$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/EC464ACDD6858B613E13B13344BB988E92418A08.mft File: EC464ACDD6858B613E13B13344BB988E92418A08.mft (raw, json) Hash identifier: OYk34cR5zwvrbvigoIxgGoQVMmE+anaU+XSeyhaKr2g= Subject key identifier: A3:11:D9:AF:44:AE:FE:33:A4:68:7E:40:0A:D0:E4:EE:8B:6F:F7:64 Authority key identifier: EC:46:4A:CD:D6:85:8B:61:3E:13:B1:33:44:BB:98:8E:92:41:8A:08 Certificate issuer: /CN=EC464ACDD6858B613E13B13344BB988E92418A08 Certificate serial: 45C4FC5AB08B6E2746414B6059FDD34A64C99F3C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC464ACDD6858B613E13B13344BB988E92418A08.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/EC464ACDD6858B613E13B13344BB988E92418A08.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 03:50:19 +0000 Manifest this update: Thu 24 Sep 2026 03:45:19 +0000 Manifest next update: Fri 25 Sep 2026 06:53:19 +0000 Files and hashes: 1: 323430343a353938303a3a2f33322d3332203d3e20313334363535.roa (hash: 6uEfVOnDlCA/pNIFT5bC9JCmVynI5FIoh7TLhoyhIys=) 2: 3230332e39362e3232382e302f32332d3234203d3e20313334363535.roa (hash: qct805YAJVrMqEwmp7GMGrHlEnZ8CXcTrUlU+oMYiDE=) 3: EC464ACDD6858B613E13B13344BB988E92418A08.crl (hash: 2QBIyQioKLAL3Pq7NwTGorm5XkOeAQ00oY2WfhaGRLI=) 4: 3130332e3234372e3231312e302f32342d3234203d3e20313334363535.roa (hash: 729mihHGdMx9/AKOob41I1TKRP4K3/svpHuBRoC4uAA=) 5: 3130332e3230392e3138342e302f32322d3234203d3e20313334363535.roa (hash: LvmXxn8tofzUOQD7Y8MBoEUbiMdg2W3vi+Y9WTB64Ck=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/EC464ACDD6858B613E13B13344BB988E92418A08.crl rsync://rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/EC464ACDD6858B613E13B13344BB988E92418A08.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC464ACDD6858B613E13B13344BB988E92418A08.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 06:53:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:c4:fc:5a:b0:8b:6e:27:46:41:4b:60:59:fd:d3:4a:64:c9:9f:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC464ACDD6858B613E13B13344BB988E92418A08 Validity Not Before: Sep 24 03:45:19 2026 GMT Not After : Sep 25 06:53:19 2026 GMT Subject: CN=A311D9AF44AEFE33A4687E400AD0E4EE8B6FF764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:56:ea:df:3a:6b:bd:4e:11:a6:99:e6:5a:68: b2:58:4f:c3:87:b8:07:20:9d:61:0f:6a:3c:3f:8f: 99:ae:6c:bb:c1:3a:c2:a2:ea:c4:96:91:ec:b6:f0: 60:b3:8e:0a:f4:b6:61:98:39:42:c0:76:eb:e7:3f: c6:86:01:26:95:3c:07:3e:64:e0:7b:8c:92:9e:b5: b6:c8:45:75:98:05:5d:57:61:5b:f6:5d:ff:8e:49: a3:7f:bd:5f:c0:e9:e4:a1:66:10:85:16:15:29:a8: ca:b2:99:32:ec:0d:2d:c5:7d:86:5d:3f:02:9c:68: af:14:51:c3:3a:0d:c7:f0:ea:c4:46:d1:f7:32:b5: 5f:85:3a:7a:2f:96:ad:34:e2:33:8e:81:23:06:ff: ea:84:ea:0f:18:a4:69:41:de:32:81:73:20:a7:20: 8a:5a:9c:20:ef:cc:80:e4:af:17:c4:ee:b8:40:68: 40:ca:e9:c4:4a:c6:f0:4f:52:6a:1d:be:d4:66:f5: 9f:18:24:eb:0d:f2:37:75:9f:d2:b4:d9:23:52:54: 7a:77:cb:f4:42:fd:17:9b:f3:b2:a2:7b:09:20:80: 8b:67:9d:73:86:ee:bc:57:ab:dd:61:95:66:dd:1e: d5:5b:4b:a6:9b:0c:4f:50:d4:16:bd:87:2b:3b:07: 49:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:11:D9:AF:44:AE:FE:33:A4:68:7E:40:0A:D0:E4:EE:8B:6F:F7:64 X509v3 Authority Key Identifier: keyid:EC:46:4A:CD:D6:85:8B:61:3E:13:B1:33:44:BB:98:8E:92:41:8A:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/EC464ACDD6858B613E13B13344BB988E92418A08.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC464ACDD6858B613E13B13344BB988E92418A08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/EC464ACDD6858B613E13B13344BB988E92418A08.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:b3:6b:2b:8a:6f:bb:c8:7f:25:79:52:71:ee:bd:4f:c8:dd: ff:ce:f0:e4:5e:a2:c7:c2:a5:9d:8d:5f:c8:db:e5:ab:61:87: d4:75:b8:ec:5b:34:d6:39:59:10:ad:02:10:9e:99:59:78:c2: 13:fc:9b:4f:95:0b:e7:02:05:f8:82:9c:e9:80:ed:24:fa:ec: 63:fd:cc:87:6e:ab:8e:f7:9b:9a:16:5b:52:d8:a1:f9:03:bf: 7f:56:ff:f2:55:77:53:ef:29:29:88:eb:7f:1d:d7:41:e7:c2: ab:4f:76:e5:6c:34:a5:6c:d6:ef:db:b4:36:45:c5:bc:58:5a: 19:0d:49:f5:81:67:35:44:d7:a8:d1:5a:fc:b9:25:42:41:bf: 2b:7a:7d:31:23:2f:9a:27:01:2b:9b:0d:c6:cb:b3:d7:59:29: 8c:b0:00:8f:a0:39:95:12:06:04:c4:99:3a:e1:dd:38:a7:48: 2a:2d:5d:5d:85:6b:3e:e7:9d:74:ea:c7:98:42:9a:87:ef:52: 57:15:28:ca:b6:2b:ef:55:1a:0c:5f:ee:4c:30:32:8e:05:6b: d6:59:05:1a:69:d7:f3:eb:2e:2f:e1:3d:bd:ba:94:3b:e9:95: a6:cb:c8:a4:f4:d6:7b:9c:5a:a4:10:99:d9:4f:30:d0:41:6c: b0:2a:bd:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURcT8WrCLbidGQUtgWf3TSmTJnzwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM0NjRBQ0RENjg1OEI2MTNFMTNCMTMzNDRCQjk4OEU5 MjQxOEEwODAeFw0yNjA5MjQwMzQ1MTlaFw0yNjA5MjUwNjUzMTlaMDMxMTAvBgNV BAMTKEEzMTFEOUFGNDRBRUZFMzNBNDY4N0U0MDBBRDBFNEVFOEI2RkY3NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvVurfOmu9ThGmmeZaaLJYT8OH uAcgnWEPajw/j5mubLvBOsKi6sSWkey28GCzjgr0tmGYOULAduvnP8aGASaVPAc+ ZOB7jJKetbbIRXWYBV1XYVv2Xf+OSaN/vV/A6eShZhCFFhUpqMqymTLsDS3FfYZd PwKcaK8UUcM6Dcfw6sRG0fcytV+FOnovlq004jOOgSMG/+qE6g8YpGlB3jKBcyCn IIpanCDvzIDkrxfE7rhAaEDK6cRKxvBPUmodvtRm9Z8YJOsN8jd1n9K02SNSVHp3 y/RC/Reb87KiewkggItnnXOG7rxXq91hlWbdHtVbS6abDE9Q1Ba9hys7B0mVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoxHZr0Su/jOkaH5ACtDk7otv92QwHwYDVR0j BBgwFoAU7EZKzdaFi2E+E7EzRLuYjpJBiggwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjkzOWRiZjEtMzA3NS00NTE5LWJhOTAtY2VlOGQzOTc5ZmNkLzAvRUM0NjRBQ0RE Njg1OEI2MTNFMTNCMTMzNDRCQjk4OEU5MjQxOEEwOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQzQ2NEFDREQ2ODU4QjYxM0UxM0IxMzM0NEJCOTg4RTkyNDE4 QTA4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjkzOWRiZjEtMzA3NS00NTE5LWJh OTAtY2VlOGQzOTc5ZmNkLzAvRUM0NjRBQ0RENjg1OEI2MTNFMTNCMTMzNDRCQjk4 OEU5MjQxOEEwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC+zayuKb7vIfyV5UnHuvU/I3f/O8OReosfC pZ2NX8jb5athh9R1uOxbNNY5WRCtAhCemVl4whP8m0+VC+cCBfiCnOmA7ST67GP9 zIduq473m5oWW1LYofkDv39W//JVd1PvKSmI638d10HnwqtPduVsNKVs1u/btDZF xbxYWhkNSfWBZzVE16jRWvy5JUJBvyt6fTEjL5onASubDcbLs9dZKYywAI+gOZUS BgTEmTrh3TinSCotXV2Faz7nnXTqx5hCmofvUlcVKMq2K+9VGgxf7kwwMo4Fa9ZZ BRpp1/PrLi/hPb26lDvplabLyKT01nucWqQQmdlPMNBBbLAqvQg= -----END CERTIFICATE-----Generated at Thu Sep 24 20:51:07 2026 by rpki-client