$ rpki-client -vvf repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.mft File: EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.mft (raw, json) Hash identifier: N7ZIz+RTamf57ojKaGQy+eAl8ayzyFV74ppj+6eXmXs= Subject key identifier: 95:7D:BA:F5:AC:3A:13:95:49:9D:59:D4:D5:45:2B:7E:1C:8D:D3:F7 Authority key identifier: ED:BD:84:5A:95:97:FE:C4:AD:90:03:0F:90:18:E4:B8:B6:3F:CC:77 Certificate issuer: /CN=EDBD845A9597FEC4AD90030F9018E4B8B63FCC77 Certificate serial: 76C387F09C25E1168A6B6E8B3DA0C78370EAA5A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.mft Manifest number: 0558 Signing time: Sun 01 Mar 2026 10:52:05 +0000 Manifest this update: Sun 01 Mar 2026 10:47:05 +0000 Manifest next update: Wed 04 Mar 2026 16:37:05 +0000 Files and hashes: 1: 3130332e3133372e33372e302f32342d3234203d3e20313335343731.roa (hash: mC7pHV7NYsbpeeW0ZP+ibU3Ewbq2p4OfCkZ3LiVxhX4=) 2: 3130332e37312e3235352e302f32342d3234203d3e20313335343731.roa (hash: gIKkIGkZm7OxQ7k8KYXU1OguRf76El1DoB7NPk29hSo=) 3: EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.crl (hash: fQHaWAOHRySGg18lGFI3Bgqkz9WO4nyVAnlrpqX5trU=) 4: 323030313a6466343a6530303a3a2f34382d3438203d3e20313335343731.roa (hash: PpwdW1Sh67VcI29Rs6SsVeiTKG/TdkizTmZ0n4tpRMU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.crl rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 16:37:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:c3:87:f0:9c:25:e1:16:8a:6b:6e:8b:3d:a0:c7:83:70:ea:a5:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EDBD845A9597FEC4AD90030F9018E4B8B63FCC77 Validity Not Before: Mar 1 10:47:05 2026 GMT Not After : Mar 4 16:37:05 2026 GMT Subject: CN=957DBAF5AC3A1395499D59D4D5452B7E1C8DD3F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ce:e2:32:cc:6a:c5:f0:8a:ba:ae:51:d0:2c: 02:84:bb:61:54:6a:58:7d:c5:ab:ae:6e:73:e1:3f: c3:e5:23:a4:fa:0e:0a:bc:38:eb:c1:3a:a9:a3:a5: 01:44:76:8f:c8:03:6c:01:48:b9:a2:7e:8f:74:c0: 80:2b:65:57:dd:a2:2b:1d:5c:b7:a1:12:2b:9e:ee: 9b:74:da:80:96:36:87:ae:5b:90:c5:41:bb:3c:2a: bb:97:6d:49:47:18:67:da:f3:e2:be:04:87:15:3c: 69:87:be:3e:71:c8:64:64:6f:f8:66:3b:89:9f:34: dc:be:07:38:f6:a0:35:21:2c:d6:d2:13:d7:b7:80: 0a:12:c4:e6:73:6a:a2:8e:ef:35:45:a1:b8:f8:59: 68:a8:e1:cd:03:22:44:f6:fe:79:b2:b4:e7:45:5c: 09:6f:75:f3:92:d3:4d:82:5a:a2:72:9c:a8:b7:7b: 8c:7d:3a:d6:80:b1:a9:3d:aa:9d:98:af:4e:12:95: dc:09:52:0e:e0:2b:be:e8:93:33:30:5e:ca:ac:0b: af:e1:d2:fe:bb:09:32:f1:18:23:8c:6e:3f:3a:87: 51:34:4d:8b:f7:2b:b5:af:65:87:2b:3b:2e:7d:85: 62:96:55:6b:3e:34:72:82:b5:04:5a:42:15:c7:0a: 34:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:7D:BA:F5:AC:3A:13:95:49:9D:59:D4:D5:45:2B:7E:1C:8D:D3:F7 X509v3 Authority Key Identifier: keyid:ED:BD:84:5A:95:97:FE:C4:AD:90:03:0F:90:18:E4:B8:B6:3F:CC:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:50:0a:d2:aa:b7:c6:3c:92:04:9e:79:42:bd:fd:66:df:16: 91:7a:84:c6:a4:4a:42:7a:f1:95:49:ae:d1:bf:01:5d:07:3e: 62:e4:4c:b9:ea:9a:2b:5e:ac:9e:22:36:bf:a6:cd:44:bc:11: 79:5f:8b:f4:3b:f5:79:9a:5d:f9:f5:3b:e9:5d:15:ab:1c:91: 01:1b:13:04:52:6d:0d:bf:b3:e3:44:3a:90:4b:14:f6:7b:cf: b9:f0:95:77:d0:aa:f3:83:40:3e:43:fe:b7:1b:a8:5d:5f:b6: 9d:3a:71:46:e2:96:61:fb:f6:c9:6a:0a:b9:c1:75:e6:cf:62: f8:89:ba:de:15:7b:70:21:17:51:25:73:de:29:2e:f9:0b:6c: 44:16:8b:bb:54:ce:b9:4e:c5:b5:1a:75:cb:c2:5b:af:6e:f5: 94:37:c3:3c:33:ce:98:8e:43:33:54:76:9b:f9:71:3b:c7:91: 89:62:70:8a:cc:92:5e:47:d2:8a:38:11:8b:87:2b:94:46:1c: 39:d0:ba:16:2f:42:2f:42:ca:48:c2:39:6f:f0:ef:01:0e:3a: ca:49:5f:a3:0c:cd:46:d5:79:5f:6c:61:cf:dd:b6:a3:74:b5: dd:23:5f:f5:c5:8c:a9:99:75:9f:ca:bc:9d:65:18:d7:0c:76: 92:ee:9a:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdsOH8Jwl4RaKa26LPaDHg3DqpaYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRURCRDg0NUE5NTk3RkVDNEFEOTAwMzBGOTAxOEU0QjhC NjNGQ0M3NzAeFw0yNjAzMDExMDQ3MDVaFw0yNjAzMDQxNjM3MDVaMDMxMTAvBgNV BAMTKDk1N0RCQUY1QUMzQTEzOTU0OTlENTlENEQ1NDUyQjdFMUM4REQzRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9zuIyzGrF8Iq6rlHQLAKEu2FU alh9xauubnPhP8PlI6T6Dgq8OOvBOqmjpQFEdo/IA2wBSLmifo90wIArZVfdoisd XLehEiue7pt02oCWNoeuW5DFQbs8KruXbUlHGGfa8+K+BIcVPGmHvj5xyGRkb/hm O4mfNNy+Bzj2oDUhLNbSE9e3gAoSxOZzaqKO7zVFobj4WWio4c0DIkT2/nmytOdF XAlvdfOS002CWqJynKi3e4x9OtaAsak9qp2Yr04SldwJUg7gK77okzMwXsqsC6/h 0v67CTLxGCOMbj86h1E0TYv3K7WvZYcrOy59hWKWVWs+NHKCtQRaQhXHCjQHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlX269aw6E5VJnVnU1UUrfhyN0/cwHwYDVR0j BBgwFoAU7b2EWpWX/sStkAMPkBjkuLY/zHcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjMwMjgxMC01NjRjLTQ1YjctOGE3Mi1lZjZiOGY2MzA5YzAvMC9FREJEODQ1QTk1 OTdGRUM0QUQ5MDAzMEY5MDE4RTRCOEI2M0ZDQzc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRURCRDg0NUE5NTk3RkVDNEFEOTAwMzBGOTAxOEU0QjhCNjNG Q0M3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDYzMDI4MTAtNTY0Yy00NWI3LThh NzItZWY2YjhmNjMwOWMwLzAvRURCRDg0NUE5NTk3RkVDNEFEOTAwMzBGOTAxOEU0 QjhCNjNGQ0M3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAExQCtKqt8Y8kgSeeUK9/WbfFpF6hMakSkJ6 8ZVJrtG/AV0HPmLkTLnqmiterJ4iNr+mzUS8EXlfi/Q79XmaXfn1O+ldFasckQEb EwRSbQ2/s+NEOpBLFPZ7z7nwlXfQqvODQD5D/rcbqF1ftp06cUbilmH79slqCrnB debPYviJut4Ve3AhF1Elc94pLvkLbEQWi7tUzrlOxbUadcvCW69u9ZQ3wzwzzpiO QzNUdpv5cTvHkYlicIrMkl5H0oo4EYuHK5RGHDnQuhYvQi9CykjCOW/w7wEOOspJ X6MMzUbVeV9sYc/dtqN0td0jX/XFjKmZdZ/KvJ1lGNcMdpLumjk= -----END CERTIFICATE-----Generated at Mon Mar 2 15:33:24 2026 by rpki-client