$ rpki-client -vvf repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft File: EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft (raw, json) Hash identifier: 61oR1d1x1yTpxnwB897acZDpuUjMmEOEfbcn60Gl034= Subject key identifier: 2B:A7:4E:D2:AA:9A:E0:C4:F7:ED:64:77:82:FB:72:90:BC:19:EC:E3 Authority key identifier: EC:9A:AB:91:00:70:53:E6:3C:E1:7F:98:D7:4F:FD:89:45:F2:9E:DE Certificate issuer: /CN=EC9AAB91007053E63CE17F98D74FFD8945F29EDE Certificate serial: 3C4D3F702FF9BDF97F37053F0020AC34443EAB34 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft Manifest number: 018E Signing time: Sat 18 Apr 2026 05:21:48 +0000 Manifest this update: Sat 18 Apr 2026 05:16:48 +0000 Manifest next update: Tue 21 Apr 2026 09:10:48 +0000 Files and hashes: 1: EC9AAB91007053E63CE17F98D74FFD8945F29EDE.crl (hash: VKZk+2Cpov1MP2FuLp4ARJoh1z5vxdP9Ij6+oUxudbU=) 2: 3130332e35332e32382e302f32332d3234203d3e20313339393535.roa (hash: MbXRfNX9m/ZxE9UsrWroW0O0GkPhUkArIfxuzIVXAp4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.crl rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 09:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:4d:3f:70:2f:f9:bd:f9:7f:37:05:3f:00:20:ac:34:44:3e:ab:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC9AAB91007053E63CE17F98D74FFD8945F29EDE Validity Not Before: Apr 18 05:16:48 2026 GMT Not After : Apr 21 09:10:48 2026 GMT Subject: CN=2BA74ED2AA9AE0C4F7ED647782FB7290BC19ECE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8c:ea:d6:86:a2:0d:48:06:2f:21:ad:65:87: 21:e1:50:54:b2:5f:97:0e:fc:d0:5d:36:38:c5:43: ea:ae:97:53:7a:a3:38:83:6e:a1:15:ff:90:73:84: f1:77:33:0a:31:c6:b4:e2:c3:52:1b:3f:fa:dd:ce: 65:17:93:40:92:23:25:5a:bf:6e:a8:55:b2:cb:8c: c1:2a:45:f6:05:81:b8:76:87:30:54:82:35:29:c6: d5:31:7b:2c:ff:e4:62:c3:92:1e:1e:72:41:70:64: 28:2a:28:7c:e3:c2:ba:34:11:08:c6:96:7d:ef:2b: 82:49:d3:4f:15:88:70:7c:bb:7b:98:3f:72:5e:44: 69:30:01:16:4d:90:41:83:f6:97:6e:98:16:98:df: 9c:fa:2c:ea:51:5d:f4:c9:96:bf:82:10:19:8d:82: fa:f0:4e:c7:10:ee:eb:c1:00:f6:a5:27:93:5a:fb: 31:ea:b1:8e:30:19:d2:a7:3f:87:e1:2c:52:e3:a6: a4:ea:d0:4f:b2:4f:83:ae:cf:ce:f9:b1:e5:99:f9: 71:48:13:12:fc:97:02:bd:a7:9d:34:fe:65:39:a6: 6e:71:a1:4a:d2:30:0c:6f:3e:1f:b1:da:95:ae:79: fe:b5:bb:df:d5:18:14:c5:a3:52:db:af:3a:6d:ac: 4e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:A7:4E:D2:AA:9A:E0:C4:F7:ED:64:77:82:FB:72:90:BC:19:EC:E3 X509v3 Authority Key Identifier: keyid:EC:9A:AB:91:00:70:53:E6:3C:E1:7F:98:D7:4F:FD:89:45:F2:9E:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:d0:cb:9e:9e:d8:93:d9:ce:a3:1c:d4:d5:e6:24:3c:46:5f: 81:08:67:21:80:c1:a8:9e:14:62:8c:ef:04:2b:24:78:e7:df: 68:22:e7:4e:d9:17:5e:51:0e:41:ce:04:6c:ae:1c:48:c3:4e: 9f:72:0d:5a:02:d8:39:c5:4d:1c:f1:58:c5:fc:09:1b:12:51: ae:a9:89:32:95:d7:32:45:1d:05:15:92:92:53:ab:b1:29:88: d0:97:9d:82:9e:bc:f3:11:e0:d0:95:a8:fc:92:e8:0e:4c:db: 5a:9c:2a:f2:01:06:23:b5:ad:9b:b1:44:06:fc:a7:b9:f0:1a: 63:0d:4f:58:2c:92:b8:92:4b:78:86:00:ab:fe:4a:59:7c:15: 57:40:a8:5c:e4:31:75:5b:8b:ee:15:76:cd:b7:5a:50:80:63: ea:89:f5:d5:78:5a:ef:c9:2c:52:c8:81:8f:ac:8d:af:ff:f0: b1:19:f0:d0:4f:c1:98:6e:62:ae:4f:6b:3c:e7:38:3a:f9:5f: 8a:a2:96:0b:1e:f6:ab:92:4c:dc:90:1b:54:28:6d:5b:44:07: 4a:be:6e:10:35:3d:11:e3:88:fc:5d:84:06:8d:26:b4:83:0d: 4d:84:5a:02:50:82:e3:a5:ce:ff:76:2d:99:f2:eb:6b:76:c2: 3f:57:87:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPE0/cC/5vfl/NwU/ACCsNEQ+qzQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5QUFCOTEwMDcwNTNFNjNDRTE3Rjk4RDc0RkZEODk0 NUYyOUVERTAeFw0yNjA0MTgwNTE2NDhaFw0yNjA0MjEwOTEwNDhaMDMxMTAvBgNV BAMTKDJCQTc0RUQyQUE5QUUwQzRGN0VENjQ3NzgyRkI3MjkwQkMxOUVDRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLjOrWhqINSAYvIa1lhyHhUFSy X5cO/NBdNjjFQ+qul1N6oziDbqEV/5BzhPF3MwoxxrTiw1IbP/rdzmUXk0CSIyVa v26oVbLLjMEqRfYFgbh2hzBUgjUpxtUxeyz/5GLDkh4eckFwZCgqKHzjwro0EQjG ln3vK4JJ008ViHB8u3uYP3JeRGkwARZNkEGD9pdumBaY35z6LOpRXfTJlr+CEBmN gvrwTscQ7uvBAPalJ5Na+zHqsY4wGdKnP4fhLFLjpqTq0E+yT4Ouz875seWZ+XFI ExL8lwK9p500/mU5pm5xoUrSMAxvPh+x2pWuef61u9/VGBTFo1LbrzptrE7PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK6dO0qqa4MT37WR3gvtykLwZ7OMwHwYDVR0j BBgwFoAU7JqrkQBwU+Y84X+Y10/9iUXynt4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YmI0M2VjOC1mNTgyLTQwMjUtOGYzNi0zY2VhNTM5ZDBiMDkvMC9FQzlBQUI5MTAw NzA1M0U2M0NFMTdGOThENzRGRkQ4OTQ1RjI5RURFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUM5QUFCOTEwMDcwNTNFNjNDRTE3Rjk4RDc0RkZEODk0NUYy OUVERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWJiNDNlYzgtZjU4Mi00MDI1LThm MzYtM2NlYTUzOWQwYjA5LzAvRUM5QUFCOTEwMDcwNTNFNjNDRTE3Rjk4RDc0RkZE ODk0NUYyOUVERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEzQy56e2JPZzqMc1NXmJDxGX4EIZyGAwaie FGKM7wQrJHjn32gi507ZF15RDkHOBGyuHEjDTp9yDVoC2DnFTRzxWMX8CRsSUa6p iTKV1zJFHQUVkpJTq7EpiNCXnYKevPMR4NCVqPyS6A5M21qcKvIBBiO1rZuxRAb8 p7nwGmMNT1gskriSS3iGAKv+Sll8FVdAqFzkMXVbi+4Vds23WlCAY+qJ9dV4Wu/J LFLIgY+sja//8LEZ8NBPwZhuYq5PazznODr5X4qilgse9quSTNyQG1QobVtEB0q+ bhA1PRHjiPxdhAaNJrSDDU2EWgJQguOlzv92LZny62t2wj9Xh1s= -----END CERTIFICATE-----Generated at Sat Apr 18 09:30:49 2026 by rpki-client