$ rpki-client -vvf repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft File: EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft (raw, json) Hash identifier: PTQah26yme9yyLeyyGww2/4M+luTbhogW/zf7lsQ3kA= Subject key identifier: 0F:D2:85:82:9A:42:30:80:80:D4:11:CB:01:15:D9:65:32:4F:AB:C6 Authority key identifier: EF:7C:A8:2C:5B:45:FD:41:2D:E8:92:CB:6D:A7:A8:CA:15:C8:5B:17 Certificate issuer: /CN=EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17 Certificate serial: 59CCCCAA0EEF7FA2369D7534129D37BA4BA2D8CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft Manifest number: 0124 Signing time: Wed 25 Mar 2026 17:41:30 +0000 Manifest this update: Wed 25 Mar 2026 17:36:30 +0000 Manifest next update: Sat 28 Mar 2026 20:10:30 +0000 Files and hashes: 1: 3135372e36362e38362e302f32332d3234203d3e20313532343432.roa (hash: yvjq0+mX9UVVGH4hrgAy0kHkjD5STbq2ZndxXPg4Qok=) 2: EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.crl (hash: RrlE2fM9sjRgU/N6X2FxzD30CinaQDs/WXM9vs0PBJw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.crl rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 20:10:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:cc:cc:aa:0e:ef:7f:a2:36:9d:75:34:12:9d:37:ba:4b:a2:d8:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17 Validity Not Before: Mar 25 17:36:30 2026 GMT Not After : Mar 28 20:10:30 2026 GMT Subject: CN=0FD285829A42308080D411CB0115D965324FABC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:43:d6:0d:89:ff:54:ce:a6:56:f1:65:2d:af: e1:e4:60:d3:df:9d:a4:f3:3a:cb:cf:e6:02:c0:69: 6f:d3:98:6f:96:2a:b5:79:6d:7b:6a:aa:1f:c2:7b: 6e:07:ae:77:02:d2:69:1b:80:fb:9f:52:fc:30:19: c9:f3:67:ea:96:81:8a:cd:a2:4a:b8:72:18:bb:25: 3c:42:80:e7:84:ea:4a:d5:8c:d8:2b:a6:5a:de:ab: b6:a7:54:2a:10:e2:02:e9:20:e1:74:e8:d1:ab:8f: 14:1b:3c:7d:e0:0e:48:68:91:42:56:78:01:c3:40: 34:13:e3:13:76:2a:77:ce:09:c4:fe:e9:00:ad:51: c6:c9:65:f4:49:6f:0d:64:ad:cb:43:c9:b2:ab:99: 10:18:9d:fa:6e:67:67:8a:c9:41:63:40:e3:74:45: 72:1d:5c:af:f3:48:c8:4a:88:ee:4d:b1:5b:8e:d6: 43:25:5e:d6:18:e2:5f:26:e0:88:2b:e2:00:e7:ba: 8a:4f:20:7c:e1:2c:ac:c1:7a:3f:c7:86:b7:7a:cf: ad:9e:3a:cb:25:3f:1c:2a:78:97:02:ba:29:f6:4c: fb:e6:9a:4d:89:14:ba:29:94:cc:f5:bb:88:03:dd: 7b:70:3c:77:13:59:48:f7:c6:19:c7:ab:c8:01:a0: 55:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:D2:85:82:9A:42:30:80:80:D4:11:CB:01:15:D9:65:32:4F:AB:C6 X509v3 Authority Key Identifier: keyid:EF:7C:A8:2C:5B:45:FD:41:2D:E8:92:CB:6D:A7:A8:CA:15:C8:5B:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:71:30:00:90:32:5b:0d:5b:b2:06:ca:2a:6c:f9:8e:41:f9: a3:68:f7:85:96:c2:51:d9:d8:d5:e2:4a:d8:69:72:bb:58:00: 78:f6:48:66:96:6d:a3:77:6d:7a:0c:16:8a:7b:d8:3c:64:35: f6:bd:5f:55:7d:84:d3:86:f0:07:05:60:79:3f:6e:26:8e:f2: 53:00:12:53:f4:38:be:de:d5:43:a0:41:12:14:23:9e:6c:f5: 02:0b:c1:b0:ca:e1:39:ee:65:c1:50:e5:8d:f1:99:e3:2c:ae: 20:bb:6d:32:54:5b:3e:6a:0b:77:ce:3e:82:7b:67:f3:00:51: 49:4e:1d:ba:42:df:14:8d:ac:9b:51:a4:09:d0:76:df:3e:59: 23:da:b1:31:ce:92:42:6f:2a:26:fb:97:a9:14:54:ba:65:ff: cb:1d:23:87:da:04:ed:f3:21:83:ec:71:cb:92:f5:fa:74:d5: 3e:47:33:9b:c8:49:e4:84:0b:00:4a:ab:37:d7:8d:03:bc:31: 76:8c:af:c5:52:3e:a9:e5:27:bb:68:bc:8a:4e:15:23:1d:22: d1:0b:c7:eb:d2:98:f4:4f:17:34:5f:e8:9b:f0:43:8b:fb:c0: c8:f2:f8:77:8d:0c:0e:06:87:60:d2:c3:ea:24:b0:bb:17:2b: f7:63:db:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWczMqg7vf6I2nXU0Ep03ukui2M0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY3Q0E4MkM1QjQ1RkQ0MTJERTg5MkNCNkRBN0E4Q0Ex NUM4NUIxNzAeFw0yNjAzMjUxNzM2MzBaFw0yNjAzMjgyMDEwMzBaMDMxMTAvBgNV BAMTKDBGRDI4NTgyOUE0MjMwODA4MEQ0MTFDQjAxMTVEOTY1MzI0RkFCQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnQ9YNif9UzqZW8WUtr+HkYNPf naTzOsvP5gLAaW/TmG+WKrV5bXtqqh/Ce24HrncC0mkbgPufUvwwGcnzZ+qWgYrN okq4chi7JTxCgOeE6krVjNgrplreq7anVCoQ4gLpIOF06NGrjxQbPH3gDkhokUJW eAHDQDQT4xN2KnfOCcT+6QCtUcbJZfRJbw1krctDybKrmRAYnfpuZ2eKyUFjQON0 RXIdXK/zSMhKiO5NsVuO1kMlXtYY4l8m4Igr4gDnuopPIHzhLKzBej/Hhrd6z62e OsslPxwqeJcCuin2TPvmmk2JFLoplMz1u4gD3XtwPHcTWUj3xhnHq8gBoFV3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD9KFgppCMICA1BHLARXZZTJPq8YwHwYDVR0j BBgwFoAU73yoLFtF/UEt6JLLbaeoyhXIWxcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ODdkZDU5Ny00MGNkLTQwOWItYjNjNS0yODUyY2UwMTQ4ODkvMC9FRjdDQTgyQzVC NDVGRDQxMkRFODkyQ0I2REE3QThDQTE1Qzg1QjE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRUY3Q0E4MkM1QjQ1RkQ0MTJERTg5MkNCNkRBN0E4Q0ExNUM4 NUIxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjg3ZGQ1OTctNDBjZC00MDliLWIz YzUtMjg1MmNlMDE0ODg5LzAvRUY3Q0E4MkM1QjQ1RkQ0MTJERTg5MkNCNkRBN0E4 Q0ExNUM4NUIxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG9xMACQMlsNW7IGyips+Y5B+aNo94WWwlHZ 2NXiSthpcrtYAHj2SGaWbaN3bXoMFop72DxkNfa9X1V9hNOG8AcFYHk/biaO8lMA ElP0OL7e1UOgQRIUI55s9QILwbDK4TnuZcFQ5Y3xmeMsriC7bTJUWz5qC3fOPoJ7 Z/MAUUlOHbpC3xSNrJtRpAnQdt8+WSPasTHOkkJvKib7l6kUVLpl/8sdI4faBO3z IYPsccuS9fp01T5HM5vISeSECwBKqzfXjQO8MXaMr8VSPqnlJ7tovIpOFSMdItEL x+vSmPRPFzRf6JvwQ4v7wMjy+HeNDA4Gh2DSw+oksLsXK/dj21A= -----END CERTIFICATE-----Generated at Thu Mar 26 16:08:01 2026 by rpki-client