$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.mft File: ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.mft (raw, json) Hash identifier: Am0MaYY2qKz+x4JMS4KCU6OKQqThvIA4jFCH1g1F84k= Subject key identifier: A9:C9:5C:D9:51:0C:41:A2:96:69:07:06:33:C0:BA:18:B6:5B:D7:5B Authority key identifier: EC:C7:A0:2E:2A:15:47:57:E3:DB:5D:E7:2B:90:DA:46:6F:43:0E:E3 Certificate issuer: /CN=ECC7A02E2A154757E3DB5DE72B90DA466F430EE3 Certificate serial: 5AAD56468B159787591F477E9109F415A9C27F32 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 09:32:31 +0000 Manifest this update: Thu 24 Sep 2026 09:27:31 +0000 Manifest next update: Fri 25 Sep 2026 11:26:31 +0000 Files and hashes: 1: 3135372e31352e35312e302f32342d3234203d3e20313530343934.roa (hash: eXa5aSDdrCtqvVMG17UDbY8fW0WBNN3GZ2WD5zRuz9o=) 2: ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.crl (hash: gRS9L8vnG1lWkghWlFPE4jC9TGtyYbE1zMo3obn6sDg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.crl rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 11:26:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:ad:56:46:8b:15:97:87:59:1f:47:7e:91:09:f4:15:a9:c2:7f:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ECC7A02E2A154757E3DB5DE72B90DA466F430EE3 Validity Not Before: Sep 24 09:27:31 2026 GMT Not After : Sep 25 11:26:31 2026 GMT Subject: CN=A9C95CD9510C41A29669070633C0BA18B65BD75B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:69:28:87:98:b3:40:72:f7:e8:38:26:8a:b3: b2:c9:a7:a6:ae:77:0f:7e:22:89:71:27:72:0e:6a: da:8a:25:85:24:74:06:10:ef:aa:3b:94:14:8e:e5: 95:8a:06:a3:3d:a2:c9:36:16:a2:53:82:dc:e0:ec: 0a:78:6e:3d:d2:49:03:5a:75:f7:24:f5:5a:38:44: 5e:dc:85:6c:44:3d:db:c0:61:55:07:83:69:da:20: ee:7d:3c:8e:e5:41:64:77:70:72:2c:6f:b5:02:e0: 40:35:2c:a0:03:1b:55:88:b5:18:aa:d9:6d:cc:ff: 75:de:54:c3:e5:9e:95:25:02:4a:75:e2:06:60:c1: 33:f2:18:ed:7c:56:84:eb:0b:ad:82:c5:4e:39:0e: 36:3c:5d:32:4e:f9:f3:22:6b:3b:25:a2:74:01:32: 91:8b:0c:30:52:e1:a9:66:f2:57:4b:76:c8:50:18: 66:b5:68:1a:aa:e4:61:34:11:c8:03:38:eb:0b:68: 97:f1:72:1e:9c:ec:06:a5:6e:2e:a1:29:fa:fa:f4: 26:53:01:28:9d:21:43:48:19:64:55:5c:2b:c5:13: 14:75:e9:50:ab:d4:3d:a4:cf:39:c7:01:b8:06:60: 07:c8:e0:c6:fb:8a:4f:5f:2f:48:6d:18:fe:7b:da: 1d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C9:5C:D9:51:0C:41:A2:96:69:07:06:33:C0:BA:18:B6:5B:D7:5B X509v3 Authority Key Identifier: keyid:EC:C7:A0:2E:2A:15:47:57:E3:DB:5D:E7:2B:90:DA:46:6F:43:0E:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:b2:8d:b9:9e:5b:01:d9:a2:6d:8b:cb:88:32:23:49:3e:82: ae:18:2c:a8:71:ac:46:35:12:5a:23:8b:80:d7:e4:f6:5b:9a: c4:e3:15:0d:59:8a:29:32:41:94:a7:53:d3:bd:60:44:12:31: 66:f4:75:df:c3:8d:74:23:aa:5c:30:9c:6b:38:ec:85:d6:9e: 21:df:be:1b:57:d2:fa:6d:82:05:32:a5:dc:96:a5:9b:a4:d4: 64:74:98:31:0f:e4:ad:ed:20:0c:55:f4:d7:fb:09:a3:ca:b3: 65:72:eb:9b:ba:07:c4:9c:a9:bf:da:75:38:74:db:34:e0:f2: 0e:be:c3:25:37:a0:ff:a0:da:cf:10:c6:f7:12:10:b8:22:64: 29:23:7e:b9:36:2a:67:cc:cc:ea:36:e4:ad:1c:e8:03:f8:1e: bd:ab:70:fd:42:ff:d3:8f:22:69:e4:03:31:43:82:36:21:84: 5d:e8:b0:4e:aa:84:1b:8b:c4:7b:5e:bc:53:70:b8:62:38:30: 0f:86:cf:f2:b7:14:15:ae:33:21:d3:83:9f:78:be:b6:a4:d4: 07:7a:4a:89:42:e0:8a:68:a5:1a:fe:ea:d9:b7:26:6a:45:b0: 92:4b:14:cf:c7:7e:9d:37:13:e0:4d:65:e7:5a:dd:a0:3e:d6: 06:fb:af:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWq1WRosVl4dZH0d+kQn0FanCfzIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUNDN0EwMkUyQTE1NDc1N0UzREI1REU3MkI5MERBNDY2 RjQzMEVFMzAeFw0yNjA5MjQwOTI3MzFaFw0yNjA5MjUxMTI2MzFaMDMxMTAvBgNV BAMTKEE5Qzk1Q0Q5NTEwQzQxQTI5NjY5MDcwNjMzQzBCQTE4QjY1QkQ3NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2aSiHmLNAcvfoOCaKs7LJp6au dw9+IolxJ3IOatqKJYUkdAYQ76o7lBSO5ZWKBqM9osk2FqJTgtzg7Ap4bj3SSQNa dfck9Vo4RF7chWxEPdvAYVUHg2naIO59PI7lQWR3cHIsb7UC4EA1LKADG1WItRiq 2W3M/3XeVMPlnpUlAkp14gZgwTPyGO18VoTrC62CxU45DjY8XTJO+fMiazslonQB MpGLDDBS4alm8ldLdshQGGa1aBqq5GE0EcgDOOsLaJfxch6c7Aalbi6hKfr69CZT ASidIUNIGWRVXCvFExR16VCr1D2kzznHAbgGYAfI4Mb7ik9fL0htGP572h2fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqclc2VEMQaKWaQcGM8C6GLZb11swHwYDVR0j BBgwFoAU7MegLioVR1fj213nK5DaRm9DDuMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGJiOGU2MTItN2JiMy00OGRlLTk2OWQtNzFiNDVmNDZhMTYxLzAvRUNDN0EwMkUy QTE1NDc1N0UzREI1REU3MkI5MERBNDY2RjQzMEVFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FQ0M3QTAyRTJBMTU0NzU3RTNEQjVERTcyQjkwREE0NjZGNDMw RUUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGJiOGU2MTItN2JiMy00OGRlLTk2 OWQtNzFiNDVmNDZhMTYxLzAvRUNDN0EwMkUyQTE1NDc1N0UzREI1REU3MkI5MERB NDY2RjQzMEVFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHmyjbmeWwHZom2Ly4gyI0k+gq4YLKhxrEY1 Eloji4DX5PZbmsTjFQ1ZiikyQZSnU9O9YEQSMWb0dd/DjXQjqlwwnGs47IXWniHf vhtX0vptggUypdyWpZuk1GR0mDEP5K3tIAxV9Nf7CaPKs2Vy65u6B8Scqb/adTh0 2zTg8g6+wyU3oP+g2s8QxvcSELgiZCkjfrk2KmfMzOo25K0c6AP4Hr2rcP1C/9OP ImnkAzFDgjYhhF3osE6qhBuLxHtevFNwuGI4MA+Gz/K3FBWuMyHTg594vrak1Ad6 SolC4IpopRr+6tm3JmpFsJJLFM/Hfp03E+BNZeda3aA+1gb7r2A= -----END CERTIFICATE-----Generated at Thu Sep 24 22:16:26 2026 by rpki-client