$ rpki-client -vvvf rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.mft File: ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.mft (raw, json) Hash identifier: btEQBjw544K4O+wnzyiDTuszXH5hIKYtK5qzKtmVnAM= Subject key identifier: 48:5C:1A:4F:DC:E2:9A:42:59:90:87:90:D3:C0:88:D8:0C:42:35:A0 Authority key identifier: EC:A0:04:7E:A8:E4:DC:E9:2E:BC:57:2E:E8:A1:1D:17:C6:B6:48:72 Certificate issuer: /CN=ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872 Certificate serial: 77FCA0F5F022630E61AE4B6D572BFE0D4647ECD7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.mft Manifest number: 0109 Signing time: Sat 14 Nov 2026 17:11:02 +0000 Manifest this update: Sat 14 Nov 2026 17:06:02 +0000 Manifest next update: Sun 15 Nov 2026 18:52:02 +0000 Files and hashes: 1: 3135372e36362e35392e302f32342d3234203d3e203633383633.roa (hash: xBh74co4G4oy4kEOH1+s92iqFVlcazWJc0LznYHJ110=) 2: 3135372e36362e35382e302f32342d3234203d3e203633383633.roa (hash: a6w3hGAhWsxMabz324Q4GA5dPuEuhj0nKmf3WW+KTCc=) 3: ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.crl (hash: T7JlCDfHnknbTzm0yNxCZiv/LmVxLnZh9xmLFaZ/w3I=) 4: 3135372e36362e35382e302f32332d3233203d3e203633383633.roa (hash: UIZ5WPv7k1hpGcTiFHJVpKxY08OSIOQ+IDxbkKabgJw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.crl rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 18:52:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:fc:a0:f5:f0:22:63:0e:61:ae:4b:6d:57:2b:fe:0d:46:47:ec:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872 Validity Not Before: Nov 14 17:06:02 2026 GMT Not After : Nov 15 18:52:02 2026 GMT Subject: CN=485C1A4FDCE29A4259908790D3C088D80C4235A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e5:dd:65:1b:55:91:b1:14:bd:4f:11:5c:e5: 7d:01:06:8f:6e:a5:83:1e:8d:71:05:30:bd:87:45: c2:4c:30:b0:73:5b:da:b9:05:2d:2c:23:32:9b:28: b9:b3:70:60:f6:ee:92:64:4f:08:d2:e6:97:d9:37: 7d:65:67:94:78:60:5c:1c:f4:71:64:eb:c3:be:cb: 1b:8f:71:15:6a:ac:ce:2c:cc:31:65:30:e8:2b:33: 89:b6:ea:8a:84:d9:f7:6e:83:ed:4e:9b:5c:9f:eb: 54:5a:d1:b6:97:0c:56:d3:07:4a:29:1a:cf:40:fb: ac:b7:52:2b:23:d3:0d:a7:3c:60:9c:a1:34:f9:19: 3e:ec:13:92:f9:72:65:2d:73:1d:5d:f3:8d:8b:8e: c4:a3:e5:45:ad:83:e3:57:d5:36:62:36:db:64:92: 91:3a:b0:f1:22:74:5f:45:53:e2:5c:96:c7:35:03: d4:95:3e:20:18:20:ae:f1:ef:9f:b7:e4:41:c4:82: b5:81:8f:16:e1:c2:84:f6:24:2d:89:5b:b0:2a:b9: cb:79:af:df:55:e2:b3:b3:19:00:68:4a:57:8f:96: a6:28:7f:1a:68:ca:f7:6a:29:f8:75:db:1c:64:06: d2:5d:c1:74:e4:c5:53:ce:c8:ca:5a:c6:00:6c:08: aa:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:5C:1A:4F:DC:E2:9A:42:59:90:87:90:D3:C0:88:D8:0C:42:35:A0 X509v3 Authority Key Identifier: keyid:EC:A0:04:7E:A8:E4:DC:E9:2E:BC:57:2E:E8:A1:1D:17:C6:B6:48:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:24:c0:e1:c2:f8:73:f8:53:ff:d2:9e:ff:c2:6b:63:be:26: 51:35:4c:de:d7:75:59:f4:90:77:bd:46:99:3a:7d:5f:e6:a3: c1:09:5f:9d:9e:79:d2:02:e9:38:c3:6c:18:66:35:b7:79:a5: ff:1e:32:a7:88:75:3c:e6:8b:ff:5c:0a:b8:7a:97:72:a9:87: 94:71:58:59:3d:96:33:d9:8f:f7:7e:96:5b:bb:c3:89:61:ef: 40:b5:6d:a8:a1:6b:5f:a3:18:ab:f0:cd:f8:22:63:a9:24:b3: 32:ea:b3:eb:97:75:4a:60:93:a4:c9:2f:c7:85:ac:35:28:d9: 10:63:c5:32:e6:8d:8b:57:6a:7c:ba:70:c6:81:08:cc:2e:c2: 8c:9e:5a:1d:38:a1:a6:c1:f0:8a:7a:32:fd:9e:e6:a9:91:91: ab:32:30:fd:f3:31:95:d4:eb:99:d3:af:80:3b:93:43:fd:2b: 9f:4f:8f:0f:ff:1c:e9:8c:df:2a:e2:f3:e1:16:f3:95:31:99: fb:06:3f:84:58:da:20:5e:a9:5e:20:5f:53:fd:02:aa:3b:79: 8c:97:9b:6a:97:da:5b:64:af:49:7a:1a:f2:b2:0c:cd:36:f9: 60:0f:41:25:81:8e:1e:64:a3:01:a6:68:b2:36:58:43:fe:22: e2:ca:86:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd/yg9fAiYw5hrkttVyv+DUZH7NcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUNBMDA0N0VBOEU0RENFOTJFQkM1NzJFRThBMTFEMTdD NkI2NDg3MjAeFw0yNjExMTQxNzA2MDJaFw0yNjExMTUxODUyMDJaMDMxMTAvBgNV BAMTKDQ4NUMxQTRGRENFMjlBNDI1OTkwODc5MEQzQzA4OEQ4MEM0MjM1QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv5d1lG1WRsRS9TxFc5X0BBo9u pYMejXEFML2HRcJMMLBzW9q5BS0sIzKbKLmzcGD27pJkTwjS5pfZN31lZ5R4YFwc 9HFk68O+yxuPcRVqrM4szDFlMOgrM4m26oqE2fdug+1Om1yf61Ra0baXDFbTB0op Gs9A+6y3Uisj0w2nPGCcoTT5GT7sE5L5cmUtcx1d842LjsSj5UWtg+NX1TZiNttk kpE6sPEidF9FU+Jclsc1A9SVPiAYIK7x75+35EHEgrWBjxbhwoT2JC2JW7Aquct5 r99V4rOzGQBoSlePlqYofxpoyvdqKfh12xxkBtJdwXTkxVPOyMpaxgBsCKrXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSFwaT9zimkJZkIeQ08CI2AxCNaAwHwYDVR0j BBgwFoAU7KAEfqjk3OkuvFcu6KEdF8a2SHIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDZiMDVmMzYtZTE3NC00ZGFkLWJjMmEtMDg5MjZjNWRkMDQ2LzAvRUNBMDA0N0VB OEU0RENFOTJFQkM1NzJFRThBMTFEMTdDNkI2NDg3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FQ0EwMDQ3RUE4RTREQ0U5MkVCQzU3MkVFOEExMUQxN0M2QjY0 ODcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDZiMDVmMzYtZTE3NC00ZGFkLWJj MmEtMDg5MjZjNWRkMDQ2LzAvRUNBMDA0N0VBOEU0RENFOTJFQkM1NzJFRThBMTFE MTdDNkI2NDg3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADIkwOHC+HP4U//Snv/Ca2O+JlE1TN7XdVn0 kHe9Rpk6fV/mo8EJX52eedIC6TjDbBhmNbd5pf8eMqeIdTzmi/9cCrh6l3Kph5Rx WFk9ljPZj/d+llu7w4lh70C1baiha1+jGKvwzfgiY6kkszLqs+uXdUpgk6TJL8eF rDUo2RBjxTLmjYtXany6cMaBCMwuwoyeWh04oabB8Ip6Mv2e5qmRkasyMP3zMZXU 65nTr4A7k0P9K59Pjw//HOmM3yri8+EW85UxmfsGP4RY2iBeqV4gX1P9Aqo7eYyX m2qX2ltkr0l6GvKyDM02+WAPQSWBjh5kowGmaLI2WEP+IuLKhk4= -----END CERTIFICATE-----Generated at Sun Nov 15 10:22:52 2026 by rpki-client