$ rpki-client -vvf repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft File: EC973BE13EF324E7D59046CF7690A12F9DF12932.mft (raw, json) Hash identifier: INlOomjWvEFUAP/gtoOXfxXMWsh4Yk0f6MojnhIzK0c= Subject key identifier: CC:E9:8C:C7:F9:29:46:4B:49:65:10:8A:33:78:5F:20:62:E3:D2:FA Authority key identifier: EC:97:3B:E1:3E:F3:24:E7:D5:90:46:CF:76:90:A1:2F:9D:F1:29:32 Certificate issuer: /CN=EC973BE13EF324E7D59046CF7690A12F9DF12932 Certificate serial: 61D89395039FEF39D3122A139038762BF2F6C7D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft Manifest number: 02A9 Signing time: Fri 17 Apr 2026 14:21:30 +0000 Manifest this update: Fri 17 Apr 2026 14:16:30 +0000 Manifest next update: Mon 20 Apr 2026 19:55:30 +0000 Files and hashes: 1: EC973BE13EF324E7D59046CF7690A12F9DF12932.crl (hash: 0ib356d9enR5epvU9MEc0VK0uYGYBu2Rmkc6qnWmZbk=) 2: 3130332e3138312e37362e302f32342d3234203d3e20313439333739.roa (hash: Fd7yVNtVPCM6piUfSXh9X3JKHqUDZdjbopzWmm3ObMk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.crl rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 19:55:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:d8:93:95:03:9f:ef:39:d3:12:2a:13:90:38:76:2b:f2:f6:c7:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC973BE13EF324E7D59046CF7690A12F9DF12932 Validity Not Before: Apr 17 14:16:30 2026 GMT Not After : Apr 20 19:55:30 2026 GMT Subject: CN=CCE98CC7F929464B4965108A33785F2062E3D2FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:06:19:a4:a4:72:aa:09:63:58:5e:64:cf:95: 31:60:1e:8f:1b:02:fa:ad:4d:2b:cc:22:0b:8f:01: e0:5e:52:28:27:25:39:37:69:76:94:2e:bf:9a:6b: 3b:f0:f1:93:93:d1:3a:bd:9a:fc:45:53:c3:63:57: d2:3c:92:5e:36:4c:f0:09:a7:04:01:3f:af:ca:21: 84:42:a7:d6:cc:93:d2:cc:b6:0c:38:11:f9:ef:89: 49:77:89:0f:f4:90:4f:7f:84:dc:5a:e7:49:e3:dd: 5a:24:6c:3c:a9:12:2f:68:97:4c:42:1e:c5:98:32: 76:be:31:59:1c:49:3a:7d:b7:65:47:9e:bc:49:cc: 95:20:35:3f:5c:44:c7:61:c8:93:97:20:54:51:02: df:af:fb:e8:fd:20:1a:2b:bb:14:79:dc:a9:56:a8: 91:08:b9:9e:ae:94:5c:19:63:84:10:d7:64:6e:82: 65:fe:b4:41:70:44:54:22:e7:68:9b:b9:11:94:84: a4:73:fc:74:24:7f:90:14:ca:69:97:40:c0:8d:3d: 69:6d:fb:04:e0:f9:b9:18:31:82:0d:76:7e:3f:4d: 51:77:92:52:d5:5e:9b:a1:16:7e:85:f2:c7:ef:6a: c9:84:64:56:0b:e1:62:fe:27:13:4d:5a:ad:45:de: b6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:E9:8C:C7:F9:29:46:4B:49:65:10:8A:33:78:5F:20:62:E3:D2:FA X509v3 Authority Key Identifier: keyid:EC:97:3B:E1:3E:F3:24:E7:D5:90:46:CF:76:90:A1:2F:9D:F1:29:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:d8:d5:b2:ec:ec:32:d4:45:e5:1e:a7:3e:cc:55:11:05:86: b5:08:51:6b:e8:57:86:69:53:46:e3:70:a1:52:c5:7f:55:99: 30:20:72:e1:7c:df:d1:5d:ef:59:98:43:b2:1e:05:7a:8a:e0: d2:14:93:17:fd:53:5c:a8:3d:a2:19:d4:bd:d9:8a:b9:88:ff: 04:ad:8a:4c:b5:1a:4e:da:86:ea:89:58:a9:84:e2:38:7c:93: 1b:aa:4f:be:04:9b:5a:09:ca:e1:27:85:9f:35:1e:40:16:ed: 0f:b9:9b:54:4c:4f:b1:b4:78:7d:39:43:68:68:80:d0:1d:7e: ca:e8:5e:74:8b:49:8f:86:66:17:c5:8d:26:39:77:c2:c7:94: 49:02:2c:c9:9b:dd:43:cd:5a:f4:ed:ea:d7:0e:28:12:12:26: 23:73:4b:88:20:89:9c:ea:85:3c:46:c7:91:cc:01:8f:3e:85: e7:f9:f5:e0:ca:2c:10:f6:49:eb:87:81:ca:4e:ed:57:a2:cb: fa:fa:72:fb:58:f8:9e:31:5d:d4:05:50:9a:ff:c8:97:0f:01: 08:58:6e:5c:a2:72:96:15:cf:e1:02:86:e7:e6:89:84:44:17: 79:dc:6c:4b:c7:e0:db:1a:e4:99:3a:98:37:f9:cc:51:61:18: 87:20:df:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYdiTlQOf7znTEioTkDh2K/L2x9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5NzNCRTEzRUYzMjRFN0Q1OTA0NkNGNzY5MEExMkY5 REYxMjkzMjAeFw0yNjA0MTcxNDE2MzBaFw0yNjA0MjAxOTU1MzBaMDMxMTAvBgNV BAMTKENDRTk4Q0M3RjkyOTQ2NEI0OTY1MTA4QTMzNzg1RjIwNjJFM0QyRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBBhmkpHKqCWNYXmTPlTFgHo8b AvqtTSvMIguPAeBeUignJTk3aXaULr+aazvw8ZOT0Tq9mvxFU8NjV9I8kl42TPAJ pwQBP6/KIYRCp9bMk9LMtgw4EfnviUl3iQ/0kE9/hNxa50nj3VokbDypEi9ol0xC HsWYMna+MVkcSTp9t2VHnrxJzJUgNT9cRMdhyJOXIFRRAt+v++j9IBoruxR53KlW qJEIuZ6ulFwZY4QQ12RugmX+tEFwRFQi52ibuRGUhKRz/HQkf5AUymmXQMCNPWlt +wTg+bkYMYINdn4/TVF3klLVXpuhFn6F8sfvasmEZFYL4WL+JxNNWq1F3rZJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzOmMx/kpRktJZRCKM3hfIGLj0vowHwYDVR0j BBgwFoAU7Jc74T7zJOfVkEbPdpChL53xKTIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZTFjYmQ3OS04ZjI2LTRiMGUtOGIzYi1hYjllOTkzOGZjYWUvMC9FQzk3M0JFMTNF RjMyNEU3RDU5MDQ2Q0Y3NjkwQTEyRjlERjEyOTMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUM5NzNCRTEzRUYzMjRFN0Q1OTA0NkNGNzY5MEExMkY5REYx MjkzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmUxY2JkNzktOGYyNi00YjBlLThi M2ItYWI5ZTk5MzhmY2FlLzAvRUM5NzNCRTEzRUYzMjRFN0Q1OTA0NkNGNzY5MEEx MkY5REYxMjkzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF/Y1bLs7DLUReUepz7MVREFhrUIUWvoV4Zp U0bjcKFSxX9VmTAgcuF839Fd71mYQ7IeBXqK4NIUkxf9U1yoPaIZ1L3ZirmI/wSt iky1Gk7ahuqJWKmE4jh8kxuqT74Em1oJyuEnhZ81HkAW7Q+5m1RMT7G0eH05Q2ho gNAdfsroXnSLSY+GZhfFjSY5d8LHlEkCLMmb3UPNWvTt6tcOKBISJiNzS4ggiZzq hTxGx5HMAY8+hef59eDKLBD2SeuHgcpO7Veiy/r6cvtY+J4xXdQFUJr/yJcPAQhY blyicpYVz+EChufmiYREF3ncbEvH4Nsa5Jk6mDf5zFFhGIcg3zc= -----END CERTIFICATE-----Generated at Fri Apr 17 21:24:18 2026 by rpki-client