$ rpki-client -vvf repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft File: EC39D766063B56E5EA4DBFB2A502298FB995956A.mft (raw, json) Hash identifier: 1yn+A/KCHcS+8lSdLQRChkM4D+D4buUIagsxxW079Dg= Subject key identifier: 10:EF:A8:1A:C4:E4:A7:2A:2D:2C:3C:05:F5:72:CD:71:A9:00:34:D1 Authority key identifier: EC:39:D7:66:06:3B:56:E5:EA:4D:BF:B2:A5:02:29:8F:B9:95:95:6A Certificate issuer: /CN=EC39D766063B56E5EA4DBFB2A502298FB995956A Certificate serial: 207971E0E67A0A653DE96C854A460727086A2C2C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC39D766063B56E5EA4DBFB2A502298FB995956A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft Manifest number: 055C Signing time: Mon 23 Mar 2026 19:50:45 +0000 Manifest this update: Mon 23 Mar 2026 19:45:45 +0000 Manifest next update: Fri 27 Mar 2026 07:01:45 +0000 Files and hashes: 1: 3130332e3133392e32352e302f32342d3234203d3e20313338383738.roa (hash: fXYsqxCjsvIrOq+7nStBZ2/w2ahyZCjmKRe5J8m8wVg=) 2: EC39D766063B56E5EA4DBFB2A502298FB995956A.crl (hash: pDWUZGNlp+OuZgMBgbbjwY3j7U3En6eEUastjeuqRsE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.crl rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC39D766063B56E5EA4DBFB2A502298FB995956A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 07:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:79:71:e0:e6:7a:0a:65:3d:e9:6c:85:4a:46:07:27:08:6a:2c:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC39D766063B56E5EA4DBFB2A502298FB995956A Validity Not Before: Mar 23 19:45:45 2026 GMT Not After : Mar 27 07:01:45 2026 GMT Subject: CN=10EFA81AC4E4A72A2D2C3C05F572CD71A90034D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3b:3b:3c:58:9f:26:94:5a:74:d8:a7:ce:e6: 2e:d3:46:66:67:53:9c:24:13:fa:9a:bb:ad:4f:60: cf:ae:98:0e:cd:0c:7e:41:7a:09:ef:f2:39:f9:92: da:f2:ec:0c:8a:e7:2a:39:f2:2a:a0:9b:84:48:e1: 2f:fe:9e:46:df:90:d2:a3:07:96:39:11:24:ba:73: 6b:2e:7c:bd:46:0e:62:f2:3f:63:22:44:c0:4f:8f: 48:ea:79:14:7c:f0:a7:74:b6:0c:7c:fb:e5:f9:d8: 86:86:0c:51:d6:6b:c9:f4:b4:88:0c:29:2b:b2:aa: 22:fb:2a:3a:55:64:31:69:d1:7f:3a:b2:04:3f:4d: fd:e5:63:c5:83:cb:ab:33:22:11:bc:29:1c:82:c7: 57:f0:48:b8:15:28:39:13:49:c8:93:55:53:35:7a: 92:ad:3d:81:fd:3c:91:a0:59:8b:41:be:04:aa:4d: c4:45:26:77:11:1e:36:ff:3b:bd:07:4b:78:24:48: b7:bf:09:cd:f7:e7:23:e6:fa:84:d4:ff:58:8f:42: 64:7f:19:8d:c6:9f:70:e2:f9:92:f7:9c:0b:21:80: bd:6c:03:aa:89:1b:52:9d:09:80:b5:78:2b:c9:ae: 9f:9f:34:04:ca:4a:ad:97:b5:cd:f7:94:38:96:df: a0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:EF:A8:1A:C4:E4:A7:2A:2D:2C:3C:05:F5:72:CD:71:A9:00:34:D1 X509v3 Authority Key Identifier: keyid:EC:39:D7:66:06:3B:56:E5:EA:4D:BF:B2:A5:02:29:8F:B9:95:95:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC39D766063B56E5EA4DBFB2A502298FB995956A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:1a:17:e0:ea:1d:86:af:4e:57:0c:1b:d8:30:ae:d8:27:e8: 8b:49:14:64:2c:eb:d7:51:0e:41:63:f1:d3:82:4d:51:e4:30: 29:8f:59:9c:00:97:c8:c3:83:fd:fa:69:df:9a:46:f9:0d:d8: f2:a9:89:81:f0:75:bf:44:7f:f8:17:5d:34:38:2d:be:50:25: 8f:21:a0:a0:db:d3:02:ee:f7:8e:f2:e0:be:6b:e7:a6:53:54: 8e:41:f3:9b:b9:7f:8a:02:10:cb:b6:3a:b4:ef:24:10:53:10: d0:e6:3f:c9:4c:93:54:a1:4d:dc:99:07:53:43:c6:4b:31:e2: c3:67:8d:37:1e:df:5c:f3:70:06:60:fc:f1:b9:70:7c:e9:57: 1f:a5:27:1d:3a:88:d5:58:f4:f5:51:c4:b5:72:24:b8:63:c9: df:63:76:dc:74:a7:cc:da:08:39:3a:bb:1a:45:0a:e1:48:7c: f0:69:8e:36:0e:04:d7:a4:54:4c:2b:26:0f:65:56:0f:00:b9: b4:11:4f:08:41:4b:df:44:ac:db:1a:c2:c5:e1:9a:a2:71:53: b2:3d:a1:a2:c3:40:ae:e8:15:ab:b7:89:a9:2d:04:9e:ea:f2: 1c:fa:31:f3:a8:68:af:e0:53:e1:d8:17:18:b0:dc:28:a6:da: e4:e5:83:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIHlx4OZ6CmU96WyFSkYHJwhqLCwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUMzOUQ3NjYwNjNCNTZFNUVBNERCRkIyQTUwMjI5OEZC OTk1OTU2QTAeFw0yNjAzMjMxOTQ1NDVaFw0yNjAzMjcwNzAxNDVaMDMxMTAvBgNV BAMTKDEwRUZBODFBQzRFNEE3MkEyRDJDM0MwNUY1NzJDRDcxQTkwMDM0RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYOzs8WJ8mlFp02KfO5i7TRmZn U5wkE/qau61PYM+umA7NDH5Begnv8jn5ktry7AyK5yo58iqgm4RI4S/+nkbfkNKj B5Y5ESS6c2sufL1GDmLyP2MiRMBPj0jqeRR88Kd0tgx8++X52IaGDFHWa8n0tIgM KSuyqiL7KjpVZDFp0X86sgQ/Tf3lY8WDy6szIhG8KRyCx1fwSLgVKDkTSciTVVM1 epKtPYH9PJGgWYtBvgSqTcRFJncRHjb/O70HS3gkSLe/Cc335yPm+oTU/1iPQmR/ GY3Gn3Di+ZL3nAshgL1sA6qJG1KdCYC1eCvJrp+fNATKSq2Xtc33lDiW36DJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEO+oGsTkpyotLDwF9XLNcakANNEwHwYDVR0j BBgwFoAU7DnXZgY7VuXqTb+ypQIpj7mVlWowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2ZlNDI1NS0xZDkxLTRmY2MtYmNlNC04YTQyYWRmZTNjMjkvMC9FQzM5RDc2NjA2 M0I1NkU1RUE0REJGQjJBNTAyMjk4RkI5OTU5NTZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUMzOUQ3NjYwNjNCNTZFNUVBNERCRkIyQTUwMjI5OEZCOTk1 OTU2QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzNmZTQyNTUtMWQ5MS00ZmNjLWJj ZTQtOGE0MmFkZmUzYzI5LzAvRUMzOUQ3NjYwNjNCNTZFNUVBNERCRkIyQTUwMjI5 OEZCOTk1OTU2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAYaF+DqHYavTlcMG9gwrtgn6ItJFGQs69dR DkFj8dOCTVHkMCmPWZwAl8jDg/36ad+aRvkN2PKpiYHwdb9Ef/gXXTQ4Lb5QJY8h oKDb0wLu947y4L5r56ZTVI5B85u5f4oCEMu2OrTvJBBTENDmP8lMk1ShTdyZB1ND xksx4sNnjTce31zzcAZg/PG5cHzpVx+lJx06iNVY9PVRxLVyJLhjyd9jdtx0p8za CDk6uxpFCuFIfPBpjjYOBNekVEwrJg9lVg8AubQRTwhBS99ErNsawsXhmqJxU7I9 oaLDQK7oFau3iaktBJ7q8hz6MfOoaK/gU+HYFxiw3Cim2uTlgzg= -----END CERTIFICATE-----Generated at Thu Mar 26 07:25:26 2026 by rpki-client