$ rpki-client -vvf repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft File: EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft (raw, json) Hash identifier: 8JRQ1UOg/49K3m+TwrIoOHexCZDZX/IycspL7X1KtYg= Subject key identifier: D5:E2:DC:94:78:A7:39:3F:68:A8:A4:45:A6:20:F7:82:65:FA:65:DD Authority key identifier: EF:7C:A8:2C:5B:45:FD:41:2D:E8:92:CB:6D:A7:A8:CA:15:C8:5B:17 Certificate issuer: /CN=EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17 Certificate serial: 19CD54DC78727F2817154CEAE3879DE1001C47D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft Manifest number: 0119 Signing time: Sun 01 Mar 2026 11:51:28 +0000 Manifest this update: Sun 01 Mar 2026 11:46:28 +0000 Manifest next update: Wed 04 Mar 2026 18:18:28 +0000 Files and hashes: 1: EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.crl (hash: k2ETylybMcS/W8MllmdVIs6k3CFbguy7GZmzyJRj2ow=) 2: 3135372e36362e38362e302f32332d3234203d3e20313532343432.roa (hash: yvjq0+mX9UVVGH4hrgAy0kHkjD5STbq2ZndxXPg4Qok=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.crl rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 18:18:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:cd:54:dc:78:72:7f:28:17:15:4c:ea:e3:87:9d:e1:00:1c:47:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17 Validity Not Before: Mar 1 11:46:28 2026 GMT Not After : Mar 4 18:18:28 2026 GMT Subject: CN=D5E2DC9478A7393F68A8A445A620F78265FA65DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:40:90:aa:7d:ea:fc:65:40:06:79:c0:95:e7: de:91:95:92:c1:ca:c6:74:47:22:f9:2b:b4:11:95: 3c:b7:79:1d:58:7f:00:47:5c:c3:cc:ed:76:69:53: 7a:21:06:ce:2a:9d:ee:86:b4:ae:b0:37:c7:55:6c: b6:d0:d1:3f:6b:20:68:ff:75:d7:54:85:41:58:a2: d7:ed:c7:f5:e3:44:fb:b0:a1:a5:24:6c:6b:d5:b4: 6e:0b:e8:e5:d8:c1:41:c3:d8:5c:7f:ec:18:83:a2: 33:f2:3d:89:9d:24:5b:10:21:11:c8:5e:45:b9:3b: dc:20:e6:51:4f:a3:d0:07:44:9e:2a:1f:a8:85:33: 21:0c:88:a0:00:7c:62:58:fc:81:bf:8c:8a:76:a7: 29:a8:3d:f1:59:3d:20:07:bd:01:ec:07:67:4e:fd: 20:4a:2f:71:85:8e:f7:76:4b:8c:2f:b2:b3:46:c7: f9:61:fe:d8:17:05:e2:82:c8:b9:b4:7b:84:89:08: a7:d7:0d:28:25:88:05:0d:57:86:c4:46:8c:c2:55: 00:ad:f6:b2:c2:42:f1:a8:db:bc:17:79:52:8b:ee: b6:4b:67:19:58:a6:04:bb:b5:0d:1c:e0:fb:d5:fe: a5:89:7c:a8:8a:88:91:78:7e:41:85:54:ad:7e:3e: 75:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E2:DC:94:78:A7:39:3F:68:A8:A4:45:A6:20:F7:82:65:FA:65:DD X509v3 Authority Key Identifier: keyid:EF:7C:A8:2C:5B:45:FD:41:2D:E8:92:CB:6D:A7:A8:CA:15:C8:5B:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:c7:aa:cc:9e:31:1e:f4:84:bf:ce:3c:a7:e2:63:ab:94:44: 82:59:a8:f5:1e:47:89:12:93:60:fb:0a:e1:04:f1:c4:70:db: 8a:bb:8f:83:40:45:6f:a3:82:e1:ab:ac:57:47:d2:fc:2d:bb: e9:fe:76:7f:a1:b0:9c:1e:e7:9a:8c:58:96:1c:e4:5e:4e:06: 02:08:48:cd:55:c4:7c:7c:0b:33:57:2b:b1:0b:22:89:4f:e4: 18:db:f4:25:eb:7c:9f:1e:06:30:78:b5:ba:0e:96:8f:22:be: 63:4e:d2:87:16:96:88:a5:c3:d2:7f:1c:94:b6:27:32:37:81: 08:0e:b4:0d:0e:86:17:45:77:6a:fc:f7:59:46:ff:60:30:79: c9:d3:06:2d:86:26:12:2a:cd:38:ad:2d:4a:43:26:15:9b:63: de:95:de:70:a9:3b:0a:7d:6a:52:71:52:67:3a:14:1e:72:40: f0:11:db:d7:41:a2:7b:b9:d6:9b:65:b3:d5:1b:73:56:71:f2: d3:aa:f6:35:28:b1:b5:67:d7:2b:26:93:6b:94:35:c6:9e:27: 86:3c:93:c7:83:9c:e3:06:05:c9:28:c3:b5:ad:01:69:2b:7f: 3f:6d:c6:0d:d7:fe:c7:78:bc:b6:e9:78:b8:1e:0e:b9:cc:0b: aa:ec:9b:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGc1U3HhyfygXFUzq44ed4QAcR9gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY3Q0E4MkM1QjQ1RkQ0MTJERTg5MkNCNkRBN0E4Q0Ex NUM4NUIxNzAeFw0yNjAzMDExMTQ2MjhaFw0yNjAzMDQxODE4MjhaMDMxMTAvBgNV BAMTKEQ1RTJEQzk0NzhBNzM5M0Y2OEE4QTQ0NUE2MjBGNzgyNjVGQTY1REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDQJCqfer8ZUAGecCV596RlZLB ysZ0RyL5K7QRlTy3eR1YfwBHXMPM7XZpU3ohBs4qne6GtK6wN8dVbLbQ0T9rIGj/ dddUhUFYotftx/XjRPuwoaUkbGvVtG4L6OXYwUHD2Fx/7BiDojPyPYmdJFsQIRHI XkW5O9wg5lFPo9AHRJ4qH6iFMyEMiKAAfGJY/IG/jIp2pymoPfFZPSAHvQHsB2dO /SBKL3GFjvd2S4wvsrNGx/lh/tgXBeKCyLm0e4SJCKfXDSgliAUNV4bERozCVQCt 9rLCQvGo27wXeVKL7rZLZxlYpgS7tQ0c4PvV/qWJfKiKiJF4fkGFVK1+PnVRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1eLclHinOT9oqKRFpiD3gmX6Zd0wHwYDVR0j BBgwFoAU73yoLFtF/UEt6JLLbaeoyhXIWxcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ODdkZDU5Ny00MGNkLTQwOWItYjNjNS0yODUyY2UwMTQ4ODkvMC9FRjdDQTgyQzVC NDVGRDQxMkRFODkyQ0I2REE3QThDQTE1Qzg1QjE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRUY3Q0E4MkM1QjQ1RkQ0MTJERTg5MkNCNkRBN0E4Q0ExNUM4 NUIxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjg3ZGQ1OTctNDBjZC00MDliLWIz YzUtMjg1MmNlMDE0ODg5LzAvRUY3Q0E4MkM1QjQ1RkQ0MTJERTg5MkNCNkRBN0E4 Q0ExNUM4NUIxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHbHqsyeMR70hL/OPKfiY6uURIJZqPUeR4kS k2D7CuEE8cRw24q7j4NARW+jguGrrFdH0vwtu+n+dn+hsJwe55qMWJYc5F5OBgII SM1VxHx8CzNXK7ELIolP5Bjb9CXrfJ8eBjB4tboOlo8ivmNO0ocWloilw9J/HJS2 JzI3gQgOtA0OhhdFd2r891lG/2AwecnTBi2GJhIqzTitLUpDJhWbY96V3nCpOwp9 alJxUmc6FB5yQPAR29dBonu51ptls9Ubc1Zx8tOq9jUosbVn1ysmk2uUNcaeJ4Y8 k8eDnOMGBckow7WtAWkrfz9txg3X/sd4vLbpeLgeDrnMC6rsm/8= -----END CERTIFICATE-----Generated at Mon Mar 2 11:21:59 2026 by rpki-client