$ rpki-client -vvf repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft File: E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft (raw, json) Hash identifier: VxH1vS3WjEIBCbRRWSvAzrWM82ntY4Vugt5ellFI7Y4= Subject key identifier: 9A:28:D0:90:E3:3D:66:78:1D:CB:00:B4:FF:4A:02:74:9D:5D:B1:FF Authority key identifier: E0:03:E8:50:B7:7C:76:F0:E0:24:F1:DA:6E:FB:D8:76:7B:41:1A:81 Certificate issuer: /CN=E003E850B77C76F0E024F1DA6EFBD8767B411A81 Certificate serial: 40CEDBCD699B8B87F502D79E2C4ED6B167B3356A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E003E850B77C76F0E024F1DA6EFBD8767B411A81.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft Manifest number: 0273 Signing time: Sat 28 Feb 2026 09:41:50 +0000 Manifest this update: Sat 28 Feb 2026 09:36:50 +0000 Manifest next update: Tue 03 Mar 2026 10:16:50 +0000 Files and hashes: 1: 3130332e3135362e37342e302f32332d3234203d3e20313431303832.roa (hash: MC4A5+D6SNqarshQJZ1rQAWQNgzbfnlg0wjJs81Ja6E=) 2: E003E850B77C76F0E024F1DA6EFBD8767B411A81.crl (hash: UU6C+UGmFmu/VurkzZD4CtUtXjVjD1izMy7PnfQy2fA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.crl rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E003E850B77C76F0E024F1DA6EFBD8767B411A81.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 10:16:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:ce:db:cd:69:9b:8b:87:f5:02:d7:9e:2c:4e:d6:b1:67:b3:35:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E003E850B77C76F0E024F1DA6EFBD8767B411A81 Validity Not Before: Feb 28 09:36:50 2026 GMT Not After : Mar 3 10:16:50 2026 GMT Subject: CN=9A28D090E33D66781DCB00B4FF4A02749D5DB1FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:73:32:a4:af:9a:bf:27:ca:ea:0d:07:cc:7a: f1:92:8d:10:93:6a:f8:b6:ff:5f:41:2d:78:b8:1f: 05:d4:09:b2:18:de:7b:3e:13:2c:25:89:8c:c1:a6: 0d:28:4a:20:a3:14:56:eb:3d:a2:56:e6:fe:0a:1b: c9:76:9f:64:c1:28:29:b5:52:9e:d6:5d:01:b0:a8: 93:28:47:53:3c:a9:63:ef:ed:cd:59:a3:bc:50:1f: 19:f8:f2:81:7f:4b:c4:07:09:74:d8:fc:a4:ea:8c: 34:78:52:da:a8:a3:74:be:a9:01:7a:53:74:74:23: e7:7f:5f:c0:b8:98:59:d1:4f:8a:d2:bb:b6:1c:b2: 3f:14:7e:9a:02:f9:78:fa:24:00:0f:57:ea:8f:0a: b0:3b:2b:48:d7:7f:6d:dc:60:84:12:f9:e3:4c:04: b7:32:da:0b:7c:96:e4:06:eb:73:f8:3d:bf:ac:27: 03:5e:64:d3:6e:2a:70:e4:e7:ff:4d:39:56:ec:de: 7d:c6:b3:4c:1a:2e:e1:3d:7d:8f:ee:0b:20:fa:9c: 61:d7:b4:b8:70:05:7e:da:16:f3:8e:54:f6:0b:37: 3f:2e:64:c6:5e:39:6d:ad:08:e8:6d:93:c2:fc:de: fb:65:07:71:c9:a6:16:61:fc:ae:54:0c:bd:d2:f4: 95:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:28:D0:90:E3:3D:66:78:1D:CB:00:B4:FF:4A:02:74:9D:5D:B1:FF X509v3 Authority Key Identifier: keyid:E0:03:E8:50:B7:7C:76:F0:E0:24:F1:DA:6E:FB:D8:76:7B:41:1A:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E003E850B77C76F0E024F1DA6EFBD8767B411A81.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:c0:3d:46:f3:a2:5f:56:15:bc:70:e1:e1:b1:2c:b7:29:74: 75:f7:88:67:15:02:9b:17:cd:c2:64:c5:bd:4f:29:8a:e1:2c: e8:33:de:e4:32:f2:96:c8:c5:eb:e4:4a:93:1e:03:2b:58:3b: 7a:f3:07:f7:cc:f9:9e:71:32:18:0c:1d:5d:f2:82:a6:7e:9a: b4:41:dc:24:40:08:6b:5c:a6:6c:f7:bb:95:8e:f2:cc:27:99: a3:a1:db:92:2d:a9:42:5c:d8:d6:29:02:fc:67:40:35:67:10: ea:83:7e:c5:72:0f:06:f8:7e:2f:ff:be:c4:28:1a:cb:0a:be: d1:3a:ca:af:c5:57:c0:35:94:60:2b:a9:f6:aa:c0:9b:95:46: a3:62:dc:2f:66:96:82:2b:46:42:40:e3:93:37:b2:ff:f9:38: 91:82:c0:9e:e2:74:77:b2:61:3d:1b:eb:0d:9b:bc:63:c0:3d: 6a:a8:06:4f:fa:a5:30:15:41:5b:d1:a6:19:f9:b7:30:6f:1d: 9f:c1:cb:71:d3:a8:ef:7c:e7:a5:0d:a1:8d:02:53:6d:ea:82: 95:d2:a5:e3:e2:66:d8:78:92:cd:3a:d3:ae:ce:a6:65:fd:4c: b7:9d:25:c5:50:f2:a2:4e:b9:9a:c0:43:df:b9:cb:d6:a1:23: fc:8a:28:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQM7bzWmbi4f1AteeLE7WsWezNWowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTAwM0U4NTBCNzdDNzZGMEUwMjRGMURBNkVGQkQ4NzY3 QjQxMUE4MTAeFw0yNjAyMjgwOTM2NTBaFw0yNjAzMDMxMDE2NTBaMDMxMTAvBgNV BAMTKDlBMjhEMDkwRTMzRDY2NzgxRENCMDBCNEZGNEEwMjc0OUQ1REIxRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsczKkr5q/J8rqDQfMevGSjRCT avi2/19BLXi4HwXUCbIY3ns+EywliYzBpg0oSiCjFFbrPaJW5v4KG8l2n2TBKCm1 Up7WXQGwqJMoR1M8qWPv7c1Zo7xQHxn48oF/S8QHCXTY/KTqjDR4Utqoo3S+qQF6 U3R0I+d/X8C4mFnRT4rSu7Ycsj8UfpoC+Xj6JAAPV+qPCrA7K0jXf23cYIQS+eNM BLcy2gt8luQG63P4Pb+sJwNeZNNuKnDk5/9NOVbs3n3Gs0waLuE9fY/uCyD6nGHX tLhwBX7aFvOOVPYLNz8uZMZeOW2tCOhtk8L83vtlB3HJphZh/K5UDL3S9JUzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmijQkOM9ZngdywC0/0oCdJ1dsf8wHwYDVR0j BBgwFoAU4APoULd8dvDgJPHabvvYdntBGoEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDAxMDJkMC03MTRmLTRiNTItOWJlNS1kZWQxNmVkZmU0YTIvMC9FMDAzRTg1MEI3 N0M3NkYwRTAyNEYxREE2RUZCRDg3NjdCNDExQTgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTAwM0U4NTBCNzdDNzZGMEUwMjRGMURBNkVGQkQ4NzY3QjQx MUE4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjAwMTAyZDAtNzE0Zi00YjUyLTli ZTUtZGVkMTZlZGZlNGEyLzAvRTAwM0U4NTBCNzdDNzZGMEUwMjRGMURBNkVGQkQ4 NzY3QjQxMUE4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGDAPUbzol9WFbxw4eGxLLcpdHX3iGcVApsX zcJkxb1PKYrhLOgz3uQy8pbIxevkSpMeAytYO3rzB/fM+Z5xMhgMHV3ygqZ+mrRB 3CRACGtcpmz3u5WO8swnmaOh25ItqUJc2NYpAvxnQDVnEOqDfsVyDwb4fi//vsQo GssKvtE6yq/FV8A1lGArqfaqwJuVRqNi3C9mloIrRkJA45M3sv/5OJGCwJ7idHey YT0b6w2bvGPAPWqoBk/6pTAVQVvRphn5tzBvHZ/By3HTqO9856UNoY0CU23qgpXS pePiZth4ks06067OpmX9TLedJcVQ8qJOuZrAQ9+5y9ahI/yKKNI= -----END CERTIFICATE-----Generated at Mon Mar 2 09:23:59 2026 by rpki-client