$ rpki-client -vvf repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft File: EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft (raw, json) Hash identifier: ggJ7PGK91Ylu3LhD+XhEZPrYkJi59fWK7Dv6EofzsZ8= Subject key identifier: 29:DB:A1:F1:C0:D5:08:FB:CF:BC:8B:70:3C:9B:56:28:88:06:69:D8 Authority key identifier: EE:2C:52:F7:BE:52:A0:EB:69:5A:54:9A:42:E7:01:EE:E7:E4:5D:68 Certificate issuer: /CN=EE2C52F7BE52A0EB695A549A42E701EEE7E45D68 Certificate serial: 6799622AB330DD4AF33088E98D1DF384E16DEE34 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft Manifest number: 0236 Signing time: Thu 16 Apr 2026 11:50:53 +0000 Manifest this update: Thu 16 Apr 2026 11:45:53 +0000 Manifest next update: Sun 19 Apr 2026 14:57:53 +0000 Files and hashes: 1: 3130332e32302e38362e302f32332d3233203d3e2039333431.roa (hash: +RIRdxOQj98KpyUFzbwvH1+p1ELhEQk4ECMOCZ1qPKs=) 2: 3130332e32302e38372e302f32342d3234203d3e2039333431.roa (hash: AHcDCGLpSbw6Wx72m+rIylEXaACluMi2gVr+3VqfEGw=) 3: EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.crl (hash: mVwdg01XRErieP4cct3CyxLIg9aNycRHSuntDi7DKis=) 4: 3130332e32302e38362e302f32342d3234203d3e2039333431.roa (hash: vQ/JQod4pjiK4qjkcMAE6/5YAgXsND0ZYI10hmKECPY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.crl rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 14:57:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:99:62:2a:b3:30:dd:4a:f3:30:88:e9:8d:1d:f3:84:e1:6d:ee:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE2C52F7BE52A0EB695A549A42E701EEE7E45D68 Validity Not Before: Apr 16 11:45:53 2026 GMT Not After : Apr 19 14:57:53 2026 GMT Subject: CN=29DBA1F1C0D508FBCFBC8B703C9B5628880669D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c3:2b:8a:41:32:da:4b:4f:3c:57:ea:12:90: 35:52:da:c7:c4:0d:0f:64:da:33:69:10:b2:1f:6b: 70:e9:b0:4a:df:aa:6f:04:e6:c7:2c:90:d3:00:fb: 50:2b:01:db:90:4d:6e:4d:59:dd:8f:e2:12:f2:07: d7:6a:73:c3:d9:cf:14:be:dd:ea:69:b0:3a:07:f9: 40:d3:99:dd:39:05:47:99:a3:87:3d:f5:f0:c4:d4: 41:e2:41:00:50:c5:f3:73:82:b2:d2:e7:4a:2d:83: e5:73:57:46:36:ce:0e:85:e5:cb:47:25:e7:cf:5b: d6:2c:40:6f:9a:0c:d6:df:a8:7c:7e:ab:1b:54:77: 79:8a:ce:41:f8:a6:a1:29:c4:c5:3a:fa:31:05:54: fd:89:73:f0:ac:9f:2d:1e:b8:20:91:6e:a5:e9:a7: 32:fd:1c:f2:4e:d1:39:2e:bb:2f:f1:b8:9c:d4:0f: 20:69:ac:6e:6a:e3:fb:06:a2:b8:36:2d:6f:7d:ca: 9e:4a:76:a5:40:99:83:32:d6:63:e0:dc:42:09:c0: 50:53:a9:fc:a3:06:82:58:a7:df:c9:5a:fb:69:e6: e9:26:28:a7:15:84:0c:90:b0:ec:39:bc:96:6d:6d: 27:55:1a:78:bd:14:c2:1e:6d:5a:be:83:e6:41:61: 0c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:DB:A1:F1:C0:D5:08:FB:CF:BC:8B:70:3C:9B:56:28:88:06:69:D8 X509v3 Authority Key Identifier: keyid:EE:2C:52:F7:BE:52:A0:EB:69:5A:54:9A:42:E7:01:EE:E7:E4:5D:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:c1:cf:ec:85:a7:5b:de:2f:b2:9e:2c:f3:94:f4:83:18:b6: 3f:72:9d:4f:30:cc:11:0a:55:09:23:ec:fe:e4:71:57:9c:89: 8e:86:17:9d:65:e4:ca:61:85:66:62:33:72:43:7f:e4:78:7e: a4:30:12:7a:8b:ec:50:c7:8b:42:8d:ea:1b:3c:58:1f:54:2f: 5b:67:f9:27:a7:0f:ae:bd:4e:cd:fa:2a:d1:ae:a5:ae:41:f5: 2c:a5:ad:83:4b:ca:49:b3:0c:4b:61:20:aa:3f:2e:3b:74:27: 60:1f:1d:de:f3:e9:dc:d3:b8:69:47:68:62:44:1c:c5:a6:bb: 47:b6:7b:04:3d:fe:e3:0e:f9:7c:4a:d2:1f:f7:16:ac:c5:81: 58:7b:5a:ee:97:92:20:9a:d9:6c:a2:b1:36:88:0c:67:d6:4a: 61:a8:fb:41:cb:ce:8c:89:a8:5b:65:02:51:ec:d1:3c:d3:18: 79:90:20:0d:30:b7:a8:2d:ae:fc:fb:78:f2:71:1b:34:91:4e: 54:8e:b3:e0:8f:10:96:45:73:cb:1c:79:c5:e1:90:b1:e3:8d: 26:74:e0:21:06:b8:c7:36:77:82:db:79:34:c2:2f:de:f6:ad: b3:7c:a0:80:b5:78:ef:24:6d:a5:79:6a:43:78:ad:ac:be:c9: 16:86:22:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ5liKrMw3UrzMIjpjR3zhOFt7jQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUUyQzUyRjdCRTUyQTBFQjY5NUE1NDlBNDJFNzAxRUVF N0U0NUQ2ODAeFw0yNjA0MTYxMTQ1NTNaFw0yNjA0MTkxNDU3NTNaMDMxMTAvBgNV BAMTKDI5REJBMUYxQzBENTA4RkJDRkJDOEI3MDNDOUI1NjI4ODgwNjY5RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxwyuKQTLaS088V+oSkDVS2sfE DQ9k2jNpELIfa3DpsErfqm8E5scskNMA+1ArAduQTW5NWd2P4hLyB9dqc8PZzxS+ 3eppsDoH+UDTmd05BUeZo4c99fDE1EHiQQBQxfNzgrLS50otg+VzV0Y2zg6F5ctH JefPW9YsQG+aDNbfqHx+qxtUd3mKzkH4pqEpxMU6+jEFVP2Jc/Csny0euCCRbqXp pzL9HPJO0Tkuuy/xuJzUDyBprG5q4/sGorg2LW99yp5KdqVAmYMy1mPg3EIJwFBT qfyjBoJYp9/JWvtp5ukmKKcVhAyQsOw5vJZtbSdVGni9FMIebVq+g+ZBYQx/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKduh8cDVCPvPvItwPJtWKIgGadgwHwYDVR0j BBgwFoAU7ixS975SoOtpWlSaQucB7ufkXWgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWE0ODlhNi01NDg1LTQ4N2YtYjVkZC04ZjRlZGViNDZiY2IvMC9FRTJDNTJGN0JF NTJBMEVCNjk1QTU0OUE0MkU3MDFFRUU3RTQ1RDY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUUyQzUyRjdCRTUyQTBFQjY5NUE1NDlBNDJFNzAxRUVFN0U0 NUQ2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFhNDg5YTYtNTQ4NS00ODdmLWI1 ZGQtOGY0ZWRlYjQ2YmNiLzAvRUUyQzUyRjdCRTUyQTBFQjY5NUE1NDlBNDJFNzAx RUVFN0U0NUQ2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFXBz+yFp1veL7KeLPOU9IMYtj9ynU8wzBEK VQkj7P7kcVeciY6GF51l5MphhWZiM3JDf+R4fqQwEnqL7FDHi0KN6hs8WB9UL1tn +SenD669Ts36KtGupa5B9SylrYNLykmzDEthIKo/Ljt0J2AfHd7z6dzTuGlHaGJE HMWmu0e2ewQ9/uMO+XxK0h/3FqzFgVh7Wu6XkiCa2WyisTaIDGfWSmGo+0HLzoyJ qFtlAlHs0TzTGHmQIA0wt6gtrvz7ePJxGzSRTlSOs+CPEJZFc8scecXhkLHjjSZ0 4CEGuMc2d4LbeTTCL972rbN8oIC1eO8kbaV5akN4ray+yRaGIkg= -----END CERTIFICATE-----Generated at Fri Apr 17 19:20:04 2026 by rpki-client