$ rpki-client -vvf repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft File: EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft (raw, json) Hash identifier: VZUTQ9mQtsCvXHAAi1Cjx/QHX0vruaWgDsKc1cRVkZI= Subject key identifier: DB:97:4F:A9:F0:7D:0E:C2:13:11:02:57:6E:BF:60:E1:C5:4F:5C:68 Authority key identifier: EE:2C:52:F7:BE:52:A0:EB:69:5A:54:9A:42:E7:01:EE:E7:E4:5D:68 Certificate issuer: /CN=EE2C52F7BE52A0EB695A549A42E701EEE7E45D68 Certificate serial: 641D22A66A799681E55E60E69A3D4F9CD01BFC0E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft Manifest number: 0229 Signing time: Wed 18 Mar 2026 22:40:52 +0000 Manifest this update: Wed 18 Mar 2026 22:35:52 +0000 Manifest next update: Sun 22 Mar 2026 06:20:52 +0000 Files and hashes: 1: 3130332e32302e38362e302f32332d3233203d3e2039333431.roa (hash: +RIRdxOQj98KpyUFzbwvH1+p1ELhEQk4ECMOCZ1qPKs=) 2: 3130332e32302e38372e302f32342d3234203d3e2039333431.roa (hash: AHcDCGLpSbw6Wx72m+rIylEXaACluMi2gVr+3VqfEGw=) 3: EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.crl (hash: cFNE7RgG5h2J8NDCzFcDvGZY56gLCZ1bHGLLhCHZC1k=) 4: 3130332e32302e38362e302f32342d3234203d3e2039333431.roa (hash: vQ/JQod4pjiK4qjkcMAE6/5YAgXsND0ZYI10hmKECPY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.crl rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 06:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:1d:22:a6:6a:79:96:81:e5:5e:60:e6:9a:3d:4f:9c:d0:1b:fc:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE2C52F7BE52A0EB695A549A42E701EEE7E45D68 Validity Not Before: Mar 18 22:35:52 2026 GMT Not After : Mar 22 06:20:52 2026 GMT Subject: CN=DB974FA9F07D0EC2131102576EBF60E1C54F5C68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:66:91:ed:e4:ed:c2:ee:5a:66:9f:11:c5:72: 84:65:07:9b:11:b6:ec:0c:f5:fe:1e:9d:b5:1d:3c: ef:7d:84:71:ea:d0:b1:fb:91:a6:81:32:1b:bb:29: f6:b7:5b:9a:57:db:b6:f8:87:5a:80:df:55:64:75: e4:06:d6:66:60:83:f2:9c:53:3e:82:68:dc:c9:ad: d9:e4:2e:51:ce:20:da:7a:6f:24:37:5a:16:34:08: 89:f7:0d:74:f3:32:5c:c1:da:6f:3b:4e:08:7b:2e: 3d:20:99:89:07:74:94:c9:db:3a:ee:29:2d:ab:f9: f7:05:dc:53:89:2f:30:8c:a9:43:8d:0c:51:29:0a: 38:56:7a:f4:2a:10:8c:ca:e9:72:b8:df:86:51:90: ef:33:f6:71:9f:82:5f:65:08:c6:77:22:75:91:29: 2d:5b:ad:0a:a2:af:6b:62:21:6a:90:23:3f:89:08: 12:99:3b:f8:09:e7:73:95:da:e3:6f:a0:52:58:88: a0:e1:3f:0e:08:ac:72:ff:e8:65:18:24:3b:3a:e9: 01:6b:3e:ac:34:9e:41:a2:fa:5f:89:ff:e0:ef:80: d0:25:d4:e9:36:47:e7:a1:46:05:11:d7:8b:26:3a: 3c:1e:8d:9b:bd:c2:ae:14:e7:f8:4c:36:87:3e:58: fa:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:97:4F:A9:F0:7D:0E:C2:13:11:02:57:6E:BF:60:E1:C5:4F:5C:68 X509v3 Authority Key Identifier: keyid:EE:2C:52:F7:BE:52:A0:EB:69:5A:54:9A:42:E7:01:EE:E7:E4:5D:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:82:15:21:fe:2e:d2:b4:4b:21:2c:ee:0b:a4:3d:86:ff:df: 9f:93:20:7e:36:f1:66:f5:72:02:23:5b:35:bd:f3:56:e4:2a: ea:6b:1b:fb:d6:d1:51:2c:06:d2:5d:ea:7a:31:d9:39:52:27: bc:13:57:f7:0c:8f:7c:24:21:6f:95:66:f8:50:f4:9f:26:a2: bb:52:52:48:f8:95:b8:6a:54:10:ab:3b:a5:09:94:d7:82:63: 65:62:b6:a7:41:f1:e8:0e:13:2b:93:cd:a5:45:14:41:f4:d3: aa:26:38:fe:15:27:df:84:2a:5f:1a:54:2e:97:00:2b:1b:cd: 5c:2e:f2:b7:7f:3b:76:1d:85:43:d8:ac:2e:39:13:50:ac:4c: d4:4e:39:ac:66:b1:78:4f:e0:85:13:e6:fd:8d:5a:99:6c:c3: 72:11:26:2e:4e:36:7c:80:6b:d9:ce:a1:9c:b1:20:86:2a:01: 2a:ab:72:fe:6c:eb:0c:86:cc:76:a2:9c:b9:d7:e4:68:99:db: 06:55:41:ea:6a:b1:54:80:9c:6c:67:d1:c4:3b:21:4e:e1:06: 59:97:fb:36:fa:72:ee:b0:4b:5f:f7:02:21:7f:56:e8:10:c4: 96:ca:47:db:b9:3b:be:fa:16:de:4d:65:79:25:7e:b5:bf:6b: 77:03:fc:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZB0ipmp5loHlXmDmmj1PnNAb/A4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUUyQzUyRjdCRTUyQTBFQjY5NUE1NDlBNDJFNzAxRUVF N0U0NUQ2ODAeFw0yNjAzMTgyMjM1NTJaFw0yNjAzMjIwNjIwNTJaMDMxMTAvBgNV BAMTKERCOTc0RkE5RjA3RDBFQzIxMzExMDI1NzZFQkY2MEUxQzU0RjVDNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDZpHt5O3C7lpmnxHFcoRlB5sR tuwM9f4enbUdPO99hHHq0LH7kaaBMhu7Kfa3W5pX27b4h1qA31VkdeQG1mZgg/Kc Uz6CaNzJrdnkLlHOINp6byQ3WhY0CIn3DXTzMlzB2m87Tgh7Lj0gmYkHdJTJ2zru KS2r+fcF3FOJLzCMqUONDFEpCjhWevQqEIzK6XK434ZRkO8z9nGfgl9lCMZ3InWR KS1brQqir2tiIWqQIz+JCBKZO/gJ53OV2uNvoFJYiKDhPw4IrHL/6GUYJDs66QFr Pqw0nkGi+l+J/+DvgNAl1Ok2R+ehRgUR14smOjwejZu9wq4U5/hMNoc+WPrTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU25dPqfB9DsITEQJXbr9g4cVPXGgwHwYDVR0j BBgwFoAU7ixS975SoOtpWlSaQucB7ufkXWgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWE0ODlhNi01NDg1LTQ4N2YtYjVkZC04ZjRlZGViNDZiY2IvMC9FRTJDNTJGN0JF NTJBMEVCNjk1QTU0OUE0MkU3MDFFRUU3RTQ1RDY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUUyQzUyRjdCRTUyQTBFQjY5NUE1NDlBNDJFNzAxRUVFN0U0 NUQ2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFhNDg5YTYtNTQ4NS00ODdmLWI1 ZGQtOGY0ZWRlYjQ2YmNiLzAvRUUyQzUyRjdCRTUyQTBFQjY5NUE1NDlBNDJFNzAx RUVFN0U0NUQ2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADCCFSH+LtK0SyEs7gukPYb/35+TIH428Wb1 cgIjWzW981bkKuprG/vW0VEsBtJd6nox2TlSJ7wTV/cMj3wkIW+VZvhQ9J8mortS Ukj4lbhqVBCrO6UJlNeCY2VitqdB8egOEyuTzaVFFEH006omOP4VJ9+EKl8aVC6X ACsbzVwu8rd/O3YdhUPYrC45E1CsTNROOaxmsXhP4IUT5v2NWplsw3IRJi5ONnyA a9nOoZyxIIYqASqrcv5s6wyGzHainLnX5GiZ2wZVQepqsVSAnGxn0cQ7IU7hBlmX +zb6cu6wS1/3AiF/VugQxJbKR9u5O776Ft5NZXklfrW/a3cD/FY= -----END CERTIFICATE-----Generated at Fri Mar 20 12:39:48 2026 by rpki-client