
$ rpki-client -vvf repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.mft
File: EC9D9872A710FE713DC62241D587703BDF7DC1D6.mft (raw, json)
Hash identifier: t0FpRGj5ahAUPleyBCB2+Ll63IsskP9Ob5kcNtEl54M=
Subject key identifier: B9:18:F8:4C:8D:FC:01:2A:1A:EF:51:E8:C7:BA:12:3B:59:F4:0C:2A
Authority key identifier: EC:9D:98:72:A7:10:FE:71:3D:C6:22:41:D5:87:70:3B:DF:7D:C1:D6
Certificate issuer: /CN=EC9D9872A710FE713DC62241D587703BDF7DC1D6
Certificate serial: 2703D7286F739B76E325E92E3088EDDE2A595AAF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9D9872A710FE713DC62241D587703BDF7DC1D6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.mft
Manifest number: 91
Signing time: Sat 18 Apr 2026 02:22:24 +0000
Manifest this update: Sat 18 Apr 2026 02:17:24 +0000
Manifest next update: Tue 21 Apr 2026 14:02:24 +0000
Files and hashes: 1: 34352e3132362e35362e302f32332d3234203d3e20313332363437.roa (hash: QEOORRsX013DVlDd6rBsgIGW4zrmYxd/HqJrafpumMI=)
2: 323430323a656538303a35383a3a2f34382d3438203d3e20313332363437.roa (hash: 95YayLBo+Z60JGd6py6XLMSdK9u7PSYjLko8lAlklJ4=)
3: 34352e3132362e35362e302f32322d3234203d3e20313332363437.roa (hash: WjfvCYbp65ghPW3ji7G9hoRxTgUciKFJHBsEK0TOyNo=)
4: 34352e3132362e35362e302f32342d3234203d3e20313332363437.roa (hash: iVD71KXe0iI/vtmA+DjA6o/5T6NexfyKd675pvEkuFc=)
5: 323430323a656538303a35363a3a2f34382d3438203d3e20313332363437.roa (hash: ILpEJfv/S+leWwxiBN0hUwFSsvpCv7zbnSPVhks28zg=)
6: 34352e3132362e35392e302f32342d3234203d3e20313332363437.roa (hash: ayAqEs1b1nTm1L0OUHAQCAticCSJ6e0ze/fgkYyk4lc=)
7: EC9D9872A710FE713DC62241D587703BDF7DC1D6.crl (hash: OvScpCTsPyZjnQt/fLekSg5by6MStV3cxLTQFQIh0X8=)
8: 3130332e31392e3137362e302f32332d3234203d3e20313332363437.roa (hash: MZSp8BNqe8zJ+1B8Y+uVUUB7aRgdsoqlbK7HkPjCz8s=)
9: 3130332e31392e3137372e302f32342d3234203d3e20313332363437.roa (hash: eUTXj0qM9U0VlVIo2698+rxVfkNrjLXS73ArKqTPZHc=)
10: 323430323a656538303a3a2f34382d3438203d3e20313332363437.roa (hash: Qq4mQ+yjLEssCXWmnFYkdDNfkAKVVBhzLioN96QRjDk=)
11: 323430323a656538303a643a3a2f34382d3438203d3e20313332363437.roa (hash: xgpk0l8wHBzrP9AZayJBujyNuU1WlslUVoFQcTt2ROE=)
12: 323430323a656538303a3137363a3a2f34382d3438203d3e20313332363437.roa (hash: ssoTJWcnOTneohkhAvdxsLglXradXsID6/iYQ5O+53I=)
13: 34352e3132362e35372e302f32342d3234203d3e20313332363437.roa (hash: EEcqACfpJzv9e6aJJ3QgCFqjvxlrFVyI4AnnhuBfrzI=)
14: 34352e3132362e35382e302f32342d3234203d3e20313332363437.roa (hash: WUYYTi2XuFyUmWlSOlOmbSyC8k33VJEvWxEEHToe/f4=)
15: 34352e3132362e35382e302f32332d3234203d3e20313332363437.roa (hash: MlHDGnO/Vp+hFC8do5e8cQqI6Yre7kW1RmsPeNStRS4=)
16: 3130332e31392e3137382e302f32342d3234203d3e20313332363437.roa (hash: +54gsDdv0eW3zDbkaD5HbAoyLmCd/qoIOZWo63Fy2oM=)
17: 323430323a656538303a3a2f33322d3438203d3e20313332363437.roa (hash: wwYKe/sjxREQnj5G37QP1SEX1SplROb7ytmXu6rBig8=)
18: 323030313a6466353a343030303a3a2f34382d3438203d3e20313332363437.roa (hash: ea0BH5+9TDEtitqep4Xyx8IGG6HIfg5zxzhcj4dvnnA=)
19: 323430323a656538303a633a3a2f34382d3438203d3e20313332363437.roa (hash: 2s6ODMSjUVaffAG6UbhZ8oJIX5hnW9ppp33Tq9tR3wY=)
20: 3130332e31392e3137362e302f32342d3234203d3e20313332363437.roa (hash: S4kzvu4zbCmfw9stND1YY9BCQd30K/363b7rtm3YUq4=)
21: 3130332e31392e3137392e302f32342d3234203d3e20313332363437.roa (hash: MtiwOPRjzKh8TAh6x51imM/Vbo/YwNmBGuNUEh5cML4=)
22: 3130332e31392e3137362e302f32322d3234203d3e20313332363437.roa (hash: IOhGpn9Wqy2Lz6udKRlZRvUg19CFNIwFC8/KHmyaxxA=)
23: 323430323a656538303a623a3a2f34382d3438203d3e20313332363437.roa (hash: vG82X1ya4RP+iLybP3Nf3VH9eiCkt21NvKQm4mVZqlY=)
24: 3130332e31392e3137382e302f32332d3234203d3e20313332363437.roa (hash: 6ENOiJDb/1Xm9LcakgjTmelFqd2PFa7ryPrhU6sPGBY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.crl
rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9D9872A710FE713DC62241D587703BDF7DC1D6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Apr 2026 14:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:03:d7:28:6f:73:9b:76:e3:25:e9:2e:30:88:ed:de:2a:59:5a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC9D9872A710FE713DC62241D587703BDF7DC1D6
Validity
Not Before: Apr 18 02:17:24 2026 GMT
Not After : Apr 21 14:02:24 2026 GMT
Subject: CN=B918F84C8DFC012A1AEF51E8C7BA123B59F40C2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f6:a4:d7:ef:2a:5c:a4:e2:35:b5:53:da:ec:
e3:7d:37:7b:02:1e:41:d0:9c:9a:d3:64:6d:58:24:
be:fe:6f:a7:94:8e:54:ed:80:6a:03:64:1f:e0:6a:
0d:fb:55:68:4e:b1:4e:b6:fd:4c:1f:a4:d8:5f:ce:
08:fa:36:a3:42:4a:67:c1:67:d9:a4:da:d1:1e:e8:
1c:10:c6:87:43:2b:7c:1c:c6:63:85:a3:6d:22:c3:
81:cc:d1:fc:5a:35:3e:aa:8f:79:2d:44:79:8e:4f:
19:0d:d9:43:57:7f:f6:8a:a0:4d:c5:60:45:a2:73:
d5:be:2f:d5:4a:d8:13:d2:a8:ed:88:39:82:a6:db:
b7:de:61:65:16:b3:2a:cd:f6:47:8e:73:06:1a:c9:
7b:ef:f7:b4:75:12:d6:2f:4c:41:0e:6b:fa:a3:b3:
8d:a7:a0:c7:37:5f:9b:31:b1:c1:02:39:14:0b:83:
40:29:85:9c:66:a0:55:1b:05:82:33:e2:8c:35:0e:
e9:d9:cf:b4:28:c5:73:94:b0:f3:ef:0c:c4:83:7d:
d0:66:16:e9:ae:4a:a7:c8:c2:a3:5a:15:58:13:58:
85:59:e1:6f:00:0a:d8:6b:2a:83:8a:33:c0:bb:29:
43:c9:68:c9:db:3b:c1:c0:48:61:93:8f:36:87:eb:
92:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:18:F8:4C:8D:FC:01:2A:1A:EF:51:E8:C7:BA:12:3B:59:F4:0C:2A
X509v3 Authority Key Identifier:
keyid:EC:9D:98:72:A7:10:FE:71:3D:C6:22:41:D5:87:70:3B:DF:7D:C1:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9D9872A710FE713DC62241D587703BDF7DC1D6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:d5:68:a8:33:03:ad:21:70:da:59:e0:24:43:c8:21:5b:af:
58:f9:d6:c2:ff:7e:7f:dd:cf:68:4b:10:50:cf:9d:c7:11:4f:
6a:19:2d:1d:a6:ba:d4:8b:4a:0c:df:9a:f2:4c:eb:58:d1:4e:
1d:86:cf:71:2b:a8:5d:f8:17:a0:74:46:54:55:89:60:f6:5e:
9f:20:0b:3a:d2:26:64:5d:81:47:70:a6:90:92:11:96:36:f7:
89:16:72:84:e9:48:50:26:aa:0d:fc:6a:4e:8a:d0:c4:a6:b0:
1b:a7:95:d4:df:12:6a:cb:7b:6f:00:19:79:40:b0:c1:0f:0e:
54:29:49:e3:83:e7:7d:26:03:c4:3f:b4:3c:bd:b2:73:94:b3:
b8:39:6e:45:31:e7:56:43:44:ca:2a:82:ff:8b:af:e9:23:48:
9f:be:f8:34:57:dd:f6:9e:4b:7b:01:7d:0b:11:71:fd:99:10:
a4:ad:bd:f0:57:4f:65:53:5a:90:c8:d1:3f:09:c6:62:70:94:
8f:10:e0:a5:35:ed:a6:c0:01:19:60:00:65:a6:44:85:0d:38:
f0:d6:20:5d:40:ec:ca:0f:de:42:34:31:b1:c9:81:46:c6:c1:
a2:7c:14:70:32:fe:41:1b:3e:5e:d7:77:1f:89:74:64:db:bd:
71:6e:ac:b1
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUJwPXKG9zm3bjJekuMIjt3ipZWq8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUM5RDk4NzJBNzEwRkU3MTNEQzYyMjQxRDU4NzcwM0JE
RjdEQzFENjAeFw0yNjA0MTgwMjE3MjRaFw0yNjA0MjExNDAyMjRaMDMxMTAvBgNV
BAMTKEI5MThGODRDOERGQzAxMkExQUVGNTFFOEM3QkExMjNCNTlGNDBDMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC89qTX7ypcpOI1tVPa7ON9N3sC
HkHQnJrTZG1YJL7+b6eUjlTtgGoDZB/gag37VWhOsU62/UwfpNhfzgj6NqNCSmfB
Z9mk2tEe6BwQxodDK3wcxmOFo20iw4HM0fxaNT6qj3ktRHmOTxkN2UNXf/aKoE3F
YEWic9W+L9VK2BPSqO2IOYKm27feYWUWsyrN9keOcwYayXvv97R1EtYvTEEOa/qj
s42noMc3X5sxscECORQLg0AphZxmoFUbBYIz4ow1DunZz7QoxXOUsPPvDMSDfdBm
FumuSqfIwqNaFVgTWIVZ4W8ACthrKoOKM8C7KUPJaMnbO8HASGGTjzaH65IJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUuRj4TI38ASoa71Hox7oSO1n0DCowHwYDVR0j
BBgwFoAU7J2YcqcQ/nE9xiJB1YdwO999wdYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
NjYxN2Q4Yy1kMTU0LTQ2MWUtYmNjYS1iNjZkMjY3Y2ZmYzcvMC9FQzlEOTg3MkE3
MTBGRTcxM0RDNjIyNDFENTg3NzAzQkRGN0RDMUQ2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRUM5RDk4NzJBNzEwRkU3MTNEQzYyMjQxRDU4NzcwM0JERjdE
QzFENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTY2MTdkOGMtZDE1NC00NjFlLWJj
Y2EtYjY2ZDI2N2NmZmM3LzAvRUM5RDk4NzJBNzEwRkU3MTNEQzYyMjQxRDU4Nzcw
M0JERjdEQzFENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAB7VaKgzA60hcNpZ4CRDyCFbr1j51sL/fn/d
z2hLEFDPnccRT2oZLR2mutSLSgzfmvJM61jRTh2Gz3ErqF34F6B0RlRViWD2Xp8g
CzrSJmRdgUdwppCSEZY294kWcoTpSFAmqg38ak6K0MSmsBunldTfEmrLe28AGXlA
sMEPDlQpSeOD530mA8Q/tDy9snOUs7g5bkUx51ZDRMoqgv+Lr+kjSJ+++DRX3fae
S3sBfQsRcf2ZEKStvfBXT2VTWpDI0T8JxmJwlI8Q4KU17abAARlgAGWmRIUNOPDW
IF1A7MoP3kI0MbHJgUbGwaJ8FHAy/kEbPl7Xdx+JdGTbvXFurLE=
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:20:21 2026 by rpki-client