$ rpki-client -vvf rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft File: EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft (raw, json) Hash identifier: Lj5QhBCp8ynHMNYPH+EqtojLSpgONhI/s4qx0KtfxJ8= Subject key identifier: 1D:D3:10:8A:41:7A:6C:F2:63:FF:4E:23:7C:27:D1:7D:BA:45:68:D9 Authority key identifier: EC:5A:E3:6D:AF:9B:DD:77:E6:23:FC:7C:7F:5A:8A:0F:67:FD:71:6F Certificate issuer: /CN=EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F Certificate serial: 76326D7625C102729C198B4C9908B20778B627F6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 15:54:20 +0000 Manifest this update: Thu 23 Jul 2026 15:49:20 +0000 Manifest next update: Fri 24 Jul 2026 16:49:20 +0000 Files and hashes: 1: EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.crl (hash: X6OiIY0eN836DdRT1uqne75/1mB0PzuQ01jHM8MDGRU=) 2: 3136302e32322e3139382e302f32332d3233203d3e20313532383336.roa (hash: NyaKnWNdcDfhRDv5OOV0uHnlXww5Tu4WFH6FM+NsLLc=) 3: 3136302e32322e3139382e302f32342d3234203d3e20313532383336.roa (hash: 4hzEJ9YbAF9buAExFLN+RTSrGCyc9GGfXKqoc6rWOKY=) 4: 3136302e32322e3139392e302f32342d3234203d3e20313532383336.roa (hash: a0teJ5lq1xBgiI5mA8EcJ42YaSmlhBF26ShVqEb+s/8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.crl rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 16:49:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:32:6d:76:25:c1:02:72:9c:19:8b:4c:99:08:b2:07:78:b6:27:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F Validity Not Before: Jul 23 15:49:20 2026 GMT Not After : Jul 24 16:49:20 2026 GMT Subject: CN=1DD3108A417A6CF263FF4E237C27D17DBA4568D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:32:9e:2e:bd:65:55:3f:e5:d1:a5:8e:e7:42: d4:3e:6d:e8:f0:c8:e8:73:de:33:99:52:aa:6e:e9: d1:9c:4e:62:60:f0:10:2b:af:d7:30:d7:d4:55:87: 70:af:cd:40:34:68:66:6d:cd:25:23:8f:3e:70:b1: 67:c9:43:f0:21:cc:59:73:d3:51:18:ba:66:13:40: fe:78:e3:a4:09:04:21:dc:7f:23:bb:3b:d0:80:40: 28:57:15:00:e4:08:f4:2d:af:d2:49:94:95:c2:dd: 60:6e:66:10:cf:fc:16:29:b0:6b:85:38:9f:d1:30: fc:87:bc:c1:5c:cf:30:d0:b9:b6:9c:53:74:27:55: 89:bb:f4:f6:e3:24:db:82:a3:21:7b:62:fc:bc:82: 00:f0:25:7d:fd:94:e7:69:e5:5d:99:37:40:f7:e1: 6c:df:20:27:3e:2b:65:8f:da:b1:0e:f7:d5:98:a8: 03:4f:02:3b:40:d3:8a:fd:62:a6:ba:8f:e9:b2:3f: 60:5a:9e:af:58:48:d1:27:7a:2a:12:5b:7a:98:8b: 4c:e7:c0:9f:ac:64:4e:81:b9:42:5e:7f:19:c1:3e: 48:57:bc:85:10:bd:35:42:de:0e:fc:28:73:76:0b: bb:c9:8d:c7:df:d5:09:17:46:ba:a2:68:74:ea:42: 11:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:D3:10:8A:41:7A:6C:F2:63:FF:4E:23:7C:27:D1:7D:BA:45:68:D9 X509v3 Authority Key Identifier: keyid:EC:5A:E3:6D:AF:9B:DD:77:E6:23:FC:7C:7F:5A:8A:0F:67:FD:71:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:15:a0:83:03:2e:09:44:86:ed:7e:c4:37:bd:ab:55:03:d7: 95:9b:95:52:58:f8:5b:14:67:6e:7b:88:a3:2a:af:42:cb:de: 0f:6f:29:97:3c:a1:33:d5:92:a0:db:ca:3e:00:49:63:61:70: 75:6b:b2:09:b2:07:23:44:74:6d:5d:eb:2c:fe:d5:d7:3e:1b: ca:ce:37:79:fe:16:f5:5f:dd:63:a2:8f:4b:e4:fa:a0:27:70: ce:f2:62:c0:ac:57:37:a7:ba:8a:45:56:9b:bb:a7:17:15:ee: 2b:c0:04:19:26:4c:cd:f4:b3:21:4a:7c:81:43:5b:16:64:31: cf:d9:5a:17:dd:42:71:54:dd:29:20:0d:42:07:05:5f:cf:dc: 29:71:d2:36:cc:3c:de:2b:67:36:18:20:68:47:76:44:f2:34: 95:95:19:bf:eb:9d:fc:e4:88:79:94:f5:24:bb:8c:ff:86:d5: 36:c2:d5:f6:e2:d7:cf:13:ac:c4:c9:47:38:b2:85:da:78:9f: 13:07:c7:ae:2a:8b:42:db:41:64:ce:30:37:86:50:87:64:3b: 4f:cf:b4:1a:68:f6:92:35:d5:7d:b4:da:c3:e1:1e:96:cd:57: 4e:e0:eb:fb:86:91:0a:ea:fb:b7:ce:70:36:1a:9d:10:96:1d: 26:da:35:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdjJtdiXBAnKcGYtMmQiyB3i2J/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM1QUUzNkRBRjlCREQ3N0U2MjNGQzdDN0Y1QThBMEY2 N0ZENzE2RjAeFw0yNjA3MjMxNTQ5MjBaFw0yNjA3MjQxNjQ5MjBaMDMxMTAvBgNV BAMTKDFERDMxMDhBNDE3QTZDRjI2M0ZGNEUyMzdDMjdEMTdEQkE0NTY4RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSMp4uvWVVP+XRpY7nQtQ+bejw yOhz3jOZUqpu6dGcTmJg8BArr9cw19RVh3CvzUA0aGZtzSUjjz5wsWfJQ/AhzFlz 01EYumYTQP5446QJBCHcfyO7O9CAQChXFQDkCPQtr9JJlJXC3WBuZhDP/BYpsGuF OJ/RMPyHvMFczzDQubacU3QnVYm79PbjJNuCoyF7Yvy8ggDwJX39lOdp5V2ZN0D3 4WzfICc+K2WP2rEO99WYqANPAjtA04r9Yqa6j+myP2Banq9YSNEneioSW3qYi0zn wJ+sZE6BuUJefxnBPkhXvIUQvTVC3g78KHN2C7vJjcff1QkXRrqiaHTqQhFnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHdMQikF6bPJj/04jfCfRfbpFaNkwHwYDVR0j BBgwFoAU7Frjba+b3XfmI/x8f1qKD2f9cW8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWYzMGU0YWUtM2U0Ny00NTQwLTgyM2MtNTNjYWYyMjY3YjM2LzAvRUM1QUUzNkRB RjlCREQ3N0U2MjNGQzdDN0Y1QThBMEY2N0ZENzE2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FQzVBRTM2REFGOUJERDc3RTYyM0ZDN0M3RjVBOEEwRjY3RkQ3 MTZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWYzMGU0YWUtM2U0Ny00NTQwLTgy M2MtNTNjYWYyMjY3YjM2LzAvRUM1QUUzNkRBRjlCREQ3N0U2MjNGQzdDN0Y1QThB MEY2N0ZENzE2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ8VoIMDLglEhu1+xDe9q1UD15WblVJY+FsU Z257iKMqr0LL3g9vKZc8oTPVkqDbyj4ASWNhcHVrsgmyByNEdG1d6yz+1dc+G8rO N3n+FvVf3WOij0vk+qAncM7yYsCsVzenuopFVpu7pxcV7ivABBkmTM30syFKfIFD WxZkMc/ZWhfdQnFU3SkgDUIHBV/P3Clx0jbMPN4rZzYYIGhHdkTyNJWVGb/rnfzk iHmU9SS7jP+G1TbC1fbi188TrMTJRziyhdp4nxMHx64qi0LbQWTOMDeGUIdkO0/P tBpo9pI11X202sPhHpbNV07g6/uGkQrq+7fOcDYanRCWHSbaNac= -----END CERTIFICATE-----Generated at Fri Jul 24 03:52:15 2026 by rpki-client