$ rpki-client -vvf rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft File: EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft (raw, json) Hash identifier: erU5s5RkmwuQZc8PW0lLl8sdp1zJkk8kjbgeBR0S5d4= Subject key identifier: DE:F7:31:CD:DD:99:61:C6:DF:AD:8C:BE:28:37:2F:19:28:26:B9:78 Authority key identifier: EC:5A:E3:6D:AF:9B:DD:77:E6:23:FC:7C:7F:5A:8A:0F:67:FD:71:6F Certificate issuer: /CN=EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F Certificate serial: 11AC7BC1DA764A013B3A15F87B3172227FCAC640 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft Manifest number: 0E Signing time: Tue 12 May 2026 13:08:16 +0000 Manifest this update: Tue 12 May 2026 13:03:16 +0000 Manifest next update: Wed 13 May 2026 13:58:16 +0000 Files and hashes: 1: 3136302e32322e3139382e302f32332d3233203d3e20313532383336.roa (hash: NyaKnWNdcDfhRDv5OOV0uHnlXww5Tu4WFH6FM+NsLLc=) 2: 3136302e32322e3139392e302f32342d3234203d3e20313532383336.roa (hash: a0teJ5lq1xBgiI5mA8EcJ42YaSmlhBF26ShVqEb+s/8=) 3: 3136302e32322e3139382e302f32342d3234203d3e20313532383336.roa (hash: 4hzEJ9YbAF9buAExFLN+RTSrGCyc9GGfXKqoc6rWOKY=) 4: EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.crl (hash: jFl3pWu96SeCK0W0s6f0VPZU06aChyJ+jKZU8NGney8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.crl rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:ac:7b:c1:da:76:4a:01:3b:3a:15:f8:7b:31:72:22:7f:ca:c6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F Validity Not Before: May 12 13:03:16 2026 GMT Not After : May 13 13:58:16 2026 GMT Subject: CN=DEF731CDDD9961C6DFAD8CBE28372F192826B978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ca:d2:3a:f5:2b:89:19:0b:7f:5d:27:1d:3b: fe:3f:da:83:54:4a:e6:9e:39:6e:46:ca:b7:50:2f: 12:2a:ab:04:5a:4c:9a:0a:b4:d9:ce:96:01:75:c2: 47:7d:8e:7a:13:f1:a7:9c:97:f2:df:47:78:71:14: 1c:34:0f:37:af:b5:d4:9c:79:b5:26:29:e9:c6:d8: 23:9e:52:37:d7:eb:18:2e:1c:c8:42:ff:15:d9:02: 08:22:b9:d3:cb:80:d1:f2:03:2f:e1:a3:a6:34:1d: 3e:1c:ff:19:75:67:54:e6:dc:7f:09:d2:01:7c:ea: a9:00:34:9d:9b:29:9f:21:b4:84:44:59:63:40:0e: 19:2c:e8:68:54:18:2f:3b:b4:5d:49:c8:ea:77:54: 92:21:f3:e1:75:22:51:cd:c9:dd:4f:0f:de:5f:ee: 72:11:34:5e:29:99:77:e6:3c:51:bf:b1:da:69:36: 68:90:17:78:23:14:d9:89:76:75:fd:03:e7:c3:4e: dc:6b:09:ef:50:e0:56:dd:68:ea:8f:5c:73:1f:7f: 71:97:21:3c:d6:6b:1c:43:49:5e:d5:03:44:47:5e: c2:74:e4:8d:53:59:e0:e1:51:a8:27:97:a7:c2:c5: 95:ac:b4:04:ce:82:6f:7b:57:18:e2:6d:75:52:3e: 37:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:F7:31:CD:DD:99:61:C6:DF:AD:8C:BE:28:37:2F:19:28:26:B9:78 X509v3 Authority Key Identifier: keyid:EC:5A:E3:6D:AF:9B:DD:77:E6:23:FC:7C:7F:5A:8A:0F:67:FD:71:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:bc:49:44:b3:86:65:d7:16:eb:76:9f:9f:18:62:29:af:40: bd:18:95:3c:a5:e4:1a:b2:33:ef:7c:27:d1:9a:06:05:2c:65: 96:bd:24:9d:bd:ff:e3:a9:08:cf:dc:3b:96:fe:34:0a:80:43: 29:da:86:21:c6:df:9a:0a:12:03:62:d1:97:24:bd:63:a1:62: 67:00:9d:33:36:64:bf:80:99:13:1b:75:83:5f:f0:df:0b:cd: c9:fd:ca:37:8d:d1:f2:86:eb:4b:b7:53:23:40:b5:db:35:0d: 48:40:07:a6:97:14:76:af:af:0b:70:70:81:2b:0d:ad:38:c4: 8a:e2:5e:cf:b5:5a:ec:5c:58:c2:b6:59:2d:72:31:11:db:57: 96:6d:67:30:eb:93:5d:ad:f8:9d:cf:0b:d3:ee:d8:bd:94:f7: a6:2c:0e:f0:62:86:71:49:a8:9a:e6:ec:c4:78:de:0f:6e:ea: 1d:00:47:40:95:fe:b2:78:5e:b4:7d:c4:0c:36:d6:fd:9c:de: 91:a3:77:fb:1c:79:91:f2:ce:86:b0:88:67:c9:cd:23:3b:74: 00:64:03:cd:85:33:14:e2:d6:d2:19:b3:65:f2:bb:97:1c:fc: 1e:60:55:6e:85:79:f3:dd:d4:38:67:d8:ff:d5:0a:f9:d6:ae: 0c:69:58:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEax7wdp2SgE7OhX4ezFyIn/KxkAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM1QUUzNkRBRjlCREQ3N0U2MjNGQzdDN0Y1QThBMEY2 N0ZENzE2RjAeFw0yNjA1MTIxMzAzMTZaFw0yNjA1MTMxMzU4MTZaMDMxMTAvBgNV BAMTKERFRjczMUNEREQ5OTYxQzZERkFEOENCRTI4MzcyRjE5MjgyNkI5NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqytI69SuJGQt/XScdO/4/2oNU SuaeOW5GyrdQLxIqqwRaTJoKtNnOlgF1wkd9jnoT8aecl/LfR3hxFBw0DzevtdSc ebUmKenG2COeUjfX6xguHMhC/xXZAggiudPLgNHyAy/ho6Y0HT4c/xl1Z1Tm3H8J 0gF86qkANJ2bKZ8htIREWWNADhks6GhUGC87tF1JyOp3VJIh8+F1IlHNyd1PD95f 7nIRNF4pmXfmPFG/sdppNmiQF3gjFNmJdnX9A+fDTtxrCe9Q4FbdaOqPXHMff3GX ITzWaxxDSV7VA0RHXsJ05I1TWeDhUagnl6fCxZWstATOgm97VxjibXVSPjevAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3vcxzd2ZYcbfrYy+KDcvGSgmuXgwHwYDVR0j BBgwFoAU7Frjba+b3XfmI/x8f1qKD2f9cW8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWYzMGU0YWUtM2U0Ny00NTQwLTgyM2MtNTNjYWYyMjY3YjM2LzAvRUM1QUUzNkRB RjlCREQ3N0U2MjNGQzdDN0Y1QThBMEY2N0ZENzE2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FQzVBRTM2REFGOUJERDc3RTYyM0ZDN0M3RjVBOEEwRjY3RkQ3 MTZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWYzMGU0YWUtM2U0Ny00NTQwLTgy M2MtNTNjYWYyMjY3YjM2LzAvRUM1QUUzNkRBRjlCREQ3N0U2MjNGQzdDN0Y1QThB MEY2N0ZENzE2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIm8SUSzhmXXFut2n58YYimvQL0YlTyl5Bqy M+98J9GaBgUsZZa9JJ29/+OpCM/cO5b+NAqAQynahiHG35oKEgNi0ZckvWOhYmcA nTM2ZL+AmRMbdYNf8N8Lzcn9yjeN0fKG60u3UyNAtds1DUhAB6aXFHavrwtwcIEr Da04xIriXs+1WuxcWMK2WS1yMRHbV5ZtZzDrk12t+J3PC9Pu2L2U96YsDvBihnFJ qJrm7MR43g9u6h0AR0CV/rJ4XrR9xAw21v2c3pGjd/sceZHyzoawiGfJzSM7dABk A82FMxTi1tIZs2Xyu5cc/B5gVW6FefPd1Dhn2P/VCvnWrgxpWFA= -----END CERTIFICATE-----Generated at Tue May 12 22:46:42 2026 by rpki-client