$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft File: EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft (raw, json) Hash identifier: UhSF0F9BHi1Xc+wrg0rBUHEEyqhaw+idfpZCSf5nfEI= Subject key identifier: A7:7C:6F:9C:6D:6F:91:09:00:BF:B1:80:48:72:69:DD:9D:DE:34:6E Authority key identifier: EC:5A:E3:6D:AF:9B:DD:77:E6:23:FC:7C:7F:5A:8A:0F:67:FD:71:6F Certificate issuer: /CN=EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F Certificate serial: 166629CBC7CB912B46085232DC8830B1DA8959AC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft Manifest number: 0105 Signing time: Sat 14 Nov 2026 04:14:37 +0000 Manifest this update: Sat 14 Nov 2026 04:09:37 +0000 Manifest next update: Sun 15 Nov 2026 07:35:37 +0000 Files and hashes: 1: 3136302e32322e3139392e302f32342d3234203d3e20313532383336.roa (hash: a0teJ5lq1xBgiI5mA8EcJ42YaSmlhBF26ShVqEb+s/8=) 2: 3136302e32322e3139382e302f32342d3234203d3e20313532383336.roa (hash: 4hzEJ9YbAF9buAExFLN+RTSrGCyc9GGfXKqoc6rWOKY=) 3: 3136302e32322e3139382e302f32332d3233203d3e20313532383336.roa (hash: NyaKnWNdcDfhRDv5OOV0uHnlXww5Tu4WFH6FM+NsLLc=) 4: EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.crl (hash: 2tI/okpT3YFIT8z81P1CNy6f1QlNw5IMegGRPlbkeGw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.crl rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 07:35:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:66:29:cb:c7:cb:91:2b:46:08:52:32:dc:88:30:b1:da:89:59:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F Validity Not Before: Nov 14 04:09:37 2026 GMT Not After : Nov 15 07:35:37 2026 GMT Subject: CN=A77C6F9C6D6F910900BFB180487269DD9DDE346E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5e:47:9a:f7:ba:fe:f8:f0:f9:69:20:97:9d: 38:f1:19:da:b8:7b:29:98:7d:0d:c0:8b:31:39:29: e8:47:36:dd:09:b6:84:64:16:00:99:80:23:6b:78: dc:32:dc:0b:38:9e:81:5c:69:21:c5:d9:8d:7e:f3: 5b:aa:03:6d:ca:78:03:7a:f6:82:3b:78:00:64:74: a7:a3:68:de:67:04:09:cd:5a:c3:b7:a9:84:41:b3: f6:fc:c4:e9:13:eb:f0:69:1e:69:67:bc:da:5c:85: e9:18:ba:bc:a0:67:1b:3f:91:dd:3d:c4:4f:92:85: 01:7b:8d:e7:a7:32:2d:2c:08:e1:17:45:f3:54:dc: 46:af:54:a8:29:21:e6:f8:e5:76:fe:47:08:41:b1: 03:93:5b:39:61:69:bc:35:73:5f:f5:7c:62:e6:fb: f2:c3:b6:a3:f0:84:ec:29:d7:ff:9d:57:1e:56:15: 77:95:c6:fe:11:da:52:0d:1c:f9:11:d5:7c:91:e4: 84:8c:1b:c8:46:6f:39:eb:fe:3f:1c:87:c7:5d:a1: 90:ca:9f:42:52:6d:4f:a0:06:89:ed:b4:21:2a:4d: 72:e4:69:b3:e4:01:a1:7d:5e:79:7a:b8:ce:30:94: 55:99:ad:d0:42:a3:20:85:94:30:44:cb:85:38:f1: 65:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:7C:6F:9C:6D:6F:91:09:00:BF:B1:80:48:72:69:DD:9D:DE:34:6E X509v3 Authority Key Identifier: keyid:EC:5A:E3:6D:AF:9B:DD:77:E6:23:FC:7C:7F:5A:8A:0F:67:FD:71:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:51:cf:27:d8:64:37:82:6b:14:b4:73:2c:0c:1f:86:ff:c2: 4d:e0:55:11:d2:28:c7:1a:e8:9d:03:e6:82:b6:68:7b:d9:94: 34:99:ff:0b:5f:10:20:21:cc:6b:cf:68:97:af:ff:23:0c:a6: 15:5a:44:36:6e:53:bd:4c:00:3d:a5:b4:84:13:13:64:2f:3a: a9:e7:bc:09:af:34:69:68:01:a8:f9:c9:97:24:cc:e4:e6:f2: 61:94:48:a0:4c:cd:c9:61:67:8b:78:c0:ff:d1:ac:08:82:07: ee:2c:56:99:f7:4c:15:08:e3:67:69:29:26:33:d8:7f:f5:b9: 91:bb:5e:bf:10:38:55:27:67:5e:11:bc:45:bc:06:ff:f0:f8: 65:d0:14:45:28:f5:a2:e0:32:c8:6b:0e:58:8e:b4:d6:c4:8b: 83:6e:1e:ba:04:2e:53:d3:9b:48:96:73:b7:47:99:c6:60:8f: cf:3e:78:39:8d:ba:52:48:99:03:98:2a:55:ca:47:cb:59:ec: 92:a3:2d:15:a0:e1:65:7a:eb:f5:54:2e:d8:db:c1:92:8d:6d: 47:c4:25:89:b3:94:69:0c:cb:0f:68:1b:d6:16:5d:30:3d:6d: 26:6b:86:d2:d7:62:d6:68:82:9f:28:5d:52:09:a5:d8:55:1c: 81:74:25:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFmYpy8fLkStGCFIy3IgwsdqJWawwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM1QUUzNkRBRjlCREQ3N0U2MjNGQzdDN0Y1QThBMEY2 N0ZENzE2RjAeFw0yNjExMTQwNDA5MzdaFw0yNjExMTUwNzM1MzdaMDMxMTAvBgNV BAMTKEE3N0M2RjlDNkQ2RjkxMDkwMEJGQjE4MDQ4NzI2OUREOURERTM0NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQXkea97r++PD5aSCXnTjxGdq4 eymYfQ3AizE5KehHNt0JtoRkFgCZgCNreNwy3As4noFcaSHF2Y1+81uqA23KeAN6 9oI7eABkdKejaN5nBAnNWsO3qYRBs/b8xOkT6/BpHmlnvNpchekYurygZxs/kd09 xE+ShQF7jeenMi0sCOEXRfNU3EavVKgpIeb45Xb+RwhBsQOTWzlhabw1c1/1fGLm +/LDtqPwhOwp1/+dVx5WFXeVxv4R2lINHPkR1XyR5ISMG8hGbznr/j8ch8ddoZDK n0JSbU+gBonttCEqTXLkabPkAaF9Xnl6uM4wlFWZrdBCoyCFlDBEy4U48WVRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp3xvnG1vkQkAv7GASHJp3Z3eNG4wHwYDVR0j BBgwFoAU7Frjba+b3XfmI/x8f1qKD2f9cW8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWYzMGU0YWUtM2U0Ny00NTQwLTgyM2MtNTNjYWYyMjY3YjM2LzAvRUM1QUUzNkRB RjlCREQ3N0U2MjNGQzdDN0Y1QThBMEY2N0ZENzE2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FQzVBRTM2REFGOUJERDc3RTYyM0ZDN0M3RjVBOEEwRjY3RkQ3 MTZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWYzMGU0YWUtM2U0Ny00NTQwLTgy M2MtNTNjYWYyMjY3YjM2LzAvRUM1QUUzNkRBRjlCREQ3N0U2MjNGQzdDN0Y1QThB MEY2N0ZENzE2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAZRzyfYZDeCaxS0cywMH4b/wk3gVRHSKMca 6J0D5oK2aHvZlDSZ/wtfECAhzGvPaJev/yMMphVaRDZuU71MAD2ltIQTE2QvOqnn vAmvNGloAaj5yZckzOTm8mGUSKBMzclhZ4t4wP/RrAiCB+4sVpn3TBUI42dpKSYz 2H/1uZG7Xr8QOFUnZ14RvEW8Bv/w+GXQFEUo9aLgMshrDliOtNbEi4NuHroELlPT m0iWc7dHmcZgj88+eDmNulJImQOYKlXKR8tZ7JKjLRWg4WV66/VULtjbwZKNbUfE JYmzlGkMyw9oG9YWXTA9bSZrhtLXYtZogp8oXVIJpdhVHIF0JSE= -----END CERTIFICATE-----Generated at Sat Nov 14 22:34:29 2026 by rpki-client