$ rpki-client -vvf repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft File: EC973BE13EF324E7D59046CF7690A12F9DF12932.mft (raw, json) Hash identifier: I1uV7x9PcwuCYtgNRC+X+gOdyAiRTsXpwp/Evva66QU= Subject key identifier: C1:90:7B:D0:1E:30:CA:F8:BC:55:11:59:E3:B7:A1:59:4C:63:C7:F4 Authority key identifier: EC:97:3B:E1:3E:F3:24:E7:D5:90:46:CF:76:90:A1:2F:9D:F1:29:32 Certificate issuer: /CN=EC973BE13EF324E7D59046CF7690A12F9DF12932 Certificate serial: 375C96DA046CF51B6474A431F654E7AAD808289C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft Manifest number: 02AB Signing time: Mon 20 Apr 2026 17:51:30 +0000 Manifest this update: Mon 20 Apr 2026 17:46:30 +0000 Manifest next update: Thu 23 Apr 2026 18:26:30 +0000 Files and hashes: 1: 3130332e3138312e37362e302f32342d3234203d3e20313439333739.roa (hash: 78fptN4YaRDrrzJqTXgZDDNS0EvYZ1w31k3WR6YTec8=) 2: EC973BE13EF324E7D59046CF7690A12F9DF12932.crl (hash: XktSpy0fFXFJju5J7mM92J6bTsY8dCK8BzhSTKN4Ffo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.crl rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:26:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:5c:96:da:04:6c:f5:1b:64:74:a4:31:f6:54:e7:aa:d8:08:28:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC973BE13EF324E7D59046CF7690A12F9DF12932 Validity Not Before: Apr 20 17:46:30 2026 GMT Not After : Apr 23 18:26:30 2026 GMT Subject: CN=C1907BD01E30CAF8BC551159E3B7A1594C63C7F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:bc:be:67:67:ee:b2:c3:f2:52:84:4d:3c:c5: 5f:2e:04:41:15:ce:9d:93:c1:21:72:04:57:7f:79: 1c:0e:4a:07:a2:57:95:1d:fa:09:c7:8d:97:8a:99: 7b:7d:16:50:c2:eb:63:85:c5:46:30:df:b1:38:c0: bb:fb:08:df:27:d3:72:64:de:14:b5:cf:cc:d0:0a: de:f0:5a:36:f3:81:63:67:33:3c:71:ea:6e:56:61: cd:01:55:bd:9a:4c:85:1f:60:ca:8a:76:de:20:80: 8e:75:4c:16:05:93:d5:2f:58:c2:2d:77:f8:80:07: a4:b4:71:f4:34:91:de:88:a9:5c:6a:0a:5b:7f:b2: 3a:cc:7d:3e:4c:e7:5d:37:de:70:ea:57:1a:b5:26: 1d:21:2d:46:aa:21:12:a6:9f:ef:7b:d5:e9:1a:01: cb:05:5d:33:92:e1:2f:40:2b:2d:02:92:f6:01:f6: f6:d1:72:e3:b2:9e:dc:c7:77:1d:28:03:4d:8b:0c: 50:a0:64:c3:6f:d1:5f:48:71:33:61:fc:fd:99:c5: c7:3a:44:fa:e1:12:8e:bf:27:fe:7b:83:04:3f:76: 0b:7b:3f:ce:17:f1:ac:7b:ae:b6:d4:c3:3e:84:81: f4:42:6d:71:17:4c:b9:de:03:86:0c:d0:aa:82:e2: d8:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:90:7B:D0:1E:30:CA:F8:BC:55:11:59:E3:B7:A1:59:4C:63:C7:F4 X509v3 Authority Key Identifier: keyid:EC:97:3B:E1:3E:F3:24:E7:D5:90:46:CF:76:90:A1:2F:9D:F1:29:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:6d:5b:de:6f:bf:87:57:d0:fd:3c:af:18:de:fc:89:df:30: fb:35:e9:6c:d2:d8:dc:01:81:90:d8:30:f3:1c:ef:dd:a1:67: da:c2:1c:5a:ef:3a:23:07:49:20:1b:1d:80:85:42:3c:df:88: 0a:58:2b:4f:30:d3:eb:14:d5:fe:a1:84:d4:80:12:3e:20:37: 91:a1:eb:b4:ea:f2:22:95:1c:27:df:74:b2:53:ba:7d:07:e9: 9f:29:fb:87:5d:03:7d:5a:a6:47:5e:b3:29:db:7d:97:e5:8f: aa:60:3c:a6:e3:fa:02:9d:2b:1b:a4:b1:4c:f2:e5:de:ef:08: 41:1a:fd:ee:01:a7:73:b0:93:24:cf:d8:2e:02:3c:1a:64:73: ca:0f:76:1b:a0:16:6b:50:d9:eb:41:cf:9a:3f:f8:98:8a:73: 12:ff:d9:27:ae:07:34:fe:af:32:f9:55:61:35:3a:14:12:98: 9d:f4:1a:d1:d2:7f:ca:f6:c2:73:d2:cf:0e:41:72:b3:8e:ce: 3f:b3:5d:54:ea:c7:cf:43:d3:dd:a9:3b:19:51:6c:1a:53:3a: e5:b6:cb:ba:ca:b6:5e:43:b7:0c:f7:46:22:8d:f6:57:6a:3d: 29:fc:36:20:f5:58:4e:c7:3e:29:43:f9:a6:b9:c3:ca:23:64: 0c:60:17:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN1yW2gRs9RtkdKQx9lTnqtgIKJwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5NzNCRTEzRUYzMjRFN0Q1OTA0NkNGNzY5MEExMkY5 REYxMjkzMjAeFw0yNjA0MjAxNzQ2MzBaFw0yNjA0MjMxODI2MzBaMDMxMTAvBgNV BAMTKEMxOTA3QkQwMUUzMENBRjhCQzU1MTE1OUUzQjdBMTU5NEM2M0M3RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkvL5nZ+6yw/JShE08xV8uBEEV zp2TwSFyBFd/eRwOSgeiV5Ud+gnHjZeKmXt9FlDC62OFxUYw37E4wLv7CN8n03Jk 3hS1z8zQCt7wWjbzgWNnMzxx6m5WYc0BVb2aTIUfYMqKdt4ggI51TBYFk9UvWMIt d/iAB6S0cfQ0kd6IqVxqClt/sjrMfT5M51033nDqVxq1Jh0hLUaqIRKmn+971eka AcsFXTOS4S9AKy0CkvYB9vbRcuOyntzHdx0oA02LDFCgZMNv0V9IcTNh/P2Zxcc6 RPrhEo6/J/57gwQ/dgt7P84X8ax7rrbUwz6EgfRCbXEXTLneA4YM0KqC4thpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwZB70B4wyvi8VRFZ47ehWUxjx/QwHwYDVR0j BBgwFoAU7Jc74T7zJOfVkEbPdpChL53xKTIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZTFjYmQ3OS04ZjI2LTRiMGUtOGIzYi1hYjllOTkzOGZjYWUvMC9FQzk3M0JFMTNF RjMyNEU3RDU5MDQ2Q0Y3NjkwQTEyRjlERjEyOTMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUM5NzNCRTEzRUYzMjRFN0Q1OTA0NkNGNzY5MEExMkY5REYx MjkzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmUxY2JkNzktOGYyNi00YjBlLThi M2ItYWI5ZTk5MzhmY2FlLzAvRUM5NzNCRTEzRUYzMjRFN0Q1OTA0NkNGNzY5MEEx MkY5REYxMjkzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACVtW95vv4dX0P08rxje/InfMPs16WzS2NwB gZDYMPMc792hZ9rCHFrvOiMHSSAbHYCFQjzfiApYK08w0+sU1f6hhNSAEj4gN5Gh 67Tq8iKVHCffdLJTun0H6Z8p+4ddA31apkdesynbfZflj6pgPKbj+gKdKxuksUzy 5d7vCEEa/e4Bp3OwkyTP2C4CPBpkc8oPdhugFmtQ2etBz5o/+JiKcxL/2SeuBzT+ rzL5VWE1OhQSmJ30GtHSf8r2wnPSzw5BcrOOzj+zXVTqx89D092pOxlRbBpTOuW2 y7rKtl5Dtwz3RiKN9ldqPSn8NiD1WE7HPilD+aa5w8ojZAxgF/w= -----END CERTIFICATE-----Generated at Wed Apr 22 07:25:33 2026 by rpki-client