 m+BbjEWQqVPaliv5i88L+uu7YnDLzPZcMt+GrIZX3uRalRTZ9Jwt5Wf78TQ+EbSK 7fmJwZtNSS74QHdq72sWqyhAu6JT+D96+BnYJXKMBrTiHKOjsMB2fm1QDymjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURa3xmhgMSSU/wMfCGqbeAin2JeQwHwYDVR0j BBgwFoAU4UHtC48bg6usmLjbdYwlGIxuZaUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzFlNjkzYy0yZmQ3LTRmNGMtYWY2My1mZWU2OTA3NmUwZDEvMC9FMTQxRUQwQjhG MUI4M0FCQUM5OEI4REI3NThDMjUxODhDNkU2NUE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTE0MUVEMEI4RjFCODNBQkFDOThCOERCNzU4QzI1MTg4QzZF NjVBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTMxZTY5M2MtMmZkNy00ZjRjLWFm NjMtZmVlNjkwNzZlMGQxLzAvRTE0MUVEMEI4RjFCODNBQkFDOThCOERCNzU4QzI1 MTg4QzZFNjVBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAjEjrcj9cum0HvJjT89lUSglCOphQzn+lXl aotZ1WfHQvoiUMBTJJcoD3oZhZ4563XbuOpwnIsG/2RsjWuhho7vGnD8hOxgPqk5 CBEivbOHngz72P1cO/UN67TZEsKPT+LjBwq4Al2Yf/uh6nVf95bJaPRH8ydy7BHS s5nlFG8zPrrgFdjNfTpcDH9lqHKN5Je5YVha5I5elcA8uKBLhSvz0kC+4NL2JPpk E02wxoai76QDB/Hc4Rh+SZg8niGI3CH7+PM/JuPy9cOh/+sJPtXfN2YC1wD6UCwj CulJoLf9FjUMyV63VidJsqpE+i2YH7uRR/K/c4LrFvspOLcy62M= -----END CERTIFICATE-----Generated at Fri Apr 17 18:26:16 2026 by rpki-client