$ rpki-client -vvf repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft File: EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft (raw, json) Hash identifier: Iii36gklnFHCp5OFl19HABXUIv4z6CcLwfvLtOD8N9E= Subject key identifier: EE:F7:5E:8A:EA:CE:C4:B9:1C:9D:85:68:E1:CB:29:F3:B2:BE:02:CD Authority key identifier: EE:72:DE:38:4F:9A:B7:FA:D6:C3:B2:86:3A:5D:B1:28:1E:5E:DC:A1 Certificate issuer: /CN=EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1 Certificate serial: 1DCA77C9D98624316550F9BA333D2D06A2B758EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft Manifest number: 018A Signing time: Sun 19 Apr 2026 12:40:46 +0000 Manifest this update: Sun 19 Apr 2026 12:35:46 +0000 Manifest next update: Wed 22 Apr 2026 23:16:46 +0000 Files and hashes: 1: EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.crl (hash: J+VBcLJJKNySpMwjKXHFIVm1SpDx+ICiRDnyfjzmxZA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.crl rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 14:34:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:ca:77:c9:d9:86:24:31:65:50:f9:ba:33:3d:2d:06:a2:b7:58:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1 Validity Not Before: Apr 19 12:35:46 2026 GMT Not After : Apr 22 23:16:46 2026 GMT Subject: CN=EEF75E8AEACEC4B91C9D8568E1CB29F3B2BE02CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f7:1c:8a:ce:32:93:62:0b:2e:68:cc:40:42: 61:51:fd:95:2d:7e:42:88:57:c6:17:ad:8a:19:89: 29:d2:4c:06:cb:91:3d:1c:67:0a:8b:34:40:d8:07: bd:61:fc:93:4c:39:d4:cf:8d:a3:e0:08:a4:b2:aa: f2:ba:25:24:7c:58:b3:ba:6a:0b:52:e7:09:ae:35: 59:5d:eb:6e:15:4b:13:72:cc:53:1e:d3:a3:83:bf: 79:92:ec:c3:76:42:3a:d4:4d:25:54:25:2b:a2:8f: ec:03:02:fd:96:bc:c5:6c:5e:c0:85:a4:84:c6:f9: b7:22:cb:72:b4:c6:cb:17:95:09:3f:fd:e8:e7:ba: 4b:41:a7:0f:12:7a:87:05:68:e8:89:fa:48:0a:54: b6:b6:96:22:d8:b8:58:d7:cb:58:8d:a6:09:e2:e1: f3:3e:68:b3:a6:6b:64:d2:1b:a3:d3:26:be:8f:8b: 97:0b:c6:c2:7f:f9:23:11:46:1f:57:99:d8:f5:e3: a8:6f:c4:cf:ba:7e:71:b7:52:4b:80:5a:f3:5a:45: cc:ca:ff:08:a6:33:ad:00:6b:ac:8a:a4:16:b5:b1: ee:db:a0:bd:6d:e4:37:9b:09:01:f0:07:9b:a4:63: 5b:01:76:07:e5:83:8e:cd:5b:58:a1:09:e4:73:38: e3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:F7:5E:8A:EA:CE:C4:B9:1C:9D:85:68:E1:CB:29:F3:B2:BE:02:CD X509v3 Authority Key Identifier: keyid:EE:72:DE:38:4F:9A:B7:FA:D6:C3:B2:86:3A:5D:B1:28:1E:5E:DC:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:6b:c4:d0:f0:7e:6a:c0:6d:17:a1:fd:14:a6:a9:cf:94:07: ed:72:6b:b8:72:d9:aa:96:5e:c5:b7:bb:14:f0:22:17:9a:b7: 19:e7:97:08:ae:d0:81:16:8a:6a:b8:e4:3c:20:b0:c1:4c:8f: bd:70:a6:62:7b:18:ad:5c:18:5f:a2:7c:60:36:30:89:c2:7a: ff:f4:2d:c2:07:ef:0d:ba:cc:d2:92:30:11:2e:ea:df:a3:bd: 30:78:5e:83:10:40:01:0b:5f:98:36:d8:ee:06:c0:4a:69:32: 88:1b:15:91:46:4f:b0:03:88:2e:90:c1:8a:95:8e:26:2b:e7: 18:40:32:8e:96:f0:c5:d0:22:b2:82:0c:54:d7:11:54:e4:e3: 5c:46:56:7f:6b:11:ff:f1:59:52:68:28:9e:3c:43:1d:82:9c: bf:89:75:4e:a5:07:a5:cc:7d:92:8b:2f:ed:a4:02:23:d4:2a: 4a:2e:fb:29:f5:20:77:49:c4:6a:f6:6b:33:62:54:31:5b:76: 2f:11:0c:8c:cb:ee:c8:5e:63:34:09:af:c3:f8:71:32:cf:db: 80:4c:4b:4b:69:1d:cf:c6:e3:6f:cf:fb:dd:1b:e6:21:21:69: 9b:64:80:de:70:9d:1f:1b:68:fd:37:37:01:5e:37:ec:f1:c7: 90:29:b8:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHcp3ydmGJDFlUPm6Mz0tBqK3WO4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU3MkRFMzg0RjlBQjdGQUQ2QzNCMjg2M0E1REIxMjgx RTVFRENBMTAeFw0yNjA0MTkxMjM1NDZaFw0yNjA0MjIyMzE2NDZaMDMxMTAvBgNV BAMTKEVFRjc1RThBRUFDRUM0QjkxQzlEODU2OEUxQ0IyOUYzQjJCRTAyQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw9xyKzjKTYgsuaMxAQmFR/ZUt fkKIV8YXrYoZiSnSTAbLkT0cZwqLNEDYB71h/JNMOdTPjaPgCKSyqvK6JSR8WLO6 agtS5wmuNVld624VSxNyzFMe06ODv3mS7MN2QjrUTSVUJSuij+wDAv2WvMVsXsCF pITG+bciy3K0xssXlQk//ejnuktBpw8SeocFaOiJ+kgKVLa2liLYuFjXy1iNpgni 4fM+aLOma2TSG6PTJr6Pi5cLxsJ/+SMRRh9Xmdj146hvxM+6fnG3UkuAWvNaRczK /wimM60Aa6yKpBa1se7boL1t5DebCQHwB5ukY1sBdgflg47NW1ihCeRzOONjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7vdeiurOxLkcnYVo4csp87K+As0wHwYDVR0j BBgwFoAU7nLeOE+at/rWw7KGOl2xKB5e3KEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NTdlNjg3OC02Y2IyLTRhNWYtYjU1My1iY2ViMmM5NWM3NmMvMC9FRTcyREUzODRG OUFCN0ZBRDZDM0IyODYzQTVEQjEyODFFNUVEQ0ExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUU3MkRFMzg0RjlBQjdGQUQ2QzNCMjg2M0E1REIxMjgxRTVF RENBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzU3ZTY4NzgtNmNiMi00YTVmLWI1 NTMtYmNlYjJjOTVjNzZjLzAvRUU3MkRFMzg0RjlBQjdGQUQ2QzNCMjg2M0E1REIx MjgxRTVFRENBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIlrxNDwfmrAbReh/RSmqc+UB+1ya7hy2aqW XsW3uxTwIheatxnnlwiu0IEWimq45DwgsMFMj71wpmJ7GK1cGF+ifGA2MInCev/0 LcIH7w26zNKSMBEu6t+jvTB4XoMQQAELX5g22O4GwEppMogbFZFGT7ADiC6QwYqV jiYr5xhAMo6W8MXQIrKCDFTXEVTk41xGVn9rEf/xWVJoKJ48Qx2CnL+JdU6lB6XM fZKLL+2kAiPUKkou+yn1IHdJxGr2azNiVDFbdi8RDIzL7sheYzQJr8P4cTLP24BM S0tpHc/G42/P+90b5iEhaZtkgN5wnR8baP03NwFeN+zxx5ApuNs= -----END CERTIFICATE-----Generated at Sun Apr 19 15:48:18 2026 by rpki-client