$ rpki-client -vvf repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft File: ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft (raw, json) Hash identifier: qxfno796cMIKhzU/Zn2Dh/Hp7unDzGFenU12YMTrmW4= Subject key identifier: 48:09:4F:E1:14:32:C1:C0:F7:F5:76:7F:E9:B8:10:69:D4:FF:3B:56 Authority key identifier: ED:3C:E7:26:45:63:AD:B9:40:EA:FA:F4:BD:87:CD:CD:A9:1C:A1:5A Certificate issuer: /CN=ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A Certificate serial: 1C99FE37EE4E7D8C9439C8FBC24E1CB518B40D76 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft Manifest number: 025B Signing time: Sun 05 Apr 2026 02:01:23 +0000 Manifest this update: Sun 05 Apr 2026 01:56:23 +0000 Manifest next update: Wed 08 Apr 2026 10:23:23 +0000 Files and hashes: 1: 3130332e3133352e34382e302f32322d3234203d3e203338333230.roa (hash: lW1S43/pcoUgHysASo7Fj4hF5yGyOMccC2jRCS55KX8=) 2: ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.crl (hash: dpo48WcOjVl0/n9bbdU88i/fQQgxE0UkWEPlYPjh1AY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.crl rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 Apr 2026 10:23:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:99:fe:37:ee:4e:7d:8c:94:39:c8:fb:c2:4e:1c:b5:18:b4:0d:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A Validity Not Before: Apr 5 01:56:23 2026 GMT Not After : Apr 8 10:23:23 2026 GMT Subject: CN=48094FE11432C1C0F7F5767FE9B81069D4FF3B56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ca:b5:3a:bf:02:4f:7f:d6:24:ff:d7:36:ba: 10:7f:4b:17:36:e2:26:db:cf:d3:91:16:c7:9c:bc: bb:5b:e9:bb:72:be:6b:9d:b5:2e:96:12:b5:cd:dd: a7:c9:19:ec:eb:0b:92:5e:20:94:39:03:2a:7c:a1: 85:7c:62:5a:d3:0d:df:2a:94:c5:96:25:51:68:d3: 45:94:98:0f:85:92:b6:4f:63:d8:86:9e:1d:b4:78: 2a:b3:c2:f8:f9:ab:f8:77:65:e2:3a:bc:bf:49:40: 23:73:9e:66:3b:a5:44:90:4a:ee:2e:80:46:b9:4a: c9:aa:07:69:72:45:33:ee:b8:a1:c2:cd:90:35:7c: f4:3a:d2:49:af:bb:f4:72:95:a4:81:d7:84:42:36: 4c:ac:06:6f:72:35:8e:d3:be:e2:22:65:44:9b:38: 19:1d:8d:bc:3e:ef:fc:c7:49:a9:d0:70:b0:4e:fa: 35:4c:eb:8c:1c:30:74:1c:2d:8d:e8:bd:f5:57:85: 9a:2c:3a:41:c0:17:fc:46:7c:38:be:5a:a6:8d:8d: ee:7a:1a:6a:b6:b0:a8:ba:cb:4e:d1:b9:de:3b:59: f3:ad:1c:30:cd:05:d2:28:42:85:1f:25:1e:ed:a0: 5b:b5:5b:9d:f8:f1:7f:d2:0c:84:47:4e:32:14:9a: 60:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:09:4F:E1:14:32:C1:C0:F7:F5:76:7F:E9:B8:10:69:D4:FF:3B:56 X509v3 Authority Key Identifier: keyid:ED:3C:E7:26:45:63:AD:B9:40:EA:FA:F4:BD:87:CD:CD:A9:1C:A1:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:cc:74:4b:77:fb:e5:6e:fe:5e:5f:c4:42:2d:5f:be:85:5e: 7b:90:c3:5b:b9:c2:cd:1d:7e:ce:1f:04:7b:5d:97:22:02:e5: 02:4e:3e:2b:fc:13:1f:c7:0c:e4:28:d0:79:c8:8e:5c:e6:78: fc:51:6f:47:14:62:43:aa:19:80:8f:65:df:16:aa:5d:56:80: 19:91:6d:dc:49:81:da:95:d8:26:1b:4d:81:75:bd:8b:22:d7: 7c:80:08:45:9b:44:41:a3:69:f4:a7:14:25:ed:95:2e:88:2d: b2:d8:d7:0f:5a:aa:77:56:74:24:78:e1:58:55:ae:7a:e3:1f: fd:07:bd:6a:b8:c8:81:3b:bd:b8:20:14:73:87:65:88:6d:ea: c3:b4:25:d0:97:83:5e:14:91:b9:59:d5:fb:f1:d9:ce:59:77: 64:4d:d3:07:4d:14:19:78:70:df:7e:3e:60:ef:31:8f:29:14: 93:1b:84:53:b4:ff:3e:94:8a:d7:a4:86:ed:1c:b7:9f:36:f0: 49:e0:c6:02:da:16:46:6b:05:89:7e:0b:57:be:91:2b:57:54: 05:d5:c1:d0:c7:09:ff:b4:e6:2a:ff:b3:78:80:73:59:77:bd: dc:8e:12:16:75:74:70:a5:05:4b:2d:e3:7a:79:6b:81:83:76: 1e:80:ba:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHJn+N+5OfYyUOcj7wk4ctRi0DXYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQzQ0U3MjY0NTYzQURCOTQwRUFGQUY0QkQ4N0NEQ0RB OTFDQTE1QTAeFw0yNjA0MDUwMTU2MjNaFw0yNjA0MDgxMDIzMjNaMDMxMTAvBgNV BAMTKDQ4MDk0RkUxMTQzMkMxQzBGN0Y1NzY3RkU5QjgxMDY5RDRGRjNCNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChyrU6vwJPf9Yk/9c2uhB/Sxc2 4ibbz9ORFsecvLtb6btyvmudtS6WErXN3afJGezrC5JeIJQ5Ayp8oYV8YlrTDd8q lMWWJVFo00WUmA+FkrZPY9iGnh20eCqzwvj5q/h3ZeI6vL9JQCNznmY7pUSQSu4u gEa5SsmqB2lyRTPuuKHCzZA1fPQ60kmvu/RylaSB14RCNkysBm9yNY7TvuIiZUSb OBkdjbw+7/zHSanQcLBO+jVM64wcMHQcLY3ovfVXhZosOkHAF/xGfDi+WqaNje56 Gmq2sKi6y07Rud47WfOtHDDNBdIoQoUfJR7toFu1W5348X/SDIRHTjIUmmAZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSAlP4RQywcD39XZ/6bgQadT/O1YwHwYDVR0j BBgwFoAU7TznJkVjrblA6vr0vYfNzakcoVowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Y2NjMmFmNC1hNjJkLTQ3MDgtYjY4OC0xODkyNTk0YmE5ODkvMC9FRDNDRTcyNjQ1 NjNBREI5NDBFQUZBRjRCRDg3Q0RDREE5MUNBMTVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUQzQ0U3MjY0NTYzQURCOTQwRUFGQUY0QkQ4N0NEQ0RBOTFD QTE1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGNjYzJhZjQtYTYyZC00NzA4LWI2 ODgtMTg5MjU5NGJhOTg5LzAvRUQzQ0U3MjY0NTYzQURCOTQwRUFGQUY0QkQ4N0NE Q0RBOTFDQTE1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACvMdEt3++Vu/l5fxEItX76FXnuQw1u5ws0d fs4fBHtdlyIC5QJOPiv8Ex/HDOQo0HnIjlzmePxRb0cUYkOqGYCPZd8Wql1WgBmR bdxJgdqV2CYbTYF1vYsi13yACEWbREGjafSnFCXtlS6ILbLY1w9aqndWdCR44VhV rnrjH/0HvWq4yIE7vbggFHOHZYht6sO0JdCXg14UkblZ1fvx2c5Zd2RN0wdNFBl4 cN9+PmDvMY8pFJMbhFO0/z6Uitekhu0ct5828EngxgLaFkZrBYl+C1e+kStXVAXV wdDHCf+05ir/s3iAc1l3vdyOEhZ1dHClBUst43p5a4GDdh6AugM= -----END CERTIFICATE-----Generated at Mon Apr 6 14:54:51 2026 by rpki-client