$ rpki-client -vvf repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft File: EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft (raw, json) Hash identifier: +/1U609/02TfxrYeo0mxUcGUGNnMxI6DW9rv5GGl2Jg= Subject key identifier: AC:64:29:41:C5:05:03:9A:55:97:62:2E:04:FA:C9:E2:44:29:93:65 Authority key identifier: EC:62:A9:49:70:E5:6A:C9:FE:8B:82:8A:54:2B:7E:DB:A3:D1:16:D5 Certificate issuer: /CN=EC62A94970E56AC9FE8B828A542B7EDBA3D116D5 Certificate serial: 4B2A12A4F59E6AC58D50E7B2F99CD50E5B78A2B0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft Manifest number: 0560 Signing time: Wed 25 Mar 2026 16:31:50 +0000 Manifest this update: Wed 25 Mar 2026 16:26:50 +0000 Manifest next update: Sun 29 Mar 2026 00:37:50 +0000 Files and hashes: 1: 3130332e362e3231342e302f32342d3234203d3e20313331313132.roa (hash: F0a3JFzr6TEGFg4XROWEIEBL9cNyd2bfiVU6lzFtCLY=) 2: 323030313a6466303a373434303a3a2f34382d3438203d3e20313331313132.roa (hash: KkIhRaLs3sWTl521rsd4vYL4F4GrP12Jx5XSNhBN/i4=) 3: EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.crl (hash: svRkZQ9nvPgjSphvF9or+XIAyLD3sRR/Wxpxer/5Kj8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.crl rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 00:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:2a:12:a4:f5:9e:6a:c5:8d:50:e7:b2:f9:9c:d5:0e:5b:78:a2:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC62A94970E56AC9FE8B828A542B7EDBA3D116D5 Validity Not Before: Mar 25 16:26:50 2026 GMT Not After : Mar 29 00:37:50 2026 GMT Subject: CN=AC642941C505039A5597622E04FAC9E244299365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e2:0b:62:10:32:e7:fd:33:3f:52:0e:40:b9: ab:39:72:7f:27:2f:d0:64:c6:c9:63:f8:1c:a6:ae: 1c:db:f1:7f:76:79:ee:b3:b6:c0:30:78:6f:72:99: 3f:c5:18:21:77:77:ef:56:75:15:e6:25:3e:d7:6e: bd:ee:04:e0:84:3d:a1:1d:20:8b:1f:bf:ee:a6:6b: 87:07:63:64:64:e5:2a:f4:2a:0d:5e:64:01:ed:66: 84:9c:42:f6:01:b2:57:5b:43:f0:8c:80:c4:61:29: aa:bd:49:ad:72:1a:27:7c:8c:23:6c:91:b5:60:cd: f5:52:89:4c:02:73:ca:3b:fb:21:e9:f4:61:6e:5b: 3f:39:9f:60:df:e0:73:03:84:fd:fb:e5:54:91:40: f4:4b:3d:26:67:cc:2e:d5:97:62:08:49:88:dd:6c: 6f:61:e2:52:18:6a:c3:7d:95:76:22:36:51:1a:21: 90:45:f0:8c:76:fd:8f:53:e5:fe:1b:9e:4a:a5:3b: 34:97:3a:a2:57:f1:c0:ef:46:20:52:11:19:c8:80: f3:b0:cc:ae:89:2a:30:9c:54:7d:b5:65:47:36:c0: 01:76:1d:5f:43:c8:a3:ef:03:a8:a4:c4:6f:1a:11: 51:44:3c:de:61:7e:4c:1f:80:f5:48:32:1d:e3:58: 82:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:64:29:41:C5:05:03:9A:55:97:62:2E:04:FA:C9:E2:44:29:93:65 X509v3 Authority Key Identifier: keyid:EC:62:A9:49:70:E5:6A:C9:FE:8B:82:8A:54:2B:7E:DB:A3:D1:16:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:89:34:3b:db:9d:da:44:00:57:00:aa:73:98:9b:de:15:93: 88:17:ce:58:45:dc:3d:29:a9:01:f3:6d:ab:68:9e:06:82:94: 4c:a8:6e:89:d0:ee:8f:94:37:82:19:d6:b4:f9:8a:a2:1e:ad: 16:ef:2d:42:13:f0:b1:26:2e:b9:2d:51:4b:5b:93:3a:2d:bd: 37:88:a1:66:29:3b:a5:50:49:fc:2c:f4:d9:a6:9c:c3:6f:c2: c9:06:59:12:68:35:37:ae:e3:c4:49:77:02:f4:52:f2:3e:02: 07:40:e0:56:3d:16:85:e4:72:97:7e:56:40:d0:b8:28:ff:1b: e4:c9:42:3d:61:36:29:f7:d0:f6:df:d4:bf:28:61:80:2f:f1: a5:f9:7b:33:fb:4b:07:ba:ac:ee:f2:6e:cb:2d:27:32:c6:12: 5b:96:c2:9d:eb:43:ac:b3:e2:c0:5f:b1:32:ac:17:23:8e:45: fc:82:60:5e:ef:02:63:4b:5f:bc:97:2c:21:cb:fd:cf:68:2b: 06:14:56:94:bd:c8:7a:9a:3e:28:c9:41:ee:7d:48:d6:4c:6b: 26:75:4d:c1:83:30:38:f1:ca:ee:71:70:25:ac:af:de:67:ed: 3a:64:6f:5a:e6:8f:5b:90:c8:40:ac:b2:e6:85:47:f4:17:91: f8:3e:86:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSyoSpPWeasWNUOey+ZzVDlt4orAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM2MkE5NDk3MEU1NkFDOUZFOEI4MjhBNTQyQjdFREJB M0QxMTZENTAeFw0yNjAzMjUxNjI2NTBaFw0yNjAzMjkwMDM3NTBaMDMxMTAvBgNV BAMTKEFDNjQyOTQxQzUwNTAzOUE1NTk3NjIyRTA0RkFDOUUyNDQyOTkzNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR4gtiEDLn/TM/Ug5Auas5cn8n L9Bkxslj+Bymrhzb8X92ee6ztsAweG9ymT/FGCF3d+9WdRXmJT7Xbr3uBOCEPaEd IIsfv+6ma4cHY2Rk5Sr0Kg1eZAHtZoScQvYBsldbQ/CMgMRhKaq9Sa1yGid8jCNs kbVgzfVSiUwCc8o7+yHp9GFuWz85n2Df4HMDhP375VSRQPRLPSZnzC7Vl2IISYjd bG9h4lIYasN9lXYiNlEaIZBF8Ix2/Y9T5f4bnkqlOzSXOqJX8cDvRiBSERnIgPOw zK6JKjCcVH21ZUc2wAF2HV9DyKPvA6ikxG8aEVFEPN5hfkwfgPVIMh3jWIKJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrGQpQcUFA5pVl2IuBPrJ4kQpk2UwHwYDVR0j BBgwFoAU7GKpSXDlasn+i4KKVCt+26PRFtUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODdmOGY4Mi0zN2JiLTQ5ODMtOTNjYS01ZTA2NzBhYjAyZTMvMC9FQzYyQTk0OTcw RTU2QUM5RkU4QjgyOEE1NDJCN0VEQkEzRDExNkQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUM2MkE5NDk3MEU1NkFDOUZFOEI4MjhBNTQyQjdFREJBM0Qx MTZENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjg3ZjhmODItMzdiYi00OTgzLTkz Y2EtNWUwNjcwYWIwMmUzLzAvRUM2MkE5NDk3MEU1NkFDOUZFOEI4MjhBNTQyQjdF REJBM0QxMTZENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHCJNDvbndpEAFcAqnOYm94Vk4gXzlhF3D0p qQHzbatongaClEyobonQ7o+UN4IZ1rT5iqIerRbvLUIT8LEmLrktUUtbkzotvTeI oWYpO6VQSfws9NmmnMNvwskGWRJoNTeu48RJdwL0UvI+AgdA4FY9FoXkcpd+VkDQ uCj/G+TJQj1hNin30Pbf1L8oYYAv8aX5ezP7Swe6rO7ybsstJzLGEluWwp3rQ6yz 4sBfsTKsFyOORfyCYF7vAmNLX7yXLCHL/c9oKwYUVpS9yHqaPijJQe59SNZMayZ1 TcGDMDjxyu5xcCWsr95n7Tpkb1rmj1uQyECssuaFR/QXkfg+hpA= -----END CERTIFICATE-----Generated at Thu Mar 26 07:39:39 2026 by rpki-client