$ rpki-client -vvf repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft File: E94D4099064713F1C3A5E211E817CFC2A40E6370.mft (raw, json) Hash identifier: 31GJKQSq/Fh5hMn+sXNzRfRHqJgBhjKGiblfxTcVUo0= Subject key identifier: 1A:34:38:44:C4:3D:F4:25:03:47:2F:81:60:EB:3E:17:D1:0A:B8:87 Authority key identifier: E9:4D:40:99:06:47:13:F1:C3:A5:E2:11:E8:17:CF:C2:A4:0E:63:70 Certificate issuer: /CN=E94D4099064713F1C3A5E211E817CFC2A40E6370 Certificate serial: 21BAEAA4C693E7805FF1E7D6B0548009E0D829E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft Manifest number: 020C Signing time: Mon 02 Mar 2026 17:21:40 +0000 Manifest this update: Mon 02 Mar 2026 17:16:40 +0000 Manifest next update: Fri 06 Mar 2026 05:19:40 +0000 Files and hashes: 1: 3130332e3136342e31342e302f32332d3234203d3e20313532303537.roa (hash: TODEDun2Zl+j5gm95jSV7b8fVwk7R83jzCkXAd4YUh0=) 2: 34392e302e32342e302f32332d3234203d3e203137393935.roa (hash: G15jhzfZRAvw44ZtH89JpUZ7Q4CGTBRIfeHqxNKeprc=) 3: E94D4099064713F1C3A5E211E817CFC2A40E6370.crl (hash: R2BiqYcNCej+6Pp05MhZaSAGDYWWwNQwjQD0afZ3GKY=) 4: 3131302e39322e37322e302f32332d3234203d3e203137393935.roa (hash: Tj+rZXXICw5VIXsxuWhO+B1070IpmB9rr/NwmKii+rg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.crl rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:ba:ea:a4:c6:93:e7:80:5f:f1:e7:d6:b0:54:80:09:e0:d8:29:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E94D4099064713F1C3A5E211E817CFC2A40E6370 Validity Not Before: Mar 2 17:16:40 2026 GMT Not After : Mar 6 05:19:40 2026 GMT Subject: CN=1A343844C43DF42503472F8160EB3E17D10AB887 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bf:ae:20:d9:13:0c:e1:e4:9a:7d:c5:26:b1: 9c:66:d4:bc:48:b3:25:a3:38:10:a0:48:86:40:9c: 9a:17:f7:d8:76:6a:2a:a2:84:3f:d0:4d:d7:6d:c4: 1c:07:1d:3d:42:c2:4a:05:f7:d4:93:9c:10:9c:c4: 22:03:cb:fb:6c:4b:1a:22:7c:9c:fd:6f:a5:3c:95: b0:24:4a:e2:c3:bf:3a:6a:46:55:6d:60:fc:59:cb: 0c:e8:2b:41:6a:6b:23:bd:9c:fc:fc:66:1b:18:8e: 13:f7:4f:c8:b7:57:57:10:9b:22:51:e6:97:5d:fa: f5:1a:22:66:15:32:0f:3e:ed:25:4d:cf:98:53:c6: d6:3e:98:8f:1c:13:e3:e6:a7:e5:ff:e6:27:af:8f: d8:64:2b:cb:47:fb:dc:79:22:b7:d4:9e:eb:a4:43: 83:b4:9a:9e:a6:a0:eb:f8:f2:ee:5a:c7:6c:90:42: c5:5a:74:11:99:3e:47:39:de:1b:18:01:e8:cc:33: 6b:30:e2:b6:56:52:a1:e9:4b:ef:cc:66:41:21:35: a0:c3:65:4b:84:d3:60:57:99:a0:75:b5:c9:b7:95: da:ce:c0:33:26:d9:66:f9:35:4d:b3:8e:3a:15:55: 7f:41:b4:1a:d4:ab:f6:27:48:52:a6:b1:75:62:15: be:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:34:38:44:C4:3D:F4:25:03:47:2F:81:60:EB:3E:17:D1:0A:B8:87 X509v3 Authority Key Identifier: keyid:E9:4D:40:99:06:47:13:F1:C3:A5:E2:11:E8:17:CF:C2:A4:0E:63:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:a9:7b:4a:46:c3:5a:b0:53:d3:4c:5f:1c:32:97:a3:11:bf: e1:68:29:23:ab:e9:fb:12:4b:4f:0f:25:84:a6:2f:a8:3c:13: 28:55:9d:48:97:36:12:1b:b0:6b:2e:3f:2f:19:53:37:e7:56: 50:b1:e9:0b:2a:6f:83:46:48:21:4d:f1:c9:d4:83:7b:da:35: fe:10:88:9d:1b:9d:0e:4f:88:dd:66:a5:33:54:0d:0a:66:b5: 25:c6:63:41:57:d6:de:90:87:04:cb:75:17:fe:df:01:5f:00: 9c:b9:95:6f:46:26:07:60:d9:d4:97:25:23:91:f5:ce:2d:bd: 9b:bc:f2:cb:ec:ee:36:26:bc:fb:a1:10:b5:7b:77:3c:28:0d: d5:9a:92:84:76:74:f6:34:50:85:77:9f:dc:e7:e1:16:21:c3: 1d:88:0d:2c:52:03:92:ee:a9:6f:69:77:25:30:e2:d6:a0:e6: 03:c2:e8:79:9a:1a:27:c4:59:0b:fe:d9:8c:3b:d3:2b:1d:c7: 34:6b:7f:84:f5:d0:a9:e4:dd:4d:46:e4:81:d1:c6:ee:a4:04: cb:2e:9e:07:3e:f7:a1:9c:eb:d9:a1:fe:cd:e9:be:63:a3:66: bb:04:30:ae:f1:61:c6:fd:89:f2:e3:92:4d:af:58:2f:ad:9a: 47:40:4c:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIbrqpMaT54Bf8efWsFSACeDYKeIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk0RDQwOTkwNjQ3MTNGMUMzQTVFMjExRTgxN0NGQzJB NDBFNjM3MDAeFw0yNjAzMDIxNzE2NDBaFw0yNjAzMDYwNTE5NDBaMDMxMTAvBgNV BAMTKDFBMzQzODQ0QzQzREY0MjUwMzQ3MkY4MTYwRUIzRTE3RDEwQUI4ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3v64g2RMM4eSafcUmsZxm1LxI syWjOBCgSIZAnJoX99h2aiqihD/QTddtxBwHHT1CwkoF99STnBCcxCIDy/tsSxoi fJz9b6U8lbAkSuLDvzpqRlVtYPxZywzoK0FqayO9nPz8ZhsYjhP3T8i3V1cQmyJR 5pdd+vUaImYVMg8+7SVNz5hTxtY+mI8cE+Pmp+X/5ievj9hkK8tH+9x5IrfUnuuk Q4O0mp6moOv48u5ax2yQQsVadBGZPkc53hsYAejMM2sw4rZWUqHpS+/MZkEhNaDD ZUuE02BXmaB1tcm3ldrOwDMm2Wb5NU2zjjoVVX9BtBrUq/YnSFKmsXViFb7tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGjQ4RMQ99CUDRy+BYOs+F9EKuIcwHwYDVR0j BBgwFoAU6U1AmQZHE/HDpeIR6BfPwqQOY3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjdhZTgyZi01MzdlLTQ2MjYtYmU5ZS0zMzM5NGEyZGM5NjkvMC9FOTRENDA5OTA2 NDcxM0YxQzNBNUUyMTFFODE3Q0ZDMkE0MEU2MzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTk0RDQwOTkwNjQ3MTNGMUMzQTVFMjExRTgxN0NGQzJBNDBF NjM3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmY3YWU4MmYtNTM3ZS00NjI2LWJl OWUtMzMzOTRhMmRjOTY5LzAvRTk0RDQwOTkwNjQ3MTNGMUMzQTVFMjExRTgxN0NG QzJBNDBFNjM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANOpe0pGw1qwU9NMXxwyl6MRv+FoKSOr6fsS S08PJYSmL6g8EyhVnUiXNhIbsGsuPy8ZUzfnVlCx6Qsqb4NGSCFN8cnUg3vaNf4Q iJ0bnQ5PiN1mpTNUDQpmtSXGY0FX1t6QhwTLdRf+3wFfAJy5lW9GJgdg2dSXJSOR 9c4tvZu88svs7jYmvPuhELV7dzwoDdWakoR2dPY0UIV3n9zn4RYhwx2IDSxSA5Lu qW9pdyUw4tag5gPC6HmaGifEWQv+2Yw70ysdxzRrf4T10Knk3U1G5IHRxu6kBMsu ngc+96Gc69mh/s3pvmOjZrsEMK7xYcb9ifLjkk2vWC+tmkdATGI= -----END CERTIFICATE-----Generated at Mon Mar 2 21:48:12 2026 by rpki-client