$ rpki-client -vvf repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft File: EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft (raw, json) Hash identifier: bUYN4oVu69NKRbHLr5KVFXrFaL0JSlX/gG1YIwHQmGM= Subject key identifier: 5D:A5:51:2A:F9:9E:EF:3B:A9:06:7D:C9:47:32:22:3A:F2:39:C7:E7 Authority key identifier: EE:72:DE:38:4F:9A:B7:FA:D6:C3:B2:86:3A:5D:B1:28:1E:5E:DC:A1 Certificate issuer: /CN=EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1 Certificate serial: 43DF67EF642AD70DBC0D3B0A82470AFA8FF417BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft Manifest number: 017C Signing time: Thu 19 Mar 2026 07:40:46 +0000 Manifest this update: Thu 19 Mar 2026 07:35:46 +0000 Manifest next update: Sun 22 Mar 2026 18:18:46 +0000 Files and hashes: 1: EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.crl (hash: s8czGjrl5WbUiiR3pI4f94jJ0EN5g9t0GYetlLTW/xs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.crl rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 09:37:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:df:67:ef:64:2a:d7:0d:bc:0d:3b:0a:82:47:0a:fa:8f:f4:17:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1 Validity Not Before: Mar 19 07:35:46 2026 GMT Not After : Mar 22 18:18:46 2026 GMT Subject: CN=5DA5512AF99EEF3BA9067DC94732223AF239C7E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2a:28:9e:51:00:d8:e2:c9:75:1a:c9:e4:c7: 65:a8:ab:20:e1:a4:2e:fa:d6:17:09:bb:01:ff:15: 45:2d:8d:48:55:f8:dd:b5:80:56:da:60:5c:67:d1: 77:c4:b2:57:20:86:e4:62:54:d8:2c:5c:58:32:e2: cb:f1:8c:75:ec:fe:b5:95:64:a9:96:8e:e1:d2:e2: 56:ff:d4:06:cf:13:df:29:9f:df:ad:e6:36:fd:75: ed:95:2e:5c:ad:75:de:cf:3b:6e:04:9e:02:46:f6: 3c:87:8a:4b:ff:b0:77:3b:c4:04:40:0d:36:7c:5b: 64:2a:20:f0:fb:61:ce:b1:61:67:ea:a1:bd:22:7b: 7d:1d:1e:60:a4:5f:9f:f3:3f:4a:43:59:fb:54:b8: 7c:e2:92:71:cf:c5:28:78:a6:e3:63:38:f9:5b:d9: 60:4a:43:7a:f7:51:ff:17:39:29:32:bc:96:bf:1a: 32:58:be:8b:25:72:4b:09:c1:6b:f7:69:1e:e1:4d: 69:82:07:3d:ec:61:8c:24:d7:f9:7d:2e:5b:24:0a: d9:ea:e5:d9:8f:46:64:5d:2d:78:e4:1d:be:ea:0e: 2c:8c:04:c7:b2:a7:49:2a:23:12:cd:bc:f9:0c:bd: fd:73:0d:1b:12:7b:c8:2e:09:a8:eb:fd:8e:54:16: 56:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A5:51:2A:F9:9E:EF:3B:A9:06:7D:C9:47:32:22:3A:F2:39:C7:E7 X509v3 Authority Key Identifier: keyid:EE:72:DE:38:4F:9A:B7:FA:D6:C3:B2:86:3A:5D:B1:28:1E:5E:DC:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:48:b4:c0:a3:b7:13:94:fa:29:da:21:64:f1:08:2e:62:27: 95:e2:d5:1b:32:e1:7c:92:86:78:15:de:74:02:24:ed:45:ce: 31:6a:8e:9d:af:3f:9a:42:c1:ce:a5:b1:ce:3a:5e:b5:74:f4: b0:51:aa:f0:2a:6d:6f:d4:46:e9:7d:87:29:20:72:22:74:69: f7:97:d0:fd:32:b7:ac:a6:1f:f4:1a:b8:06:58:70:3f:fd:c5: 7d:97:20:03:e2:3b:c9:9a:74:a0:97:1b:4c:19:f2:6d:ae:2a: 67:17:4d:74:d0:ed:46:20:0c:ab:7b:19:af:e9:07:e0:40:c6: 1c:28:e6:b7:4b:a2:c7:21:5f:f6:22:37:ed:ec:1b:c1:a0:15: c9:8f:be:dd:b6:21:72:fd:e5:2d:5b:b3:9b:2f:55:f9:e6:f5: 12:9c:ea:ae:15:7b:c3:92:5c:57:99:2b:64:f1:c9:a1:85:52: 49:41:f7:d7:ab:98:b7:d5:ad:45:52:f3:3c:f7:cd:56:f6:00: 4f:38:2e:ca:b3:62:92:70:ac:51:e7:59:fd:c0:43:55:d9:a9: 14:84:f7:c5:19:94:9b:3a:a1:f8:8c:df:e0:2f:33:a3:37:59: ae:1c:de:76:58:e1:a3:0a:eb:7e:40:af:7f:77:33:05:57:ab: 5a:7b:dd:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ99n72Qq1w28DTsKgkcK+o/0F70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU3MkRFMzg0RjlBQjdGQUQ2QzNCMjg2M0E1REIxMjgx RTVFRENBMTAeFw0yNjAzMTkwNzM1NDZaFw0yNjAzMjIxODE4NDZaMDMxMTAvBgNV BAMTKDVEQTU1MTJBRjk5RUVGM0JBOTA2N0RDOTQ3MzIyMjNBRjIzOUM3RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiKiieUQDY4sl1Gsnkx2WoqyDh pC761hcJuwH/FUUtjUhV+N21gFbaYFxn0XfEslcghuRiVNgsXFgy4svxjHXs/rWV ZKmWjuHS4lb/1AbPE98pn9+t5jb9de2VLlytdd7PO24EngJG9jyHikv/sHc7xARA DTZ8W2QqIPD7Yc6xYWfqob0ie30dHmCkX5/zP0pDWftUuHziknHPxSh4puNjOPlb 2WBKQ3r3Uf8XOSkyvJa/GjJYvoslcksJwWv3aR7hTWmCBz3sYYwk1/l9LlskCtnq 5dmPRmRdLXjkHb7qDiyMBMeyp0kqIxLNvPkMvf1zDRsSe8guCajr/Y5UFlb9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXaVRKvme7zupBn3JRzIiOvI5x+cwHwYDVR0j BBgwFoAU7nLeOE+at/rWw7KGOl2xKB5e3KEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NTdlNjg3OC02Y2IyLTRhNWYtYjU1My1iY2ViMmM5NWM3NmMvMC9FRTcyREUzODRG OUFCN0ZBRDZDM0IyODYzQTVEQjEyODFFNUVEQ0ExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUU3MkRFMzg0RjlBQjdGQUQ2QzNCMjg2M0E1REIxMjgxRTVF RENBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzU3ZTY4NzgtNmNiMi00YTVmLWI1 NTMtYmNlYjJjOTVjNzZjLzAvRUU3MkRFMzg0RjlBQjdGQUQ2QzNCMjg2M0E1REIx MjgxRTVFRENBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJRItMCjtxOU+inaIWTxCC5iJ5Xi1Rsy4XyS hngV3nQCJO1FzjFqjp2vP5pCwc6lsc46XrV09LBRqvAqbW/URul9hykgciJ0afeX 0P0yt6ymH/QauAZYcD/9xX2XIAPiO8madKCXG0wZ8m2uKmcXTXTQ7UYgDKt7Ga/p B+BAxhwo5rdLoschX/YiN+3sG8GgFcmPvt22IXL95S1bs5svVfnm9RKc6q4Ve8OS XFeZK2TxyaGFUklB99ermLfVrUVS8zz3zVb2AE84LsqzYpJwrFHnWf3AQ1XZqRSE 98UZlJs6ofiM3+AvM6M3Wa4c3nZY4aMK635Ar393MwVXq1p73c0= -----END CERTIFICATE-----Generated at Thu Mar 19 09:40:05 2026 by rpki-client