$ rpki-client -vvf repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft File: EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft (raw, json) Hash identifier: W4Mr3JxuCU4pYJNVIH84ah4ZQ+Wa1rd1kJWar/0IX1s= Subject key identifier: DB:BA:96:0E:DE:03:05:26:57:E9:7D:4C:B9:5C:AC:7F:FF:2A:5C:60 Authority key identifier: EE:C1:A7:BF:2D:95:D0:BA:FE:37:10:5E:4B:B1:BB:23:60:1D:D1:DB Certificate issuer: /CN=EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB Certificate serial: 5D69882344A206396E30579EA3072600DC1CA97A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft Manifest number: 0121 Signing time: Mon 20 Apr 2026 11:42:29 +0000 Manifest this update: Mon 20 Apr 2026 11:37:29 +0000 Manifest next update: Thu 23 Apr 2026 23:40:29 +0000 Files and hashes: 1: EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.crl (hash: cEe/RCh1jT0iIVcE4SuwhuQay3lIEZDroc0QxafZ+IA=) 2: 3136302e32352e34352e302f32342d3234203d3e20313533303639.roa (hash: pjrXRUj5r2IszWCXojX+FWGkandw2VMiyslpGWMGbUA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.crl rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 23:40:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:69:88:23:44:a2:06:39:6e:30:57:9e:a3:07:26:00:dc:1c:a9:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB Validity Not Before: Apr 20 11:37:29 2026 GMT Not After : Apr 23 23:40:29 2026 GMT Subject: CN=DBBA960EDE03052657E97D4CB95CAC7FFF2A5C60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:36:34:7f:87:f1:5c:09:3d:38:c1:77:cf:89: b8:16:b0:e4:6f:05:69:3c:e6:ae:63:e6:4e:68:3a: 37:e6:1f:65:91:b2:0f:5b:81:b7:70:99:ae:20:aa: 6f:26:5f:0b:33:34:1a:79:25:0e:be:b3:67:8e:48: df:bc:6d:ab:fc:22:22:f2:1b:10:9e:aa:68:c8:46: df:55:eb:4f:a3:cb:f5:41:2c:48:66:54:85:29:ff: 19:a7:65:66:08:e8:e4:7c:90:49:66:51:f7:c0:97: cb:3f:b4:e8:c4:db:c0:2f:08:4f:90:1e:da:7f:48: 37:67:97:dc:97:8e:4c:a9:1d:25:da:2e:9a:22:be: f2:d9:b9:41:f0:d3:46:70:8e:62:44:63:50:6e:ed: 5c:c7:e7:4c:42:a2:77:24:b9:85:bb:e2:6e:16:a6: a2:91:32:cf:95:cd:83:cc:23:10:a3:e3:22:6b:1f: 55:d1:c5:ce:91:25:32:04:d1:af:38:3a:73:d7:71: b6:ff:a1:d2:17:62:b7:83:95:30:d7:a9:df:0c:3f: fa:ca:00:ef:56:fc:07:63:ad:6b:f1:15:c9:cb:f9: f7:5c:48:bb:9d:61:e7:51:4c:0f:fb:ad:06:9b:f7: e8:16:a8:06:03:00:c2:ff:6c:fb:d3:da:af:0e:b7: 99:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:BA:96:0E:DE:03:05:26:57:E9:7D:4C:B9:5C:AC:7F:FF:2A:5C:60 X509v3 Authority Key Identifier: keyid:EE:C1:A7:BF:2D:95:D0:BA:FE:37:10:5E:4B:B1:BB:23:60:1D:D1:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:0a:76:c1:ba:82:4d:ea:8b:0b:0c:ad:d3:c8:18:cd:fc:a6: 1b:e9:0d:80:38:af:c2:d4:de:43:31:89:2c:73:27:88:bb:55: cf:fa:8f:c6:06:54:6e:0d:ac:1b:49:11:0c:e5:ec:ba:8f:0e: db:7f:c6:82:75:0f:ee:96:a1:5e:70:5d:4b:34:0c:d9:59:55: 96:f8:f4:80:80:dc:bb:53:22:13:f6:7f:b5:26:08:de:64:8f: 0b:1e:3e:09:f1:90:c5:9c:87:35:a4:3b:0b:ae:02:61:0f:e3: c4:47:71:6e:4d:00:fb:df:cc:d1:22:ed:4a:2c:3f:4b:81:6a: 51:27:77:22:50:da:11:5b:53:55:81:cd:7a:b8:1d:27:c8:73: af:e9:a6:ea:c8:3b:5e:0b:85:13:61:70:f0:47:e5:18:39:ff: 00:f5:91:c4:6e:48:f3:4f:ea:15:1b:18:60:7c:b2:b2:f0:58: 68:d8:c6:74:ba:eb:77:c7:a4:b1:7a:e3:1b:d3:dd:2b:ec:8c: 8f:7a:d7:b8:b7:53:61:67:de:1a:9c:e6:7d:f0:0d:6e:00:1e: 09:3a:a0:02:d1:4e:c2:84:08:f4:01:86:80:27:fe:4d:fc:2f: f2:33:f4:c9:66:fe:7d:dc:e5:8e:a8:cd:26:1f:b9:4e:aa:ef: 25:28:fb:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXWmII0SiBjluMFeeowcmANwcqXowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVDMUE3QkYyRDk1RDBCQUZFMzcxMDVFNEJCMUJCMjM2 MDFERDFEQjAeFw0yNjA0MjAxMTM3MjlaFw0yNjA0MjMyMzQwMjlaMDMxMTAvBgNV BAMTKERCQkE5NjBFREUwMzA1MjY1N0U5N0Q0Q0I5NUNBQzdGRkYyQTVDNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZNjR/h/FcCT04wXfPibgWsORv BWk85q5j5k5oOjfmH2WRsg9bgbdwma4gqm8mXwszNBp5JQ6+s2eOSN+8bav8IiLy GxCeqmjIRt9V60+jy/VBLEhmVIUp/xmnZWYI6OR8kElmUffAl8s/tOjE28AvCE+Q Htp/SDdnl9yXjkypHSXaLpoivvLZuUHw00ZwjmJEY1Bu7VzH50xConckuYW74m4W pqKRMs+VzYPMIxCj4yJrH1XRxc6RJTIE0a84OnPXcbb/odIXYreDlTDXqd8MP/rK AO9W/AdjrWvxFcnL+fdcSLudYedRTA/7rQab9+gWqAYDAML/bPvT2q8Ot5kVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU27qWDt4DBSZX6X1MuVysf/8qXGAwHwYDVR0j BBgwFoAU7sGnvy2V0Lr+NxBeS7G7I2Ad0dswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzY1NjFkNC0yM2M4LTRjOWItODkwZS00ZjI2MzJlNTJjOTcvMC9FRUMxQTdCRjJE OTVEMEJBRkUzNzEwNUU0QkIxQkIyMzYwMUREMURCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRUVDMUE3QkYyRDk1RDBCQUZFMzcxMDVFNEJCMUJCMjM2MDFE RDFEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjM2NTYxZDQtMjNjOC00YzliLTg5 MGUtNGYyNjMyZTUyYzk3LzAvRUVDMUE3QkYyRDk1RDBCQUZFMzcxMDVFNEJCMUJC MjM2MDFERDFEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMUKdsG6gk3qiwsMrdPIGM38phvpDYA4r8LU 3kMxiSxzJ4i7Vc/6j8YGVG4NrBtJEQzl7LqPDtt/xoJ1D+6WoV5wXUs0DNlZVZb4 9ICA3LtTIhP2f7UmCN5kjwsePgnxkMWchzWkOwuuAmEP48RHcW5NAPvfzNEi7Uos P0uBalEndyJQ2hFbU1WBzXq4HSfIc6/ppurIO14LhRNhcPBH5Rg5/wD1kcRuSPNP 6hUbGGB8srLwWGjYxnS663fHpLF64xvT3SvsjI9617i3U2Fn3hqc5n3wDW4AHgk6 oALRTsKECPQBhoAn/k38L/Iz9Mlm/n3c5Y6ozSYfuU6q7yUo+7o= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:23 2026 by rpki-client