$ rpki-client -vvf repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft File: EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft (raw, json) Hash identifier: GTEy2d3GzGVONHR11dpimLd/jT8V78ykNUa/kGaHEQI= Subject key identifier: 7D:93:17:F0:00:73:28:C6:C1:83:AE:07:CC:41:42:C6:8F:F7:EB:21 Authority key identifier: EC:62:A9:49:70:E5:6A:C9:FE:8B:82:8A:54:2B:7E:DB:A3:D1:16:D5 Certificate issuer: /CN=EC62A94970E56AC9FE8B828A542B7EDBA3D116D5 Certificate serial: 0E1D69ECFB2837EC4DAC6DB402F6C9C10ABEC86F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft Manifest number: 0555 Signing time: Sun 01 Mar 2026 11:01:50 +0000 Manifest this update: Sun 01 Mar 2026 10:56:49 +0000 Manifest next update: Wed 04 Mar 2026 12:25:49 +0000 Files and hashes: 1: EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.crl (hash: 7HrzdkXM9bkPt0t0v+t6qKWzAnljoAKXDap5vCXaM7Y=) 2: 3130332e362e3231342e302f32342d3234203d3e20313331313132.roa (hash: F0a3JFzr6TEGFg4XROWEIEBL9cNyd2bfiVU6lzFtCLY=) 3: 323030313a6466303a373434303a3a2f34382d3438203d3e20313331313132.roa (hash: KkIhRaLs3sWTl521rsd4vYL4F4GrP12Jx5XSNhBN/i4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.crl rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 12:25:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:1d:69:ec:fb:28:37:ec:4d:ac:6d:b4:02:f6:c9:c1:0a:be:c8:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC62A94970E56AC9FE8B828A542B7EDBA3D116D5 Validity Not Before: Mar 1 10:56:49 2026 GMT Not After : Mar 4 12:25:49 2026 GMT Subject: CN=7D9317F0007328C6C183AE07CC4142C68FF7EB21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:26:46:fb:f7:a3:a4:79:ff:9d:af:36:6e:a3: 2a:c3:90:a8:50:c1:53:7c:ac:ac:36:8a:83:bc:de: 23:86:30:55:8d:c8:a4:67:a0:33:bb:19:74:9a:f8: b1:69:87:56:24:5d:c4:61:7d:ca:6a:17:b8:7d:97: 35:19:30:d4:4f:93:15:58:1a:19:64:8b:d4:14:72: 7b:0c:3e:44:0d:a0:3c:75:44:5f:c2:0c:36:36:fd: e5:03:55:c5:58:d7:cc:3d:bb:29:33:53:c0:8d:a5: 9f:45:a7:22:e4:e8:2d:85:3a:b4:e3:ad:b8:f5:a3: e0:92:e0:17:f6:1a:7c:42:c7:c8:3c:ad:8a:39:27: 37:8c:bb:de:af:02:c4:57:ad:12:15:76:23:f1:21: 91:5e:15:b5:aa:15:9e:e5:75:5a:f8:51:1d:45:4b: 44:15:08:7a:84:ca:aa:7e:b5:d6:84:00:3f:73:b9: 10:9a:6b:73:2d:5a:0b:76:b7:6e:45:dd:31:9f:85: 30:db:88:0f:41:3a:3b:97:66:ff:72:b0:0c:27:a9: 64:b5:68:0f:82:f3:25:33:f5:52:5b:fe:3d:08:22: 11:bd:60:45:92:fa:0c:f6:2f:4c:b1:b0:58:eb:58: 1a:38:9c:78:b3:d4:33:19:6d:39:3e:88:45:54:bb: 62:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:93:17:F0:00:73:28:C6:C1:83:AE:07:CC:41:42:C6:8F:F7:EB:21 X509v3 Authority Key Identifier: keyid:EC:62:A9:49:70:E5:6A:C9:FE:8B:82:8A:54:2B:7E:DB:A3:D1:16:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:fa:bf:b6:fa:60:93:8c:5f:84:13:37:73:97:00:1e:f0:ab: 28:cc:29:4a:b1:9a:28:0d:e5:3a:26:e0:22:f4:4c:73:3f:13: 22:b4:0f:46:ab:89:1c:e3:d7:f5:7a:d1:5f:ef:eb:e5:3a:e2: 8b:fa:f4:f0:f5:d0:e4:75:f1:83:57:96:a7:be:26:b1:20:14: 0e:13:79:0b:94:16:8a:87:a5:cf:73:b7:60:3c:19:c1:33:ed: df:c6:07:14:5d:60:7c:b4:84:23:d7:b5:cb:49:86:fd:5d:17: 2c:29:ed:3c:e4:fa:b3:bf:c8:59:2d:e1:7a:44:5d:11:f7:57: 75:43:74:7e:41:d5:df:f2:fb:6e:39:2f:a9:4e:69:60:51:1a: 7f:7b:49:ca:fb:db:46:04:bb:64:a3:12:ff:6f:96:d7:2a:72: 2c:84:57:25:53:9a:64:d2:32:a2:00:c2:35:11:5d:05:3a:21: c3:7a:5a:bd:73:65:c1:f3:75:a3:78:6f:8d:14:4f:2a:2b:3d: fc:40:9d:26:47:d5:f9:38:ba:4c:01:88:1f:bd:95:ac:2d:14: cd:9a:3b:f5:d4:f1:dd:11:21:87:c3:2f:f1:de:c9:c4:86:92: 0d:b6:45:95:d3:5b:5c:9a:9a:2c:f6:a1:0c:f5:52:31:2e:a3: ff:34:12:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDh1p7PsoN+xNrG20AvbJwQq+yG8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM2MkE5NDk3MEU1NkFDOUZFOEI4MjhBNTQyQjdFREJB M0QxMTZENTAeFw0yNjAzMDExMDU2NDlaFw0yNjAzMDQxMjI1NDlaMDMxMTAvBgNV BAMTKDdEOTMxN0YwMDA3MzI4QzZDMTgzQUUwN0NDNDE0MkM2OEZGN0VCMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsJkb796Okef+drzZuoyrDkKhQ wVN8rKw2ioO83iOGMFWNyKRnoDO7GXSa+LFph1YkXcRhfcpqF7h9lzUZMNRPkxVY Ghlki9QUcnsMPkQNoDx1RF/CDDY2/eUDVcVY18w9uykzU8CNpZ9FpyLk6C2FOrTj rbj1o+CS4Bf2GnxCx8g8rYo5JzeMu96vAsRXrRIVdiPxIZFeFbWqFZ7ldVr4UR1F S0QVCHqEyqp+tdaEAD9zuRCaa3MtWgt2t25F3TGfhTDbiA9BOjuXZv9ysAwnqWS1 aA+C8yUz9VJb/j0IIhG9YEWS+gz2L0yxsFjrWBo4nHiz1DMZbTk+iEVUu2LbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfZMX8ABzKMbBg64HzEFCxo/36yEwHwYDVR0j BBgwFoAU7GKpSXDlasn+i4KKVCt+26PRFtUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODdmOGY4Mi0zN2JiLTQ5ODMtOTNjYS01ZTA2NzBhYjAyZTMvMC9FQzYyQTk0OTcw RTU2QUM5RkU4QjgyOEE1NDJCN0VEQkEzRDExNkQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUM2MkE5NDk3MEU1NkFDOUZFOEI4MjhBNTQyQjdFREJBM0Qx MTZENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjg3ZjhmODItMzdiYi00OTgzLTkz Y2EtNWUwNjcwYWIwMmUzLzAvRUM2MkE5NDk3MEU1NkFDOUZFOEI4MjhBNTQyQjdF REJBM0QxMTZENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACT6v7b6YJOMX4QTN3OXAB7wqyjMKUqxmigN 5Tom4CL0THM/EyK0D0ariRzj1/V60V/v6+U64ov69PD10OR18YNXlqe+JrEgFA4T eQuUFoqHpc9zt2A8GcEz7d/GBxRdYHy0hCPXtctJhv1dFywp7Tzk+rO/yFkt4XpE XRH3V3VDdH5B1d/y+245L6lOaWBRGn97Scr720YEu2SjEv9vltcqciyEVyVTmmTS MqIAwjURXQU6IcN6Wr1zZcHzdaN4b40UTyorPfxAnSZH1fk4ukwBiB+9lawtFM2a O/XU8d0RIYfDL/HeycSGkg22RZXTW1yamiz2oQz1UjEuo/80Ess= -----END CERTIFICATE-----Generated at Mon Mar 2 10:02:24 2026 by rpki-client