$ rpki-client -vvf repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft File: EC973BE13EF324E7D59046CF7690A12F9DF12932.mft (raw, json) Hash identifier: /PUypwS0WMoHfsh2mN8tg7DfAFfs8Ya7niHbcDhRQME= Subject key identifier: 9C:5C:09:DC:64:94:48:9D:86:5B:55:95:FD:EC:08:DA:64:2A:AA:46 Authority key identifier: EC:97:3B:E1:3E:F3:24:E7:D5:90:46:CF:76:90:A1:2F:9D:F1:29:32 Certificate issuer: /CN=EC973BE13EF324E7D59046CF7690A12F9DF12932 Certificate serial: 0A677B78B984FA1B108CA924237BFC30188C06BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft Manifest number: 029F Signing time: Thu 26 Mar 2026 06:51:32 +0000 Manifest this update: Thu 26 Mar 2026 06:46:32 +0000 Manifest next update: Sun 29 Mar 2026 08:00:32 +0000 Files and hashes: 1: EC973BE13EF324E7D59046CF7690A12F9DF12932.crl (hash: 3xsVQMrIMH4WYTz9IjSPzqwsm8n2Gi7qEe6VK/606Pc=) 2: 3130332e3138312e37362e302f32342d3234203d3e20313439333739.roa (hash: Fd7yVNtVPCM6piUfSXh9X3JKHqUDZdjbopzWmm3ObMk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.crl rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 08:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:67:7b:78:b9:84:fa:1b:10:8c:a9:24:23:7b:fc:30:18:8c:06:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC973BE13EF324E7D59046CF7690A12F9DF12932 Validity Not Before: Mar 26 06:46:32 2026 GMT Not After : Mar 29 08:00:32 2026 GMT Subject: CN=9C5C09DC6494489D865B5595FDEC08DA642AAA46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:79:1e:aa:91:c6:63:bb:50:18:e8:87:29:a4: 09:78:31:fa:e1:5e:15:c5:21:d0:29:1b:22:4f:7a: 50:ae:50:4e:70:1e:35:58:1f:57:13:76:71:e1:d4: 33:c7:8e:2a:77:c2:38:be:19:33:4b:a2:c6:6f:84: e7:5c:8a:3a:01:39:21:69:e1:a9:1b:ff:b7:26:b4: 6c:13:bd:1f:dc:6e:36:53:2f:2e:d7:5c:fd:04:db: ec:c8:af:06:89:fb:45:77:7f:79:bf:fb:29:04:f7: 81:6a:0a:b4:14:c4:5b:e0:6b:64:cd:b2:2f:e1:09: 26:5f:56:cd:e9:f8:63:ab:63:92:19:03:01:6c:f3: 1f:19:42:a0:01:26:83:4a:1c:9e:ef:3a:ae:92:2a: be:2e:41:2e:62:9a:93:66:48:10:09:9f:68:b9:66: 4c:23:b6:26:a9:9f:1a:f3:a6:92:90:93:8c:0b:b7: 12:95:31:53:5a:47:9f:09:d0:e0:44:e1:c7:55:e4: 54:04:77:b6:0c:66:d6:10:f7:6e:c8:c1:65:ad:a8: 0b:75:1f:bf:93:4a:ff:4f:bc:df:28:97:23:1e:c7: 8b:a6:a9:5d:cd:dc:0c:7d:27:95:f9:f4:5d:6c:c7: 05:db:ff:f2:b1:11:84:5e:f9:3c:2d:32:f2:98:3f: 8a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:5C:09:DC:64:94:48:9D:86:5B:55:95:FD:EC:08:DA:64:2A:AA:46 X509v3 Authority Key Identifier: keyid:EC:97:3B:E1:3E:F3:24:E7:D5:90:46:CF:76:90:A1:2F:9D:F1:29:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:55:a1:90:cf:06:c7:b9:ca:0c:9d:29:43:c0:16:7a:09:ce: c0:29:e6:70:15:d2:4c:bf:78:62:81:27:99:3e:27:71:03:c1: 17:15:d7:9a:00:08:41:9a:9b:9b:dd:26:fa:09:b7:a4:23:bc: 73:75:c0:6a:4d:88:e3:08:2b:c1:87:60:49:74:b7:d2:72:2d: 82:0b:65:2c:73:38:cc:62:39:26:9e:e0:4d:c1:3c:29:f7:7f: 19:d3:b6:b0:cb:15:eb:1f:6e:07:4c:b9:5f:37:07:96:65:4f: 63:42:de:0c:77:c7:5c:33:2f:ee:bd:e9:10:e7:e5:18:47:2e: cb:e8:9c:16:2d:35:cc:60:3b:c8:a1:96:70:93:71:71:b5:0c: 7e:78:60:6e:e7:47:74:d1:f7:48:5d:9c:8f:3c:5e:36:e4:7d: f5:27:04:20:02:05:f1:0e:d6:f4:95:c0:e3:e2:2d:2c:8b:2b: ef:e3:b3:76:20:dc:a9:38:b9:a2:19:77:fc:f0:18:3d:62:ad: 45:1b:e5:72:e7:dd:d2:24:27:2b:d2:55:91:fa:63:38:8a:2c: 01:ca:9c:d8:09:c0:52:a0:e5:f6:11:d7:93:c1:7a:be:2c:ea: 97:f8:ab:8a:32:d9:45:38:47:f1:06:6b:ca:0e:fd:ae:91:d6: 2f:4c:32:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCmd7eLmE+hsQjKkkI3v8MBiMBrowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5NzNCRTEzRUYzMjRFN0Q1OTA0NkNGNzY5MEExMkY5 REYxMjkzMjAeFw0yNjAzMjYwNjQ2MzJaFw0yNjAzMjkwODAwMzJaMDMxMTAvBgNV BAMTKDlDNUMwOURDNjQ5NDQ4OUQ4NjVCNTU5NUZERUMwOERBNjQyQUFBNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4eR6qkcZju1AY6IcppAl4Mfrh XhXFIdApGyJPelCuUE5wHjVYH1cTdnHh1DPHjip3wji+GTNLosZvhOdcijoBOSFp 4akb/7cmtGwTvR/cbjZTLy7XXP0E2+zIrwaJ+0V3f3m/+ykE94FqCrQUxFvga2TN si/hCSZfVs3p+GOrY5IZAwFs8x8ZQqABJoNKHJ7vOq6SKr4uQS5impNmSBAJn2i5 ZkwjtiapnxrzppKQk4wLtxKVMVNaR58J0OBE4cdV5FQEd7YMZtYQ927IwWWtqAt1 H7+TSv9PvN8olyMex4umqV3N3Ax9J5X59F1sxwXb//KxEYRe+TwtMvKYP4oBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnFwJ3GSUSJ2GW1WV/ewI2mQqqkYwHwYDVR0j BBgwFoAU7Jc74T7zJOfVkEbPdpChL53xKTIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZTFjYmQ3OS04ZjI2LTRiMGUtOGIzYi1hYjllOTkzOGZjYWUvMC9FQzk3M0JFMTNF RjMyNEU3RDU5MDQ2Q0Y3NjkwQTEyRjlERjEyOTMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUM5NzNCRTEzRUYzMjRFN0Q1OTA0NkNGNzY5MEExMkY5REYx MjkzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmUxY2JkNzktOGYyNi00YjBlLThi M2ItYWI5ZTk5MzhmY2FlLzAvRUM5NzNCRTEzRUYzMjRFN0Q1OTA0NkNGNzY5MEEx MkY5REYxMjkzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJRVoZDPBse5ygydKUPAFnoJzsAp5nAV0ky/ eGKBJ5k+J3EDwRcV15oACEGam5vdJvoJt6QjvHN1wGpNiOMIK8GHYEl0t9JyLYIL ZSxzOMxiOSae4E3BPCn3fxnTtrDLFesfbgdMuV83B5ZlT2NC3gx3x1wzL+696RDn 5RhHLsvonBYtNcxgO8ihlnCTcXG1DH54YG7nR3TR90hdnI88XjbkffUnBCACBfEO 1vSVwOPiLSyLK+/js3Yg3Kk4uaIZd/zwGD1irUUb5XLn3dIkJyvSVZH6YziKLAHK nNgJwFKg5fYR15PBer4s6pf4q4oy2UU4R/EGa8oO/a6R1i9MMvE= -----END CERTIFICATE-----Generated at Thu Mar 26 22:03:46 2026 by rpki-client