$ rpki-client -vvf repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.mft File: EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.mft (raw, json) Hash identifier: ozGMOrs8oPDTO4eFLjL3hrXU1KdPTZw+I9Y3bGOQMMk= Subject key identifier: 3A:46:DF:FF:46:D2:08:7F:36:19:37:D8:07:A4:F1:FA:CF:66:84:06 Authority key identifier: EE:CC:4A:44:F0:95:94:EB:71:1E:A1:F6:F3:4B:95:8D:19:A3:B4:FD Certificate issuer: /CN=EECC4A44F09594EB711EA1F6F34B958D19A3B4FD Certificate serial: 3A690C338458AEA8BF6307A6B7EAFAE7EEED662A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.mft Manifest number: 01FD Signing time: Sun 19 Apr 2026 02:31:34 +0000 Manifest this update: Sun 19 Apr 2026 02:26:34 +0000 Manifest next update: Wed 22 Apr 2026 04:53:34 +0000 Files and hashes: 1: EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.crl (hash: 3uNbd08kqBDXFGysZtQd+hmJDhfvRTDHhAr0aQtQaJ4=) 2: 3130332e3230342e31352e302f32342d3234203d3e20313530393230.roa (hash: fgMkptBXT/jMbSHjGdDwWPnPAJdd4An6F4EOu9VOo4k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.crl rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 04:53:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:69:0c:33:84:58:ae:a8:bf:63:07:a6:b7:ea:fa:e7:ee:ed:66:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EECC4A44F09594EB711EA1F6F34B958D19A3B4FD Validity Not Before: Apr 19 02:26:34 2026 GMT Not After : Apr 22 04:53:34 2026 GMT Subject: CN=3A46DFFF46D2087F361937D807A4F1FACF668406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ac:ce:2a:81:02:4a:c5:64:76:a0:4b:0d:a2: f8:cf:f2:f8:2e:07:1d:42:13:6c:09:19:7b:37:54: a9:bc:2a:89:d4:0d:34:b5:5f:d6:d9:77:7f:39:e5: 6e:8f:a5:cd:ed:72:59:ad:68:63:bc:18:30:df:88: 32:fa:bd:a8:72:3c:8c:81:39:72:7d:16:ab:fa:1f: 90:84:4d:f1:d8:72:18:6b:8d:0e:34:b6:d8:64:02: b2:d1:3e:e9:f3:79:33:0e:44:95:98:9b:6f:d8:07: 0b:fc:d0:a4:76:68:9b:5c:4c:70:c2:16:23:b2:0e: 1c:c1:56:c1:39:aa:54:39:7e:14:e7:ba:19:8d:b7: e1:8d:da:4c:0c:13:8f:71:68:e2:bf:0e:82:d8:4e: db:48:e3:59:74:2d:fd:02:f3:fb:cd:6f:b7:9a:90: cd:d2:fb:f1:ef:d2:19:54:ea:dd:57:1c:61:e0:dd: 73:c5:83:68:ce:f7:85:11:f4:58:4c:9f:a9:fe:01: 70:5c:36:99:31:e5:9c:ce:52:4e:ae:e8:29:25:1f: a9:9a:37:66:42:fe:29:19:c5:df:1e:ea:b6:3b:a2: 30:b0:93:14:e9:9b:48:ae:29:c0:c9:19:44:f7:65: db:76:a1:7c:26:4e:d8:dd:03:0e:1b:4d:a1:d4:7a: 7b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:46:DF:FF:46:D2:08:7F:36:19:37:D8:07:A4:F1:FA:CF:66:84:06 X509v3 Authority Key Identifier: keyid:EE:CC:4A:44:F0:95:94:EB:71:1E:A1:F6:F3:4B:95:8D:19:A3:B4:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:c2:bc:0a:01:1b:ac:89:78:86:30:20:3c:09:a4:bd:bf:b7: 84:dc:96:0b:05:2b:2a:67:86:7d:62:a0:66:7b:89:ea:63:80: 55:3e:b7:bc:32:6a:a9:e1:c8:f2:0b:1c:36:8e:19:1a:d6:77: ca:69:af:bf:27:d1:f0:19:75:aa:d6:a6:61:0a:3a:70:d7:61: 96:80:32:e0:d6:c4:a9:4d:92:ab:1d:73:4c:e8:81:ec:c3:31: 1a:83:f0:c2:5b:99:a2:45:98:36:2b:9a:ec:2c:10:0d:e1:60: d4:fe:ac:f5:68:a7:ef:6a:4b:e1:d8:c0:74:5e:e9:15:71:bc: 43:5c:3c:d7:c2:57:cd:50:76:12:67:2b:22:b7:ed:76:dd:7b: f1:c7:3f:39:a2:87:51:b9:ca:1f:50:c4:fa:ad:bc:39:77:79: 40:4d:59:7c:5d:ad:a7:2b:ad:ee:e9:aa:30:fc:04:56:5a:44: 18:65:ae:3e:dc:43:c3:73:d7:ae:9e:12:ed:85:05:5d:0b:1c: 41:d8:af:e4:5b:f0:f2:32:19:dc:a0:ff:75:cf:a3:d5:f4:5a: 7a:56:2a:7f:65:0d:12:7c:09:0f:1f:2a:43:5f:13:a4:c0:4d: ff:3e:b2:0e:43:88:29:06:1f:25:d3:0c:75:4a:56:f9:7c:3f: a6:06:2c:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOmkMM4RYrqi/Ywemt+r65+7tZiowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVDQzRBNDRGMDk1OTRFQjcxMUVBMUY2RjM0Qjk1OEQx OUEzQjRGRDAeFw0yNjA0MTkwMjI2MzRaFw0yNjA0MjIwNDUzMzRaMDMxMTAvBgNV BAMTKDNBNDZERkZGNDZEMjA4N0YzNjE5MzdEODA3QTRGMUZBQ0Y2Njg0MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcrM4qgQJKxWR2oEsNovjP8vgu Bx1CE2wJGXs3VKm8KonUDTS1X9bZd3855W6Ppc3tclmtaGO8GDDfiDL6vahyPIyB OXJ9Fqv6H5CETfHYchhrjQ40tthkArLRPunzeTMORJWYm2/YBwv80KR2aJtcTHDC FiOyDhzBVsE5qlQ5fhTnuhmNt+GN2kwME49xaOK/DoLYTttI41l0Lf0C8/vNb7ea kM3S+/Hv0hlU6t1XHGHg3XPFg2jO94UR9FhMn6n+AXBcNpkx5ZzOUk6u6CklH6ma N2ZC/ikZxd8e6rY7ojCwkxTpm0iuKcDJGUT3Zdt2oXwmTtjdAw4bTaHUenuPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOkbf/0bSCH82GTfYB6Tx+s9mhAYwHwYDVR0j BBgwFoAU7sxKRPCVlOtxHqH280uVjRmjtP0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OWZjOTk2Zi03MmNhLTRkNmItYTBlNy1mZjViYzQyYjA1ODkvMC9FRUNDNEE0NEYw OTU5NEVCNzExRUExRjZGMzRCOTU4RDE5QTNCNEZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUVDQzRBNDRGMDk1OTRFQjcxMUVBMUY2RjM0Qjk1OEQxOUEz QjRGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjlmYzk5NmYtNzJjYS00ZDZiLWEw ZTctZmY1YmM0MmIwNTg5LzAvRUVDQzRBNDRGMDk1OTRFQjcxMUVBMUY2RjM0Qjk1 OEQxOUEzQjRGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGHCvAoBG6yJeIYwIDwJpL2/t4TclgsFKypn hn1ioGZ7iepjgFU+t7wyaqnhyPILHDaOGRrWd8ppr78n0fAZdarWpmEKOnDXYZaA MuDWxKlNkqsdc0zogezDMRqD8MJbmaJFmDYrmuwsEA3hYNT+rPVop+9qS+HYwHRe 6RVxvENcPNfCV81QdhJnKyK37Xbde/HHPzmih1G5yh9QxPqtvDl3eUBNWXxdracr re7pqjD8BFZaRBhlrj7cQ8Nz166eEu2FBV0LHEHYr+Rb8PIyGdyg/3XPo9X0WnpW Kn9lDRJ8CQ8fKkNfE6TATf8+sg5DiCkGHyXTDHVKVvl8P6YGLNY= -----END CERTIFICATE-----Generated at Sun Apr 19 14:20:45 2026 by rpki-client