$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft File: EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft (raw, json) Hash identifier: ReKY6NXa6QPqXscvUlEBeUByj5lEQJqaJyT9v4iYxJ8= Subject key identifier: A0:C4:DB:E8:64:13:7F:C1:36:68:01:5B:0C:BD:A4:25:75:93:F5:3A Authority key identifier: EC:5A:E3:6D:AF:9B:DD:77:E6:23:FC:7C:7F:5A:8A:0F:67:FD:71:6F Certificate issuer: /CN=EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F Certificate serial: 74604C09299202F4AA9EF16BFB1CBCD523981B46 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 18:43:47 +0000 Manifest this update: Thu 24 Sep 2026 18:38:47 +0000 Manifest next update: Fri 25 Sep 2026 19:27:47 +0000 Files and hashes: 1: 3136302e32322e3139382e302f32342d3234203d3e20313532383336.roa (hash: 4hzEJ9YbAF9buAExFLN+RTSrGCyc9GGfXKqoc6rWOKY=) 2: EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.crl (hash: s27ATd5tg1qraP0pB05rT32V3HUSQW+Gzmw3HjxK+ZI=) 3: 3136302e32322e3139392e302f32342d3234203d3e20313532383336.roa (hash: a0teJ5lq1xBgiI5mA8EcJ42YaSmlhBF26ShVqEb+s/8=) 4: 3136302e32322e3139382e302f32332d3233203d3e20313532383336.roa (hash: NyaKnWNdcDfhRDv5OOV0uHnlXww5Tu4WFH6FM+NsLLc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.crl rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 11:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:60:4c:09:29:92:02:f4:aa:9e:f1:6b:fb:1c:bc:d5:23:98:1b:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F Validity Not Before: Sep 24 18:38:47 2026 GMT Not After : Sep 25 19:27:47 2026 GMT Subject: CN=A0C4DBE864137FC13668015B0CBDA4257593F53A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:09:54:cd:1d:da:82:92:86:8e:42:82:b1:09: 41:4f:65:d4:19:1c:5e:3a:5b:9a:30:95:51:ee:4a: ec:89:9b:c8:30:c1:2d:2f:91:0c:a7:e9:9e:b3:b9: 6a:8c:ee:af:d2:d2:ab:be:76:09:6e:b2:15:b2:90: 92:7f:4e:b3:0c:24:bb:7a:8b:e4:50:b5:8c:41:72: 7b:91:90:9d:da:bb:40:f9:9b:fd:87:1a:20:f8:4e: 01:f7:52:59:bd:fb:09:96:21:e3:e9:8a:2c:e3:f3: dc:13:af:60:99:b1:5f:49:71:04:05:da:a2:57:a0: 3d:df:62:f3:e4:b1:6b:bd:b6:23:ff:83:07:da:74: 10:3e:92:b1:a0:2d:81:c7:d5:bd:54:cf:c8:13:f3: df:9e:0b:e4:90:6d:ab:61:84:cd:39:6c:c7:db:32: 73:92:af:16:b2:64:d8:0f:96:fe:08:ef:26:f2:c8: 13:17:0e:14:7c:bd:bf:a0:a2:99:d2:ef:1d:ef:46: 90:53:15:a2:8b:f5:40:0c:0b:08:14:55:e7:3a:3a: 80:a5:0c:95:c4:b1:74:46:89:67:48:22:61:26:58: 2b:91:ed:d1:4f:d2:a0:6f:a0:a3:bc:e0:f5:5a:3e: dd:54:d5:e2:11:be:5b:c4:35:09:f3:3b:d2:3f:50: 4d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C4:DB:E8:64:13:7F:C1:36:68:01:5B:0C:BD:A4:25:75:93:F5:3A X509v3 Authority Key Identifier: keyid:EC:5A:E3:6D:AF:9B:DD:77:E6:23:FC:7C:7F:5A:8A:0F:67:FD:71:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:ce:55:6b:b3:55:b0:dd:32:67:fe:6c:ea:13:72:00:b0:00: 38:16:32:18:73:4b:2c:e7:08:21:ae:cc:80:3c:61:43:10:1c: 3a:38:58:8f:fd:fa:95:ab:22:c2:75:9c:c2:3a:86:a6:35:a5: c2:83:40:f6:13:ce:e5:90:6d:5a:a7:ba:80:d5:bb:eb:e2:ca: 24:55:44:cc:35:2c:0f:39:8a:af:34:4b:ed:40:47:78:ef:8e: 0e:8c:a8:f0:99:85:05:c4:ae:42:4d:f2:78:b3:65:93:67:ea: 2d:9b:32:70:59:35:14:32:97:2d:0c:c6:d7:ee:ca:19:73:16: e3:72:41:78:e5:f1:62:53:0c:c6:7f:76:3e:30:65:56:75:f8: a7:aa:0b:30:a5:fa:a6:2b:57:25:c7:96:71:fd:37:3f:31:89: 3f:fe:0f:fe:a8:27:d2:27:95:29:03:a0:1a:17:57:af:cd:56: 47:7c:b5:6d:4d:2a:6e:6d:56:ba:38:f6:42:21:67:b9:d5:a3: 2f:2d:ab:17:0b:2a:16:28:50:cf:17:76:31:6a:08:f0:30:76: a3:f6:b5:9b:53:f3:e5:e0:f7:23:3a:5e:a9:d3:d3:f7:27:78: d8:c7:9a:e5:8a:d0:81:bc:da:d2:5f:27:07:8b:f2:80:a5:36: e7:1c:f1:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdGBMCSmSAvSqnvFr+xy81SOYG0YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM1QUUzNkRBRjlCREQ3N0U2MjNGQzdDN0Y1QThBMEY2 N0ZENzE2RjAeFw0yNjA5MjQxODM4NDdaFw0yNjA5MjUxOTI3NDdaMDMxMTAvBgNV BAMTKEEwQzREQkU4NjQxMzdGQzEzNjY4MDE1QjBDQkRBNDI1NzU5M0Y1M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6CVTNHdqCkoaOQoKxCUFPZdQZ HF46W5owlVHuSuyJm8gwwS0vkQyn6Z6zuWqM7q/S0qu+dglushWykJJ/TrMMJLt6 i+RQtYxBcnuRkJ3au0D5m/2HGiD4TgH3Ulm9+wmWIePpiizj89wTr2CZsV9JcQQF 2qJXoD3fYvPksWu9tiP/gwfadBA+krGgLYHH1b1Uz8gT89+eC+SQbathhM05bMfb MnOSrxayZNgPlv4I7ybyyBMXDhR8vb+gopnS7x3vRpBTFaKL9UAMCwgUVec6OoCl DJXEsXRGiWdIImEmWCuR7dFP0qBvoKO84PVaPt1U1eIRvlvENQnzO9I/UE1PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoMTb6GQTf8E2aAFbDL2kJXWT9TowHwYDVR0j BBgwFoAU7Frjba+b3XfmI/x8f1qKD2f9cW8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWYzMGU0YWUtM2U0Ny00NTQwLTgyM2MtNTNjYWYyMjY3YjM2LzAvRUM1QUUzNkRB RjlCREQ3N0U2MjNGQzdDN0Y1QThBMEY2N0ZENzE2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FQzVBRTM2REFGOUJERDc3RTYyM0ZDN0M3RjVBOEEwRjY3RkQ3 MTZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWYzMGU0YWUtM2U0Ny00NTQwLTgy M2MtNTNjYWYyMjY3YjM2LzAvRUM1QUUzNkRBRjlCREQ3N0U2MjNGQzdDN0Y1QThB MEY2N0ZENzE2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA3OVWuzVbDdMmf+bOoTcgCwADgWMhhzSyzn CCGuzIA8YUMQHDo4WI/9+pWrIsJ1nMI6hqY1pcKDQPYTzuWQbVqnuoDVu+viyiRV RMw1LA85iq80S+1AR3jvjg6MqPCZhQXErkJN8nizZZNn6i2bMnBZNRQyly0Mxtfu yhlzFuNyQXjl8WJTDMZ/dj4wZVZ1+KeqCzCl+qYrVyXHlnH9Nz8xiT/+D/6oJ9In lSkDoBoXV6/NVkd8tW1NKm5tVro49kIhZ7nVoy8tqxcLKhYoUM8XdjFqCPAwdqP2 tZtT8+Xg9yM6XqnT0/cneNjHmuWK0IG82tJfJweL8oClNucc8TA= -----END CERTIFICATE-----Generated at Fri Sep 25 01:03:21 2026 by rpki-client