$ rpki-client -vvf repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft File: ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft (raw, json) Hash identifier: 9ccBSIIdT8NorV0nMyFuCtVMdmHxFaQbpFHjT4dEevM= Subject key identifier: 1A:3E:1F:B8:C9:EF:3A:D7:FF:C2:60:A4:73:E0:72:59:92:0A:56:E3 Authority key identifier: ED:3C:E7:26:45:63:AD:B9:40:EA:FA:F4:BD:87:CD:CD:A9:1C:A1:5A Certificate issuer: /CN=ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A Certificate serial: 16DF39F4D94C9C126C7CC980B1AE4EF7CC6CAE3C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft Manifest number: 0256 Signing time: Tue 24 Mar 2026 19:01:23 +0000 Manifest this update: Tue 24 Mar 2026 18:56:23 +0000 Manifest next update: Sat 28 Mar 2026 03:35:23 +0000 Files and hashes: 1: 3130332e3133352e34382e302f32322d3234203d3e203338333230.roa (hash: lW1S43/pcoUgHysASo7Fj4hF5yGyOMccC2jRCS55KX8=) 2: ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.crl (hash: syVK2ZiEelu7fv6OhMpCmAwdXklJhwZ/njmWg1ydyQ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.crl rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 03:35:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:df:39:f4:d9:4c:9c:12:6c:7c:c9:80:b1:ae:4e:f7:cc:6c:ae:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A Validity Not Before: Mar 24 18:56:23 2026 GMT Not After : Mar 28 03:35:23 2026 GMT Subject: CN=1A3E1FB8C9EF3AD7FFC260A473E07259920A56E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:08:c5:cd:39:41:19:2d:72:de:b7:c7:68:6d: 29:49:1c:5f:20:3b:72:87:25:04:74:0b:30:17:bc: 30:b1:9c:a7:4c:04:88:30:5f:43:9c:17:11:d1:a8: ce:12:3d:9c:7d:71:0e:15:a5:d0:be:d5:c9:43:8d: 43:e0:52:b3:dc:bb:1d:a6:64:d7:c7:ce:e6:9f:95: 10:f0:b2:a3:ba:f6:1e:7f:8c:e8:a9:6f:66:36:7d: 31:ac:7e:59:0c:46:51:9f:26:45:23:fd:c0:fd:58: 5e:a6:4d:b2:7f:c3:48:6a:f0:e1:71:9c:b3:60:f8: cd:e3:e9:ca:a9:b7:d9:97:69:36:23:f5:d9:77:81: 25:13:60:bf:20:a3:02:17:2f:44:e1:88:5c:b2:66: fa:ee:b1:71:6c:96:bd:86:36:a1:08:e3:4a:4e:72: 57:dc:f2:f8:3f:4d:87:0b:26:83:5b:a1:fd:c8:46: 2c:31:9e:15:53:3b:9b:65:6f:86:c3:5e:3a:63:84: fe:b9:93:7a:27:66:c3:9d:9f:72:8b:48:3f:91:17: ab:85:1d:34:46:a9:de:ca:cb:14:83:fb:81:31:df: ba:0b:a3:9c:0c:6b:83:44:99:b2:67:bd:54:b0:49: c8:a6:fc:9c:2c:82:99:2b:83:fd:79:bb:f0:22:df: 09:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:3E:1F:B8:C9:EF:3A:D7:FF:C2:60:A4:73:E0:72:59:92:0A:56:E3 X509v3 Authority Key Identifier: keyid:ED:3C:E7:26:45:63:AD:B9:40:EA:FA:F4:BD:87:CD:CD:A9:1C:A1:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:3d:da:eb:32:84:c9:6e:c2:88:22:c5:10:58:f8:b0:32:d3: 70:73:1e:dc:2e:42:0d:0d:02:0f:fd:cf:ad:e2:1b:58:45:b4: 27:54:f4:65:0c:cd:ca:0a:a7:f3:e0:ba:ba:5a:2b:85:cf:25: 2c:09:90:2f:db:11:78:4a:54:af:e1:97:2d:2a:72:2b:f2:91: 74:b4:45:d8:12:c1:e8:af:c0:d3:d9:b3:92:83:1f:03:ec:02: 19:26:46:c6:d6:72:8b:07:f9:be:c3:47:cb:42:90:f1:a8:05: 76:ea:34:b5:15:57:4a:7e:e3:3a:46:e2:4a:95:b6:52:53:75: e5:13:7e:03:26:75:b1:0c:45:52:da:cd:b3:c3:bf:7c:d9:36: 67:8d:03:2e:df:e9:80:de:12:5d:1a:83:d5:8e:db:7e:94:55: 4a:8d:9e:38:c7:10:eb:43:f7:49:fc:00:49:dd:cb:cb:ed:5e: b5:a4:25:32:dc:2b:16:38:cc:aa:87:b6:a0:36:80:5c:6c:d2: 21:87:1f:2d:ff:55:1b:fc:21:22:cd:e2:87:b0:4c:f6:41:c4: f1:97:8a:18:47:4e:45:92:ee:2d:04:d7:68:fd:d3:fe:df:fe: 7e:54:9e:34:14:8d:c7:e1:3f:bb:76:8f:d4:01:4c:6f:6b:51: 40:7c:f2:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFt859NlMnBJsfMmAsa5O98xsrjwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQzQ0U3MjY0NTYzQURCOTQwRUFGQUY0QkQ4N0NEQ0RB OTFDQTE1QTAeFw0yNjAzMjQxODU2MjNaFw0yNjAzMjgwMzM1MjNaMDMxMTAvBgNV BAMTKDFBM0UxRkI4QzlFRjNBRDdGRkMyNjBBNDczRTA3MjU5OTIwQTU2RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5CMXNOUEZLXLet8dobSlJHF8g O3KHJQR0CzAXvDCxnKdMBIgwX0OcFxHRqM4SPZx9cQ4VpdC+1clDjUPgUrPcux2m ZNfHzuaflRDwsqO69h5/jOipb2Y2fTGsflkMRlGfJkUj/cD9WF6mTbJ/w0hq8OFx nLNg+M3j6cqpt9mXaTYj9dl3gSUTYL8gowIXL0ThiFyyZvrusXFslr2GNqEI40pO clfc8vg/TYcLJoNbof3IRiwxnhVTO5tlb4bDXjpjhP65k3onZsOdn3KLSD+RF6uF HTRGqd7KyxSD+4Ex37oLo5wMa4NEmbJnvVSwScim/Jwsgpkrg/15u/Ai3wnxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGj4fuMnvOtf/wmCkc+ByWZIKVuMwHwYDVR0j BBgwFoAU7TznJkVjrblA6vr0vYfNzakcoVowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Y2NjMmFmNC1hNjJkLTQ3MDgtYjY4OC0xODkyNTk0YmE5ODkvMC9FRDNDRTcyNjQ1 NjNBREI5NDBFQUZBRjRCRDg3Q0RDREE5MUNBMTVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUQzQ0U3MjY0NTYzQURCOTQwRUFGQUY0QkQ4N0NEQ0RBOTFD QTE1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGNjYzJhZjQtYTYyZC00NzA4LWI2 ODgtMTg5MjU5NGJhOTg5LzAvRUQzQ0U3MjY0NTYzQURCOTQwRUFGQUY0QkQ4N0NE Q0RBOTFDQTE1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN092usyhMluwogixRBY+LAy03BzHtwuQg0N Ag/9z63iG1hFtCdU9GUMzcoKp/PgurpaK4XPJSwJkC/bEXhKVK/hly0qcivykXS0 RdgSweivwNPZs5KDHwPsAhkmRsbWcosH+b7DR8tCkPGoBXbqNLUVV0p+4zpG4kqV tlJTdeUTfgMmdbEMRVLazbPDv3zZNmeNAy7f6YDeEl0ag9WO236UVUqNnjjHEOtD 90n8AEndy8vtXrWkJTLcKxY4zKqHtqA2gFxs0iGHHy3/VRv8ISLN4oewTPZBxPGX ihhHTkWS7i0E12j90/7f/n5UnjQUjcfhP7t2j9QBTG9rUUB88gE= -----END CERTIFICATE-----Generated at Thu Mar 26 17:38:50 2026 by rpki-client