$ rpki-client -vvf repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.mft File: EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.mft (raw, json) Hash identifier: MvsrPonbH7pEtNhNFJ3IjCBLsRCzaDZRdZhHgNMcnjk= Subject key identifier: 60:65:B2:CF:A0:E1:18:2A:55:98:F3:14:0D:66:FD:07:6B:26:D1:4C Authority key identifier: EA:DA:0A:EE:51:F3:91:0B:50:A0:65:D5:7D:94:6E:3E:AF:A8:BD:11 Certificate issuer: /CN=EADA0AEE51F3910B50A065D57D946E3EAFA8BD11 Certificate serial: 47FF7DB11706C679F295A89CB756587CD987FD2D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.mft Manifest number: 0574 Signing time: Fri 17 Apr 2026 01:11:45 +0000 Manifest this update: Fri 17 Apr 2026 01:06:45 +0000 Manifest next update: Mon 20 Apr 2026 07:53:45 +0000 Files and hashes: 1: 323030313a6466343a663330303a3a2f34382d3438203d3e20313337333439.roa (hash: bM2bCiWvvR67fLAxEBLdbaa9UVbcM3IM7NopO4JRa9U=) 2: 3130332e3131342e35322e302f32332d3234203d3e20313337333439.roa (hash: Wb5XIyQzeshMPwbaIbQx/IP9pyRf1XeD2CgpbvmVh0k=) 3: 3130332e3131342e35322e302f32342d3234203d3e20313337333439.roa (hash: PtBs+nsRVIu2YcwX9pc77V8UxQKbh+fRc4VIGqtgf9c=) 4: EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.crl (hash: L9OQvhHobpzGpCTevtK8n4u3Gm1j/V8rVX9BxtYT9WM=) 5: 3130332e3131342e35332e302f32342d3234203d3e20313337333439.roa (hash: JOaRhY/bLlBtJRnSgu58P0++I9wpyJMQc7vHKmf/yaA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.crl rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 07:53:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:ff:7d:b1:17:06:c6:79:f2:95:a8:9c:b7:56:58:7c:d9:87:fd:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EADA0AEE51F3910B50A065D57D946E3EAFA8BD11 Validity Not Before: Apr 17 01:06:45 2026 GMT Not After : Apr 20 07:53:45 2026 GMT Subject: CN=6065B2CFA0E1182A5598F3140D66FD076B26D14C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ee:e5:bf:5b:78:14:b6:d4:b8:f9:9d:3a:49: 6e:bf:f3:e9:c8:7a:d4:89:81:bd:1b:92:76:22:3c: 66:89:0b:27:99:a7:72:b5:b5:db:b3:0e:75:56:b1: 74:6f:8f:03:31:3d:3f:8c:0b:f4:c7:75:31:96:7f: 1a:ff:6d:2a:a3:39:d1:14:97:bc:cd:65:e6:6d:f4: 9c:1d:72:e4:10:39:38:9b:a9:88:31:d3:a5:bd:33: cb:4e:68:31:8a:5b:c0:8d:7a:a1:cb:a3:fe:bf:9d: 38:0f:af:59:e8:0b:7b:2a:80:ba:0d:f9:46:4a:86: 99:b7:92:dc:1d:7e:9b:0c:20:8c:2c:cd:aa:8c:92: 9c:78:f3:26:0d:14:f2:ac:75:02:6d:ac:53:1a:21: ec:2e:6d:97:ae:80:48:bb:25:63:1f:e1:18:08:99: 2b:2f:32:cc:62:b5:13:f7:57:22:cd:a9:8e:a8:3b: 14:7c:c2:de:76:df:48:79:1d:31:81:71:37:9f:5a: 54:a5:30:a4:45:c0:33:7a:aa:22:2f:11:19:e8:52: 01:f2:90:71:c0:08:d0:57:70:36:70:38:14:bc:cc: 2d:b2:c5:f7:ce:f8:1a:88:49:c8:ca:06:6b:b3:5b: d2:96:aa:99:fc:59:c8:32:d7:ed:32:bc:68:95:0f: b0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:65:B2:CF:A0:E1:18:2A:55:98:F3:14:0D:66:FD:07:6B:26:D1:4C X509v3 Authority Key Identifier: keyid:EA:DA:0A:EE:51:F3:91:0B:50:A0:65:D5:7D:94:6E:3E:AF:A8:BD:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:b5:34:8f:ad:ad:ad:d4:64:4c:89:09:fc:3b:41:de:06:fc: 12:59:1e:45:4c:51:5f:8c:5e:75:34:f8:1a:27:67:a7:ae:28: 79:37:97:39:39:b7:fb:10:51:9f:fe:8e:f2:cd:e2:f4:d4:02: d1:c1:50:af:df:4b:bf:ff:31:9d:69:9a:45:1c:95:c1:11:01: 70:5d:8e:0c:04:f8:07:8b:d2:2b:17:82:51:3b:53:b9:4b:80: 5d:ec:e8:a4:29:49:49:05:cc:f5:ce:24:dc:54:a3:69:1b:1a: bf:2e:70:a4:09:08:0d:cb:82:77:f9:8d:b2:87:8e:ca:64:f9: 24:39:9c:75:1d:45:fc:1d:6b:d9:73:74:34:0f:77:5a:16:da: ec:1b:7a:f1:39:b7:1d:ed:ed:dc:1d:3d:bd:ad:5a:0b:89:23: ad:14:24:e9:25:2b:96:fa:1b:3e:59:7e:5a:7f:aa:44:6a:4b: 43:c2:20:c8:fe:6e:87:d8:cc:44:55:bb:95:a3:3f:5f:8c:f5: 2f:3f:fd:b6:81:e4:cd:8b:84:51:60:5e:23:79:48:bd:89:f8: 43:ba:5f:14:e5:70:f1:59:40:fc:e1:e2:e6:7f:d0:88:1f:73: 78:ac:b5:77:6f:83:35:6c:52:75:54:85:b1:53:fe:ab:18:67: af:54:e6:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR/99sRcGxnnylaict1ZYfNmH/S0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFEQTBBRUU1MUYzOTEwQjUwQTA2NUQ1N0Q5NDZFM0VB RkE4QkQxMTAeFw0yNjA0MTcwMTA2NDVaFw0yNjA0MjAwNzUzNDVaMDMxMTAvBgNV BAMTKDYwNjVCMkNGQTBFMTE4MkE1NTk4RjMxNDBENjZGRDA3NkIyNkQxNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX7uW/W3gUttS4+Z06SW6/8+nI etSJgb0bknYiPGaJCyeZp3K1tduzDnVWsXRvjwMxPT+MC/THdTGWfxr/bSqjOdEU l7zNZeZt9JwdcuQQOTibqYgx06W9M8tOaDGKW8CNeqHLo/6/nTgPr1noC3sqgLoN +UZKhpm3ktwdfpsMIIwszaqMkpx48yYNFPKsdQJtrFMaIewubZeugEi7JWMf4RgI mSsvMsxitRP3VyLNqY6oOxR8wt5230h5HTGBcTefWlSlMKRFwDN6qiIvERnoUgHy kHHACNBXcDZwOBS8zC2yxffO+BqIScjKBmuzW9KWqpn8Wcgy1+0yvGiVD7CTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYGWyz6DhGCpVmPMUDWb9B2sm0UwwHwYDVR0j BBgwFoAU6toK7lHzkQtQoGXVfZRuPq+ovREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDk2MmM2ZS01OTVhLTQ3YzQtYWE3Yy1lZjhlNzdjYWU2NDIvMC9FQURBMEFFRTUx RjM5MTBCNTBBMDY1RDU3RDk0NkUzRUFGQThCRDExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUFEQTBBRUU1MUYzOTEwQjUwQTA2NUQ1N0Q5NDZFM0VBRkE4 QkQxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA5NjJjNmUtNTk1YS00N2M0LWFh N2MtZWY4ZTc3Y2FlNjQyLzAvRUFEQTBBRUU1MUYzOTEwQjUwQTA2NUQ1N0Q5NDZF M0VBRkE4QkQxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKG1NI+tra3UZEyJCfw7Qd4G/BJZHkVMUV+M XnU0+BonZ6euKHk3lzk5t/sQUZ/+jvLN4vTUAtHBUK/fS7//MZ1pmkUclcERAXBd jgwE+AeL0isXglE7U7lLgF3s6KQpSUkFzPXOJNxUo2kbGr8ucKQJCA3Lgnf5jbKH jspk+SQ5nHUdRfwda9lzdDQPd1oW2uwbevE5tx3t7dwdPb2tWguJI60UJOklK5b6 Gz5Zflp/qkRqS0PCIMj+bofYzERVu5WjP1+M9S8//baB5M2LhFFgXiN5SL2J+EO6 XxTlcPFZQPzh4uZ/0Igfc3istXdvgzVsUnVUhbFT/qsYZ69U5pI= -----END CERTIFICATE-----Generated at Fri Apr 17 22:48:32 2026 by rpki-client