$ rpki-client -vvf repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft File: EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft (raw, json) Hash identifier: QopEqJvgwoFNKmd5UFxlF2BQ/lME3ybG5EL7s7JvFaY= Subject key identifier: 68:E1:04:47:FD:A7:A6:86:81:E2:6D:23:15:80:48:0E:0F:2D:8F:20 Authority key identifier: EE:C1:A7:BF:2D:95:D0:BA:FE:37:10:5E:4B:B1:BB:23:60:1D:D1:DB Certificate issuer: /CN=EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB Certificate serial: 7C4270AF64FBDC21E3A768CB6FC5F38210435C35 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft Manifest number: 0115 Signing time: Tue 24 Mar 2026 14:22:26 +0000 Manifest this update: Tue 24 Mar 2026 14:17:26 +0000 Manifest next update: Fri 27 Mar 2026 16:42:26 +0000 Files and hashes: 1: EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.crl (hash: SzoagdCKqgk90yz9gsi+NIzPxTnjG7+1E12OjBrBqzo=) 2: 3136302e32352e34352e302f32342d3234203d3e20313533303639.roa (hash: pjrXRUj5r2IszWCXojX+FWGkandw2VMiyslpGWMGbUA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.crl rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 16:42:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:42:70:af:64:fb:dc:21:e3:a7:68:cb:6f:c5:f3:82:10:43:5c:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB Validity Not Before: Mar 24 14:17:26 2026 GMT Not After : Mar 27 16:42:26 2026 GMT Subject: CN=68E10447FDA7A68681E26D231580480E0F2D8F20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:af:e6:7b:5e:28:a7:dc:db:64:1f:3c:c8:11: a4:4d:4c:3f:c4:97:c8:9d:9e:a8:01:8d:19:a5:be: 88:90:9f:e9:b7:c9:37:f9:d2:74:62:b6:10:4d:0e: 19:94:9c:8a:04:27:f7:46:18:8f:50:c0:56:50:05: b3:82:90:08:72:94:d3:17:99:a3:e8:3d:e1:f7:78: 22:e1:10:b6:78:0e:ee:f2:6f:25:b2:3f:49:f1:df: b2:4e:de:98:25:c2:88:7d:46:4f:40:ab:c2:be:fd: 05:5b:1a:39:da:45:99:60:68:1e:2d:8a:07:73:f6: 99:52:dd:0b:46:b1:df:98:26:e9:65:20:44:09:58: ea:36:ec:4c:6b:ed:63:ee:e4:35:8b:a8:94:b4:58: 6a:1b:a5:eb:84:eb:6b:4a:91:d3:ae:12:21:44:e6: 92:1b:ff:6c:32:a0:1d:b6:8b:0b:4f:58:24:02:66: 17:87:44:94:bd:34:09:62:ea:6a:f9:72:9a:01:46: 6b:32:cc:7d:8d:65:70:78:2e:5f:e8:d3:e9:0b:00: e4:09:12:56:53:59:a4:b9:ed:c6:eb:14:01:41:f4: 8a:4e:80:74:18:5f:c7:ee:7a:d4:8a:12:77:03:d1: 31:7e:22:dd:89:15:34:ac:a2:e6:ae:55:af:54:55: 30:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:E1:04:47:FD:A7:A6:86:81:E2:6D:23:15:80:48:0E:0F:2D:8F:20 X509v3 Authority Key Identifier: keyid:EE:C1:A7:BF:2D:95:D0:BA:FE:37:10:5E:4B:B1:BB:23:60:1D:D1:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:d0:eb:f9:d4:04:c1:52:d2:94:4a:db:56:4f:49:21:42:41: 54:d3:be:64:44:c3:b0:62:5b:f1:35:c9:cb:26:c0:25:01:e9: 1c:65:98:81:72:31:ea:6d:f1:90:0d:23:dd:a8:2b:e9:2c:c1: 57:fe:1e:5f:47:00:bd:fa:8e:8f:3c:8f:f9:35:46:37:50:31: 7e:62:13:5b:da:27:ee:b2:63:08:87:1b:30:06:d9:68:36:23: 44:21:f7:0f:76:68:c5:bb:5c:c8:23:fd:72:20:29:c7:a8:29: 6f:43:94:ca:42:6b:00:bc:46:b8:77:73:2e:af:73:cd:a2:b2: 3c:54:8d:cc:4a:97:bf:37:40:87:04:36:9a:3a:ae:27:fe:e7: 39:4b:ce:d8:2f:11:5a:08:1b:4d:c8:f7:8b:84:9b:0a:c3:0b: 6e:9c:47:1a:53:71:c6:82:5f:95:ff:6a:2c:5d:52:04:7f:42: 45:db:e4:12:65:b2:4e:d4:9e:2c:df:8a:e5:3b:85:29:eb:0f: eb:96:de:12:08:df:7e:c5:48:16:c1:47:14:49:d2:b5:83:cd: 87:57:03:2e:6c:01:b4:cf:35:0b:9f:68:9e:1e:ef:8a:75:65: 0f:cb:64:57:b0:70:1d:39:3c:59:aa:08:8f:be:a9:d5:88:1c: 3a:99:8e:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfEJwr2T73CHjp2jLb8XzghBDXDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVDMUE3QkYyRDk1RDBCQUZFMzcxMDVFNEJCMUJCMjM2 MDFERDFEQjAeFw0yNjAzMjQxNDE3MjZaFw0yNjAzMjcxNjQyMjZaMDMxMTAvBgNV BAMTKDY4RTEwNDQ3RkRBN0E2ODY4MUUyNkQyMzE1ODA0ODBFMEYyRDhGMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbr+Z7Xiin3NtkHzzIEaRNTD/E l8idnqgBjRmlvoiQn+m3yTf50nRithBNDhmUnIoEJ/dGGI9QwFZQBbOCkAhylNMX maPoPeH3eCLhELZ4Du7ybyWyP0nx37JO3pglwoh9Rk9Aq8K+/QVbGjnaRZlgaB4t igdz9plS3QtGsd+YJullIEQJWOo27Exr7WPu5DWLqJS0WGobpeuE62tKkdOuEiFE 5pIb/2wyoB22iwtPWCQCZheHRJS9NAli6mr5cpoBRmsyzH2NZXB4Ll/o0+kLAOQJ ElZTWaS57cbrFAFB9IpOgHQYX8fuetSKEncD0TF+It2JFTSsouauVa9UVTAHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaOEER/2npoaB4m0jFYBIDg8tjyAwHwYDVR0j BBgwFoAU7sGnvy2V0Lr+NxBeS7G7I2Ad0dswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzY1NjFkNC0yM2M4LTRjOWItODkwZS00ZjI2MzJlNTJjOTcvMC9FRUMxQTdCRjJE OTVEMEJBRkUzNzEwNUU0QkIxQkIyMzYwMUREMURCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRUVDMUE3QkYyRDk1RDBCQUZFMzcxMDVFNEJCMUJCMjM2MDFE RDFEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjM2NTYxZDQtMjNjOC00YzliLTg5 MGUtNGYyNjMyZTUyYzk3LzAvRUVDMUE3QkYyRDk1RDBCQUZFMzcxMDVFNEJCMUJC MjM2MDFERDFEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB3Q6/nUBMFS0pRK21ZPSSFCQVTTvmREw7Bi W/E1ycsmwCUB6RxlmIFyMept8ZANI92oK+kswVf+Hl9HAL36jo88j/k1RjdQMX5i E1vaJ+6yYwiHGzAG2Wg2I0Qh9w92aMW7XMgj/XIgKceoKW9DlMpCawC8Rrh3cy6v c82isjxUjcxKl783QIcENpo6rif+5zlLztgvEVoIG03I94uEmwrDC26cRxpTccaC X5X/aixdUgR/QkXb5BJlsk7UnizfiuU7hSnrD+uW3hII337FSBbBRxRJ0rWDzYdX Ay5sAbTPNQufaJ4e74p1ZQ/LZFewcB05PFmqCI++qdWIHDqZjqE= -----END CERTIFICATE-----Generated at Thu Mar 26 13:53:35 2026 by rpki-client