$ rpki-client -vvf repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft File: EC39D766063B56E5EA4DBFB2A502298FB995956A.mft (raw, json) Hash identifier: ceit9LsMKyZI83SDNBGXBUqcn3ubfL/x0y2lWgOxioc= Subject key identifier: 9B:EC:8B:56:7C:30:D1:B4:1D:D7:C6:32:FA:C0:CE:BF:95:A6:80:2C Authority key identifier: EC:39:D7:66:06:3B:56:E5:EA:4D:BF:B2:A5:02:29:8F:B9:95:95:6A Certificate issuer: /CN=EC39D766063B56E5EA4DBFB2A502298FB995956A Certificate serial: 0D8129B5C11F5F4A656D303CF993319B7C043A99 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC39D766063B56E5EA4DBFB2A502298FB995956A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft Manifest number: 0552 Signing time: Sun 01 Mar 2026 06:10:42 +0000 Manifest this update: Sun 01 Mar 2026 06:05:42 +0000 Manifest next update: Wed 04 Mar 2026 15:27:42 +0000 Files and hashes: 1: 3130332e3133392e32352e302f32342d3234203d3e20313338383738.roa (hash: fXYsqxCjsvIrOq+7nStBZ2/w2ahyZCjmKRe5J8m8wVg=) 2: EC39D766063B56E5EA4DBFB2A502298FB995956A.crl (hash: N+wQOu7yhkyjJUxhzBSIqXmjf+v6W0ingMTDycTDWrQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.crl rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC39D766063B56E5EA4DBFB2A502298FB995956A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 15:27:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:81:29:b5:c1:1f:5f:4a:65:6d:30:3c:f9:93:31:9b:7c:04:3a:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC39D766063B56E5EA4DBFB2A502298FB995956A Validity Not Before: Mar 1 06:05:42 2026 GMT Not After : Mar 4 15:27:42 2026 GMT Subject: CN=9BEC8B567C30D1B41DD7C632FAC0CEBF95A6802C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c9:77:a5:20:bf:e8:c7:86:79:2d:c3:8f:29: 28:88:cc:49:15:cb:c9:cf:47:a5:b1:18:eb:a1:d2: 65:e2:55:2d:12:ea:3d:70:d0:80:fa:16:f4:ad:7f: 69:66:92:f1:2b:30:db:1b:5f:c2:b2:55:1e:eb:16: 54:4f:97:3c:9c:da:62:d8:0e:f7:4b:da:7a:35:09: 5b:a4:59:e7:6b:c5:53:5d:f1:60:99:50:80:42:50: 1f:66:78:67:3f:ab:27:f9:a6:5b:56:67:08:22:02: 81:b4:8a:93:4b:58:c3:bc:b3:48:41:46:20:26:42: 4c:04:59:eb:a7:29:ed:93:87:f2:1f:8f:3e:71:3a: 01:6d:c8:48:61:c0:fb:b2:cd:e0:df:d7:06:79:3f: 21:1e:39:b3:56:ba:0e:b4:c2:4e:4b:82:42:06:e0: b3:00:cc:01:74:e8:ab:67:09:14:ad:c6:ee:d4:09: 34:ab:ba:d4:52:c3:db:79:80:83:de:8a:43:30:2f: d4:ba:6b:5a:31:04:06:fe:3d:d6:03:66:b6:96:2f: e1:83:2e:a9:19:53:8d:f9:9d:ab:f6:5c:ab:81:18: 1a:d0:8c:49:cb:b3:a7:c8:23:1a:23:07:24:32:b8: bf:8b:7b:51:a9:11:3c:ff:35:cd:be:d0:58:a9:63: 1d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:EC:8B:56:7C:30:D1:B4:1D:D7:C6:32:FA:C0:CE:BF:95:A6:80:2C X509v3 Authority Key Identifier: keyid:EC:39:D7:66:06:3B:56:E5:EA:4D:BF:B2:A5:02:29:8F:B9:95:95:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC39D766063B56E5EA4DBFB2A502298FB995956A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:79:0d:3d:75:a3:d0:a1:fb:3d:f2:6c:57:de:0e:c7:ae:4a: db:0e:34:05:45:4d:5e:5c:f1:94:42:80:b1:9d:83:ba:a2:14: 2a:8c:4a:d3:2c:84:42:10:2b:96:61:b8:31:03:ae:e5:0f:e9: c7:c1:fa:d9:66:ca:16:75:dc:71:b5:52:ce:55:45:15:c8:2a: 6b:a4:c9:79:9b:28:58:e1:e3:f9:3a:df:57:e8:65:ae:ef:30: a1:26:f1:6a:f7:e3:f5:bb:f6:0a:10:d3:2c:3e:bc:74:d6:20: 7b:1a:35:6b:5d:21:67:27:28:31:b5:e4:63:5a:81:c5:84:b7: 41:9c:a3:f4:c6:37:18:13:ef:66:6d:db:9b:0c:6b:3f:a4:35: c9:32:91:ab:3a:e6:6c:3c:55:e9:9c:68:47:04:e4:5c:74:64: cf:28:72:2b:b0:ce:53:3d:7d:69:d1:e1:73:16:7f:f0:41:1a: 32:d9:58:ab:10:f3:d9:d0:19:95:36:0e:7d:79:25:b5:8d:98: af:eb:b5:1e:9d:9f:1e:4b:51:a7:87:8b:77:4a:8b:38:65:08: e7:01:1d:50:88:96:ff:1f:5f:e8:b3:48:11:46:63:41:65:95: 33:db:7b:ee:72:0e:cc:d3:ab:a6:07:ef:59:6d:93:14:df:54: 3f:23:a8:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDYEptcEfX0plbTA8+ZMxm3wEOpkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUMzOUQ3NjYwNjNCNTZFNUVBNERCRkIyQTUwMjI5OEZC OTk1OTU2QTAeFw0yNjAzMDEwNjA1NDJaFw0yNjAzMDQxNTI3NDJaMDMxMTAvBgNV BAMTKDlCRUM4QjU2N0MzMEQxQjQxREQ3QzYzMkZBQzBDRUJGOTVBNjgwMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcyXelIL/ox4Z5LcOPKSiIzEkV y8nPR6WxGOuh0mXiVS0S6j1w0ID6FvStf2lmkvErMNsbX8KyVR7rFlRPlzyc2mLY DvdL2no1CVukWedrxVNd8WCZUIBCUB9meGc/qyf5pltWZwgiAoG0ipNLWMO8s0hB RiAmQkwEWeunKe2Th/Ifjz5xOgFtyEhhwPuyzeDf1wZ5PyEeObNWug60wk5LgkIG 4LMAzAF06KtnCRStxu7UCTSrutRSw9t5gIPeikMwL9S6a1oxBAb+PdYDZraWL+GD LqkZU435nav2XKuBGBrQjEnLs6fIIxojByQyuL+Le1GpETz/Nc2+0FipYx3tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm+yLVnww0bQd18Yy+sDOv5WmgCwwHwYDVR0j BBgwFoAU7DnXZgY7VuXqTb+ypQIpj7mVlWowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2ZlNDI1NS0xZDkxLTRmY2MtYmNlNC04YTQyYWRmZTNjMjkvMC9FQzM5RDc2NjA2 M0I1NkU1RUE0REJGQjJBNTAyMjk4RkI5OTU5NTZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUMzOUQ3NjYwNjNCNTZFNUVBNERCRkIyQTUwMjI5OEZCOTk1 OTU2QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzNmZTQyNTUtMWQ5MS00ZmNjLWJj ZTQtOGE0MmFkZmUzYzI5LzAvRUMzOUQ3NjYwNjNCNTZFNUVBNERCRkIyQTUwMjI5 OEZCOTk1OTU2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC95DT11o9Ch+z3ybFfeDseuStsONAVFTV5c 8ZRCgLGdg7qiFCqMStMshEIQK5ZhuDEDruUP6cfB+tlmyhZ13HG1Us5VRRXIKmuk yXmbKFjh4/k631foZa7vMKEm8Wr34/W79goQ0yw+vHTWIHsaNWtdIWcnKDG15GNa gcWEt0Gco/TGNxgT72Zt25sMaz+kNckykas65mw8VemcaEcE5Fx0ZM8ociuwzlM9 fWnR4XMWf/BBGjLZWKsQ89nQGZU2Dn15JbWNmK/rtR6dnx5LUaeHi3dKizhlCOcB HVCIlv8fX+izSBFGY0FllTPbe+5yDszTq6YH71ltkxTfVD8jqPQ= -----END CERTIFICATE-----Generated at Mon Mar 2 04:16:21 2026 by rpki-client