$ rpki-client -vvf repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.mft File: EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.mft (raw, json) Hash identifier: /sQwXK35x4E9+1pfKhjktwzYMvMJJ0hUvpHEZr/mYbE= Subject key identifier: 41:0E:2D:BD:8B:1F:55:2A:D6:03:52:DD:CC:36:A0:1B:3F:1B:5C:41 Authority key identifier: EE:CC:4A:44:F0:95:94:EB:71:1E:A1:F6:F3:4B:95:8D:19:A3:B4:FD Certificate issuer: /CN=EECC4A44F09594EB711EA1F6F34B958D19A3B4FD Certificate serial: 43468AC2BD168F8374D8C2E39C83E4568BB7AECC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.mft Manifest number: 01F2 Signing time: Thu 26 Mar 2026 04:21:33 +0000 Manifest this update: Thu 26 Mar 2026 04:16:33 +0000 Manifest next update: Sun 29 Mar 2026 07:06:33 +0000 Files and hashes: 1: 3130332e3230342e31352e302f32342d3234203d3e20313530393230.roa (hash: fgMkptBXT/jMbSHjGdDwWPnPAJdd4An6F4EOu9VOo4k=) 2: EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.crl (hash: kpQKXE6gnPxPIGs6vb1TlFBF3W1ucLAJbn0rR3dkl0Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.crl rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 07:06:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:46:8a:c2:bd:16:8f:83:74:d8:c2:e3:9c:83:e4:56:8b:b7:ae:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EECC4A44F09594EB711EA1F6F34B958D19A3B4FD Validity Not Before: Mar 26 04:16:33 2026 GMT Not After : Mar 29 07:06:33 2026 GMT Subject: CN=410E2DBD8B1F552AD60352DDCC36A01B3F1B5C41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9f:80:04:e4:7c:84:89:82:b2:08:55:75:bb: 13:40:92:13:23:03:d1:bb:af:46:ea:96:b3:9e:0a: 78:04:ef:01:87:aa:2e:49:2f:d9:9c:17:e8:ad:52: 03:0d:d4:c0:5f:9b:45:07:35:c4:11:a1:a3:2f:2e: 4a:b2:32:0b:9e:93:3e:c3:13:81:b8:ba:88:62:a7: 87:a7:a3:a9:9f:9c:16:ac:84:a8:a7:58:09:de:99: fc:ec:8e:3f:16:55:de:f9:91:eb:e8:d7:6f:64:a4: 06:4c:e4:48:3f:64:c6:2d:fa:78:de:95:b1:1a:7b: eb:df:aa:18:ce:37:dd:a1:f3:40:a1:b2:ff:83:18: 37:89:c9:27:b7:a1:8b:6d:3e:ec:aa:2d:9d:4d:18: a0:31:4e:fc:1c:f9:57:03:5b:28:d7:a9:f1:18:39: 17:44:aa:25:f5:3d:90:67:69:fd:04:11:ec:79:5b: 4e:70:bd:eb:cd:86:2a:47:de:4b:df:00:6a:26:13: 98:56:4c:bd:44:19:d7:71:21:6c:72:49:33:b2:56: b4:fa:f1:3f:48:91:8a:72:a2:55:e4:79:ab:76:b5: b9:81:7b:f8:ba:c5:af:2e:1d:fa:46:9b:26:09:d7: da:96:17:fd:b2:2c:b6:cf:ca:20:9b:1f:2f:1a:d1: b7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:0E:2D:BD:8B:1F:55:2A:D6:03:52:DD:CC:36:A0:1B:3F:1B:5C:41 X509v3 Authority Key Identifier: keyid:EE:CC:4A:44:F0:95:94:EB:71:1E:A1:F6:F3:4B:95:8D:19:A3:B4:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:a5:d7:f7:7a:d5:2f:48:ab:0b:ae:94:9b:9d:10:94:c2:9b: 37:c2:ac:cf:17:be:e9:22:62:3e:03:7b:c8:b7:3a:cf:b0:46: 01:6e:35:47:ac:00:40:6a:02:a4:ce:90:13:d5:1d:7d:05:84: dd:41:e2:fa:3f:1c:d3:5c:59:29:19:cf:92:1e:eb:b7:6e:69: a9:14:96:e7:2f:59:e8:36:93:49:af:79:0d:71:e6:b7:a5:68: 2d:aa:b8:fe:a0:33:76:e9:cc:56:15:2b:5e:56:e3:07:34:27: cf:ac:21:c0:62:10:0c:00:f8:55:27:51:d9:a3:ff:ad:dc:ad: 6d:1c:a5:70:04:83:b0:ec:67:6d:f1:6b:eb:7b:b3:95:f8:21: 03:95:8f:4f:05:88:ba:1f:25:6d:ce:1f:56:3d:cc:3a:02:70: d1:bd:06:7b:c0:c7:be:bd:b4:d5:46:7c:9e:3a:b0:7e:73:32: 04:a5:95:90:d1:25:e7:92:74:f6:39:71:ed:e2:e1:76:54:41: 99:78:89:1d:b0:bd:9a:8b:08:6d:a1:fc:9e:a4:a5:a6:1f:66: ba:3d:e8:6a:b0:8a:fc:19:ad:fd:21:fc:50:b3:97:82:21:b2: 53:90:e4:0d:02:90:4d:19:29:f3:0f:d2:36:0d:b6:78:67:1f: 4d:e7:2b:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ0aKwr0Wj4N02MLjnIPkVou3rswwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVDQzRBNDRGMDk1OTRFQjcxMUVBMUY2RjM0Qjk1OEQx OUEzQjRGRDAeFw0yNjAzMjYwNDE2MzNaFw0yNjAzMjkwNzA2MzNaMDMxMTAvBgNV BAMTKDQxMEUyREJEOEIxRjU1MkFENjAzNTJERENDMzZBMDFCM0YxQjVDNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCln4AE5HyEiYKyCFV1uxNAkhMj A9G7r0bqlrOeCngE7wGHqi5JL9mcF+itUgMN1MBfm0UHNcQRoaMvLkqyMguekz7D E4G4uohip4eno6mfnBashKinWAnemfzsjj8WVd75kevo129kpAZM5Eg/ZMYt+nje lbEae+vfqhjON92h80Chsv+DGDeJySe3oYttPuyqLZ1NGKAxTvwc+VcDWyjXqfEY ORdEqiX1PZBnaf0EEex5W05wvevNhipH3kvfAGomE5hWTL1EGddxIWxySTOyVrT6 8T9IkYpyolXkeat2tbmBe/i6xa8uHfpGmyYJ19qWF/2yLLbPyiCbHy8a0bcFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQQ4tvYsfVSrWA1LdzDagGz8bXEEwHwYDVR0j BBgwFoAU7sxKRPCVlOtxHqH280uVjRmjtP0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OWZjOTk2Zi03MmNhLTRkNmItYTBlNy1mZjViYzQyYjA1ODkvMC9FRUNDNEE0NEYw OTU5NEVCNzExRUExRjZGMzRCOTU4RDE5QTNCNEZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUVDQzRBNDRGMDk1OTRFQjcxMUVBMUY2RjM0Qjk1OEQxOUEz QjRGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjlmYzk5NmYtNzJjYS00ZDZiLWEw ZTctZmY1YmM0MmIwNTg5LzAvRUVDQzRBNDRGMDk1OTRFQjcxMUVBMUY2RjM0Qjk1 OEQxOUEzQjRGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKel1/d61S9IqwuulJudEJTCmzfCrM8Xvuki Yj4De8i3Os+wRgFuNUesAEBqAqTOkBPVHX0FhN1B4vo/HNNcWSkZz5Ie67duaakU lucvWeg2k0mveQ1x5relaC2quP6gM3bpzFYVK15W4wc0J8+sIcBiEAwA+FUnUdmj /63crW0cpXAEg7DsZ23xa+t7s5X4IQOVj08FiLofJW3OH1Y9zDoCcNG9BnvAx769 tNVGfJ46sH5zMgSllZDRJeeSdPY5ce3i4XZUQZl4iR2wvZqLCG2h/J6kpaYfZro9 6GqwivwZrf0h/FCzl4IhslOQ5A0CkE0ZKfMP0jYNtnhnH03nK94= -----END CERTIFICATE-----Generated at Thu Mar 26 10:13:47 2026 by rpki-client