$ rpki-client -vvf repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft File: ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft (raw, json) Hash identifier: hAeIQ0iAZUM7Awc7nR1PLu2XqF+0CpIoTcy7CpSD7wk= Subject key identifier: CE:A9:5B:1B:0F:F1:7E:6B:91:75:6D:64:FA:70:B1:A4:57:11:D0:5A Authority key identifier: ED:3C:E7:26:45:63:AD:B9:40:EA:FA:F4:BD:87:CD:CD:A9:1C:A1:5A Certificate issuer: /CN=ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A Certificate serial: 293E7E4369716F158AF2E3BFF748620CBDC75564 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft Manifest number: 024B Signing time: Sun 01 Mar 2026 15:21:23 +0000 Manifest this update: Sun 01 Mar 2026 15:16:23 +0000 Manifest next update: Wed 04 Mar 2026 18:21:23 +0000 Files and hashes: 1: ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.crl (hash: hwTxsk+3vcw+jlZ+srb5Jze4IS+jrqxpyims5UUFQxM=) 2: 3130332e3133352e34382e302f32322d3234203d3e203338333230.roa (hash: /cF+CKjnrx0BGZ8wL/sfXfp5hgNUQBZIeeM9AfAYFsU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.crl rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 18:21:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:3e:7e:43:69:71:6f:15:8a:f2:e3:bf:f7:48:62:0c:bd:c7:55:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A Validity Not Before: Mar 1 15:16:23 2026 GMT Not After : Mar 4 18:21:23 2026 GMT Subject: CN=CEA95B1B0FF17E6B91756D64FA70B1A45711D05A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3c:b6:c6:5a:d0:93:82:5b:0b:a1:8e:d8:71: c5:a4:78:ae:4f:a0:a8:78:e0:2b:6c:cd:b5:ee:08: 79:a0:de:54:f0:cb:cf:7f:e8:53:ce:be:80:0f:fa: b3:d9:89:c3:14:1f:67:48:cd:78:d2:28:d3:8e:f5: 31:ab:74:f8:4e:c9:75:5c:de:32:48:b1:fc:14:11: 4f:e0:52:3c:86:a1:c1:be:ff:12:c3:2a:51:99:45: f4:8a:c8:07:b0:06:e8:90:b3:19:40:37:1a:18:c1: 20:11:c9:35:ca:20:b4:ad:60:48:3a:a1:4d:13:fd: 10:36:39:ea:c5:40:58:a2:7d:f3:d4:83:91:a8:9b: fc:fb:57:7d:57:43:e9:c1:c7:b9:4c:54:8b:78:91: d1:63:e6:ef:f2:c0:74:42:26:de:45:9b:7d:f9:32: 57:8c:ae:23:fc:6c:b1:23:e0:d4:5b:00:21:5e:d7: 7e:f5:5d:c1:32:12:71:c0:bc:31:53:1f:5a:cc:0f: e5:e7:8b:4c:c8:16:d6:52:10:9b:83:1f:bf:37:7f: 85:6d:b9:e3:9f:7d:08:da:a8:07:3d:28:1a:5e:7c: 72:d6:f2:56:7a:36:09:d9:74:47:aa:e8:6f:2d:35: 9a:25:3d:d4:1d:ce:c6:ee:7b:cd:b9:49:ab:c2:33: 8e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A9:5B:1B:0F:F1:7E:6B:91:75:6D:64:FA:70:B1:A4:57:11:D0:5A X509v3 Authority Key Identifier: keyid:ED:3C:E7:26:45:63:AD:B9:40:EA:FA:F4:BD:87:CD:CD:A9:1C:A1:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:08:de:e9:d8:ed:09:d7:f1:31:e7:1b:a6:72:33:70:80:1b: b2:fc:62:0c:24:51:5e:58:12:07:fd:21:69:bd:1c:4a:fb:3e: ca:38:e1:7b:50:dc:8b:6e:ae:43:07:43:39:99:bc:3a:18:20: de:59:1d:57:79:21:2e:2f:1c:f7:56:7f:56:62:1c:b7:c9:9c: 73:84:23:49:f8:7f:70:15:ad:7e:8b:6c:b3:b1:59:c9:df:cc: e0:e2:60:c3:85:96:b4:3a:e2:60:af:ca:95:7d:60:94:3f:c5: e6:42:6d:eb:f2:cb:46:b5:7d:5b:d3:d8:c3:42:47:43:b4:92: 69:8f:28:48:e3:ac:44:7d:be:92:41:00:d4:f2:50:ee:6b:dd: c2:49:f7:a2:5f:5a:db:6d:fb:8c:2e:b2:f1:83:4f:54:96:04: d0:b1:7a:ba:d8:f0:ff:16:6e:2d:22:d3:53:ed:c4:73:f6:07: 4f:11:93:6a:91:69:df:b5:8f:cf:44:e0:ff:ff:7f:0b:34:a6: bf:e0:3c:bf:1d:86:39:a5:99:78:8b:2e:cb:2a:6a:64:29:69: ef:d0:c8:6e:30:84:12:13:25:41:0b:75:13:92:03:2c:90:72: 95:56:d8:59:b9:fa:19:60:4a:d8:88:18:39:26:7b:76:e5:53: c5:a7:5d:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKT5+Q2lxbxWK8uO/90hiDL3HVWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQzQ0U3MjY0NTYzQURCOTQwRUFGQUY0QkQ4N0NEQ0RB OTFDQTE1QTAeFw0yNjAzMDExNTE2MjNaFw0yNjAzMDQxODIxMjNaMDMxMTAvBgNV BAMTKENFQTk1QjFCMEZGMTdFNkI5MTc1NkQ2NEZBNzBCMUE0NTcxMUQwNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUPLbGWtCTglsLoY7YccWkeK5P oKh44CtszbXuCHmg3lTwy89/6FPOvoAP+rPZicMUH2dIzXjSKNOO9TGrdPhOyXVc 3jJIsfwUEU/gUjyGocG+/xLDKlGZRfSKyAewBuiQsxlANxoYwSARyTXKILStYEg6 oU0T/RA2OerFQFiiffPUg5Gom/z7V31XQ+nBx7lMVIt4kdFj5u/ywHRCJt5Fm335 MleMriP8bLEj4NRbACFe1371XcEyEnHAvDFTH1rMD+Xni0zIFtZSEJuDH783f4Vt ueOffQjaqAc9KBpefHLW8lZ6NgnZdEeq6G8tNZolPdQdzsbue825SavCM47jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzqlbGw/xfmuRdW1k+nCxpFcR0FowHwYDVR0j BBgwFoAU7TznJkVjrblA6vr0vYfNzakcoVowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Y2NjMmFmNC1hNjJkLTQ3MDgtYjY4OC0xODkyNTk0YmE5ODkvMC9FRDNDRTcyNjQ1 NjNBREI5NDBFQUZBRjRCRDg3Q0RDREE5MUNBMTVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUQzQ0U3MjY0NTYzQURCOTQwRUFGQUY0QkQ4N0NEQ0RBOTFD QTE1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGNjYzJhZjQtYTYyZC00NzA4LWI2 ODgtMTg5MjU5NGJhOTg5LzAvRUQzQ0U3MjY0NTYzQURCOTQwRUFGQUY0QkQ4N0NE Q0RBOTFDQTE1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG8I3unY7QnX8THnG6ZyM3CAG7L8YgwkUV5Y Egf9IWm9HEr7Pso44XtQ3IturkMHQzmZvDoYIN5ZHVd5IS4vHPdWf1ZiHLfJnHOE I0n4f3AVrX6LbLOxWcnfzODiYMOFlrQ64mCvypV9YJQ/xeZCbevyy0a1fVvT2MNC R0O0kmmPKEjjrER9vpJBANTyUO5r3cJJ96JfWttt+4wusvGDT1SWBNCxerrY8P8W bi0i01PtxHP2B08Rk2qRad+1j89E4P//fws0pr/gPL8dhjmlmXiLLssqamQpae/Q yG4whBITJUELdROSAyyQcpVW2Fm5+hlgStiIGDkme3blU8WnXW4= -----END CERTIFICATE-----Generated at Mon Mar 2 16:48:04 2026 by rpki-client