$ rpki-client -vvf rpki-rsync.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.mft File: EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.mft (raw, json) Hash identifier: rvHhn7Hq/6GYfMjBwGTXOYzineogsi3YVj9/7IkPIC4= Subject key identifier: E9:B5:D8:D0:55:E8:AD:80:D2:E9:36:CF:FD:7A:39:21:87:F9:2E:B7 Authority key identifier: EC:37:43:E1:96:2B:A6:6D:28:18:EC:E8:EA:B3:62:CE:14:FE:F9:BA Certificate issuer: /CN=EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA Certificate serial: 73CA9F1C7102D376446B861D2F1832759513F5CE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 02:06:52 +0000 Manifest this update: Fri 24 Jul 2026 02:01:52 +0000 Manifest next update: Sat 25 Jul 2026 04:12:52 +0000 Files and hashes: 1: EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.crl (hash: +0aYWFgu2+HtskWN3BJqpwgnpcvT4gV3vngLv8c6QJk=) 2: 3130332e3137302e3139382e302f32342d3234203d3e20313530343634.roa (hash: bDEwNBU/hyb8sFiOR3/rIXRPkiHtGsgyi3R43KSze7M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.crl rsync://rpki-rsync.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:ca:9f:1c:71:02:d3:76:44:6b:86:1d:2f:18:32:75:95:13:f5:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA Validity Not Before: Jul 24 02:01:52 2026 GMT Not After : Jul 25 04:12:52 2026 GMT Subject: CN=E9B5D8D055E8AD80D2E936CFFD7A392187F92EB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:79:be:6f:1a:96:63:a0:b2:13:07:2b:c8:bd: dc:2b:e3:43:51:db:0c:34:81:f1:81:f2:22:f7:18: 19:da:9b:a3:9e:44:8b:c5:23:07:a5:ae:cc:96:41: 3f:8c:af:63:e3:cf:88:a7:17:32:a8:da:3d:4e:ae: e4:d1:71:27:6f:5e:38:20:d2:78:b6:3a:8d:01:d0: ca:14:36:75:44:0b:e0:54:11:db:f1:b3:9c:04:37: 12:0b:ba:51:9c:bd:9e:f1:83:4a:2b:73:f3:0c:b9: bd:ce:4c:83:d0:e0:fc:2a:c2:db:99:6d:58:a1:ad: 0e:e4:ab:e9:ba:15:57:42:75:0d:4e:c8:1c:33:28: d7:ab:8c:ba:12:0e:4e:4c:f8:42:b3:eb:97:fe:bd: 64:74:26:b0:7b:f6:84:3d:8d:d1:38:e2:e6:11:3f: 63:11:8c:8d:2b:aa:f4:48:da:2d:8f:b6:33:a8:af: f6:18:d2:51:8c:7c:1a:b1:b7:e0:88:59:10:30:cd: 3d:28:21:f6:17:47:62:2e:7e:d5:a3:a8:28:eb:a9: 95:5f:d6:74:9c:29:b2:41:3d:66:9e:b1:eb:b4:60: a3:17:77:5a:81:b4:e4:c4:d7:fc:ea:3a:9e:89:fa: 24:8f:73:ba:9b:df:9b:52:b3:f5:69:d8:c2:99:ac: da:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:B5:D8:D0:55:E8:AD:80:D2:E9:36:CF:FD:7A:39:21:87:F9:2E:B7 X509v3 Authority Key Identifier: keyid:EC:37:43:E1:96:2B:A6:6D:28:18:EC:E8:EA:B3:62:CE:14:FE:F9:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:92:c1:88:e0:47:a3:42:fe:8f:e3:ee:94:97:f1:48:16:18: 80:06:42:08:27:2c:79:44:02:a2:8c:72:74:29:28:05:10:6c: 76:10:61:84:45:8c:9a:ac:32:2d:2a:8b:fc:20:5a:d6:dd:bd: 91:01:74:8a:84:6d:ec:6c:de:0a:58:c1:e0:af:3d:18:f5:57: a3:d5:83:f7:68:6e:c2:37:02:6f:0d:65:b9:3d:a4:05:98:df: d3:1e:10:e1:62:06:f4:3f:01:a7:99:e2:19:e3:39:b9:d4:b5: 60:a4:9a:b2:48:c7:27:e3:fe:4b:80:1f:f9:08:a1:80:67:a4: 12:99:93:07:96:33:54:07:1a:4d:86:22:f0:ca:8d:bb:72:d6: 4b:79:f1:d0:ed:08:07:7e:ef:2f:a8:81:18:38:9a:54:3f:14: b1:19:e8:b9:5e:09:d5:a2:98:fa:1a:3c:65:77:74:3d:1c:5c: 1a:73:4f:ea:aa:b2:ba:7b:3e:6d:06:a5:72:de:46:7f:5c:4d: b8:05:fd:4c:e0:30:0c:0c:96:d2:7f:81:ed:b3:7a:16:35:99: ba:10:bd:14:86:ac:96:fa:a3:60:f1:2f:16:04:b1:9e:0e:e5: 5c:17:ab:3b:c6:36:3d:8f:65:11:12:a9:70:27:46:ea:74:65: 3c:16:f7:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc8qfHHEC03ZEa4YdLxgydZUT9c4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUMzNzQzRTE5NjJCQTY2RDI4MThFQ0U4RUFCMzYyQ0Ux NEZFRjlCQTAeFw0yNjA3MjQwMjAxNTJaFw0yNjA3MjUwNDEyNTJaMDMxMTAvBgNV BAMTKEU5QjVEOEQwNTVFOEFEODBEMkU5MzZDRkZEN0EzOTIxODdGOTJFQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCReb5vGpZjoLITByvIvdwr40NR 2ww0gfGB8iL3GBnam6OeRIvFIwelrsyWQT+Mr2Pjz4inFzKo2j1OruTRcSdvXjgg 0ni2Oo0B0MoUNnVEC+BUEdvxs5wENxILulGcvZ7xg0orc/MMub3OTIPQ4PwqwtuZ bVihrQ7kq+m6FVdCdQ1OyBwzKNerjLoSDk5M+EKz65f+vWR0JrB79oQ9jdE44uYR P2MRjI0rqvRI2i2PtjOor/YY0lGMfBqxt+CIWRAwzT0oIfYXR2IuftWjqCjrqZVf 1nScKbJBPWaeseu0YKMXd1qBtOTE1/zqOp6J+iSPc7qb35tSs/Vp2MKZrNq9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6bXY0FXorYDS6TbP/Xo5IYf5LrcwHwYDVR0j BBgwFoAU7DdD4ZYrpm0oGOzo6rNizhT++bowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzBkYTU4ODItYjgwNC00MTU0LTk1OWItNjMzNmIyNGUxOGIyLzAvRUMzNzQzRTE5 NjJCQTY2RDI4MThFQ0U4RUFCMzYyQ0UxNEZFRjlCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQzM3NDNFMTk2MkJBNjZEMjgxOEVDRThFQUIzNjJDRTE0RkVG OUJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzBkYTU4ODItYjgwNC00MTU0LTk1 OWItNjMzNmIyNGUxOGIyLzAvRUMzNzQzRTE5NjJCQTY2RDI4MThFQ0U4RUFCMzYy Q0UxNEZFRjlCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKeSwYjgR6NC/o/j7pSX8UgWGIAGQggnLHlE AqKMcnQpKAUQbHYQYYRFjJqsMi0qi/wgWtbdvZEBdIqEbexs3gpYweCvPRj1V6PV g/dobsI3Am8NZbk9pAWY39MeEOFiBvQ/AaeZ4hnjObnUtWCkmrJIxyfj/kuAH/kI oYBnpBKZkweWM1QHGk2GIvDKjbty1kt58dDtCAd+7y+ogRg4mlQ/FLEZ6LleCdWi mPoaPGV3dD0cXBpzT+qqsrp7Pm0GpXLeRn9cTbgF/UzgMAwMltJ/ge2zehY1mboQ vRSGrJb6o2DxLxYEsZ4O5VwXqzvGNj2PZRESqXAnRup0ZTwW97M= -----END CERTIFICATE-----Generated at Fri Jul 24 05:25:08 2026 by rpki-client