$ rpki-client -vvf rpki-rsync.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.mft File: EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.mft (raw, json) Hash identifier: X/7/cMZdr30t6capQ1iI6EBIJ2WjKvWhdi+6Tm716y8= Subject key identifier: 50:55:DC:AE:0B:2C:AB:A2:38:4D:AF:03:91:55:EE:B7:07:EE:2B:01 Authority key identifier: EC:37:43:E1:96:2B:A6:6D:28:18:EC:E8:EA:B3:62:CE:14:FE:F9:BA Certificate issuer: /CN=EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA Certificate serial: 349B24F0E7EE2E39FE892D73D23414FA65ED8B00 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:01:45 +0000 Manifest this update: Tue 12 May 2026 16:56:45 +0000 Manifest next update: Wed 13 May 2026 17:18:45 +0000 Files and hashes: 1: 3130332e3137302e3139382e302f32342d3234203d3e20313530343634.roa (hash: bDEwNBU/hyb8sFiOR3/rIXRPkiHtGsgyi3R43KSze7M=) 2: EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.crl (hash: FuElR5Xw492V215Fj8nWivvarOigrR8ZhrNpFnTKnFA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.crl rsync://rpki-rsync.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:9b:24:f0:e7:ee:2e:39:fe:89:2d:73:d2:34:14:fa:65:ed:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA Validity Not Before: May 12 16:56:45 2026 GMT Not After : May 13 17:18:45 2026 GMT Subject: CN=5055DCAE0B2CABA2384DAF039155EEB707EE2B01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3e:1b:fb:30:5d:85:ff:5b:da:ff:65:89:f8: be:ee:e4:78:6b:cb:3f:3b:51:86:11:7f:9a:81:ff: 35:7c:f7:99:c5:b8:71:6b:01:70:3b:36:98:79:29: 1e:bc:24:e2:e4:9f:98:60:61:2b:5e:8c:b4:46:cd: 18:ce:2d:90:f2:50:55:e2:79:5d:a9:15:2a:73:78: 7c:50:48:41:c1:1e:01:b7:be:7f:d7:73:a9:97:e0: c5:1c:29:47:95:0f:97:0a:cd:5b:17:eb:1c:5f:1c: df:e6:fd:1c:e8:1f:11:ca:87:67:b4:e3:8a:38:5a: 4e:1a:b5:8a:68:01:2a:5f:f8:26:34:55:46:f2:5c: 4e:28:da:ad:ba:22:df:5e:a4:bc:32:8a:aa:af:96: 84:50:da:2c:5b:3a:4d:57:05:68:9e:15:85:1b:d9: 68:ff:6b:78:6c:c9:10:e4:d4:b6:c0:0b:83:15:ec: f2:d8:ee:d6:8d:de:b2:6b:e3:63:63:97:71:cb:bb: 26:0f:39:94:22:69:fe:d2:8a:b6:76:c6:9c:f6:65: f0:a8:3f:0d:bd:0f:cc:85:af:e9:72:0f:8f:4e:40: 7e:5a:96:75:e6:a3:ca:d2:e0:71:0d:67:f5:e0:c7: 0c:ed:9c:50:06:25:7f:af:4c:c6:18:14:16:86:97: 31:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:55:DC:AE:0B:2C:AB:A2:38:4D:AF:03:91:55:EE:B7:07:EE:2B:01 X509v3 Authority Key Identifier: keyid:EC:37:43:E1:96:2B:A6:6D:28:18:EC:E8:EA:B3:62:CE:14:FE:F9:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:59:c1:3b:82:bb:cc:9a:cf:94:5c:0c:5f:bf:d5:c8:f6:b3: b6:14:d4:18:f6:35:bb:00:3d:bf:fd:ca:6e:6d:4d:a8:63:b1: 78:a8:cc:7b:10:dd:64:52:37:20:56:29:47:d2:60:19:90:25: 1f:d0:04:ee:b5:5b:91:28:46:19:7b:27:53:c7:87:6b:5a:7d: dd:20:55:17:d8:f7:56:02:0f:15:5d:7f:53:9f:b0:7e:9a:9a: 00:12:fc:d4:ec:96:f7:0c:09:e5:02:86:95:00:f6:80:ff:c9: c0:e6:ef:c7:b4:f8:51:6e:09:27:93:1c:fd:3f:6c:e8:c5:a6: f1:3c:e0:3d:31:5e:cc:7c:f5:ad:ee:90:d3:0f:68:8e:6a:5e: b9:0c:cd:fb:fc:2e:7f:e2:c8:4a:db:66:55:11:00:37:eb:94: 92:7f:79:16:cb:d4:2e:60:68:d1:29:19:ce:7a:dd:2d:6f:fa: 39:de:c0:17:f6:36:31:f2:40:35:5c:a0:92:5b:8d:19:1c:a3: 8a:fe:f0:bb:5a:76:73:de:4a:c0:5c:cb:11:33:55:9d:f4:82: 0c:c2:62:ed:35:13:ec:24:b8:0f:55:6a:15:d3:1b:8d:17:f2: 3e:25:b8:b6:33:c4:51:5d:8f:bb:45:9d:f5:2e:b5:9b:e0:c8: e2:5a:2b:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNJsk8OfuLjn+iS1z0jQU+mXtiwAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUMzNzQzRTE5NjJCQTY2RDI4MThFQ0U4RUFCMzYyQ0Ux NEZFRjlCQTAeFw0yNjA1MTIxNjU2NDVaFw0yNjA1MTMxNzE4NDVaMDMxMTAvBgNV BAMTKDUwNTVEQ0FFMEIyQ0FCQTIzODREQUYwMzkxNTVFRUI3MDdFRTJCMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYPhv7MF2F/1va/2WJ+L7u5Hhr yz87UYYRf5qB/zV895nFuHFrAXA7Nph5KR68JOLkn5hgYStejLRGzRjOLZDyUFXi eV2pFSpzeHxQSEHBHgG3vn/Xc6mX4MUcKUeVD5cKzVsX6xxfHN/m/RzoHxHKh2e0 44o4Wk4atYpoASpf+CY0VUbyXE4o2q26It9epLwyiqqvloRQ2ixbOk1XBWieFYUb 2Wj/a3hsyRDk1LbAC4MV7PLY7taN3rJr42Njl3HLuyYPOZQiaf7SirZ2xpz2ZfCo Pw29D8yFr+lyD49OQH5alnXmo8rS4HENZ/XgxwztnFAGJX+vTMYYFBaGlzFzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUFXcrgssq6I4Ta8DkVXutwfuKwEwHwYDVR0j BBgwFoAU7DdD4ZYrpm0oGOzo6rNizhT++bowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzBkYTU4ODItYjgwNC00MTU0LTk1OWItNjMzNmIyNGUxOGIyLzAvRUMzNzQzRTE5 NjJCQTY2RDI4MThFQ0U4RUFCMzYyQ0UxNEZFRjlCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQzM3NDNFMTk2MkJBNjZEMjgxOEVDRThFQUIzNjJDRTE0RkVG OUJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzBkYTU4ODItYjgwNC00MTU0LTk1 OWItNjMzNmIyNGUxOGIyLzAvRUMzNzQzRTE5NjJCQTY2RDI4MThFQ0U4RUFCMzYy Q0UxNEZFRjlCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC9ZwTuCu8yaz5RcDF+/1cj2s7YU1Bj2NbsA Pb/9ym5tTahjsXiozHsQ3WRSNyBWKUfSYBmQJR/QBO61W5EoRhl7J1PHh2tafd0g VRfY91YCDxVdf1OfsH6amgAS/NTslvcMCeUChpUA9oD/ycDm78e0+FFuCSeTHP0/ bOjFpvE84D0xXsx89a3ukNMPaI5qXrkMzfv8Ln/iyErbZlURADfrlJJ/eRbL1C5g aNEpGc563S1v+jnewBf2NjHyQDVcoJJbjRkco4r+8LtadnPeSsBcyxEzVZ30ggzC Yu01E+wkuA9VahXTG40X8j4luLYzxFFdj7tFnfUutZvgyOJaK1U= -----END CERTIFICATE-----Generated at Tue May 12 22:19:42 2026 by rpki-client