$ rpki-client -vvf repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft File: EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft (raw, json) Hash identifier: ANcwMjvCGxxyAGHSFUtiKFwsO4W5DnNuZo7964sY4yQ= Subject key identifier: A4:2F:56:2B:60:4F:B2:E5:14:B9:67:46:79:D8:7B:25:E5:A2:60:C3 Authority key identifier: EE:2C:52:F7:BE:52:A0:EB:69:5A:54:9A:42:E7:01:EE:E7:E4:5D:68 Certificate issuer: /CN=EE2C52F7BE52A0EB695A549A42E701EEE7E45D68 Certificate serial: 4DF2BE9FF5E845028021C38E02224302B3D2CA2A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft Manifest number: 022C Signing time: Wed 25 Mar 2026 18:40:53 +0000 Manifest this update: Wed 25 Mar 2026 18:35:53 +0000 Manifest next update: Sun 29 Mar 2026 06:03:53 +0000 Files and hashes: 1: 3130332e32302e38362e302f32332d3233203d3e2039333431.roa (hash: +RIRdxOQj98KpyUFzbwvH1+p1ELhEQk4ECMOCZ1qPKs=) 2: EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.crl (hash: EVC5/58rjK/NfOHH4k+ohHp8Tv+u3V26dMkMqnq7jYw=) 3: 3130332e32302e38372e302f32342d3234203d3e2039333431.roa (hash: AHcDCGLpSbw6Wx72m+rIylEXaACluMi2gVr+3VqfEGw=) 4: 3130332e32302e38362e302f32342d3234203d3e2039333431.roa (hash: vQ/JQod4pjiK4qjkcMAE6/5YAgXsND0ZYI10hmKECPY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.crl rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 06:03:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:f2:be:9f:f5:e8:45:02:80:21:c3:8e:02:22:43:02:b3:d2:ca:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE2C52F7BE52A0EB695A549A42E701EEE7E45D68 Validity Not Before: Mar 25 18:35:53 2026 GMT Not After : Mar 29 06:03:53 2026 GMT Subject: CN=A42F562B604FB2E514B9674679D87B25E5A260C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:46:5d:46:49:fe:76:0a:d5:f5:0d:6f:44:1a: 01:64:6b:d7:0d:52:8b:d5:db:ef:63:14:02:3f:9a: 7f:f6:3e:f9:70:c9:67:e5:5e:56:e6:3e:00:a3:aa: 58:6b:84:c0:89:59:6f:7d:27:29:eb:a7:0c:75:a1: c7:e0:f6:07:5e:ef:6a:f5:04:06:2b:a5:df:de:e6: ad:b8:5a:ed:3b:3a:5e:98:1f:06:ae:10:cd:18:95: 99:50:fc:c3:7c:a5:bc:74:62:78:15:2e:4f:31:83: 22:31:0a:62:9e:8a:3a:db:4e:c7:73:de:23:35:0d: dc:62:94:51:84:b7:5c:7b:28:17:5d:64:2c:3f:44: ca:f5:53:28:f6:73:75:8d:73:57:12:72:a6:7c:27: 88:c3:68:24:e4:c1:52:39:2d:db:fa:fa:08:a2:5e: 40:f6:18:8a:a3:dc:1a:9b:57:ed:fe:9a:35:50:49: 9f:ce:92:c3:b6:75:8d:58:0f:33:e9:01:cb:0f:88: d1:30:bc:c7:e5:94:70:97:1d:e6:7f:d8:0d:8e:cf: ff:a8:f5:4e:ff:d0:65:44:11:24:ce:da:2f:19:6d: b1:9d:5e:9a:94:48:3b:69:46:19:1c:73:b6:aa:0a: 59:f9:02:b6:bd:33:94:53:91:7a:62:6b:b9:f3:c9: d4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:2F:56:2B:60:4F:B2:E5:14:B9:67:46:79:D8:7B:25:E5:A2:60:C3 X509v3 Authority Key Identifier: keyid:EE:2C:52:F7:BE:52:A0:EB:69:5A:54:9A:42:E7:01:EE:E7:E4:5D:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:d1:43:21:c8:87:0d:ab:be:7d:05:c4:ac:58:14:98:59:9a: d2:89:bf:8e:7d:21:a0:93:ae:4c:09:b0:71:f1:42:31:65:18: ce:1a:67:85:33:de:2e:02:3c:0b:e0:2d:67:71:91:48:98:ac: 28:5a:23:7d:a1:88:88:81:d0:00:e9:48:30:ca:fc:0c:f8:ad: 86:bb:13:c0:e4:9a:61:e7:1c:d2:13:30:25:6e:c5:7b:29:30: 5e:21:5d:a7:cf:ff:fe:bd:4c:5a:ba:ad:2d:43:25:51:68:9c: dc:60:64:ec:79:2a:fc:d2:50:20:70:e2:b7:9a:f1:55:32:d8: e7:1f:b2:d6:ea:0c:e9:e8:8a:b6:a2:25:cf:ed:bb:d4:d0:6b: 1a:b2:c4:c2:89:92:f7:45:ac:4d:57:28:c1:9d:0c:c8:38:a0: c1:1f:94:00:0c:4d:db:a0:0f:55:64:41:97:91:82:5b:1a:47: 21:07:ac:27:48:35:3d:db:a6:a8:2f:c4:4a:4a:37:44:01:e9: 85:7c:06:8f:25:fd:09:61:02:09:c0:c0:4c:78:03:34:b5:64: 8a:08:30:4d:e8:be:fc:f2:ca:7d:17:96:9c:9e:fe:21:4a:4a: e2:f0:df:22:8b:9e:da:f6:6d:a5:28:25:51:8a:b9:d8:10:01: 85:8a:74:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTfK+n/XoRQKAIcOOAiJDArPSyiowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUUyQzUyRjdCRTUyQTBFQjY5NUE1NDlBNDJFNzAxRUVF N0U0NUQ2ODAeFw0yNjAzMjUxODM1NTNaFw0yNjAzMjkwNjAzNTNaMDMxMTAvBgNV BAMTKEE0MkY1NjJCNjA0RkIyRTUxNEI5Njc0Njc5RDg3QjI1RTVBMjYwQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVRl1GSf52CtX1DW9EGgFka9cN UovV2+9jFAI/mn/2PvlwyWflXlbmPgCjqlhrhMCJWW99Jynrpwx1ocfg9gde72r1 BAYrpd/e5q24Wu07Ol6YHwauEM0YlZlQ/MN8pbx0YngVLk8xgyIxCmKeijrbTsdz 3iM1DdxilFGEt1x7KBddZCw/RMr1Uyj2c3WNc1cScqZ8J4jDaCTkwVI5Ldv6+gii XkD2GIqj3BqbV+3+mjVQSZ/OksO2dY1YDzPpAcsPiNEwvMfllHCXHeZ/2A2Oz/+o 9U7/0GVEESTO2i8ZbbGdXpqUSDtpRhkcc7aqCln5Ara9M5RTkXpia7nzydQtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpC9WK2BPsuUUuWdGedh7JeWiYMMwHwYDVR0j BBgwFoAU7ixS975SoOtpWlSaQucB7ufkXWgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWE0ODlhNi01NDg1LTQ4N2YtYjVkZC04ZjRlZGViNDZiY2IvMC9FRTJDNTJGN0JF NTJBMEVCNjk1QTU0OUE0MkU3MDFFRUU3RTQ1RDY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUUyQzUyRjdCRTUyQTBFQjY5NUE1NDlBNDJFNzAxRUVFN0U0 NUQ2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFhNDg5YTYtNTQ4NS00ODdmLWI1 ZGQtOGY0ZWRlYjQ2YmNiLzAvRUUyQzUyRjdCRTUyQTBFQjY5NUE1NDlBNDJFNzAx RUVFN0U0NUQ2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADDRQyHIhw2rvn0FxKxYFJhZmtKJv459IaCT rkwJsHHxQjFlGM4aZ4Uz3i4CPAvgLWdxkUiYrChaI32hiIiB0ADpSDDK/Az4rYa7 E8DkmmHnHNITMCVuxXspMF4hXafP//69TFq6rS1DJVFonNxgZOx5KvzSUCBw4rea 8VUy2OcfstbqDOnoiraiJc/tu9TQaxqyxMKJkvdFrE1XKMGdDMg4oMEflAAMTdug D1VkQZeRglsaRyEHrCdINT3bpqgvxEpKN0QB6YV8Bo8l/QlhAgnAwEx4AzS1ZIoI ME3ovvzyyn0Xlpye/iFKSuLw3yKLntr2baUoJVGKudgQAYWKdKI= -----END CERTIFICATE-----Generated at Thu Mar 26 10:15:07 2026 by rpki-client