$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.mft File: ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.mft (raw, json) Hash identifier: t2oxNvBwn7rPJiPvB2dGOQnbroi6yyZrWGnGgtj/5mU= Subject key identifier: 21:95:B9:1F:A6:0B:34:AC:8B:E9:19:26:84:73:1C:25:73:10:58:02 Authority key identifier: EC:C7:A0:2E:2A:15:47:57:E3:DB:5D:E7:2B:90:DA:46:6F:43:0E:E3 Certificate issuer: /CN=ECC7A02E2A154757E3DB5DE72B90DA466F430EE3 Certificate serial: 4AF09902ECD71B4BDD4FFA8CC542A516F671ECD0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.mft Manifest number: F8 Signing time: Wed 04 Nov 2026 01:35:00 +0000 Manifest this update: Wed 04 Nov 2026 01:30:00 +0000 Manifest next update: Thu 05 Nov 2026 03:26:00 +0000 Files and hashes: 1: 3135372e31352e35312e302f32342d3234203d3e20313530343934.roa (hash: eXa5aSDdrCtqvVMG17UDbY8fW0WBNN3GZ2WD5zRuz9o=) 2: ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.crl (hash: HAPa3wcIpyxVP1gUMBl4k5Du1hUNcUZXzLM4+Xt8Hws=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.crl rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 03:26:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:f0:99:02:ec:d7:1b:4b:dd:4f:fa:8c:c5:42:a5:16:f6:71:ec:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ECC7A02E2A154757E3DB5DE72B90DA466F430EE3 Validity Not Before: Nov 4 01:30:00 2026 GMT Not After : Nov 5 03:26:00 2026 GMT Subject: CN=2195B91FA60B34AC8BE9192684731C2573105802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:27:df:df:1b:66:f2:8a:f1:85:87:7e:2b:33: 29:f1:d2:7c:3b:20:ab:1c:76:c6:2e:a0:80:1f:0c: af:55:d7:b3:30:e8:12:d6:95:b4:da:8d:85:ef:e3: 95:bd:3b:c8:6b:6d:b9:b7:92:b4:b0:54:c0:6b:8a: cc:31:1f:d0:b9:92:ee:f1:ae:10:20:94:e6:1c:22: e0:3c:29:75:2d:df:e1:7e:34:7a:a3:c9:7f:79:4d: 38:a1:da:29:c5:ef:5a:79:86:88:c3:67:4e:ea:c6: 61:88:0a:27:64:07:7a:6a:dc:55:85:14:74:6d:ce: 3e:86:30:dc:7c:b6:9d:69:1e:f5:34:30:91:53:1c: 02:d7:b3:4b:4f:0e:78:5e:9f:0e:5d:90:53:5f:e7: d4:53:ec:a6:73:20:da:13:7c:5c:06:6b:e8:ea:4c: c1:aa:ce:fa:5c:88:3c:2f:37:f9:7d:06:97:f1:8e: 34:c4:41:c0:98:e8:b2:a6:8f:8e:a7:e2:d8:6e:b4: 49:15:74:29:53:85:32:a7:a7:70:a8:96:cc:04:83: c6:b9:2a:f3:d8:e6:11:ed:18:cf:5a:19:76:be:53: a3:3e:08:b1:e2:3f:ca:65:37:59:68:af:9a:43:0f: 2e:07:a6:22:b5:42:5e:85:1e:7b:8a:38:fb:54:eb: 73:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:95:B9:1F:A6:0B:34:AC:8B:E9:19:26:84:73:1C:25:73:10:58:02 X509v3 Authority Key Identifier: keyid:EC:C7:A0:2E:2A:15:47:57:E3:DB:5D:E7:2B:90:DA:46:6F:43:0E:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:ba:0f:2b:fe:7a:3f:43:34:fd:5b:cb:70:63:81:0a:93:e6: 2a:bf:ba:32:fc:30:f0:10:25:07:fa:68:0c:41:94:e8:43:b6: 69:a8:36:ef:6c:b2:ff:fa:c5:b2:1a:53:2f:6a:0a:6d:00:ea: a4:5a:f5:59:22:ce:65:f1:85:69:4e:1d:38:0f:58:0f:46:84: d5:da:f4:01:14:a8:7e:b7:b2:df:44:d2:21:ef:a8:9f:33:5e: 46:95:4e:da:7a:bf:7f:b0:e9:43:c5:b1:cd:fe:51:f0:d9:4c: 43:49:54:c5:b5:36:eb:2b:5b:d0:c8:70:b7:4c:86:2d:30:0c: 47:b0:b9:94:00:53:04:1e:fa:d8:ae:62:07:5c:0f:07:88:30: 89:32:28:07:74:67:e7:3c:fe:84:c1:95:39:1a:cf:ba:16:87: b3:dc:11:b7:e7:37:fe:10:46:93:db:d9:8e:b4:6d:9a:6b:6f: 9c:3e:51:8e:66:11:24:3e:8f:42:d2:94:c4:22:e5:14:a0:53: da:af:59:3f:3b:9b:82:44:fd:76:66:69:b1:c8:dd:cd:32:6d: 68:89:d7:4a:08:0e:28:f5:db:b6:e5:88:84:49:af:2b:59:a9: 11:6d:9f:67:6c:f8:16:7e:28:fb:9a:17:b4:43:b4:03:c4:e7: a3:5f:c0:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSvCZAuzXG0vdT/qMxUKlFvZx7NAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUNDN0EwMkUyQTE1NDc1N0UzREI1REU3MkI5MERBNDY2 RjQzMEVFMzAeFw0yNjExMDQwMTMwMDBaFw0yNjExMDUwMzI2MDBaMDMxMTAvBgNV BAMTKDIxOTVCOTFGQTYwQjM0QUM4QkU5MTkyNjg0NzMxQzI1NzMxMDU4MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7J9/fG2byivGFh34rMynx0nw7 IKscdsYuoIAfDK9V17Mw6BLWlbTajYXv45W9O8hrbbm3krSwVMBriswxH9C5ku7x rhAglOYcIuA8KXUt3+F+NHqjyX95TTih2inF71p5hojDZ07qxmGICidkB3pq3FWF FHRtzj6GMNx8tp1pHvU0MJFTHALXs0tPDnhenw5dkFNf59RT7KZzINoTfFwGa+jq TMGqzvpciDwvN/l9BpfxjjTEQcCY6LKmj46n4thutEkVdClThTKnp3ColswEg8a5 KvPY5hHtGM9aGXa+U6M+CLHiP8plN1lor5pDDy4HpiK1Ql6FHnuKOPtU63NBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIZW5H6YLNKyL6RkmhHMcJXMQWAIwHwYDVR0j BBgwFoAU7MegLioVR1fj213nK5DaRm9DDuMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGJiOGU2MTItN2JiMy00OGRlLTk2OWQtNzFiNDVmNDZhMTYxLzAvRUNDN0EwMkUy QTE1NDc1N0UzREI1REU3MkI5MERBNDY2RjQzMEVFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FQ0M3QTAyRTJBMTU0NzU3RTNEQjVERTcyQjkwREE0NjZGNDMw RUUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGJiOGU2MTItN2JiMy00OGRlLTk2 OWQtNzFiNDVmNDZhMTYxLzAvRUNDN0EwMkUyQTE1NDc1N0UzREI1REU3MkI5MERB NDY2RjQzMEVFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFa6Dyv+ej9DNP1by3BjgQqT5iq/ujL8MPAQ JQf6aAxBlOhDtmmoNu9ssv/6xbIaUy9qCm0A6qRa9VkizmXxhWlOHTgPWA9GhNXa 9AEUqH63st9E0iHvqJ8zXkaVTtp6v3+w6UPFsc3+UfDZTENJVMW1NusrW9DIcLdM hi0wDEewuZQAUwQe+tiuYgdcDweIMIkyKAd0Z+c8/oTBlTkaz7oWh7PcEbfnN/4Q RpPb2Y60bZprb5w+UY5mESQ+j0LSlMQi5RSgU9qvWT87m4JE/XZmabHI3c0ybWiJ 10oIDij127bliIRJrytZqRFtn2ds+BZ+KPuaF7RDtAPE56NfwIg= -----END CERTIFICATE-----Generated at Wed Nov 4 15:23:55 2026 by rpki-client