
$ rpki-client -vvf repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.mft
File: EC9D9872A710FE713DC62241D587703BDF7DC1D6.mft (raw, json)
Hash identifier: jnqXBRcUOiV/Hld6N1uHoer8lSr9Khvq3MkvxgKBHAc=
Subject key identifier: 99:91:66:2B:5C:83:E1:9D:FF:4B:80:02:D8:2D:97:1B:EB:B9:C3:27
Authority key identifier: EC:9D:98:72:A7:10:FE:71:3D:C6:22:41:D5:87:70:3B:DF:7D:C1:D6
Certificate issuer: /CN=EC9D9872A710FE713DC62241D587703BDF7DC1D6
Certificate serial: 21941AB9B6085CEDB302FDA72FAF3E8821F0DA28
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9D9872A710FE713DC62241D587703BDF7DC1D6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.mft
Manifest number: 86
Signing time: Tue 24 Mar 2026 15:32:21 +0000
Manifest this update: Tue 24 Mar 2026 15:27:21 +0000
Manifest next update: Fri 27 Mar 2026 16:10:21 +0000
Files and hashes: 1: 34352e3132362e35382e302f32342d3234203d3e20313332363437.roa (hash: WUYYTi2XuFyUmWlSOlOmbSyC8k33VJEvWxEEHToe/f4=)
2: 323430323a656538303a3a2f34382d3438203d3e20313332363437.roa (hash: Qq4mQ+yjLEssCXWmnFYkdDNfkAKVVBhzLioN96QRjDk=)
3: 323430323a656538303a623a3a2f34382d3438203d3e20313332363437.roa (hash: vG82X1ya4RP+iLybP3Nf3VH9eiCkt21NvKQm4mVZqlY=)
4: 323430323a656538303a35383a3a2f34382d3438203d3e20313332363437.roa (hash: 95YayLBo+Z60JGd6py6XLMSdK9u7PSYjLko8lAlklJ4=)
5: 34352e3132362e35392e302f32342d3234203d3e20313332363437.roa (hash: ayAqEs1b1nTm1L0OUHAQCAticCSJ6e0ze/fgkYyk4lc=)
6: 3130332e31392e3137382e302f32332d3234203d3e20313332363437.roa (hash: 6ENOiJDb/1Xm9LcakgjTmelFqd2PFa7ryPrhU6sPGBY=)
7: 3130332e31392e3137362e302f32322d3234203d3e20313332363437.roa (hash: IOhGpn9Wqy2Lz6udKRlZRvUg19CFNIwFC8/KHmyaxxA=)
8: 3130332e31392e3137362e302f32332d3234203d3e20313332363437.roa (hash: MZSp8BNqe8zJ+1B8Y+uVUUB7aRgdsoqlbK7HkPjCz8s=)
9: 323430323a656538303a3a2f33322d3438203d3e20313332363437.roa (hash: wwYKe/sjxREQnj5G37QP1SEX1SplROb7ytmXu6rBig8=)
10: 34352e3132362e35372e302f32342d3234203d3e20313332363437.roa (hash: EEcqACfpJzv9e6aJJ3QgCFqjvxlrFVyI4AnnhuBfrzI=)
11: 323030313a6466353a343030303a3a2f34382d3438203d3e20313332363437.roa (hash: ea0BH5+9TDEtitqep4Xyx8IGG6HIfg5zxzhcj4dvnnA=)
12: 323430323a656538303a633a3a2f34382d3438203d3e20313332363437.roa (hash: 2s6ODMSjUVaffAG6UbhZ8oJIX5hnW9ppp33Tq9tR3wY=)
13: 34352e3132362e35362e302f32342d3234203d3e20313332363437.roa (hash: iVD71KXe0iI/vtmA+DjA6o/5T6NexfyKd675pvEkuFc=)
14: 3130332e31392e3137382e302f32342d3234203d3e20313332363437.roa (hash: +54gsDdv0eW3zDbkaD5HbAoyLmCd/qoIOZWo63Fy2oM=)
15: EC9D9872A710FE713DC62241D587703BDF7DC1D6.crl (hash: w84jUxq0qbocd9e2+dmUlxbgqVWKcW9MhfmDVeiP/Ts=)
16: 3130332e31392e3137372e302f32342d3234203d3e20313332363437.roa (hash: eUTXj0qM9U0VlVIo2698+rxVfkNrjLXS73ArKqTPZHc=)
17: 3130332e31392e3137392e302f32342d3234203d3e20313332363437.roa (hash: MtiwOPRjzKh8TAh6x51imM/Vbo/YwNmBGuNUEh5cML4=)
18: 34352e3132362e35362e302f32332d3234203d3e20313332363437.roa (hash: QEOORRsX013DVlDd6rBsgIGW4zrmYxd/HqJrafpumMI=)
19: 34352e3132362e35362e302f32322d3234203d3e20313332363437.roa (hash: WjfvCYbp65ghPW3ji7G9hoRxTgUciKFJHBsEK0TOyNo=)
20: 323430323a656538303a3137363a3a2f34382d3438203d3e20313332363437.roa (hash: ssoTJWcnOTneohkhAvdxsLglXradXsID6/iYQ5O+53I=)
21: 34352e3132362e35382e302f32332d3234203d3e20313332363437.roa (hash: MlHDGnO/Vp+hFC8do5e8cQqI6Yre7kW1RmsPeNStRS4=)
22: 323430323a656538303a35363a3a2f34382d3438203d3e20313332363437.roa (hash: ILpEJfv/S+leWwxiBN0hUwFSsvpCv7zbnSPVhks28zg=)
23: 3130332e31392e3137362e302f32342d3234203d3e20313332363437.roa (hash: S4kzvu4zbCmfw9stND1YY9BCQd30K/363b7rtm3YUq4=)
24: 323430323a656538303a643a3a2f34382d3438203d3e20313332363437.roa (hash: xgpk0l8wHBzrP9AZayJBujyNuU1WlslUVoFQcTt2ROE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.crl
rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9D9872A710FE713DC62241D587703BDF7DC1D6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 16:10:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:94:1a:b9:b6:08:5c:ed:b3:02:fd:a7:2f:af:3e:88:21:f0:da:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC9D9872A710FE713DC62241D587703BDF7DC1D6
Validity
Not Before: Mar 24 15:27:21 2026 GMT
Not After : Mar 27 16:10:21 2026 GMT
Subject: CN=9991662B5C83E19DFF4B8002D82D971BEBB9C327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6a:14:94:fa:24:38:72:8c:23:9b:c5:c1:39:
84:e2:7c:35:4c:5f:aa:74:fb:23:55:ae:ca:cc:c3:
0c:c5:38:29:ad:e4:a2:de:cd:a9:e2:a0:5b:ab:41:
3c:e7:ca:6b:6f:54:a5:77:08:1a:a4:f7:5a:2c:42:
70:a2:f7:af:e1:2c:4a:01:85:f0:26:59:70:f0:93:
05:50:8f:87:ba:50:07:c2:f3:95:12:ab:fc:53:ad:
4c:c7:99:b6:1e:21:30:ed:05:a9:1e:30:96:a5:56:
60:c7:48:16:48:cc:00:bb:d1:e9:88:fd:60:f3:32:
dc:0a:13:48:96:95:75:cf:56:90:b8:02:02:20:73:
9b:27:f4:51:b2:3b:6e:64:9a:c9:ef:d9:9a:97:ca:
4b:fe:c4:cc:e5:5c:a8:0e:16:5b:e3:6f:66:f7:78:
15:7a:7d:7d:30:ad:13:fc:55:e6:f1:75:11:18:db:
89:97:81:af:c3:f3:04:e5:71:16:ef:48:16:e9:8a:
14:5d:00:18:35:3a:5a:6f:6f:e1:5d:89:88:98:9e:
ef:96:44:3a:ae:f9:17:b8:9d:d9:de:5f:94:30:b6:
b3:ea:35:c5:03:42:6d:cf:09:6b:dd:8f:df:e2:af:
59:5b:4b:d5:51:b7:49:9c:5a:ae:c9:e0:64:d5:f1:
ce:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:91:66:2B:5C:83:E1:9D:FF:4B:80:02:D8:2D:97:1B:EB:B9:C3:27
X509v3 Authority Key Identifier:
keyid:EC:9D:98:72:A7:10:FE:71:3D:C6:22:41:D5:87:70:3B:DF:7D:C1:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9D9872A710FE713DC62241D587703BDF7DC1D6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:43:8b:33:26:c9:71:7e:7f:80:b4:ee:dc:ba:19:74:47:da:
0a:1b:ce:ff:7a:fb:90:3a:f8:c1:63:80:aa:63:2d:3d:32:c6:
eb:b5:ea:d1:5f:44:b4:e8:a9:d5:ad:c5:36:30:25:18:ee:14:
06:21:91:7b:b4:dc:d6:89:01:49:ba:c6:8b:b5:38:ae:f5:4c:
d8:e4:a3:11:29:b6:74:ad:84:c9:89:f2:38:47:9c:55:a7:b3:
b3:a4:00:ec:04:9a:06:52:e1:7e:d6:70:14:e0:52:3f:3c:6d:
00:b8:7b:c8:35:96:a7:8a:24:42:0a:62:6c:89:9b:f2:68:e7:
03:5d:6d:56:39:69:0c:bf:73:ac:03:74:75:2a:60:75:98:06:
d6:c5:aa:4c:04:3a:d1:bf:b0:7c:e7:3e:ea:41:58:d3:6c:54:
b7:5e:32:9e:fa:b7:00:a2:57:79:7b:87:cf:42:3e:08:ae:e7:
97:fb:9f:15:86:6a:6c:f0:51:e2:a0:57:84:7f:86:93:92:69:
69:cf:2e:66:73:02:17:eb:c4:fc:3e:8b:54:11:8b:6d:1b:5f:
91:ae:51:28:93:c7:39:70:7d:2c:bf:b3:94:15:04:a3:4f:65:
a6:8f:12:8d:4f:e1:f0:76:19:58:eb:12:2a:40:9f:f2:36:35:
17:8f:24:96
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUIZQaubYIXO2zAv2nL68+iCHw2igwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUM5RDk4NzJBNzEwRkU3MTNEQzYyMjQxRDU4NzcwM0JE
RjdEQzFENjAeFw0yNjAzMjQxNTI3MjFaFw0yNjAzMjcxNjEwMjFaMDMxMTAvBgNV
BAMTKDk5OTE2NjJCNUM4M0UxOURGRjRCODAwMkQ4MkQ5NzFCRUJCOUMzMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5ahSU+iQ4cowjm8XBOYTifDVM
X6p0+yNVrsrMwwzFOCmt5KLezanioFurQTznymtvVKV3CBqk91osQnCi96/hLEoB
hfAmWXDwkwVQj4e6UAfC85USq/xTrUzHmbYeITDtBakeMJalVmDHSBZIzAC70emI
/WDzMtwKE0iWlXXPVpC4AgIgc5sn9FGyO25kmsnv2ZqXykv+xMzlXKgOFlvjb2b3
eBV6fX0wrRP8VebxdREY24mXga/D8wTlcRbvSBbpihRdABg1Olpvb+FdiYiYnu+W
RDqu+Re4ndneX5QwtrPqNcUDQm3PCWvdj9/ir1lbS9VRt0mcWq7J4GTV8c5dAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUmZFmK1yD4Z3/S4AC2C2XG+u5wycwHwYDVR0j
BBgwFoAU7J2YcqcQ/nE9xiJB1YdwO999wdYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
NjYxN2Q4Yy1kMTU0LTQ2MWUtYmNjYS1iNjZkMjY3Y2ZmYzcvMC9FQzlEOTg3MkE3
MTBGRTcxM0RDNjIyNDFENTg3NzAzQkRGN0RDMUQ2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRUM5RDk4NzJBNzEwRkU3MTNEQzYyMjQxRDU4NzcwM0JERjdE
QzFENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTY2MTdkOGMtZDE1NC00NjFlLWJj
Y2EtYjY2ZDI2N2NmZmM3LzAvRUM5RDk4NzJBNzEwRkU3MTNEQzYyMjQxRDU4Nzcw
M0JERjdEQzFENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADZDizMmyXF+f4C07ty6GXRH2gobzv96+5A6
+MFjgKpjLT0yxuu16tFfRLToqdWtxTYwJRjuFAYhkXu03NaJAUm6xou1OK71TNjk
oxEptnSthMmJ8jhHnFWns7OkAOwEmgZS4X7WcBTgUj88bQC4e8g1lqeKJEIKYmyJ
m/Jo5wNdbVY5aQy/c6wDdHUqYHWYBtbFqkwEOtG/sHznPupBWNNsVLdeMp76twCi
V3l7h89CPgiu55f7nxWGamzwUeKgV4R/hpOSaWnPLmZzAhfrxPw+i1QRi20bX5Gu
USiTxzlwfSy/s5QVBKNPZaaPEo1P4fB2GVjrEipAn/I2NRePJJY=
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:29:15 2026 by rpki-client