$ rpki-client -vvf repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.mft File: EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.mft (raw, json) Hash identifier: 4MCPDzU/c2ZfbumVs2V3kIRQSAJfYaZrxO4Q+GM/kac= Subject key identifier: FC:17:14:DF:E3:4F:83:7A:B1:04:2A:ED:E5:BA:5A:57:59:AC:78:3F Authority key identifier: EB:DA:93:9B:37:F3:6E:8A:9F:58:1B:10:36:E0:1C:32:F1:F3:D9:DF Certificate issuer: /CN=EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF Certificate serial: 1740F539829CAA07CEE36C808DE4EE0B34ED77B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.mft Manifest number: 01E7 Signing time: Thu 26 Mar 2026 06:21:47 +0000 Manifest this update: Thu 26 Mar 2026 06:16:47 +0000 Manifest next update: Sun 29 Mar 2026 09:49:47 +0000 Files and hashes: 1: 3130332e3132322e302e302f32332d3234203d3e20313335343737.roa (hash: YSf7tTcq2YBd3VoXe5ADd93qTcdEqoHYWIyKTfCU3yg=) 2: EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.crl (hash: StQj+BsusXs42/icMOf0OYBwOdpOaDzcWFR4j03pK3c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.crl rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 09:49:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:40:f5:39:82:9c:aa:07:ce:e3:6c:80:8d:e4:ee:0b:34:ed:77:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF Validity Not Before: Mar 26 06:16:47 2026 GMT Not After : Mar 29 09:49:47 2026 GMT Subject: CN=FC1714DFE34F837AB1042AEDE5BA5A5759AC783F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bb:e6:8b:3f:4c:f8:64:51:f8:f7:e6:07:62: 79:38:50:ff:ea:92:ef:f1:a3:21:9c:24:90:3b:b5: ca:d6:54:c0:28:c4:19:1d:76:10:a2:33:46:cd:be: a2:3a:ff:08:fb:ec:e8:ae:54:49:c2:22:f2:4e:f6: 67:7e:66:cc:88:d6:41:55:ab:16:e8:59:32:51:7e: 93:cb:7e:85:1c:b0:84:fb:e5:f8:39:f6:0e:6f:b7: c7:28:3c:77:4c:93:f5:32:28:f7:d2:d3:63:8c:fd: f9:e2:57:8a:dd:24:1b:0b:7a:0b:d2:33:0b:6a:47: e6:98:db:f4:de:1e:24:b5:15:0a:07:d6:70:2e:1c: 07:34:c7:b3:70:1b:66:b6:4a:64:bb:4c:af:c0:c1: 67:c2:73:85:23:c3:8e:44:7b:69:33:0b:68:d3:12: 7d:31:e6:c4:56:0d:a9:38:7b:cc:c0:d5:ed:e8:f4: 1b:91:9e:64:5f:6f:4e:7a:9c:ac:2f:3c:72:25:23: 06:ca:b3:e5:a4:52:74:78:89:54:94:2c:a1:47:9c: 98:ce:2f:31:42:60:5e:d8:38:2e:36:da:29:e3:7f: 6c:02:5d:e7:a1:80:17:75:3d:ff:4f:a0:d7:60:c3: 49:3d:7c:2d:d2:a9:ec:39:d4:94:4b:b3:77:3c:8d: ce:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:17:14:DF:E3:4F:83:7A:B1:04:2A:ED:E5:BA:5A:57:59:AC:78:3F X509v3 Authority Key Identifier: keyid:EB:DA:93:9B:37:F3:6E:8A:9F:58:1B:10:36:E0:1C:32:F1:F3:D9:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:66:89:24:c5:f9:ba:4e:72:1f:9c:de:fa:38:4c:f1:19:2f: 59:ad:d2:7d:2c:74:ea:ed:78:7e:4b:b5:63:ea:aa:72:be:fd: 4d:bf:32:26:be:7e:83:97:67:09:c9:27:4e:45:ee:75:ba:84: d5:cd:44:50:8f:49:07:13:8f:13:ee:37:8c:79:33:52:0a:c0: 4f:50:d1:d9:c6:81:7a:f1:36:55:59:1c:dc:bf:2e:97:76:05: cf:f5:48:05:68:93:d0:3f:a7:a7:6f:e4:a2:f6:c2:61:63:71: ea:5a:5b:1a:c0:f1:54:9f:f2:66:5a:a6:36:ec:7b:b5:97:da: 01:e8:e6:30:b0:98:00:9b:4e:f7:a9:a8:40:9c:ea:1d:e7:e4: 72:55:16:fc:30:f5:06:a5:4e:86:27:2e:c1:89:14:4c:20:9f: 21:0c:8a:82:26:1c:8d:51:84:b0:fe:ca:2e:dd:71:ba:4d:38: 19:3d:2a:f7:ce:bb:18:52:f6:33:ea:2e:96:d1:de:07:6e:5b: 0b:34:89:f3:d2:3f:47:7f:8b:3b:c9:ae:a9:c0:95:b7:cb:88: cf:cb:5f:38:11:c7:70:11:ae:02:52:a2:c9:87:28:85:c5:f3: 57:b4:54:99:c1:72:0b:4e:1f:f3:bb:a9:85:b5:f6:a1:cc:91: 26:9e:15:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF0D1OYKcqgfO42yAjeTuCzTtd7kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJEQTkzOUIzN0YzNkU4QTlGNTgxQjEwMzZFMDFDMzJG MUYzRDlERjAeFw0yNjAzMjYwNjE2NDdaFw0yNjAzMjkwOTQ5NDdaMDMxMTAvBgNV BAMTKEZDMTcxNERGRTM0RjgzN0FCMTA0MkFFREU1QkE1QTU3NTlBQzc4M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6u+aLP0z4ZFH49+YHYnk4UP/q ku/xoyGcJJA7tcrWVMAoxBkddhCiM0bNvqI6/wj77OiuVEnCIvJO9md+ZsyI1kFV qxboWTJRfpPLfoUcsIT75fg59g5vt8coPHdMk/UyKPfS02OM/fniV4rdJBsLegvS MwtqR+aY2/TeHiS1FQoH1nAuHAc0x7NwG2a2SmS7TK/AwWfCc4Ujw45Ee2kzC2jT En0x5sRWDak4e8zA1e3o9BuRnmRfb056nKwvPHIlIwbKs+WkUnR4iVSULKFHnJjO LzFCYF7YOC422injf2wCXeehgBd1Pf9PoNdgw0k9fC3Sqew51JRLs3c8jc7bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/BcU3+NPg3qxBCrt5bpaV1mseD8wHwYDVR0j BBgwFoAU69qTmzfzboqfWBsQNuAcMvHz2d8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzEyYTE0Ni1mOTU0LTQ3ZTMtYjkzZi05MmMyZmU2ZDg5ZWEvMC9FQkRBOTM5QjM3 RjM2RThBOUY1ODFCMTAzNkUwMUMzMkYxRjNEOURGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUJEQTkzOUIzN0YzNkU4QTlGNTgxQjEwMzZFMDFDMzJGMUYz RDlERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjMxMmExNDYtZjk1NC00N2UzLWI5 M2YtOTJjMmZlNmQ4OWVhLzAvRUJEQTkzOUIzN0YzNkU4QTlGNTgxQjEwMzZFMDFD MzJGMUYzRDlERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHBmiSTF+bpOch+c3vo4TPEZL1mt0n0sdOrt eH5LtWPqqnK+/U2/Mia+foOXZwnJJ05F7nW6hNXNRFCPSQcTjxPuN4x5M1IKwE9Q 0dnGgXrxNlVZHNy/Lpd2Bc/1SAVok9A/p6dv5KL2wmFjcepaWxrA8VSf8mZapjbs e7WX2gHo5jCwmACbTvepqECc6h3n5HJVFvww9QalToYnLsGJFEwgnyEMioImHI1R hLD+yi7dcbpNOBk9KvfOuxhS9jPqLpbR3gduWws0ifPSP0d/izvJrqnAlbfLiM/L XzgRx3ARrgJSosmHKIXF81e0VJnBcgtOH/O7qYW19qHMkSaeFTA= -----END CERTIFICATE-----Generated at Thu Mar 26 15:43:04 2026 by rpki-client