$ rpki-client -vvf repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft File: EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft (raw, json) Hash identifier: fqjqxK1sIIZLnHLJFHhA1RRkn5NPwou3iN17mOQ3Byw= Subject key identifier: 94:8F:C7:C0:6B:34:55:60:EA:F0:51:88:A1:08:33:AC:46:3D:64:C9 Authority key identifier: EC:9A:AB:91:00:70:53:E6:3C:E1:7F:98:D7:4F:FD:89:45:F2:9E:DE Certificate issuer: /CN=EC9AAB91007053E63CE17F98D74FFD8945F29EDE Certificate serial: 525258A957C46AAD1E51F5ED84C06950EFF0CF76 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft Manifest number: 0178 Signing time: Sun 01 Mar 2026 05:32:52 +0000 Manifest this update: Sun 01 Mar 2026 05:27:52 +0000 Manifest next update: Wed 04 Mar 2026 12:01:52 +0000 Files and hashes: 1: EC9AAB91007053E63CE17F98D74FFD8945F29EDE.crl (hash: FqkHayCcB5TcVZ63e1EseEvjxtrom2yswPbuEFtE7Bo=) 2: 3130332e35332e32382e302f32332d3234203d3e20313339393535.roa (hash: XmUhlDLdTlUEJxqMyV5d8izbXv0SLIMUNSTUR2SbfXQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.crl rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 12:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:52:58:a9:57:c4:6a:ad:1e:51:f5:ed:84:c0:69:50:ef:f0:cf:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC9AAB91007053E63CE17F98D74FFD8945F29EDE Validity Not Before: Mar 1 05:27:52 2026 GMT Not After : Mar 4 12:01:52 2026 GMT Subject: CN=948FC7C06B345560EAF05188A10833AC463D64C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:90:8c:b1:1f:30:e2:1d:88:ec:8a:e7:cf:5e: 5c:9f:73:34:2c:0c:44:d0:49:29:8d:b4:e0:a1:a8: 5c:e3:82:08:6f:6a:4f:a6:42:e8:e4:18:27:e0:65: 56:10:d2:16:87:94:d8:9f:44:d6:82:da:dd:8b:e8: 20:8f:fc:50:4c:33:82:62:49:17:95:02:f9:6b:de: 8d:26:f7:a2:54:c2:81:c5:c3:79:53:7f:57:53:ba: 0a:40:4f:89:2f:88:55:25:09:f6:ef:2f:10:8d:b4: 41:6e:fd:60:9b:2a:0c:25:7d:cb:c4:61:be:e4:75: 98:2a:b1:4b:c3:c0:57:23:32:be:97:07:bf:e0:27: 21:ab:14:db:6c:ee:bf:24:2a:50:6e:1a:ec:1f:93: f2:f4:94:6b:3c:8e:09:4d:5c:ee:08:1f:8c:c2:1c: e7:a0:ff:ca:65:2c:aa:ae:01:27:5b:10:a3:03:35: 46:7d:ff:bc:d1:9c:a8:5d:f8:ca:92:b9:7b:90:b8: e8:64:69:95:63:49:37:c5:ca:f2:f1:25:ed:e7:01: 2d:b3:94:4d:8c:20:db:90:fc:3d:a1:70:fd:7f:42: 1d:38:81:ef:7d:a3:09:99:b7:d0:e1:9e:f7:4a:31: bf:20:7d:94:7a:0f:df:0f:2e:e8:0c:5a:c1:bc:af: 55:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:8F:C7:C0:6B:34:55:60:EA:F0:51:88:A1:08:33:AC:46:3D:64:C9 X509v3 Authority Key Identifier: keyid:EC:9A:AB:91:00:70:53:E6:3C:E1:7F:98:D7:4F:FD:89:45:F2:9E:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:ef:92:e0:70:a7:0a:f1:f5:fc:2c:e9:6d:7b:03:61:b0:90: f3:45:f4:e9:1e:4d:86:3d:a6:ae:fa:be:4d:ee:95:5f:f8:30: bf:d8:db:ee:fd:dc:df:7a:6b:13:6c:c5:44:90:53:2b:83:87: ac:92:77:20:ce:68:4e:26:84:c0:59:73:88:86:a3:8c:2c:00: 68:12:1f:2f:cf:18:b0:ee:94:db:6a:bd:b8:6a:bd:81:e0:fa: 5a:b1:c7:30:d0:24:a9:4a:63:9f:de:a5:26:1c:17:54:1f:cd: 10:3b:6e:44:22:34:c8:c6:f1:c2:6f:eb:0e:20:ab:bd:09:7b: 76:86:8d:9b:cb:67:35:fb:b6:a3:fb:27:8c:4e:42:23:ba:a3: b5:16:cc:c1:85:df:b6:cd:7b:97:de:2b:fc:99:db:0f:89:9a: ef:01:0c:05:1a:f0:6d:b4:75:2a:26:9d:27:3f:15:3c:af:98: db:e7:82:e0:e1:02:5b:1f:1b:58:68:e6:20:3f:8c:67:e4:76: 7f:ce:a7:95:74:94:28:ac:4a:b7:51:75:10:d0:94:3a:31:d2: 0d:4c:ae:8b:6e:60:c6:45:1e:71:40:e1:a0:84:f3:9e:28:d8: e6:49:18:16:02:1f:9d:c7:36:8d:55:47:74:f2:5d:40:99:71: 31:e7:69:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUlJYqVfEaq0eUfXthMBpUO/wz3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5QUFCOTEwMDcwNTNFNjNDRTE3Rjk4RDc0RkZEODk0 NUYyOUVERTAeFw0yNjAzMDEwNTI3NTJaFw0yNjAzMDQxMjAxNTJaMDMxMTAvBgNV BAMTKDk0OEZDN0MwNkIzNDU1NjBFQUYwNTE4OEExMDgzM0FDNDYzRDY0QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8kIyxHzDiHYjsiufPXlyfczQs DETQSSmNtOChqFzjgghvak+mQujkGCfgZVYQ0haHlNifRNaC2t2L6CCP/FBMM4Ji SReVAvlr3o0m96JUwoHFw3lTf1dTugpAT4kviFUlCfbvLxCNtEFu/WCbKgwlfcvE Yb7kdZgqsUvDwFcjMr6XB7/gJyGrFNts7r8kKlBuGuwfk/L0lGs8jglNXO4IH4zC HOeg/8plLKquASdbEKMDNUZ9/7zRnKhd+MqSuXuQuOhkaZVjSTfFyvLxJe3nAS2z lE2MINuQ/D2hcP1/Qh04ge99owmZt9DhnvdKMb8gfZR6D98PLugMWsG8r1WXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlI/HwGs0VWDq8FGIoQgzrEY9ZMkwHwYDVR0j BBgwFoAU7JqrkQBwU+Y84X+Y10/9iUXynt4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YmI0M2VjOC1mNTgyLTQwMjUtOGYzNi0zY2VhNTM5ZDBiMDkvMC9FQzlBQUI5MTAw NzA1M0U2M0NFMTdGOThENzRGRkQ4OTQ1RjI5RURFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUM5QUFCOTEwMDcwNTNFNjNDRTE3Rjk4RDc0RkZEODk0NUYy OUVERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWJiNDNlYzgtZjU4Mi00MDI1LThm MzYtM2NlYTUzOWQwYjA5LzAvRUM5QUFCOTEwMDcwNTNFNjNDRTE3Rjk4RDc0RkZE ODk0NUYyOUVERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHHvkuBwpwrx9fws6W17A2GwkPNF9OkeTYY9 pq76vk3ulV/4ML/Y2+793N96axNsxUSQUyuDh6ySdyDOaE4mhMBZc4iGo4wsAGgS Hy/PGLDulNtqvbhqvYHg+lqxxzDQJKlKY5/epSYcF1QfzRA7bkQiNMjG8cJv6w4g q70Je3aGjZvLZzX7tqP7J4xOQiO6o7UWzMGF37bNe5feK/yZ2w+Jmu8BDAUa8G20 dSomnSc/FTyvmNvnguDhAlsfG1ho5iA/jGfkdn/Op5V0lCisSrdRdRDQlDox0g1M rotuYMZFHnFA4aCE854o2OZJGBYCH53HNo1VR3TyXUCZcTHnaa8= -----END CERTIFICATE-----Generated at Mon Mar 2 22:53:01 2026 by rpki-client