$ rpki-client -vvf repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft File: EAAF14D74C27E1502835CCF1541D5D92498C8427.mft (raw, json) Hash identifier: exKpGQyFTQDG9FGe7Lt1wBabTIcPf+3RtZAAk5HVdCE= Subject key identifier: DE:B2:33:63:9C:87:D6:F9:B8:C2:17:06:D4:05:CB:CE:54:82:84:D3 Authority key identifier: EA:AF:14:D7:4C:27:E1:50:28:35:CC:F1:54:1D:5D:92:49:8C:84:27 Certificate issuer: /CN=EAAF14D74C27E1502835CCF1541D5D92498C8427 Certificate serial: 3AD0F3095722BFD74CE3D6B3660CD6DE841EB169 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAAF14D74C27E1502835CCF1541D5D92498C8427.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft Manifest number: 014F Signing time: Wed 15 Apr 2026 13:02:07 +0000 Manifest this update: Wed 15 Apr 2026 12:57:07 +0000 Manifest next update: Sat 18 Apr 2026 19:15:07 +0000 Files and hashes: 1: 323030313a6466333a393263303a3a2f34382d3438203d3e20313532343231.roa (hash: Re1BfpdFyUDYjfrU456vx+e4oEcGnjf9fKai/wOjz5g=) 2: EAAF14D74C27E1502835CCF1541D5D92498C8427.crl (hash: WloHD2cA5JRvk0Dsdth+qGLpxp9TmOPJ/pHoY026lf0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.crl rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAAF14D74C27E1502835CCF1541D5D92498C8427.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 19:15:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:d0:f3:09:57:22:bf:d7:4c:e3:d6:b3:66:0c:d6:de:84:1e:b1:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAAF14D74C27E1502835CCF1541D5D92498C8427 Validity Not Before: Apr 15 12:57:07 2026 GMT Not After : Apr 18 19:15:07 2026 GMT Subject: CN=DEB233639C87D6F9B8C21706D405CBCE548284D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ac:dd:cd:e1:61:b1:31:a8:09:ee:15:cd:67: 43:c8:b0:cd:d6:26:e0:99:3c:4a:12:bb:24:ea:a1: 51:ba:00:58:05:f8:67:a8:52:e1:10:b7:6e:71:92: b8:e0:6e:9f:6e:ae:7e:19:85:71:cb:9d:d1:5e:0f: 66:23:42:3c:c4:06:15:b0:9c:ed:53:d9:42:4f:4a: 6c:d7:5c:45:0e:ba:05:00:0c:c1:6f:69:3a:1f:ea: 24:18:ad:b3:53:5a:7e:44:81:16:73:fd:6d:7d:f9: c6:8d:67:ea:fa:21:e7:55:cf:60:d0:ac:a6:d7:92: ee:77:93:1b:6e:15:c7:8e:cb:67:6f:0e:fe:cc:a9: 9d:e8:bd:84:81:bf:89:76:bf:9c:60:c2:06:78:b5: ca:dd:57:cc:25:95:cd:2e:a5:e5:64:7d:03:72:12: 62:58:d1:02:d0:41:0c:9b:63:3b:99:9c:0c:3c:b4: 6f:e8:cc:b8:6e:a3:0a:33:61:ca:28:1e:0b:66:d7: 7d:75:a9:ed:0f:8f:07:66:39:c3:f7:84:d8:5f:b5: ef:bc:0a:c0:e4:80:ea:b2:09:c1:6e:db:8d:de:2a: de:07:76:2d:da:a2:82:96:69:bf:a4:48:cb:a0:f3: 51:c7:b9:ea:fd:71:58:14:d8:2f:ef:6c:ba:28:5f: d2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:B2:33:63:9C:87:D6:F9:B8:C2:17:06:D4:05:CB:CE:54:82:84:D3 X509v3 Authority Key Identifier: keyid:EA:AF:14:D7:4C:27:E1:50:28:35:CC:F1:54:1D:5D:92:49:8C:84:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAAF14D74C27E1502835CCF1541D5D92498C8427.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:ec:ad:7e:93:ed:b5:1f:1c:76:0b:e2:0b:bf:51:8f:9a:40: 36:dd:23:33:3f:95:8a:61:4a:36:7f:29:8a:51:3e:d3:f7:2e: de:50:4e:cf:f4:ea:f8:89:88:15:50:c9:ba:d3:e0:f4:8d:98: ae:18:e1:45:77:b9:4f:4a:c6:99:5f:ad:7b:2d:de:44:fb:10: 9a:5c:07:36:28:61:72:01:97:c9:bb:76:b2:e9:3b:ef:8e:d3: bd:be:8c:e2:e0:41:75:1c:75:4c:55:5f:e1:65:83:ff:86:6d: a9:63:b8:98:4d:84:9d:c2:bd:23:ce:4e:d9:3b:58:9e:cd:39: 62:9c:24:25:51:97:8d:4e:ac:9f:54:3a:c5:52:26:b6:30:1b: b9:b7:2f:5f:e8:da:b2:8f:8c:0e:da:33:10:6f:6b:61:d4:25: 4e:63:7c:04:26:f3:41:2a:b4:30:f6:b1:1e:78:fb:14:3f:3d: a6:c0:5a:79:51:5a:96:69:54:7d:ce:19:3e:ee:e0:89:72:0d: d2:a8:85:49:8d:b0:93:00:09:88:59:60:94:3a:99:09:a2:4c: 41:80:d2:cc:ad:7c:41:03:33:f7:97:e3:bf:3f:00:18:5c:89: f8:ab:12:38:df:a3:7b:29:db:64:21:5e:24:83:4e:6c:54:0c: d5:c9:be:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOtDzCVciv9dM49azZgzW3oQesWkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFBRjE0RDc0QzI3RTE1MDI4MzVDQ0YxNTQxRDVEOTI0 OThDODQyNzAeFw0yNjA0MTUxMjU3MDdaFw0yNjA0MTgxOTE1MDdaMDMxMTAvBgNV BAMTKERFQjIzMzYzOUM4N0Q2RjlCOEMyMTcwNkQ0MDVDQkNFNTQ4Mjg0RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWrN3N4WGxMagJ7hXNZ0PIsM3W JuCZPEoSuyTqoVG6AFgF+GeoUuEQt25xkrjgbp9urn4ZhXHLndFeD2YjQjzEBhWw nO1T2UJPSmzXXEUOugUADMFvaTof6iQYrbNTWn5EgRZz/W19+caNZ+r6IedVz2DQ rKbXku53kxtuFceOy2dvDv7MqZ3ovYSBv4l2v5xgwgZ4tcrdV8wllc0upeVkfQNy EmJY0QLQQQybYzuZnAw8tG/ozLhuowozYcooHgtm1311qe0PjwdmOcP3hNhfte+8 CsDkgOqyCcFu243eKt4Hdi3aooKWab+kSMug81HHuer9cVgU2C/vbLooX9KnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3rIzY5yH1vm4whcG1AXLzlSChNMwHwYDVR0j BBgwFoAU6q8U10wn4VAoNczxVB1dkkmMhCcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTRmNzkzNC1jZGM3LTQwODItODNmYi1kZjdkNGY4MjE5YWYvMS9FQUFGMTRENzRD MjdFMTUwMjgzNUNDRjE1NDFENUQ5MjQ5OEM4NDI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUFBRjE0RDc0QzI3RTE1MDI4MzVDQ0YxNTQxRDVEOTI0OThD ODQyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE0Zjc5MzQtY2RjNy00MDgyLTgz ZmItZGY3ZDRmODIxOWFmLzEvRUFBRjE0RDc0QzI3RTE1MDI4MzVDQ0YxNTQxRDVE OTI0OThDODQyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKfsrX6T7bUfHHYL4gu/UY+aQDbdIzM/lYph SjZ/KYpRPtP3Lt5QTs/06viJiBVQybrT4PSNmK4Y4UV3uU9KxplfrXst3kT7EJpc BzYoYXIBl8m7drLpO++O072+jOLgQXUcdUxVX+Flg/+GbaljuJhNhJ3CvSPOTtk7 WJ7NOWKcJCVRl41OrJ9UOsVSJrYwG7m3L1/o2rKPjA7aMxBva2HUJU5jfAQm80Eq tDD2sR54+xQ/PabAWnlRWpZpVH3OGT7u4IlyDdKohUmNsJMACYhZYJQ6mQmiTEGA 0sytfEEDM/eX478/ABhcifirEjjfo3sp22QhXiSDTmxUDNXJvmE= -----END CERTIFICATE-----Generated at Fri Apr 17 15:53:10 2026 by rpki-client