$ rpki-client -vvf rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.mft File: ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.mft (raw, json) Hash identifier: MLpFRskdwO5HYIFxGP1qsyDPAa7ZoIiwSJFgFpVq9Hs= Subject key identifier: 64:9A:4B:59:9B:D1:97:99:59:0C:8F:5D:24:74:93:D3:27:1F:88:1F Authority key identifier: EC:C7:A0:2E:2A:15:47:57:E3:DB:5D:E7:2B:90:DA:46:6F:43:0E:E3 Certificate issuer: /CN=ECC7A02E2A154757E3DB5DE72B90DA466F430EE3 Certificate serial: 03ED24AA065324F6C6E1B26BDD38944110D01BA7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 11:54:40 +0000 Manifest this update: Thu 23 Jul 2026 11:49:40 +0000 Manifest next update: Fri 24 Jul 2026 15:32:40 +0000 Files and hashes: 1: 3135372e31352e35312e302f32342d3234203d3e20313530343934.roa (hash: eXa5aSDdrCtqvVMG17UDbY8fW0WBNN3GZ2WD5zRuz9o=) 2: ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.crl (hash: +i6FfFuBiS/ueWJvl0FBt8D7+WpWdn0Gp6eSk0zCpLE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.crl rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 15:32:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:ed:24:aa:06:53:24:f6:c6:e1:b2:6b:dd:38:94:41:10:d0:1b:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ECC7A02E2A154757E3DB5DE72B90DA466F430EE3 Validity Not Before: Jul 23 11:49:40 2026 GMT Not After : Jul 24 15:32:40 2026 GMT Subject: CN=649A4B599BD19799590C8F5D247493D3271F881F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a8:70:17:2a:fc:cc:4d:8e:51:fb:c3:5a:10: 84:40:8a:d8:ea:4d:a4:94:75:6e:23:63:53:84:36: 1b:0d:93:ac:7e:78:0a:84:82:0f:47:f1:3d:bb:39: 17:f8:32:f7:ef:4a:1a:54:03:c7:13:be:8a:92:02: 82:40:64:b9:d8:7a:d7:04:2f:4f:f8:6d:fe:b2:14: 1c:81:3a:65:e4:be:d9:63:be:2d:2c:ea:ba:75:0c: c3:8b:84:0a:5b:90:00:fc:9a:d4:e7:e3:9a:00:e9: 96:44:b2:3c:2d:3b:d6:3f:fa:a4:32:cd:87:ff:ed: 2a:e4:f0:61:7b:28:8e:f0:a0:b4:f7:3f:34:9a:b1: 6a:58:2d:f0:ee:ce:49:52:05:eb:56:13:19:27:0d: 31:98:da:bf:9f:49:39:de:95:31:8b:d2:6e:0a:30: 25:ec:7c:24:4b:7f:24:93:0d:8d:d7:8d:75:71:4a: 86:96:1f:48:4e:2e:e3:a7:39:87:75:f9:cb:a8:31: 66:87:c7:64:ea:88:42:fb:72:3f:99:63:03:cb:38: 94:5f:47:e4:8d:e0:8d:1a:7b:24:3c:d1:15:02:9c: 37:bd:de:3b:e1:08:ca:14:e5:20:6d:28:59:17:62: 42:ab:4e:4c:ff:6b:ea:7d:47:40:e2:5f:b0:31:b7: db:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:9A:4B:59:9B:D1:97:99:59:0C:8F:5D:24:74:93:D3:27:1F:88:1F X509v3 Authority Key Identifier: keyid:EC:C7:A0:2E:2A:15:47:57:E3:DB:5D:E7:2B:90:DA:46:6F:43:0E:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:a8:91:07:ee:ef:14:da:95:0d:2b:7b:6a:c9:bf:0d:94:2a: 08:e5:f3:87:4a:83:1f:5f:f7:84:1b:54:22:ed:4c:e7:00:57: 24:57:96:d9:60:be:7f:8a:55:02:da:12:f6:05:6b:ae:8c:a3: 44:0f:ba:a0:6b:67:d2:8b:c0:06:6e:63:ef:00:7d:62:75:71: 0f:f1:ba:f8:fc:bb:89:e5:a5:3a:fe:20:c4:8a:9c:23:6d:31: bc:2d:3d:c4:fa:13:e4:38:b9:36:4c:b3:97:3c:b3:10:05:21: ca:07:18:b2:f5:bf:2a:05:7d:15:de:ac:7d:c5:4f:94:52:7b: 72:f5:64:79:0e:b2:86:b4:de:1a:49:8d:40:e8:ae:56:0a:5d: c2:52:4e:72:ae:63:c7:a2:75:d8:eb:c5:6f:e7:8c:05:2c:98: d3:e2:d3:4f:5f:26:f9:82:98:6c:2f:45:c1:9e:69:6c:8f:59: f3:d4:71:ed:2e:b1:5c:c7:ea:2b:e1:da:0d:d2:2f:87:01:9d: b7:a6:94:9d:6c:c1:96:37:c5:45:06:72:1f:bb:2d:da:56:01: 72:70:f3:e0:e0:84:e3:41:8f:e6:cb:9a:9e:74:6d:2f:2c:fa: 34:ea:a3:c8:b0:a7:19:da:1c:e5:21:7f:59:23:1f:f5:85:85: 50:ad:9a:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA+0kqgZTJPbG4bJr3TiUQRDQG6cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUNDN0EwMkUyQTE1NDc1N0UzREI1REU3MkI5MERBNDY2 RjQzMEVFMzAeFw0yNjA3MjMxMTQ5NDBaFw0yNjA3MjQxNTMyNDBaMDMxMTAvBgNV BAMTKDY0OUE0QjU5OUJEMTk3OTk1OTBDOEY1RDI0NzQ5M0QzMjcxRjg4MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXqHAXKvzMTY5R+8NaEIRAitjq TaSUdW4jY1OENhsNk6x+eAqEgg9H8T27ORf4MvfvShpUA8cTvoqSAoJAZLnYetcE L0/4bf6yFByBOmXkvtljvi0s6rp1DMOLhApbkAD8mtTn45oA6ZZEsjwtO9Y/+qQy zYf/7Srk8GF7KI7woLT3PzSasWpYLfDuzklSBetWExknDTGY2r+fSTnelTGL0m4K MCXsfCRLfySTDY3XjXVxSoaWH0hOLuOnOYd1+cuoMWaHx2TqiEL7cj+ZYwPLOJRf R+SN4I0aeyQ80RUCnDe93jvhCMoU5SBtKFkXYkKrTkz/a+p9R0DiX7Axt9u1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZJpLWZvRl5lZDI9dJHST0ycfiB8wHwYDVR0j BBgwFoAU7MegLioVR1fj213nK5DaRm9DDuMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGJiOGU2MTItN2JiMy00OGRlLTk2OWQtNzFiNDVmNDZhMTYxLzAvRUNDN0EwMkUy QTE1NDc1N0UzREI1REU3MkI5MERBNDY2RjQzMEVFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FQ0M3QTAyRTJBMTU0NzU3RTNEQjVERTcyQjkwREE0NjZGNDMw RUUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGJiOGU2MTItN2JiMy00OGRlLTk2 OWQtNzFiNDVmNDZhMTYxLzAvRUNDN0EwMkUyQTE1NDc1N0UzREI1REU3MkI5MERB NDY2RjQzMEVFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGyokQfu7xTalQ0re2rJvw2UKgjl84dKgx9f 94QbVCLtTOcAVyRXltlgvn+KVQLaEvYFa66Mo0QPuqBrZ9KLwAZuY+8AfWJ1cQ/x uvj8u4nlpTr+IMSKnCNtMbwtPcT6E+Q4uTZMs5c8sxAFIcoHGLL1vyoFfRXerH3F T5RSe3L1ZHkOsoa03hpJjUDorlYKXcJSTnKuY8eiddjrxW/njAUsmNPi009fJvmC mGwvRcGeaWyPWfPUce0usVzH6ivh2g3SL4cBnbemlJ1swZY3xUUGch+7LdpWAXJw 8+DghONBj+bLmp50bS8s+jTqo8iwpxnaHOUhf1kjH/WFhVCtmq4= -----END CERTIFICATE-----Generated at Fri Jul 24 02:47:47 2026 by rpki-client