$ rpki-client -vvf repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft File: EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft (raw, json) Hash identifier: JxIfYU42bh4y9PGDjplkad4XhIqZYYTrbibbMxLviYY= Subject key identifier: 00:C1:33:FF:9F:94:93:09:E4:F7:08:BD:6E:91:A6:09:0C:11:25:3D Authority key identifier: EE:2C:52:F7:BE:52:A0:EB:69:5A:54:9A:42:E7:01:EE:E7:E4:5D:68 Certificate issuer: /CN=EE2C52F7BE52A0EB695A549A42E701EEE7E45D68 Certificate serial: 6ABA15D562D2873B90056F841A30D7262254BC83 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft Manifest number: 0221 Signing time: Sat 28 Feb 2026 22:30:51 +0000 Manifest this update: Sat 28 Feb 2026 22:25:51 +0000 Manifest next update: Wed 04 Mar 2026 08:02:51 +0000 Files and hashes: 1: EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.crl (hash: aEi3nl1GTINdVfAbTeSIX8Z0SGdSgPyupVHZTU1vYio=) 2: 3130332e32302e38362e302f32342d3234203d3e2039333431.roa (hash: vQ/JQod4pjiK4qjkcMAE6/5YAgXsND0ZYI10hmKECPY=) 3: 3130332e32302e38362e302f32332d3233203d3e2039333431.roa (hash: +RIRdxOQj98KpyUFzbwvH1+p1ELhEQk4ECMOCZ1qPKs=) 4: 3130332e32302e38372e302f32342d3234203d3e2039333431.roa (hash: AHcDCGLpSbw6Wx72m+rIylEXaACluMi2gVr+3VqfEGw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.crl rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 08:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:ba:15:d5:62:d2:87:3b:90:05:6f:84:1a:30:d7:26:22:54:bc:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE2C52F7BE52A0EB695A549A42E701EEE7E45D68 Validity Not Before: Feb 28 22:25:51 2026 GMT Not After : Mar 4 08:02:51 2026 GMT Subject: CN=00C133FF9F949309E4F708BD6E91A6090C11253D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:26:29:f4:ac:b9:5b:83:bd:df:79:2e:b1:39: c5:9e:82:0d:de:fc:61:2a:66:cb:c3:60:6d:2c:9b: e8:2e:d4:db:7c:fd:23:c1:12:55:57:0a:28:85:29: 65:95:68:80:fb:69:b8:15:28:0f:82:49:30:e4:d9: 2d:a0:cb:08:c7:39:ee:a1:53:80:b3:1b:86:85:5f: b4:f1:f2:df:1d:40:d3:4b:39:be:bb:bf:02:d5:7a: cf:c6:c0:d3:ed:a1:fb:59:a1:59:af:53:95:58:e2: e4:2f:a9:09:29:81:5f:b2:c5:f4:85:00:4b:36:58: d7:87:b3:91:58:f0:16:e1:c9:9b:2e:77:06:8d:c0: 4b:4c:3e:cb:ad:f7:31:45:bb:c4:b0:3a:84:d7:76: 74:cb:e8:06:63:8c:81:e6:db:a4:52:bc:93:50:7b: af:05:6a:af:5f:ce:97:71:e3:df:00:99:d9:af:27: d3:a1:ea:b2:c2:fd:c9:56:7f:d1:97:ab:59:08:88: bf:80:01:88:9e:e6:19:03:8b:9e:e2:3d:16:0b:dd: 83:c1:da:28:20:5f:87:5f:6e:8d:05:fd:64:1f:c2: fc:5b:1c:c4:7e:85:42:01:84:e2:81:fc:83:1f:6c: ff:f1:4e:0d:70:d4:9e:09:71:3b:23:54:04:b5:ee: 46:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C1:33:FF:9F:94:93:09:E4:F7:08:BD:6E:91:A6:09:0C:11:25:3D X509v3 Authority Key Identifier: keyid:EE:2C:52:F7:BE:52:A0:EB:69:5A:54:9A:42:E7:01:EE:E7:E4:5D:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:32:d1:80:b5:37:ff:1b:bb:56:d1:71:1c:33:9d:0e:a8:e7: 42:d1:04:56:12:38:b6:ff:07:80:43:c1:ba:aa:12:05:1d:bb: 1f:13:7b:6c:b8:13:c9:76:a4:c1:20:87:d0:f4:52:6f:c8:01: aa:81:7a:d3:d2:51:f0:35:c3:24:89:75:2a:7f:2e:8d:40:e7: eb:bc:93:09:87:75:85:1c:7a:21:d9:5c:07:98:8e:c9:63:00: 5d:ad:97:c7:cc:59:c4:63:9d:85:2b:ab:78:76:e0:62:be:87: b0:a5:78:b1:64:a3:77:60:37:99:21:cc:27:0a:5a:c0:3c:9d: 9f:d2:8e:49:72:25:bb:87:87:4f:7c:40:b2:8b:dc:69:18:65: 1b:e3:6d:3a:75:a9:1b:a0:12:1d:be:40:0b:5d:9d:4d:32:34: f6:f0:91:6b:43:ea:3d:80:3e:7e:fd:33:0e:51:36:d0:b2:1f: da:72:d0:84:cc:6a:c5:be:d5:34:6a:53:d3:2e:95:7c:f9:5a: f6:90:7a:a7:51:56:8d:71:53:2f:78:63:fe:49:17:3e:73:9c: bc:99:7e:70:03:f0:4f:b8:85:e2:ff:0c:c3:a7:27:fc:63:8d: 20:d5:1d:85:88:f1:e9:ff:d5:c5:f6:f5:12:dc:75:7d:f6:39: 86:88:f7:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaroV1WLShzuQBW+EGjDXJiJUvIMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUUyQzUyRjdCRTUyQTBFQjY5NUE1NDlBNDJFNzAxRUVF N0U0NUQ2ODAeFw0yNjAyMjgyMjI1NTFaFw0yNjAzMDQwODAyNTFaMDMxMTAvBgNV BAMTKDAwQzEzM0ZGOUY5NDkzMDlFNEY3MDhCRDZFOTFBNjA5MEMxMTI1M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtJin0rLlbg73feS6xOcWegg3e /GEqZsvDYG0sm+gu1Nt8/SPBElVXCiiFKWWVaID7abgVKA+CSTDk2S2gywjHOe6h U4CzG4aFX7Tx8t8dQNNLOb67vwLVes/GwNPtoftZoVmvU5VY4uQvqQkpgV+yxfSF AEs2WNeHs5FY8BbhyZsudwaNwEtMPsut9zFFu8SwOoTXdnTL6AZjjIHm26RSvJNQ e68Faq9fzpdx498AmdmvJ9Oh6rLC/clWf9GXq1kIiL+AAYie5hkDi57iPRYL3YPB 2iggX4dfbo0F/WQfwvxbHMR+hUIBhOKB/IMfbP/xTg1w1J4JcTsjVAS17kbZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAMEz/5+Ukwnk9wi9bpGmCQwRJT0wHwYDVR0j BBgwFoAU7ixS975SoOtpWlSaQucB7ufkXWgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWE0ODlhNi01NDg1LTQ4N2YtYjVkZC04ZjRlZGViNDZiY2IvMC9FRTJDNTJGN0JF NTJBMEVCNjk1QTU0OUE0MkU3MDFFRUU3RTQ1RDY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUUyQzUyRjdCRTUyQTBFQjY5NUE1NDlBNDJFNzAxRUVFN0U0 NUQ2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFhNDg5YTYtNTQ4NS00ODdmLWI1 ZGQtOGY0ZWRlYjQ2YmNiLzAvRUUyQzUyRjdCRTUyQTBFQjY5NUE1NDlBNDJFNzAx RUVFN0U0NUQ2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJAy0YC1N/8bu1bRcRwznQ6o50LRBFYSOLb/ B4BDwbqqEgUdux8Te2y4E8l2pMEgh9D0Um/IAaqBetPSUfA1wySJdSp/Lo1A5+u8 kwmHdYUceiHZXAeYjsljAF2tl8fMWcRjnYUrq3h24GK+h7CleLFko3dgN5khzCcK WsA8nZ/SjklyJbuHh098QLKL3GkYZRvjbTp1qRugEh2+QAtdnU0yNPbwkWtD6j2A Pn79Mw5RNtCyH9py0ITMasW+1TRqU9MulXz5WvaQeqdRVo1xUy94Y/5JFz5znLyZ fnAD8E+4heL/DMOnJ/xjjSDVHYWI8en/1cX29RLcdX32OYaI90M= -----END CERTIFICATE-----Generated at Mon Mar 2 02:19:56 2026 by rpki-client