$ rpki-client -vvf repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft File: 1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft (raw, json) Hash identifier: nv2NRkv94Rbn9sxdLUHureiFsPrLhlgY6tU1TrKUn7E= Subject key identifier: 82:95:6B:D3:7B:59:17:C5:4E:0B:C1:74:51:95:E1:7C:55:EE:2C:2A Authority key identifier: 1E:8E:85:3B:D0:B0:EC:8B:2C:02:0B:97:5B:20:5A:55:6C:14:E8:E9 Certificate issuer: /CN=1E8E853BD0B0EC8B2C020B975B205A556C14E8E9 Certificate serial: 38E47E43EE3A59A337317B9591AE09D8BF3DBB60 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft Manifest number: 01D2 Signing time: Sat 28 Feb 2026 22:01:51 +0000 Manifest this update: Sat 28 Feb 2026 21:56:51 +0000 Manifest next update: Wed 04 Mar 2026 04:59:51 +0000 Files and hashes: 1: 1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.crl (hash: rwEd3j34B12wZAcLZQHHLdbJ8POtbLbnj3F91CEb4Pg=) 2: 3130332e3136352e3235322e302f32342d3234203d3e20313531353231.roa (hash: InrImlNizXyRaZ5OSZAbKYKNMEMqIX4WAQ1A/9whx7w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.crl rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 04:59:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:e4:7e:43:ee:3a:59:a3:37:31:7b:95:91:ae:09:d8:bf:3d:bb:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E8E853BD0B0EC8B2C020B975B205A556C14E8E9 Validity Not Before: Feb 28 21:56:51 2026 GMT Not After : Mar 4 04:59:51 2026 GMT Subject: CN=82956BD37B5917C54E0BC1745195E17C55EE2C2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:40:ab:44:c3:d3:78:6e:ee:e6:fe:65:f3:0b: d1:8f:3b:cd:86:fc:dd:8c:23:e9:65:2f:8f:ce:52: 57:75:fd:bb:11:5d:da:a1:82:95:d4:09:65:ff:f7: 9c:d4:3d:04:42:25:da:e3:f2:d4:92:bd:19:89:14: b5:37:42:f8:3b:91:71:49:df:b5:8f:e8:d2:03:2b: 54:9d:b5:48:3d:8c:13:d7:9c:22:80:63:9a:c9:a5: 00:89:80:d2:02:5a:2a:ff:67:13:bd:ef:7b:59:9e: 40:c3:17:bb:fe:c4:6c:29:7a:60:9b:66:ff:ac:7e: 08:10:03:f8:89:24:b2:ce:43:de:81:0e:91:2e:be: ca:20:ae:fe:12:07:2b:e9:76:7f:d3:cf:2f:3b:8a: 90:be:41:07:be:67:4c:bd:d9:f0:74:e6:df:eb:05: c9:06:d9:42:81:c8:84:6d:be:f3:16:2e:a6:dd:ee: 84:e7:bb:d9:16:73:4c:0f:d6:ed:9f:b0:98:b2:73: 21:39:58:a0:86:9b:f2:17:95:6f:ba:5d:93:97:54: f2:d2:ce:48:ec:37:42:3b:09:b8:f4:dc:35:8a:7d: 42:da:64:ac:63:2d:46:d7:ab:9c:2e:09:61:3f:a8: 11:62:b9:f7:4a:22:22:8b:e9:e1:04:df:76:6f:66: 9b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:95:6B:D3:7B:59:17:C5:4E:0B:C1:74:51:95:E1:7C:55:EE:2C:2A X509v3 Authority Key Identifier: keyid:1E:8E:85:3B:D0:B0:EC:8B:2C:02:0B:97:5B:20:5A:55:6C:14:E8:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:f0:9b:f6:52:3f:4a:4c:f0:d4:58:ee:1a:96:f3:6c:bd:e4: 20:47:bc:0b:b1:40:83:8d:e1:86:b8:ad:40:55:70:a4:a7:99: d0:dc:5e:06:87:cd:b1:aa:2f:6a:4c:f7:e2:d0:9e:7e:85:9f: a1:64:7f:79:db:5c:8b:6e:55:17:d9:a2:55:0c:fb:c1:1e:66: e7:1b:09:77:50:b3:ef:a1:2c:88:e0:c3:05:ee:f1:b8:92:0f: 21:68:d0:6c:ad:29:bd:2a:5e:b0:4f:1c:ba:d5:60:0e:4c:cd: 6e:e7:39:69:ba:79:5f:a4:1f:94:1f:58:60:0d:e0:5d:10:09: 6f:7b:49:c9:18:a4:d9:e7:9c:e9:31:8b:b2:b2:f3:d1:e6:3d: ac:62:13:1c:68:cd:1e:0d:6e:1f:9e:71:ab:3f:3a:eb:af:e4: 0e:86:ef:df:53:7c:60:0a:7b:5b:12:92:c0:02:0c:9d:0b:2f: f2:1e:d6:ca:99:1c:22:8c:c0:98:e0:ab:76:0a:ab:7a:81:a0: f8:de:33:cc:31:ff:f4:cf:dd:f1:b6:82:e5:42:61:23:e9:23: 97:32:ba:f7:67:04:58:3e:01:32:7d:59:d4:c7:3b:22:30:69: 21:8d:bb:a6:94:1f:1e:b4:b8:e8:82:8c:7b:2b:51:07:91:be: e1:56:27:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOOR+Q+46WaM3MXuVka4J2L89u2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU4RTg1M0JEMEIwRUM4QjJDMDIwQjk3NUIyMDVBNTU2 QzE0RThFOTAeFw0yNjAyMjgyMTU2NTFaFw0yNjAzMDQwNDU5NTFaMDMxMTAvBgNV BAMTKDgyOTU2QkQzN0I1OTE3QzU0RTBCQzE3NDUxOTVFMTdDNTVFRTJDMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0QKtEw9N4bu7m/mXzC9GPO82G /N2MI+llL4/OUld1/bsRXdqhgpXUCWX/95zUPQRCJdrj8tSSvRmJFLU3Qvg7kXFJ 37WP6NIDK1SdtUg9jBPXnCKAY5rJpQCJgNICWir/ZxO973tZnkDDF7v+xGwpemCb Zv+sfggQA/iJJLLOQ96BDpEuvsogrv4SByvpdn/Tzy87ipC+QQe+Z0y92fB05t/r BckG2UKByIRtvvMWLqbd7oTnu9kWc0wP1u2fsJiycyE5WKCGm/IXlW+6XZOXVPLS zkjsN0I7Cbj03DWKfULaZKxjLUbXq5wuCWE/qBFiufdKIiKL6eEE33ZvZpuLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgpVr03tZF8VOC8F0UZXhfFXuLCowHwYDVR0j BBgwFoAUHo6FO9Cw7IssAguXWyBaVWwU6OkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTBiZGNjNS00Y2Q5LTQ2YjAtOWQ3Yi1kMjMxYTllNTdiNTAvMC8xRThFODUzQkQw QjBFQzhCMkMwMjBCOTc1QjIwNUE1NTZDMTRFOEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUU4RTg1M0JEMEIwRUM4QjJDMDIwQjk3NUIyMDVBNTU2QzE0 RThFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWEwYmRjYzUtNGNkOS00NmIwLTlk N2ItZDIzMWE5ZTU3YjUwLzAvMUU4RTg1M0JEMEIwRUM4QjJDMDIwQjk3NUIyMDVB NTU2QzE0RThFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAInwm/ZSP0pM8NRY7hqW82y95CBHvAuxQION 4Ya4rUBVcKSnmdDcXgaHzbGqL2pM9+LQnn6Fn6Fkf3nbXItuVRfZolUM+8EeZucb CXdQs++hLIjgwwXu8biSDyFo0GytKb0qXrBPHLrVYA5MzW7nOWm6eV+kH5QfWGAN 4F0QCW97SckYpNnnnOkxi7Ky89HmPaxiExxozR4Nbh+ecas/Ouuv5A6G799TfGAK e1sSksACDJ0LL/Ie1sqZHCKMwJjgq3YKq3qBoPjeM8wx//TP3fG2guVCYSPpI5cy uvdnBFg+ATJ9WdTHOyIwaSGNu6aUHx60uOiCjHsrUQeRvuFWJ9c= -----END CERTIFICATE-----Generated at Mon Mar 2 17:25:57 2026 by rpki-client