$ rpki-client -vvf repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft File: EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft (raw, json) Hash identifier: DMRYCXRV8B/uH2WyrAUtsT6dtNq8D5ikgzCg1mLk5vk= Subject key identifier: 55:89:7C:8A:73:0B:59:8B:E4:E9:C2:3B:7E:BD:46:F4:BD:02:B6:86 Authority key identifier: EE:72:DE:38:4F:9A:B7:FA:D6:C3:B2:86:3A:5D:B1:28:1E:5E:DC:A1 Certificate issuer: /CN=EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1 Certificate serial: 20E98FDB9B7737B7E09C627C120E3DC9D387F3D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft Manifest number: 017E Signing time: Mon 23 Mar 2026 22:40:47 +0000 Manifest this update: Mon 23 Mar 2026 22:35:47 +0000 Manifest next update: Fri 27 Mar 2026 10:07:47 +0000 Files and hashes: 1: EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.crl (hash: XJ667AtSrOahZ8kVGKoYyxUSZc3Ii3SZBYYFArBJ530=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.crl rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 10:07:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:e9:8f:db:9b:77:37:b7:e0:9c:62:7c:12:0e:3d:c9:d3:87:f3:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1 Validity Not Before: Mar 23 22:35:47 2026 GMT Not After : Mar 27 10:07:47 2026 GMT Subject: CN=55897C8A730B598BE4E9C23B7EBD46F4BD02B686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:56:03:72:ed:37:92:4e:ac:07:57:de:bc:1b: db:fe:71:07:c3:7c:33:12:57:ac:c4:ee:69:8b:09: f9:0b:74:d3:e1:92:c3:5b:1a:4b:2d:85:cd:c5:e4: 8e:25:bc:b9:b7:4b:3d:ae:48:e7:cb:65:54:e0:c3: 54:c3:a4:99:a6:69:21:20:ae:2e:ea:23:c9:3a:31: c2:c7:6e:5c:8a:c2:9f:b3:de:ae:7d:6c:7a:a7:07: 90:3d:b9:e5:cf:86:af:b0:dd:7a:06:20:8c:c3:49: d5:b1:c2:e1:8b:90:0b:c0:44:00:c9:29:23:5c:b9: 69:53:6b:f5:e1:7e:36:84:fe:f0:9c:cb:71:c0:eb: b6:5f:30:0d:eb:f1:08:1d:75:d0:55:55:66:5f:7f: 4c:ba:da:c3:ba:f6:37:e2:7b:a8:dc:c5:cb:a7:cb: 13:58:13:a5:97:ea:77:43:a1:3c:3c:c0:55:8d:b3: 04:fe:7b:16:4b:4a:d0:be:6d:16:b0:10:ec:f2:73: 43:c1:c4:83:4c:5c:46:20:fc:de:5e:02:e2:c8:ff: 03:d2:bf:35:1c:00:45:f4:52:b0:a7:08:04:81:19: c8:d4:13:b9:84:f4:8f:ab:28:e3:80:b2:0b:51:8e: 44:49:25:8e:27:cc:e4:e1:98:13:3b:f4:12:f2:b6: ea:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:89:7C:8A:73:0B:59:8B:E4:E9:C2:3B:7E:BD:46:F4:BD:02:B6:86 X509v3 Authority Key Identifier: keyid:EE:72:DE:38:4F:9A:B7:FA:D6:C3:B2:86:3A:5D:B1:28:1E:5E:DC:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:f6:1e:07:4d:2e:e1:e6:72:05:89:9d:6a:6b:46:c7:87:5f: 27:25:1b:c5:61:b7:36:bd:9b:9b:dc:fa:10:61:2e:12:8a:fc: 0d:21:5a:84:04:d2:5b:a3:92:7c:27:34:c3:8f:74:f6:8b:c1: 61:e4:ac:10:85:4a:43:63:7e:08:5d:d9:a9:f9:0d:76:23:32: d6:00:51:22:1d:dd:42:72:d1:f4:d4:65:69:e5:58:9e:68:a2: 78:d7:e5:cd:48:29:98:c7:a4:db:aa:e8:fb:29:9b:a7:0d:37: 63:65:f9:8e:eb:06:cf:34:38:fa:8f:fc:52:cf:5a:a7:bd:73: 8d:5f:b4:38:3c:d8:c7:04:3e:42:1a:d9:2b:5c:56:86:69:f7: 6b:bc:0f:a8:88:fe:6e:71:d9:8c:08:a0:9d:fd:7f:87:81:1b: 9e:d7:17:1e:86:da:21:3b:cd:9b:4a:d4:62:38:54:a5:83:31: 6e:3d:3b:2e:d8:e4:87:0c:99:d5:2f:6b:e2:9d:f6:5b:05:40: d8:72:a1:90:ee:89:01:87:d2:96:20:aa:2b:f3:6d:29:39:be: cb:da:bd:9c:86:71:1e:c9:2f:b7:53:70:e0:a2:38:4c:cf:6b: 4d:a9:a1:3d:46:c7:85:c0:c4:88:e3:16:ef:09:7c:ef:5e:d5: 49:6f:51:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIOmP25t3N7fgnGJ8Eg49ydOH89AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU3MkRFMzg0RjlBQjdGQUQ2QzNCMjg2M0E1REIxMjgx RTVFRENBMTAeFw0yNjAzMjMyMjM1NDdaFw0yNjAzMjcxMDA3NDdaMDMxMTAvBgNV BAMTKDU1ODk3QzhBNzMwQjU5OEJFNEU5QzIzQjdFQkQ0NkY0QkQwMkI2ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbVgNy7TeSTqwHV968G9v+cQfD fDMSV6zE7mmLCfkLdNPhksNbGksthc3F5I4lvLm3Sz2uSOfLZVTgw1TDpJmmaSEg ri7qI8k6McLHblyKwp+z3q59bHqnB5A9ueXPhq+w3XoGIIzDSdWxwuGLkAvARADJ KSNcuWlTa/XhfjaE/vCcy3HA67ZfMA3r8QgdddBVVWZff0y62sO69jfie6jcxcun yxNYE6WX6ndDoTw8wFWNswT+exZLStC+bRawEOzyc0PBxINMXEYg/N5eAuLI/wPS vzUcAEX0UrCnCASBGcjUE7mE9I+rKOOAsgtRjkRJJY4nzOThmBM79BLyturnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVYl8inMLWYvk6cI7fr1G9L0CtoYwHwYDVR0j BBgwFoAU7nLeOE+at/rWw7KGOl2xKB5e3KEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NTdlNjg3OC02Y2IyLTRhNWYtYjU1My1iY2ViMmM5NWM3NmMvMC9FRTcyREUzODRG OUFCN0ZBRDZDM0IyODYzQTVEQjEyODFFNUVEQ0ExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUU3MkRFMzg0RjlBQjdGQUQ2QzNCMjg2M0E1REIxMjgxRTVF RENBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzU3ZTY4NzgtNmNiMi00YTVmLWI1 NTMtYmNlYjJjOTVjNzZjLzAvRUU3MkRFMzg0RjlBQjdGQUQ2QzNCMjg2M0E1REIx MjgxRTVFRENBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAb2HgdNLuHmcgWJnWprRseHXyclG8Vhtza9 m5vc+hBhLhKK/A0hWoQE0lujknwnNMOPdPaLwWHkrBCFSkNjfghd2an5DXYjMtYA USId3UJy0fTUZWnlWJ5oonjX5c1IKZjHpNuq6Pspm6cNN2Nl+Y7rBs80OPqP/FLP Wqe9c41ftDg82McEPkIa2StcVoZp92u8D6iI/m5x2YwIoJ39f4eBG57XFx6G2iE7 zZtK1GI4VKWDMW49Oy7Y5IcMmdUva+Kd9lsFQNhyoZDuiQGH0pYgqivzbSk5vsva vZyGcR7JL7dTcOCiOEzPa02poT1Gx4XAxIjjFu8JfO9e1UlvUaA= -----END CERTIFICATE-----Generated at Thu Mar 26 05:47:45 2026 by rpki-client