$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.mft File: ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.mft (raw, json) Hash identifier: 5Dut/WDlzpsQFP39z8pgBjMrLZZMwUzhQBFJv6qK0ow= Subject key identifier: 73:86:91:55:5B:36:B8:7A:2C:5C:AF:F4:6B:D8:59:43:AA:4F:68:B4 Authority key identifier: EC:C7:A0:2E:2A:15:47:57:E3:DB:5D:E7:2B:90:DA:46:6F:43:0E:E3 Certificate issuer: /CN=ECC7A02E2A154757E3DB5DE72B90DA466F430EE3 Certificate serial: 07D312B45BD113B277D7A1BC1BB8520285C59658 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 09:31:01 +0000 Manifest this update: Sun 15 Nov 2026 09:26:01 +0000 Manifest next update: Mon 16 Nov 2026 10:57:01 +0000 Files and hashes: 1: 3135372e31352e35312e302f32342d3234203d3e20313530343934.roa (hash: eXa5aSDdrCtqvVMG17UDbY8fW0WBNN3GZ2WD5zRuz9o=) 2: ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.crl (hash: EAOWxmAT2yM3paplAuEziliasAu7QqBDiVoj+TwrVVo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.crl rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:35:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:d3:12:b4:5b:d1:13:b2:77:d7:a1:bc:1b:b8:52:02:85:c5:96:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ECC7A02E2A154757E3DB5DE72B90DA466F430EE3 Validity Not Before: Nov 15 09:26:01 2026 GMT Not After : Nov 16 10:57:01 2026 GMT Subject: CN=738691555B36B87A2C5CAFF46BD85943AA4F68B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:14:b7:de:6c:46:6b:66:2c:f7:8e:1f:c8:6e: 5e:29:c4:6a:e6:9e:ed:1b:cb:48:e4:0b:2d:87:13: f0:92:8f:a8:e7:46:60:5e:82:cf:98:fd:3a:ee:91: 1f:e2:da:d7:53:cc:0e:c3:97:d9:9d:59:9a:5e:62: c7:e1:ad:12:12:48:48:05:1c:fe:1e:d8:71:8d:5a: 73:f3:bb:2a:e2:49:a3:55:57:37:2f:28:5a:1e:c5: 4d:35:08:7f:1e:32:31:ed:0b:1a:90:73:a9:16:82: 75:c4:eb:c7:95:e2:c4:80:bd:5b:83:37:c3:af:a2: df:be:1b:f4:8e:47:93:57:4a:f0:ea:27:56:e8:5a: 71:80:83:cb:14:95:7e:55:0f:76:0b:c3:51:55:11: af:36:6c:d6:c5:ac:75:ec:ff:52:72:63:9f:43:dd: 5f:4c:74:03:37:9a:c3:dc:8a:b8:37:86:dc:ae:d9: c0:ca:bb:ce:a8:6f:12:79:39:50:f5:17:0b:8a:a3: 00:85:84:c4:e9:3d:2e:0d:30:a0:b1:b8:be:d2:32: 01:5e:08:a2:aa:a8:20:92:81:5f:93:e5:6e:98:02: cf:67:4e:7f:75:37:18:b0:c4:a7:24:d9:5a:c0:14: 4d:fb:49:b0:29:60:80:72:80:30:3c:1b:d4:f1:31: e8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:86:91:55:5B:36:B8:7A:2C:5C:AF:F4:6B:D8:59:43:AA:4F:68:B4 X509v3 Authority Key Identifier: keyid:EC:C7:A0:2E:2A:15:47:57:E3:DB:5D:E7:2B:90:DA:46:6F:43:0E:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:70:cb:f8:87:9b:c9:fa:9c:a7:c7:b3:da:ca:a9:02:27:bc: a2:36:65:a8:43:eb:d6:2c:93:bf:66:b7:a9:11:af:22:bb:68: 89:54:57:30:08:80:a4:c4:4b:18:74:6f:41:04:31:89:42:e1: 49:f1:85:37:da:c8:d4:36:12:40:6c:19:c6:70:1c:b1:5a:22: bd:9b:e7:7d:22:cc:8a:11:b0:06:3e:10:f0:a4:df:7b:52:94: 90:73:8a:d6:e1:45:a0:dd:e1:e5:1d:7c:f0:e8:84:e8:31:a7: c2:8e:47:e6:e6:8a:35:32:f1:a9:ab:e2:26:ae:93:36:04:c6: 09:e0:7c:cb:a4:db:5b:87:4b:4c:4c:d2:f5:d5:d1:7f:16:0c: ea:19:5f:4d:d4:36:89:d6:8f:23:ce:8a:fa:97:d6:bf:e4:9d: c9:32:71:25:86:bc:95:19:4c:86:70:ed:4c:81:5d:7e:98:5f: 70:80:4c:61:c8:05:40:05:da:8b:b0:81:bc:92:37:fd:99:84: c0:8c:ed:e2:31:91:20:52:51:f9:2f:a9:85:77:3e:b5:dc:87: 6b:79:59:ac:d2:b0:60:30:e0:d1:a9:68:35:8c:28:e9:21:ac: c3:90:5e:91:58:68:83:a8:57:b5:3d:2f:07:97:ce:75:8f:57: 8c:c9:13:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB9MStFvRE7J316G8G7hSAoXFllgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUNDN0EwMkUyQTE1NDc1N0UzREI1REU3MkI5MERBNDY2 RjQzMEVFMzAeFw0yNjExMTUwOTI2MDFaFw0yNjExMTYxMDU3MDFaMDMxMTAvBgNV BAMTKDczODY5MTU1NUIzNkI4N0EyQzVDQUZGNDZCRDg1OTQzQUE0RjY4QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXFLfebEZrZiz3jh/Ibl4pxGrm nu0by0jkCy2HE/CSj6jnRmBegs+Y/TrukR/i2tdTzA7Dl9mdWZpeYsfhrRISSEgF HP4e2HGNWnPzuyriSaNVVzcvKFoexU01CH8eMjHtCxqQc6kWgnXE68eV4sSAvVuD N8Ovot++G/SOR5NXSvDqJ1boWnGAg8sUlX5VD3YLw1FVEa82bNbFrHXs/1JyY59D 3V9MdAM3msPcirg3htyu2cDKu86obxJ5OVD1FwuKowCFhMTpPS4NMKCxuL7SMgFe CKKqqCCSgV+T5W6YAs9nTn91NxiwxKck2VrAFE37SbApYIBygDA8G9TxMejPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc4aRVVs2uHosXK/0a9hZQ6pPaLQwHwYDVR0j BBgwFoAU7MegLioVR1fj213nK5DaRm9DDuMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGJiOGU2MTItN2JiMy00OGRlLTk2OWQtNzFiNDVmNDZhMTYxLzAvRUNDN0EwMkUy QTE1NDc1N0UzREI1REU3MkI5MERBNDY2RjQzMEVFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FQ0M3QTAyRTJBMTU0NzU3RTNEQjVERTcyQjkwREE0NjZGNDMw RUUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGJiOGU2MTItN2JiMy00OGRlLTk2 OWQtNzFiNDVmNDZhMTYxLzAvRUNDN0EwMkUyQTE1NDc1N0UzREI1REU3MkI5MERB NDY2RjQzMEVFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADFwy/iHm8n6nKfHs9rKqQInvKI2ZahD69Ys k79mt6kRryK7aIlUVzAIgKTESxh0b0EEMYlC4UnxhTfayNQ2EkBsGcZwHLFaIr2b 530izIoRsAY+EPCk33tSlJBzitbhRaDd4eUdfPDohOgxp8KOR+bmijUy8amr4iau kzYExgngfMuk21uHS0xM0vXV0X8WDOoZX03UNonWjyPOivqX1r/knckycSWGvJUZ TIZw7UyBXX6YX3CATGHIBUAF2ouwgbySN/2ZhMCM7eIxkSBSUfkvqYV3PrXch2t5 WazSsGAw4NGpaDWMKOkhrMOQXpFYaIOoV7U9LweXznWPV4zJE+I= -----END CERTIFICATE-----Generated at Sun Nov 15 12:20:31 2026 by rpki-client