$ rpki-client -vvf repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.mft File: EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.mft (raw, json) Hash identifier: wNzI4UJGGNorAQJKeC8MzAUGjFbejKMc/ypIOjHEMWI= Subject key identifier: 9C:24:4B:09:54:E7:71:7F:62:99:F4:15:2C:9D:7B:0F:02:3A:79:1E Authority key identifier: EA:DA:0A:EE:51:F3:91:0B:50:A0:65:D5:7D:94:6E:3E:AF:A8:BD:11 Certificate issuer: /CN=EADA0AEE51F3910B50A065D57D946E3EAFA8BD11 Certificate serial: 59AB89992D30C6681F68DB74AF03D2B8AC439B5E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.mft Manifest number: 056A Signing time: Wed 25 Mar 2026 14:51:46 +0000 Manifest this update: Wed 25 Mar 2026 14:46:46 +0000 Manifest next update: Sun 29 Mar 2026 00:20:46 +0000 Files and hashes: 1: 3130332e3131342e35322e302f32332d3234203d3e20313337333439.roa (hash: Wb5XIyQzeshMPwbaIbQx/IP9pyRf1XeD2CgpbvmVh0k=) 2: 3130332e3131342e35322e302f32342d3234203d3e20313337333439.roa (hash: PtBs+nsRVIu2YcwX9pc77V8UxQKbh+fRc4VIGqtgf9c=) 3: 323030313a6466343a663330303a3a2f34382d3438203d3e20313337333439.roa (hash: bM2bCiWvvR67fLAxEBLdbaa9UVbcM3IM7NopO4JRa9U=) 4: EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.crl (hash: qx/LWZjmw9/B3qxus0zMXSkR/hwcRcb5mPQ0BfWoLwg=) 5: 3130332e3131342e35332e302f32342d3234203d3e20313337333439.roa (hash: JOaRhY/bLlBtJRnSgu58P0++I9wpyJMQc7vHKmf/yaA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.crl rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 00:20:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:ab:89:99:2d:30:c6:68:1f:68:db:74:af:03:d2:b8:ac:43:9b:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EADA0AEE51F3910B50A065D57D946E3EAFA8BD11 Validity Not Before: Mar 25 14:46:46 2026 GMT Not After : Mar 29 00:20:46 2026 GMT Subject: CN=9C244B0954E7717F6299F4152C9D7B0F023A791E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:31:ea:74:91:84:45:fd:63:88:19:3a:70:f3: 82:1e:2e:4b:55:d9:85:09:61:7b:10:e9:3d:11:b8: cf:3d:fa:d1:02:14:98:9b:9d:09:d8:a1:be:16:4e: e1:6b:e5:1b:83:c6:16:a2:44:10:13:90:7c:6a:2f: 75:1a:44:bc:0c:8a:04:fc:ef:57:a8:dc:24:e7:6e: 92:f4:38:da:9d:dc:b2:5f:62:c9:b9:3c:61:bb:da: 5a:2b:7e:49:a4:73:cb:2a:e0:65:fb:48:79:77:00: a0:47:87:69:7a:fd:5f:ab:95:1e:8e:92:88:7c:48: 5a:c3:49:bd:33:48:ee:c6:3c:6e:bb:82:50:ba:62: c9:5a:d9:ff:30:cd:39:4f:38:27:20:9c:50:67:25: cc:82:2f:26:69:ef:71:26:64:03:f1:13:28:d5:48: 97:91:4a:b6:ed:af:ff:9c:8d:dc:25:6d:6f:43:81: 66:b2:4f:08:dd:45:c3:4a:7d:48:89:a3:d4:ac:c7: 72:ab:75:33:e9:c7:63:3c:d3:8a:b6:db:c2:15:d1: b8:37:df:60:e5:e0:2e:73:d2:f2:06:30:94:7c:90: b5:f1:85:d6:03:f3:88:60:e1:c1:10:06:92:63:8d: 57:5a:84:5a:5b:a9:66:fa:8a:07:70:64:d4:09:4e: be:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:24:4B:09:54:E7:71:7F:62:99:F4:15:2C:9D:7B:0F:02:3A:79:1E X509v3 Authority Key Identifier: keyid:EA:DA:0A:EE:51:F3:91:0B:50:A0:65:D5:7D:94:6E:3E:AF:A8:BD:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:eb:64:58:92:cf:81:32:bf:8c:91:6f:35:c6:00:34:c4:9d: f8:fb:b2:dc:8c:93:82:da:ad:bd:5e:67:d5:a1:db:fb:6d:b9: 51:51:62:b0:e6:5d:aa:32:66:4a:7e:86:ba:0c:28:1b:02:17: fb:1b:66:c5:01:ea:06:3a:36:ad:6f:70:e0:fc:8f:c3:c5:5b: 05:85:23:12:99:fe:b3:ea:51:ca:83:20:a5:97:96:cb:89:79: 6c:a9:3c:65:e6:f7:59:ce:0b:8d:57:42:c3:5e:60:09:d2:94: fa:88:33:62:dd:64:70:89:48:93:52:3e:8c:05:9d:83:a2:1a: 19:30:66:b7:33:08:5f:22:ad:2b:b2:eb:eb:9a:70:6d:54:0d: 16:3a:45:c3:dd:35:1d:bf:03:ab:a0:e4:98:3f:10:9c:a7:c2: 26:77:54:c0:58:2a:55:3c:69:b4:5b:2b:05:2a:22:26:f5:c4: ad:aa:28:d1:62:0a:90:f6:64:fb:92:3d:9e:63:e3:29:1a:b4: 39:25:1f:8f:8f:26:2e:f5:33:2e:bf:f6:50:05:d2:33:82:d7: 65:96:7b:42:6f:ad:23:e5:87:2e:a1:9e:1b:fc:b5:bb:85:ea: 3b:23:d2:a4:7a:3d:02:b0:dc:0c:12:87:f9:c2:be:6a:aa:5d: cd:ae:1d:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWauJmS0wxmgfaNt0rwPSuKxDm14wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFEQTBBRUU1MUYzOTEwQjUwQTA2NUQ1N0Q5NDZFM0VB RkE4QkQxMTAeFw0yNjAzMjUxNDQ2NDZaFw0yNjAzMjkwMDIwNDZaMDMxMTAvBgNV BAMTKDlDMjQ0QjA5NTRFNzcxN0Y2Mjk5RjQxNTJDOUQ3QjBGMDIzQTc5MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClMep0kYRF/WOIGTpw84IeLktV 2YUJYXsQ6T0RuM89+tECFJibnQnYob4WTuFr5RuDxhaiRBATkHxqL3UaRLwMigT8 71eo3CTnbpL0ONqd3LJfYsm5PGG72lorfkmkc8sq4GX7SHl3AKBHh2l6/V+rlR6O koh8SFrDSb0zSO7GPG67glC6Ysla2f8wzTlPOCcgnFBnJcyCLyZp73EmZAPxEyjV SJeRSrbtr/+cjdwlbW9DgWayTwjdRcNKfUiJo9Ssx3KrdTPpx2M804q228IV0bg3 32Dl4C5z0vIGMJR8kLXxhdYD84hg4cEQBpJjjVdahFpbqWb6igdwZNQJTr5RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnCRLCVTncX9imfQVLJ17DwI6eR4wHwYDVR0j BBgwFoAU6toK7lHzkQtQoGXVfZRuPq+ovREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDk2MmM2ZS01OTVhLTQ3YzQtYWE3Yy1lZjhlNzdjYWU2NDIvMC9FQURBMEFFRTUx RjM5MTBCNTBBMDY1RDU3RDk0NkUzRUFGQThCRDExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUFEQTBBRUU1MUYzOTEwQjUwQTA2NUQ1N0Q5NDZFM0VBRkE4 QkQxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA5NjJjNmUtNTk1YS00N2M0LWFh N2MtZWY4ZTc3Y2FlNjQyLzAvRUFEQTBBRUU1MUYzOTEwQjUwQTA2NUQ1N0Q5NDZF M0VBRkE4QkQxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB7rZFiSz4Eyv4yRbzXGADTEnfj7styMk4La rb1eZ9Wh2/ttuVFRYrDmXaoyZkp+hroMKBsCF/sbZsUB6gY6Nq1vcOD8j8PFWwWF IxKZ/rPqUcqDIKWXlsuJeWypPGXm91nOC41XQsNeYAnSlPqIM2LdZHCJSJNSPowF nYOiGhkwZrczCF8irSuy6+uacG1UDRY6RcPdNR2/A6ug5Jg/EJynwiZ3VMBYKlU8 abRbKwUqIib1xK2qKNFiCpD2ZPuSPZ5j4ykatDklH4+PJi71My6/9lAF0jOC12WW e0JvrSPlhy6hnhv8tbuF6jsj0qR6PQKw3AwSh/nCvmqqXc2uHYg= -----END CERTIFICATE-----Generated at Thu Mar 26 21:35:10 2026 by rpki-client