$ rpki-client -vvf repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft File: EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft (raw, json) Hash identifier: R0/m5+HX7JpMXzwvER1zcNMmVjjjtBr9R3GaiEuuGR0= Subject key identifier: 08:F5:ED:77:AC:FC:63:22:8D:DE:E6:FB:A8:DD:D8:26:6B:EC:78:F3 Authority key identifier: EE:72:DE:38:4F:9A:B7:FA:D6:C3:B2:86:3A:5D:B1:28:1E:5E:DC:A1 Certificate issuer: /CN=EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1 Certificate serial: 2B6E2675DF8419F7A3AE6C0528EDFA74EB273A3F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft Manifest number: 0174 Signing time: Sun 01 Mar 2026 07:00:45 +0000 Manifest this update: Sun 01 Mar 2026 06:55:45 +0000 Manifest next update: Wed 04 Mar 2026 16:47:45 +0000 Files and hashes: 1: EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.crl (hash: ve9H9ax+h73SDvxdqA4PgniLKjw57YMoOJkfQVmUHrg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.crl rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 16:47:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:6e:26:75:df:84:19:f7:a3:ae:6c:05:28:ed:fa:74:eb:27:3a:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1 Validity Not Before: Mar 1 06:55:45 2026 GMT Not After : Mar 4 16:47:45 2026 GMT Subject: CN=08F5ED77ACFC63228DDEE6FBA8DDD8266BEC78F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ba:ae:1c:96:19:fb:f6:94:ac:5a:37:dc:bd: 9c:18:15:67:44:71:50:1a:d0:22:44:f0:d9:eb:18: 68:33:18:3f:b3:c2:3f:73:18:53:e7:c4:33:a8:50: 06:1c:17:ac:ad:21:2c:92:84:cb:56:d5:d4:5a:87: 0f:fd:b0:b1:03:e0:6c:da:fe:c1:a2:9d:4f:0b:e1: ad:b8:9c:13:9f:43:6e:40:de:99:07:62:38:36:59: 1c:0b:21:46:fb:a9:df:db:ba:0f:bd:4d:46:7f:cf: 55:a1:bb:9b:6e:9d:ae:e6:74:a5:f7:4a:ab:63:f2: 14:c7:4d:99:b7:0d:57:cc:89:5d:56:2b:b3:8c:68: 9b:77:4e:c1:42:5d:cf:1f:65:78:18:c9:7c:2c:ab: 3a:fe:9d:4e:c4:87:1a:36:59:f9:3b:15:e2:84:96: 17:89:95:1c:e8:f9:4e:09:21:af:ce:fb:95:91:67: 26:4b:00:18:bb:28:b6:b2:eb:69:02:4a:17:23:e8: c6:f1:7f:a9:5f:9f:41:5f:99:f9:ea:c5:45:ff:00: 8f:bb:a6:06:f3:c2:c2:95:e5:e6:a6:ca:61:6e:6c: 5d:63:47:63:fb:89:66:11:24:81:bf:d0:81:00:b0: d9:49:9e:65:97:3c:05:b7:05:37:9f:f5:83:45:5a: 51:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:F5:ED:77:AC:FC:63:22:8D:DE:E6:FB:A8:DD:D8:26:6B:EC:78:F3 X509v3 Authority Key Identifier: keyid:EE:72:DE:38:4F:9A:B7:FA:D6:C3:B2:86:3A:5D:B1:28:1E:5E:DC:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:eb:06:2d:c2:08:72:0c:91:b4:5c:99:69:a1:38:0d:50:35: df:90:57:12:c8:95:b6:b7:64:71:8b:24:de:22:85:fc:49:ef: 72:1a:45:03:c8:0d:47:24:97:b5:c9:36:64:e1:bb:16:fa:4d: 59:c2:b2:0f:b7:33:75:7e:d9:b3:b9:61:62:88:1b:f4:18:47: 0b:04:12:11:5b:e9:cd:03:3d:3e:9d:c6:83:07:a7:7e:d4:39: 01:81:84:21:a1:6b:0e:69:c1:87:38:cd:ca:bb:8a:64:de:de: 51:30:4e:54:9c:63:29:02:57:41:13:56:34:bf:75:ea:a4:f9: 17:ba:3c:a8:5c:e0:da:2e:e7:fb:42:76:35:c8:d5:de:2b:04: 0a:b0:77:91:d7:a3:17:82:af:3f:d3:8d:14:67:60:cd:20:8b: 8f:cc:f7:16:56:1d:c9:3d:e1:81:a8:2d:01:e6:34:d4:f4:f1: 53:4e:b9:e2:7e:e9:39:fc:a5:e0:c1:c7:95:9f:b1:38:f3:2a: 42:5b:dd:20:85:6b:c1:58:95:76:b0:8e:49:91:1e:a1:fe:11: 1c:51:89:f7:d2:e8:a0:05:7e:23:23:c7:2a:66:41:a1:96:ab: 69:58:8e:7d:f3:1b:42:b4:39:5c:c4:30:08:7b:e0:9a:4c:76: 71:26:ee:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK24mdd+EGfejrmwFKO36dOsnOj8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU3MkRFMzg0RjlBQjdGQUQ2QzNCMjg2M0E1REIxMjgx RTVFRENBMTAeFw0yNjAzMDEwNjU1NDVaFw0yNjAzMDQxNjQ3NDVaMDMxMTAvBgNV BAMTKDA4RjVFRDc3QUNGQzYzMjI4RERFRTZGQkE4REREODI2NkJFQzc4RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzuq4clhn79pSsWjfcvZwYFWdE cVAa0CJE8NnrGGgzGD+zwj9zGFPnxDOoUAYcF6ytISyShMtW1dRahw/9sLED4Gza /sGinU8L4a24nBOfQ25A3pkHYjg2WRwLIUb7qd/bug+9TUZ/z1Whu5tuna7mdKX3 Sqtj8hTHTZm3DVfMiV1WK7OMaJt3TsFCXc8fZXgYyXwsqzr+nU7Ehxo2Wfk7FeKE lheJlRzo+U4JIa/O+5WRZyZLABi7KLay62kCShcj6Mbxf6lfn0FfmfnqxUX/AI+7 pgbzwsKV5eamymFubF1jR2P7iWYRJIG/0IEAsNlJnmWXPAW3BTef9YNFWlHVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCPXtd6z8YyKN3ub7qN3YJmvsePMwHwYDVR0j BBgwFoAU7nLeOE+at/rWw7KGOl2xKB5e3KEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NTdlNjg3OC02Y2IyLTRhNWYtYjU1My1iY2ViMmM5NWM3NmMvMC9FRTcyREUzODRG OUFCN0ZBRDZDM0IyODYzQTVEQjEyODFFNUVEQ0ExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUU3MkRFMzg0RjlBQjdGQUQ2QzNCMjg2M0E1REIxMjgxRTVF RENBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzU3ZTY4NzgtNmNiMi00YTVmLWI1 NTMtYmNlYjJjOTVjNzZjLzAvRUU3MkRFMzg0RjlBQjdGQUQ2QzNCMjg2M0E1REIx MjgxRTVFRENBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE3rBi3CCHIMkbRcmWmhOA1QNd+QVxLIlba3 ZHGLJN4ihfxJ73IaRQPIDUckl7XJNmThuxb6TVnCsg+3M3V+2bO5YWKIG/QYRwsE EhFb6c0DPT6dxoMHp37UOQGBhCGhaw5pwYc4zcq7imTe3lEwTlScYykCV0ETVjS/ deqk+Re6PKhc4Nou5/tCdjXI1d4rBAqwd5HXoxeCrz/TjRRnYM0gi4/M9xZWHck9 4YGoLQHmNNT08VNOueJ+6Tn8peDBx5WfsTjzKkJb3SCFa8FYlXawjkmRHqH+ERxR iffS6KAFfiMjxypmQaGWq2lYjn3zG0K0OVzEMAh74JpMdnEm7rQ= -----END CERTIFICATE-----Generated at Mon Mar 2 00:37:41 2026 by rpki-client