$ rpki-client -vvf rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.mft File: ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.mft (raw, json) Hash identifier: gVZf2OzA+rwkG/gFpWc5I1wi1XhMYFQgG18gTAele90= Subject key identifier: 84:A5:B7:92:C4:10:34:4F:97:83:8A:93:1D:1D:6C:0A:6C:2B:41:B6 Authority key identifier: EC:A0:04:7E:A8:E4:DC:E9:2E:BC:57:2E:E8:A1:1D:17:C6:B6:48:72 Certificate issuer: /CN=ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872 Certificate serial: 3F4AD0D27CF7B1F3895348D0B33AAF953228D328 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.mft Manifest number: 0F Signing time: Tue 12 May 2026 23:53:07 +0000 Manifest this update: Tue 12 May 2026 23:48:07 +0000 Manifest next update: Thu 14 May 2026 00:36:07 +0000 Files and hashes: 1: 3135372e36362e35382e302f32332d3233203d3e203633383633.roa (hash: UIZ5WPv7k1hpGcTiFHJVpKxY08OSIOQ+IDxbkKabgJw=) 2: ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.crl (hash: FtqpunFXQgpCbCe7H+SPz28AbKXKiWVaWodwUy9w1Gg=) 3: 3135372e36362e35392e302f32342d3234203d3e203633383633.roa (hash: xBh74co4G4oy4kEOH1+s92iqFVlcazWJc0LznYHJ110=) 4: 3135372e36362e35382e302f32342d3234203d3e203633383633.roa (hash: a6w3hGAhWsxMabz324Q4GA5dPuEuhj0nKmf3WW+KTCc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.crl rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:36:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:4a:d0:d2:7c:f7:b1:f3:89:53:48:d0:b3:3a:af:95:32:28:d3:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872 Validity Not Before: May 12 23:48:07 2026 GMT Not After : May 14 00:36:07 2026 GMT Subject: CN=84A5B792C410344F97838A931D1D6C0A6C2B41B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:75:3d:16:a0:90:f1:dd:07:1a:ac:b3:35:db: 12:a2:34:21:11:03:aa:bc:cb:f8:20:8b:fd:a6:d3: 2b:26:55:f6:a0:98:50:f2:55:ca:cc:3d:36:06:1d: 06:0c:97:a9:ac:79:a7:a4:f4:a1:a8:9d:43:01:22: c9:49:28:e5:a1:07:73:7d:00:37:af:5d:de:4f:29: 66:8d:e9:60:c7:aa:36:88:68:34:28:bb:6b:89:b1: de:0f:10:5b:15:2c:9a:2a:2c:d1:fa:af:f2:8c:70: dc:cc:32:ba:7d:50:0e:b2:f1:c8:ab:85:1a:4f:95: 01:ed:b3:7b:15:04:92:29:7f:ee:f9:80:25:44:47: 67:e1:5f:55:94:8a:1b:1e:07:fb:6c:56:56:5b:9f: e5:58:d3:06:ce:15:db:b6:8d:68:0b:9b:44:ce:3c: 46:25:bf:79:2c:98:35:29:1d:00:79:b0:1d:d9:2d: 1f:48:a8:7f:70:65:58:80:bf:ef:a7:fe:21:0d:98: c8:cd:40:fa:16:ca:6f:e6:75:6f:7b:f4:9a:dd:b8: 6d:b4:c8:31:f8:75:d3:a5:02:b8:02:0f:b3:6e:27: 98:b9:ee:ee:d3:02:30:cc:9d:f4:6c:52:dd:b0:33: 34:ff:d3:d1:5c:2e:fe:49:17:08:fe:e5:d3:f5:86: 9f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A5:B7:92:C4:10:34:4F:97:83:8A:93:1D:1D:6C:0A:6C:2B:41:B6 X509v3 Authority Key Identifier: keyid:EC:A0:04:7E:A8:E4:DC:E9:2E:BC:57:2E:E8:A1:1D:17:C6:B6:48:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:2e:79:28:b7:f4:bb:a7:08:79:7e:58:85:e6:8d:30:31:c8: aa:a7:e5:7d:2f:35:a1:e7:5b:ad:12:64:7f:f1:72:e9:dd:ea: 72:dd:cd:a8:2e:7e:53:8e:94:37:7c:2c:b8:1a:35:09:6c:53: 91:0c:ee:07:52:56:43:2d:27:63:49:9d:20:f9:bb:ff:d9:9f: a9:4b:3a:a3:87:3d:a1:b8:72:e2:16:87:02:dd:a0:5c:eb:56: e2:22:f8:75:f7:a0:f3:96:db:2c:8d:c9:1a:dd:43:4e:f6:82: 57:f0:3b:74:57:24:d4:93:15:a0:38:37:0f:7a:5a:1f:f5:74: 67:d8:7a:16:1c:38:4d:7f:90:13:db:d2:ac:fc:e0:cb:1b:48: 33:13:0d:ad:aa:9e:7a:e2:58:e8:f3:ad:45:d4:9f:c4:f9:79: a7:d8:07:bf:3a:d3:d3:1e:85:73:15:d3:84:5d:dc:ad:c0:2b: 3a:e8:29:92:68:af:66:a1:ec:a2:81:ac:2c:1c:54:7d:40:da: 76:c7:0d:82:8f:66:e0:79:53:75:25:10:aa:76:ff:0a:eb:98: f4:c9:91:e7:77:79:28:25:42:ca:99:58:1c:00:7c:70:e6:86: 21:36:d0:42:a7:f5:fd:b7:ac:e6:8a:a4:0b:14:cd:11:52:92: 90:5f:be:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP0rQ0nz3sfOJU0jQszqvlTIo0ygwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUNBMDA0N0VBOEU0RENFOTJFQkM1NzJFRThBMTFEMTdD NkI2NDg3MjAeFw0yNjA1MTIyMzQ4MDdaFw0yNjA1MTQwMDM2MDdaMDMxMTAvBgNV BAMTKDg0QTVCNzkyQzQxMDM0NEY5NzgzOEE5MzFEMUQ2QzBBNkMyQjQxQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKdT0WoJDx3QcarLM12xKiNCER A6q8y/ggi/2m0ysmVfagmFDyVcrMPTYGHQYMl6mseaek9KGonUMBIslJKOWhB3N9 ADevXd5PKWaN6WDHqjaIaDQou2uJsd4PEFsVLJoqLNH6r/KMcNzMMrp9UA6y8cir hRpPlQHts3sVBJIpf+75gCVER2fhX1WUihseB/tsVlZbn+VY0wbOFdu2jWgLm0TO PEYlv3ksmDUpHQB5sB3ZLR9IqH9wZViAv++n/iENmMjNQPoWym/mdW979JrduG20 yDH4ddOlArgCD7NuJ5i57u7TAjDMnfRsUt2wMzT/09FcLv5JFwj+5dP1hp+LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhKW3ksQQNE+Xg4qTHR1sCmwrQbYwHwYDVR0j BBgwFoAU7KAEfqjk3OkuvFcu6KEdF8a2SHIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDZiMDVmMzYtZTE3NC00ZGFkLWJjMmEtMDg5MjZjNWRkMDQ2LzAvRUNBMDA0N0VB OEU0RENFOTJFQkM1NzJFRThBMTFEMTdDNkI2NDg3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FQ0EwMDQ3RUE4RTREQ0U5MkVCQzU3MkVFOEExMUQxN0M2QjY0 ODcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDZiMDVmMzYtZTE3NC00ZGFkLWJj MmEtMDg5MjZjNWRkMDQ2LzAvRUNBMDA0N0VBOEU0RENFOTJFQkM1NzJFRThBMTFE MTdDNkI2NDg3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALQueSi39LunCHl+WIXmjTAxyKqn5X0vNaHn W60SZH/xcund6nLdzaguflOOlDd8LLgaNQlsU5EM7gdSVkMtJ2NJnSD5u//Zn6lL OqOHPaG4cuIWhwLdoFzrVuIi+HX3oPOW2yyNyRrdQ072glfwO3RXJNSTFaA4Nw96 Wh/1dGfYehYcOE1/kBPb0qz84MsbSDMTDa2qnnriWOjzrUXUn8T5eafYB78609Me hXMV04Rd3K3AKzroKZJor2ah7KKBrCwcVH1A2nbHDYKPZuB5U3UlEKp2/wrrmPTJ ked3eSglQsqZWBwAfHDmhiE20EKn9f23rOaKpAsUzRFSkpBfvtE= -----END CERTIFICATE-----Generated at Wed May 13 02:40:12 2026 by rpki-client