$ rpki-client -vvf repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft File: ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft (raw, json) Hash identifier: uW35Ts0LkRqv9BldrYZDRgDQmAdIebi85sbAVNJSLQM= Subject key identifier: 1B:D5:A0:82:17:CF:C1:B4:C3:A9:98:D7:32:CE:3B:35:90:F8:F0:B9 Authority key identifier: ED:7A:48:EA:D1:0D:1F:E9:7C:7E:F2:3A:A6:EA:2A:D6:55:BF:B0:AF Certificate issuer: /CN=ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF Certificate serial: 69E1E18B9CC37FFFC32416CDA23D3770DCB5656A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft Manifest number: 027C Signing time: Tue 24 Mar 2026 19:21:44 +0000 Manifest this update: Tue 24 Mar 2026 19:16:44 +0000 Manifest next update: Sat 28 Mar 2026 03:23:44 +0000 Files and hashes: 1: ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.crl (hash: s87C75FoSHiKuOkJ1l9qXxcFRD8h1mNXIeAnC1JZua4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.crl rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 03:23:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:e1:e1:8b:9c:c3:7f:ff:c3:24:16:cd:a2:3d:37:70:dc:b5:65:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF Validity Not Before: Mar 24 19:16:44 2026 GMT Not After : Mar 28 03:23:44 2026 GMT Subject: CN=1BD5A08217CFC1B4C3A998D732CE3B3590F8F0B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:84:ec:0e:b2:8c:8a:12:fd:1e:8e:7c:d9:89: bc:5a:fa:36:f7:04:a0:73:21:f1:e5:25:d3:e4:5c: 81:e1:fc:91:c1:dc:0c:99:8d:11:40:8e:de:d6:49: c6:ce:63:5a:39:f7:89:a1:84:55:88:36:32:8f:36: 6a:f9:d3:bc:0e:cf:20:ac:5d:bb:b0:68:4b:60:30: 6d:5d:e0:db:9a:1a:4d:5a:fc:a9:8e:60:6a:e4:55: aa:74:77:e0:13:5d:4b:f8:66:2e:3f:f6:8e:e6:d6: f6:0b:72:44:6d:88:61:fc:f4:47:c7:58:ba:1b:96: e5:f4:53:ae:3d:1d:c1:e0:a9:3f:60:19:ee:8f:4b: 42:df:9b:a9:43:06:f8:29:61:66:95:61:c3:49:5e: 4d:0e:55:0b:8e:37:ac:0a:73:df:20:06:d4:92:d8: 02:6e:86:33:59:ca:0f:2a:28:4e:f7:10:89:92:fc: 5b:03:1a:92:27:59:43:43:cc:49:35:5b:55:02:0a: c0:7d:29:ae:fb:a4:0d:3b:39:33:e8:f6:4e:aa:fc: 79:61:a6:af:02:07:24:c1:bb:30:1a:1b:3e:d3:f4: ad:c8:5e:6f:9b:55:25:7e:96:b7:f0:13:f0:3e:09: 26:d3:ad:85:82:92:5c:80:f1:15:b8:fe:96:1d:2a: 74:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:D5:A0:82:17:CF:C1:B4:C3:A9:98:D7:32:CE:3B:35:90:F8:F0:B9 X509v3 Authority Key Identifier: keyid:ED:7A:48:EA:D1:0D:1F:E9:7C:7E:F2:3A:A6:EA:2A:D6:55:BF:B0:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:0e:f4:b7:e5:d9:e6:b0:f9:90:5a:ea:94:d4:81:c7:f8:5e: eb:a4:81:6a:bf:a2:87:50:4b:a5:c7:2c:9d:ae:af:0b:1d:97: 2f:55:ab:dc:9b:ca:01:d8:f2:99:95:da:c1:43:22:d4:d0:00: 7d:71:5b:fa:ec:64:a4:75:24:4e:7d:95:bb:b1:44:cc:eb:44: 2b:16:26:2c:13:f4:0c:16:4c:72:ea:36:65:ba:c3:f5:c4:42: 28:49:99:52:36:56:0f:db:bd:b9:0e:7e:bb:f1:a6:d8:cc:06: f2:d5:64:09:21:5c:71:11:c8:74:a9:c3:77:d1:52:ae:13:5c: 00:1d:60:f0:0a:7b:ae:ea:05:83:64:b0:50:c5:9e:ca:a5:82: 47:86:80:02:05:0a:2c:f6:e6:1c:49:21:eb:cb:3d:4a:7b:d8: f6:53:38:55:41:bb:77:1b:80:3a:e5:a9:4c:e1:71:df:a3:96: 46:f0:c0:85:22:97:12:a6:c2:2c:e8:68:98:44:5a:cb:b8:69: 6c:c2:9d:90:bc:c7:3b:fb:7f:f0:58:c9:6e:ac:6c:3e:8b:43: 55:7a:47:9d:80:c0:58:80:61:d6:a4:d2:9d:6c:2c:ad:fb:bf: e9:b6:54:76:62:37:8b:93:87:b3:00:71:7e:33:c0:d0:3a:af: f9:97:48:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaeHhi5zDf//DJBbNoj03cNy1ZWowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ3QTQ4RUFEMTBEMUZFOTdDN0VGMjNBQTZFQTJBRDY1 NUJGQjBBRjAeFw0yNjAzMjQxOTE2NDRaFw0yNjAzMjgwMzIzNDRaMDMxMTAvBgNV BAMTKDFCRDVBMDgyMTdDRkMxQjRDM0E5OThENzMyQ0UzQjM1OTBGOEYwQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDhOwOsoyKEv0ejnzZibxa+jb3 BKBzIfHlJdPkXIHh/JHB3AyZjRFAjt7WScbOY1o594mhhFWINjKPNmr507wOzyCs XbuwaEtgMG1d4NuaGk1a/KmOYGrkVap0d+ATXUv4Zi4/9o7m1vYLckRtiGH89EfH WLobluX0U649HcHgqT9gGe6PS0Lfm6lDBvgpYWaVYcNJXk0OVQuON6wKc98gBtSS 2AJuhjNZyg8qKE73EImS/FsDGpInWUNDzEk1W1UCCsB9Ka77pA07OTPo9k6q/Hlh pq8CByTBuzAaGz7T9K3IXm+bVSV+lrfwE/A+CSbTrYWCklyA8RW4/pYdKnQHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG9WgghfPwbTDqZjXMs47NZD48LkwHwYDVR0j BBgwFoAU7XpI6tENH+l8fvI6puoq1lW/sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NDMzZTM0NC1lODE5LTQ0MzgtYjhjYS0xZjU4YzNkNTI3Y2IvMC9FRDdBNDhFQUQx MEQxRkU5N0M3RUYyM0FBNkVBMkFENjU1QkZCMEFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUQ3QTQ4RUFEMTBEMUZFOTdDN0VGMjNBQTZFQTJBRDY1NUJG QjBBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzQzM2UzNDQtZTgxOS00NDM4LWI4 Y2EtMWY1OGMzZDUyN2NiLzAvRUQ3QTQ4RUFEMTBEMUZFOTdDN0VGMjNBQTZFQTJB RDY1NUJGQjBBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIEO9Lfl2eaw+ZBa6pTUgcf4XuukgWq/oodQ S6XHLJ2urwsdly9Vq9ybygHY8pmV2sFDItTQAH1xW/rsZKR1JE59lbuxRMzrRCsW JiwT9AwWTHLqNmW6w/XEQihJmVI2Vg/bvbkOfrvxptjMBvLVZAkhXHERyHSpw3fR Uq4TXAAdYPAKe67qBYNksFDFnsqlgkeGgAIFCiz25hxJIevLPUp72PZTOFVBu3cb gDrlqUzhcd+jlkbwwIUilxKmwizoaJhEWsu4aWzCnZC8xzv7f/BYyW6sbD6LQ1V6 R52AwFiAYdak0p1sLK37v+m2VHZiN4uTh7MAcX4zwNA6r/mXSHE= -----END CERTIFICATE-----Generated at Thu Mar 26 13:04:50 2026 by rpki-client