$ rpki-client -vvf repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft File: 2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft (raw, json) Hash identifier: sNqANhFduAnZpum07abLMZ74+2ZeIthWXfZB0HMW/44= Subject key identifier: C5:31:1B:3A:31:BA:F6:2B:71:3D:16:0E:52:58:B3:F2:3F:05:AD:ED Authority key identifier: 2E:EF:78:44:53:62:AF:4F:7C:AE:B2:41:FA:E6:B9:74:7E:C2:D2:F9 Certificate issuer: /CN=2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9 Certificate serial: 77F3DD80A4410DD0A28B22B3D5483D4A024D3E10 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft Manifest number: 04EE Signing time: Tue 24 Mar 2026 10:51:16 +0000 Manifest this update: Tue 24 Mar 2026 10:46:16 +0000 Manifest next update: Fri 27 Mar 2026 18:27:16 +0000 Files and hashes: 1: 2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.crl (hash: SkBniypStfwjWovKInb531GZcyLfXCzhZjFFoWQGRKk=) 2: 3130332e3135382e3130322e302f32342d3234203d3e20313431313239.roa (hash: itrcHe3qx7ogs61DE3/P3ZuuNKltdZ7fAYSLqG5ktLc=) 3: 3130332e3135382e3130332e302f32342d3234203d3e203435333137.roa (hash: w2a2u6qdVWhlCkR970rhojHnih1HccbKX6TZhhdF+IA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.crl rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 18:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:f3:dd:80:a4:41:0d:d0:a2:8b:22:b3:d5:48:3d:4a:02:4d:3e:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9 Validity Not Before: Mar 24 10:46:16 2026 GMT Not After : Mar 27 18:27:16 2026 GMT Subject: CN=C5311B3A31BAF62B713D160E5258B3F23F05ADED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fc:b4:12:d0:77:4d:cb:0f:de:52:8c:98:84: 75:61:d8:a2:10:4b:eb:e2:f6:49:8b:3e:26:51:d1: 1c:90:6f:3f:3c:60:37:03:98:08:13:4b:a7:a0:cf: 18:25:70:f1:66:db:fa:3b:c1:58:5a:e6:82:d5:7e: 94:6a:c8:f6:15:73:5f:fe:d9:10:40:4e:46:d0:e4: 95:cb:13:d5:34:c6:c8:81:73:b3:fa:a8:1a:45:a5: 2e:d2:20:0c:5c:aa:22:65:20:df:f0:fd:45:39:64: ab:71:3e:9f:c9:11:4c:5b:47:58:d5:49:ac:9a:8f: a8:2f:fd:e1:f7:69:17:60:76:20:04:e7:5c:65:7a: 24:f3:e5:78:32:99:96:06:98:1a:9e:96:85:ce:2f: d2:65:cc:1c:61:4e:36:f8:0f:1e:9a:ea:7c:9c:bc: e2:0f:fb:71:1c:6a:25:ef:2a:35:14:07:c2:40:09: ae:97:da:52:da:a5:7d:1b:cc:0f:f3:9a:dd:48:49: ce:ce:0d:57:a0:10:33:6a:8f:e7:57:c7:b8:be:02: c7:2d:53:54:4e:7b:75:61:7f:1b:2a:00:2f:d2:cd: 27:b6:c2:7c:87:0e:f8:c9:85:37:a8:21:4e:e1:22: 07:00:7a:ac:cc:5b:e8:99:94:90:e2:87:2a:d6:27: e6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:31:1B:3A:31:BA:F6:2B:71:3D:16:0E:52:58:B3:F2:3F:05:AD:ED X509v3 Authority Key Identifier: keyid:2E:EF:78:44:53:62:AF:4F:7C:AE:B2:41:FA:E6:B9:74:7E:C2:D2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:9d:27:8e:05:15:f0:68:86:8c:74:a4:01:7b:35:3c:57:9c: 00:db:4d:fd:f7:96:13:90:60:ae:06:09:54:1f:6d:f6:11:b7: 76:54:5d:22:80:15:b6:b3:d4:9b:27:6e:9e:93:98:37:00:3e: 6a:1a:3b:fb:3e:83:37:89:9c:79:0a:1f:9f:0f:42:1b:54:99: e8:c2:67:c6:79:3b:54:01:35:f8:81:c1:0e:b3:2d:da:dc:44: bf:3c:ec:a8:e2:ed:44:86:9f:0d:11:3a:47:17:5c:d2:e8:92: 10:9a:82:6d:ef:69:c9:b0:e0:9a:ae:b1:a5:7a:63:69:10:71: 59:f5:0f:c2:1f:27:55:56:34:9d:62:79:bf:fc:25:c9:2a:64: a8:cf:f0:1b:6f:c1:2d:06:7c:f8:fe:cb:bc:0e:0d:ba:e6:ed: 36:7c:19:70:7f:99:6e:54:99:b6:35:61:e5:75:6d:9f:53:1e: 93:b5:4a:62:38:79:32:3d:c3:47:e5:25:84:d9:67:32:82:00: 0c:8d:ea:c6:e1:69:9d:c1:ab:dc:be:6c:01:90:bb:7c:58:b2: aa:70:12:1d:fb:57:b2:2d:a2:26:37:fc:6b:04:42:cb:50:7c: d9:3b:3b:ff:c4:f6:d9:47:7f:1d:58:5b:be:74:7f:49:2a:a6: ef:b9:c9:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd/PdgKRBDdCiiyKz1Ug9SgJNPhAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVFRjc4NDQ1MzYyQUY0RjdDQUVCMjQxRkFFNkI5NzQ3 RUMyRDJGOTAeFw0yNjAzMjQxMDQ2MTZaFw0yNjAzMjcxODI3MTZaMDMxMTAvBgNV BAMTKEM1MzExQjNBMzFCQUY2MkI3MTNEMTYwRTUyNThCM0YyM0YwNUFERUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO/LQS0HdNyw/eUoyYhHVh2KIQ S+vi9kmLPiZR0RyQbz88YDcDmAgTS6egzxglcPFm2/o7wVha5oLVfpRqyPYVc1/+ 2RBATkbQ5JXLE9U0xsiBc7P6qBpFpS7SIAxcqiJlIN/w/UU5ZKtxPp/JEUxbR1jV Sayaj6gv/eH3aRdgdiAE51xleiTz5XgymZYGmBqeloXOL9JlzBxhTjb4Dx6a6nyc vOIP+3EcaiXvKjUUB8JACa6X2lLapX0bzA/zmt1ISc7ODVegEDNqj+dXx7i+Asct U1ROe3VhfxsqAC/SzSe2wnyHDvjJhTeoIU7hIgcAeqzMW+iZlJDihyrWJ+aLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxTEbOjG69itxPRYOUliz8j8Fre0wHwYDVR0j BBgwFoAULu94RFNir098rrJB+ua5dH7C0vkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NzI0ZTQ1Yi0yNTRiLTRmZWItYmY4ZS03YmYxMjA5MTJhZjcvMC8yRUVGNzg0NDUz NjJBRjRGN0NBRUIyNDFGQUU2Qjk3NDdFQzJEMkY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkVFRjc4NDQ1MzYyQUY0RjdDQUVCMjQxRkFFNkI5NzQ3RUMy RDJGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjcyNGU0NWItMjU0Yi00ZmViLWJm OGUtN2JmMTIwOTEyYWY3LzAvMkVFRjc4NDQ1MzYyQUY0RjdDQUVCMjQxRkFFNkI5 NzQ3RUMyRDJGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGWdJ44FFfBohox0pAF7NTxXnADbTf33lhOQ YK4GCVQfbfYRt3ZUXSKAFbaz1Jsnbp6TmDcAPmoaO/s+gzeJnHkKH58PQhtUmejC Z8Z5O1QBNfiBwQ6zLdrcRL887Kji7USGnw0ROkcXXNLokhCagm3vacmw4JqusaV6 Y2kQcVn1D8IfJ1VWNJ1ieb/8JckqZKjP8BtvwS0GfPj+y7wODbrm7TZ8GXB/mW5U mbY1YeV1bZ9THpO1SmI4eTI9w0flJYTZZzKCAAyN6sbhaZ3Bq9y+bAGQu3xYsqpw Eh37V7ItoiY3/GsEQstQfNk7O//E9tlHfx1YW750f0kqpu+5yc0= -----END CERTIFICATE-----Generated at Thu Mar 26 12:37:33 2026 by rpki-client