$ rpki-client -vvf repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.mft File: EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.mft (raw, json) Hash identifier: vVnkDHLLBl9wXHcg60qEWePN3vf9oJ8C1RIIsJFZb48= Subject key identifier: 4A:1D:00:F7:71:0C:AC:03:3E:80:78:5F:EA:3B:48:1E:B0:4D:18:8B Authority key identifier: EE:12:F1:79:A5:D1:F5:2E:C0:33:67:72:82:AE:7E:2E:72:E0:F2:C3 Certificate issuer: /CN=EE12F179A5D1F52EC033677282AE7E2E72E0F2C3 Certificate serial: 6A78EB46BE131EABE97F6A00F8274B8647C3FDCA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.mft Manifest number: 01C8 Signing time: Wed 25 Mar 2026 14:11:28 +0000 Manifest this update: Wed 25 Mar 2026 14:06:28 +0000 Manifest next update: Sat 28 Mar 2026 15:08:28 +0000 Files and hashes: 1: EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.crl (hash: sm+bi/2vSk9AV19xoOwoHCKA0xPHv8j4VM5T73Tp1xk=) 2: 3130332e38352e35322e302f32332d3233203d3e20313530353535.roa (hash: +9CDenNH43oJ9XkYbEWMdjfmnpMvrt7QWdKjYHPJebM=) 3: 3130332e38352e35322e302f32342d3234203d3e20313530353535.roa (hash: kUp7KI2fPhlmcspldsUBOsyjkjUvmMSaheteN59dWW0=) 4: 3130332e38352e35332e302f32342d3234203d3e20313530353535.roa (hash: mZAxTr3skSw5Z8e7tPmU/OrFl4lSut1UK4pgkxrw8Us=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.crl rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 15:08:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:78:eb:46:be:13:1e:ab:e9:7f:6a:00:f8:27:4b:86:47:c3:fd:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE12F179A5D1F52EC033677282AE7E2E72E0F2C3 Validity Not Before: Mar 25 14:06:28 2026 GMT Not After : Mar 28 15:08:28 2026 GMT Subject: CN=4A1D00F7710CAC033E80785FEA3B481EB04D188B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:69:2a:62:db:a6:a2:15:7f:e7:79:a4:60:68: 46:8f:ba:7a:5f:80:a7:3b:bb:12:fb:ab:0c:fc:3d: 0f:ec:c6:33:a4:c1:05:9e:9c:49:f9:1f:84:55:93: 95:17:fc:dd:d2:38:98:10:77:a4:4e:f6:20:71:0e: d1:39:88:fd:d0:8a:68:31:88:d2:36:4b:00:fa:0d: 0a:d0:0f:c4:b5:62:48:fa:9b:93:bb:e0:9a:cf:c6: bc:4a:67:33:6f:78:bb:1b:dd:77:83:c9:1f:73:7a: 10:81:57:25:0f:04:96:bd:99:6a:78:f5:3d:04:f3: fe:e2:40:a9:81:ad:87:09:99:b9:2a:94:ec:a7:53: f2:0f:2f:f1:bd:0f:12:21:e2:1f:74:e4:6f:a7:0f: 51:cc:ed:d2:a2:cb:ad:67:08:9c:88:3c:17:17:81: 35:60:7b:d1:8d:d0:60:a6:35:85:e6:b5:8e:96:c5: f1:13:11:02:a3:3f:c2:92:ff:a0:c0:4b:11:f8:99: 33:44:9f:4a:aa:92:6b:df:4b:90:f0:eb:8d:60:e1: a9:5c:96:f7:5a:08:f5:06:db:ef:ee:e3:aa:ca:16: b8:c5:ee:f8:97:9d:75:0b:85:72:b7:c8:70:35:f7: 6f:7b:21:8a:3b:ad:8d:f9:26:63:49:a3:ec:43:2e: fc:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:1D:00:F7:71:0C:AC:03:3E:80:78:5F:EA:3B:48:1E:B0:4D:18:8B X509v3 Authority Key Identifier: keyid:EE:12:F1:79:A5:D1:F5:2E:C0:33:67:72:82:AE:7E:2E:72:E0:F2:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:ab:9c:62:f0:12:64:fd:c5:91:47:a2:3b:2b:0f:ba:2a:a7: 03:df:e4:f7:17:ea:a5:08:92:b5:f9:7c:66:a6:a3:7a:54:45: ba:6d:26:03:84:ba:f2:01:93:4b:8c:08:f1:fc:02:ed:21:9b: ca:20:f8:33:5a:28:29:6e:55:84:36:de:59:5e:6f:22:69:47: d6:c4:a6:82:7c:4c:e7:e6:4f:70:bc:58:be:3a:62:4f:94:30: dc:bb:ad:e8:dc:f5:22:0a:3f:74:0b:d9:5f:d7:ea:25:f1:31: 73:f6:86:8a:df:13:7b:e2:44:3b:dc:e5:c2:9e:51:69:a1:06: 78:3f:4c:99:b1:7f:b2:20:be:70:e0:fa:74:40:8b:01:d9:fc: 2e:5f:c7:e0:01:71:be:6d:47:ae:ff:a9:c6:5c:18:4e:47:06: 00:d0:64:aa:41:3c:91:5b:bc:17:d2:77:15:d2:87:c8:95:0a: c6:c6:62:af:10:d0:9d:68:fa:2d:b9:6e:2f:a5:b9:01:e6:ce: 06:0d:cc:36:5f:66:79:f7:74:9c:f5:0c:60:14:fe:c8:5f:42: f1:a9:e2:4b:f8:13:66:2e:d4:13:41:cd:21:6a:33:23:b5:7c: cf:69:76:e1:bf:ab:c5:db:cd:65:cf:b5:48:cb:b1:87:3c:b9: 3a:d3:30:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUanjrRr4THqvpf2oA+CdLhkfD/cowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUUxMkYxNzlBNUQxRjUyRUMwMzM2NzcyODJBRTdFMkU3 MkUwRjJDMzAeFw0yNjAzMjUxNDA2MjhaFw0yNjAzMjgxNTA4MjhaMDMxMTAvBgNV BAMTKDRBMUQwMEY3NzEwQ0FDMDMzRTgwNzg1RkVBM0I0ODFFQjA0RDE4OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLaSpi26aiFX/neaRgaEaPunpf gKc7uxL7qwz8PQ/sxjOkwQWenEn5H4RVk5UX/N3SOJgQd6RO9iBxDtE5iP3Qimgx iNI2SwD6DQrQD8S1Ykj6m5O74JrPxrxKZzNveLsb3XeDyR9zehCBVyUPBJa9mWp4 9T0E8/7iQKmBrYcJmbkqlOynU/IPL/G9DxIh4h905G+nD1HM7dKiy61nCJyIPBcX gTVge9GN0GCmNYXmtY6WxfETEQKjP8KS/6DASxH4mTNEn0qqkmvfS5Dw641g4alc lvdaCPUG2+/u46rKFrjF7viXnXULhXK3yHA19297IYo7rY35JmNJo+xDLvzfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSh0A93EMrAM+gHhf6jtIHrBNGIswHwYDVR0j BBgwFoAU7hLxeaXR9S7AM2dygq5+LnLg8sMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGQxZjRjZS0xNjliLTQzMWEtODI4Ni1jNWYzYTA3YmJiZTMvMC9FRTEyRjE3OUE1 RDFGNTJFQzAzMzY3NzI4MkFFN0UyRTcyRTBGMkMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUUxMkYxNzlBNUQxRjUyRUMwMzM2NzcyODJBRTdFMkU3MkUw RjJDMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBkMWY0Y2UtMTY5Yi00MzFhLTgy ODYtYzVmM2EwN2JiYmUzLzAvRUUxMkYxNzlBNUQxRjUyRUMwMzM2NzcyODJBRTdF MkU3MkUwRjJDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK6rnGLwEmT9xZFHojsrD7oqpwPf5PcX6qUI krX5fGamo3pURbptJgOEuvIBk0uMCPH8Au0hm8og+DNaKCluVYQ23llebyJpR9bE poJ8TOfmT3C8WL46Yk+UMNy7rejc9SIKP3QL2V/X6iXxMXP2horfE3viRDvc5cKe UWmhBng/TJmxf7IgvnDg+nRAiwHZ/C5fx+ABcb5tR67/qcZcGE5HBgDQZKpBPJFb vBfSdxXSh8iVCsbGYq8Q0J1o+i25bi+luQHmzgYNzDZfZnn3dJz1DGAU/shfQvGp 4kv4E2Yu1BNBzSFqMyO1fM9pduG/q8XbzWXPtUjLsYc8uTrTMFY= -----END CERTIFICATE-----Generated at Thu Mar 26 08:57:12 2026 by rpki-client