$ rpki-client -vvf repo-rpki.idnic.net/repo/611a3980-a32e-4df9-8e52-0be0d343cc0b/0/EE0318C1CF5D037492EFBC172300E2E062AFEFCB.mft File: EE0318C1CF5D037492EFBC172300E2E062AFEFCB.mft (raw, json) Hash identifier: VAj0m+DQajbRuo5XRbLm1BKI8czUNwYSvvjGymiqtqM= Subject key identifier: BE:6D:EE:C2:D8:58:E2:39:3F:08:28:22:A4:AB:AE:7B:E9:B6:6D:80 Authority key identifier: EE:03:18:C1:CF:5D:03:74:92:EF:BC:17:23:00:E2:E0:62:AF:EF:CB Certificate issuer: /CN=EE0318C1CF5D037492EFBC172300E2E062AFEFCB Certificate serial: 21DC7B7FD85FCAAA06874457ED8EFE8B37543825 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE0318C1CF5D037492EFBC172300E2E062AFEFCB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/611a3980-a32e-4df9-8e52-0be0d343cc0b/0/EE0318C1CF5D037492EFBC172300E2E062AFEFCB.mft Manifest number: 017F Signing time: Wed 25 Mar 2026 22:32:10 +0000 Manifest this update: Wed 25 Mar 2026 22:27:10 +0000 Manifest next update: Sun 29 Mar 2026 10:13:10 +0000 Files and hashes: 1: EE0318C1CF5D037492EFBC172300E2E062AFEFCB.crl (hash: +PlSvfgvva29VzDK/QDsmNvV2nnM1MVSnVRqDMu+ggc=) 2: 34332e3232382e3137352e302f32342d3234203d3e20313532303235.roa (hash: CibmkAElI9pPo6S/s01oQXP/mAlsm0hzKBETN49DEY4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/611a3980-a32e-4df9-8e52-0be0d343cc0b/0/EE0318C1CF5D037492EFBC172300E2E062AFEFCB.crl rsync://repo-rpki.idnic.net/repo/611a3980-a32e-4df9-8e52-0be0d343cc0b/0/EE0318C1CF5D037492EFBC172300E2E062AFEFCB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE0318C1CF5D037492EFBC172300E2E062AFEFCB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 10:13:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:dc:7b:7f:d8:5f:ca:aa:06:87:44:57:ed:8e:fe:8b:37:54:38:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE0318C1CF5D037492EFBC172300E2E062AFEFCB Validity Not Before: Mar 25 22:27:10 2026 GMT Not After : Mar 29 10:13:10 2026 GMT Subject: CN=BE6DEEC2D858E2393F082822A4ABAE7BE9B66D80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f5:24:17:3d:1d:9e:cb:4b:b7:b7:14:ec:4c: 6c:43:1b:10:ca:ee:d6:cf:2f:47:96:ea:db:17:27: ff:fd:a4:e2:fd:99:b0:11:b0:cb:c8:20:a9:7a:03: a8:d6:48:0a:b9:41:3c:73:13:ad:5f:11:4d:d2:43: 7c:6d:0f:51:84:61:1c:9e:12:4a:c2:b8:ef:8b:15: 1b:90:f9:8b:f7:df:d8:3d:92:bf:18:0e:59:d2:00: e1:9c:c9:43:aa:fa:d7:d5:93:00:83:af:76:53:68: 7b:8b:46:3a:58:c8:68:c5:1f:1b:2e:e9:20:36:f3: 03:9b:18:58:ac:06:1e:ab:55:35:cc:af:e5:bf:32: 83:2a:6e:86:b8:fc:5c:eb:43:0d:e6:ff:e0:fb:5e: 0e:df:f0:80:13:8f:76:be:a2:de:1d:d7:47:77:f2: 7e:2f:20:78:e2:c6:3e:c0:25:f4:45:b2:7e:f8:ff: 50:be:ff:3e:94:9d:df:a1:db:f3:f2:e1:cd:ca:1d: 6a:77:58:50:83:65:31:d0:0b:8b:d4:f9:a0:8b:94: 83:af:a2:51:e8:1a:ce:45:f6:f8:bc:f1:b4:42:1c: 06:e0:b7:d1:a8:0f:5b:f4:24:79:83:5e:13:33:95: 93:3a:13:49:31:1c:31:c0:80:3e:bd:92:d0:61:66: 24:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:6D:EE:C2:D8:58:E2:39:3F:08:28:22:A4:AB:AE:7B:E9:B6:6D:80 X509v3 Authority Key Identifier: keyid:EE:03:18:C1:CF:5D:03:74:92:EF:BC:17:23:00:E2:E0:62:AF:EF:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/611a3980-a32e-4df9-8e52-0be0d343cc0b/0/EE0318C1CF5D037492EFBC172300E2E062AFEFCB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE0318C1CF5D037492EFBC172300E2E062AFEFCB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/611a3980-a32e-4df9-8e52-0be0d343cc0b/0/EE0318C1CF5D037492EFBC172300E2E062AFEFCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:84:b8:a9:4d:83:4d:6a:a3:81:4f:ac:59:20:b3:67:23:1a: 70:fa:d2:5a:b2:de:e8:ac:64:76:19:fb:d0:81:0a:32:57:6f: c0:36:d0:66:2e:c9:14:de:e5:32:c0:5b:57:25:f0:e2:cf:76: d1:05:8b:37:60:87:b8:b3:da:bc:8c:c5:b6:c5:5f:8d:9f:32: 52:5c:d3:df:a0:72:c8:3b:ad:58:2c:6c:56:be:e8:16:0e:37: 84:89:b0:18:0b:e7:68:20:57:a4:81:8f:a7:93:81:5e:4f:9a: d5:55:3c:cc:c7:34:f9:f1:65:f5:f7:36:d8:0d:1a:f3:2c:6a: 08:bf:a0:cd:5c:de:8e:0a:73:e0:f3:aa:ce:76:21:f4:19:26: b7:0f:29:08:08:7b:3a:15:a3:20:5a:2c:4c:85:e6:8d:1f:8b: 4e:f9:f5:6b:4f:01:21:a6:f7:d4:fa:18:26:bd:a9:4e:37:96: 94:81:4f:7e:42:36:92:5f:2d:77:bd:60:85:4b:1d:32:58:da: 07:e7:c6:1b:92:54:56:8f:89:4d:bc:11:04:57:7c:84:94:08: e5:a3:24:df:04:02:3c:19:f2:96:4b:14:1f:f1:44:0b:05:22: 93:d8:7d:b3:9d:7f:40:a3:b8:aa:82:55:1d:23:e2:53:26:87: e1:b9:fa:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIdx7f9hfyqoGh0RX7Y7+izdUOCUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUUwMzE4QzFDRjVEMDM3NDkyRUZCQzE3MjMwMEUyRTA2 MkFGRUZDQjAeFw0yNjAzMjUyMjI3MTBaFw0yNjAzMjkxMDEzMTBaMDMxMTAvBgNV BAMTKEJFNkRFRUMyRDg1OEUyMzkzRjA4MjgyMkE0QUJBRTdCRTlCNjZEODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF9SQXPR2ey0u3txTsTGxDGxDK 7tbPL0eW6tsXJ//9pOL9mbARsMvIIKl6A6jWSAq5QTxzE61fEU3SQ3xtD1GEYRye EkrCuO+LFRuQ+Yv339g9kr8YDlnSAOGcyUOq+tfVkwCDr3ZTaHuLRjpYyGjFHxsu 6SA28wObGFisBh6rVTXMr+W/MoMqboa4/FzrQw3m/+D7Xg7f8IATj3a+ot4d10d3 8n4vIHjixj7AJfRFsn74/1C+/z6Und+h2/Py4c3KHWp3WFCDZTHQC4vU+aCLlIOv olHoGs5F9vi88bRCHAbgt9GoD1v0JHmDXhMzlZM6E0kxHDHAgD69ktBhZiSVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvm3uwthY4jk/CCgipKuue+m2bYAwHwYDVR0j BBgwFoAU7gMYwc9dA3SS77wXIwDi4GKv78swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MTFhMzk4MC1hMzJlLTRkZjktOGU1Mi0wYmUwZDM0M2NjMGIvMC9FRTAzMThDMUNG NUQwMzc0OTJFRkJDMTcyMzAwRTJFMDYyQUZFRkNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUUwMzE4QzFDRjVEMDM3NDkyRUZCQzE3MjMwMEUyRTA2MkFG RUZDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjExYTM5ODAtYTMyZS00ZGY5LThl NTItMGJlMGQzNDNjYzBiLzAvRUUwMzE4QzFDRjVEMDM3NDkyRUZCQzE3MjMwMEUy RTA2MkFGRUZDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJWEuKlNg01qo4FPrFkgs2cjGnD60lqy3uis ZHYZ+9CBCjJXb8A20GYuyRTe5TLAW1cl8OLPdtEFizdgh7iz2ryMxbbFX42fMlJc 09+gcsg7rVgsbFa+6BYON4SJsBgL52ggV6SBj6eTgV5PmtVVPMzHNPnxZfX3NtgN GvMsagi/oM1c3o4Kc+Dzqs52IfQZJrcPKQgIezoVoyBaLEyF5o0fi0759WtPASGm 99T6GCa9qU43lpSBT35CNpJfLXe9YIVLHTJY2gfnxhuSVFaPiU28EQRXfISUCOWj JN8EAjwZ8pZLFB/xRAsFIpPYfbOdf0CjuKqCVR0j4lMmh+G5+sY= -----END CERTIFICATE-----Generated at Thu Mar 26 10:15:10 2026 by rpki-client