$ rpki-client -vvvf rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.mft File: ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.mft (raw, json) Hash identifier: bHCJHT8MdR+4ZLMvp1M/XEC3X0b2rRogC4AuYqWNHFU= Subject key identifier: 5C:05:50:A6:70:F0:7F:A4:ED:A5:53:2B:EC:76:E6:66:39:40:66:C8 Authority key identifier: EC:A0:04:7E:A8:E4:DC:E9:2E:BC:57:2E:E8:A1:1D:17:C6:B6:48:72 Certificate issuer: /CN=ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872 Certificate serial: 3CE4CF64884461F2AC63B4B4833CF421D28D84D1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.mft Manifest number: FA Signing time: Tue 03 Nov 2026 20:48:36 +0000 Manifest this update: Tue 03 Nov 2026 20:43:36 +0000 Manifest next update: Wed 04 Nov 2026 22:11:36 +0000 Files and hashes: 1: ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.crl (hash: mdTFB2l54GS1tIVh5tZYtNpVecANU3/suTntuIgD6Mw=) 2: 3135372e36362e35382e302f32332d3233203d3e203633383633.roa (hash: UIZ5WPv7k1hpGcTiFHJVpKxY08OSIOQ+IDxbkKabgJw=) 3: 3135372e36362e35382e302f32342d3234203d3e203633383633.roa (hash: a6w3hGAhWsxMabz324Q4GA5dPuEuhj0nKmf3WW+KTCc=) 4: 3135372e36362e35392e302f32342d3234203d3e203633383633.roa (hash: xBh74co4G4oy4kEOH1+s92iqFVlcazWJc0LznYHJ110=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.crl rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 22:11:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:e4:cf:64:88:44:61:f2:ac:63:b4:b4:83:3c:f4:21:d2:8d:84:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872 Validity Not Before: Nov 3 20:43:36 2026 GMT Not After : Nov 4 22:11:36 2026 GMT Subject: CN=5C0550A670F07FA4EDA5532BEC76E666394066C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:11:46:18:c9:02:01:8e:32:f1:47:0e:e7:48: 60:a5:fb:2e:02:d8:58:93:3d:a6:98:23:0a:9a:e0: 2c:e9:d9:6f:fe:4d:06:b8:bb:0c:47:cc:9d:62:1f: f3:fb:64:03:63:12:1d:d9:34:74:85:75:e8:1d:a6: 63:3a:b8:8f:50:0a:ff:f9:b4:67:31:19:7f:49:26: 25:90:96:b6:f5:68:2d:a4:ac:f7:65:2c:7d:39:1b: 6d:5e:ea:32:48:c6:52:1f:78:29:1a:ba:31:6d:59: 00:0f:0e:fe:17:5e:94:de:ba:a4:4c:9d:98:eb:f7: f8:d4:2c:78:c4:d3:34:28:6f:05:e1:10:f4:5a:3d: ec:94:6b:74:3b:6c:65:31:55:11:5f:27:94:5d:40: 46:5f:d7:40:62:e2:6c:26:47:9b:42:06:27:98:cb: e1:19:09:20:5d:e5:51:75:4b:2a:c2:60:57:40:01: a6:d2:64:c5:53:9d:23:c8:6a:4b:0d:d2:04:68:f0: 41:30:02:b7:60:1b:27:db:75:f7:5a:0b:4b:12:96: 5e:b3:d6:ec:67:24:54:10:10:c6:69:c1:c0:96:7e: d0:52:bb:5a:dd:d1:7e:10:88:4b:32:5b:8d:57:63: 26:4b:3b:11:23:a3:61:03:14:f0:7a:82:02:2e:03: 7a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:05:50:A6:70:F0:7F:A4:ED:A5:53:2B:EC:76:E6:66:39:40:66:C8 X509v3 Authority Key Identifier: keyid:EC:A0:04:7E:A8:E4:DC:E9:2E:BC:57:2E:E8:A1:1D:17:C6:B6:48:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:b6:10:ff:ce:b7:6c:88:f9:dd:10:e9:ab:6d:9c:28:b2:c3: 4e:fc:7e:69:bc:8e:b5:98:47:83:ef:5a:04:52:1f:cf:fc:5b: 55:bb:58:44:38:76:d6:f1:73:23:4a:f9:d8:9d:5a:5d:e6:06: 20:ca:b3:5d:2b:95:69:fd:0f:18:46:85:69:ce:3d:94:ec:22: 38:37:55:43:6d:71:78:b3:f9:0c:db:a9:6f:ce:bc:8e:34:02: 1b:ef:57:1b:e8:37:e1:b8:7d:58:5a:1e:2c:ea:2d:2c:49:65: 3d:48:3f:b4:67:22:bf:17:77:45:b8:5b:9e:a8:20:e0:11:ad: a9:c0:fb:87:6f:81:92:8e:a0:82:db:7d:88:34:68:de:a7:46: 28:02:df:51:2b:8e:60:0a:ad:88:86:1c:ba:7b:ca:1e:08:2e: 3a:3b:dc:e7:72:47:5c:a0:75:a8:68:22:03:52:b6:0a:e6:b2: ce:39:99:d3:0e:fc:42:5f:f3:45:25:8c:c8:18:4e:89:d1:26: e6:ff:99:47:57:8d:17:ff:3e:a1:d0:5f:b1:bd:8a:04:9c:14: 63:10:cb:b6:d3:6f:1a:9b:08:bf:f0:22:b5:3d:29:27:65:13: 50:f8:33:b2:1e:11:71:9a:1a:d4:47:a7:18:59:db:fb:f9:87: 0a:2d:ee:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPOTPZIhEYfKsY7S0gzz0IdKNhNEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUNBMDA0N0VBOEU0RENFOTJFQkM1NzJFRThBMTFEMTdD NkI2NDg3MjAeFw0yNjExMDMyMDQzMzZaFw0yNjExMDQyMjExMzZaMDMxMTAvBgNV BAMTKDVDMDU1MEE2NzBGMDdGQTRFREE1NTMyQkVDNzZFNjY2Mzk0MDY2QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzEUYYyQIBjjLxRw7nSGCl+y4C 2FiTPaaYIwqa4Czp2W/+TQa4uwxHzJ1iH/P7ZANjEh3ZNHSFdegdpmM6uI9QCv/5 tGcxGX9JJiWQlrb1aC2krPdlLH05G21e6jJIxlIfeCkaujFtWQAPDv4XXpTeuqRM nZjr9/jULHjE0zQobwXhEPRaPeyUa3Q7bGUxVRFfJ5RdQEZf10Bi4mwmR5tCBieY y+EZCSBd5VF1SyrCYFdAAabSZMVTnSPIaksN0gRo8EEwArdgGyfbdfdaC0sSll6z 1uxnJFQQEMZpwcCWftBSu1rd0X4QiEsyW41XYyZLOxEjo2EDFPB6ggIuA3r9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXAVQpnDwf6TtpVMr7HbmZjlAZsgwHwYDVR0j BBgwFoAU7KAEfqjk3OkuvFcu6KEdF8a2SHIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDZiMDVmMzYtZTE3NC00ZGFkLWJjMmEtMDg5MjZjNWRkMDQ2LzAvRUNBMDA0N0VB OEU0RENFOTJFQkM1NzJFRThBMTFEMTdDNkI2NDg3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FQ0EwMDQ3RUE4RTREQ0U5MkVCQzU3MkVFOEExMUQxN0M2QjY0 ODcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDZiMDVmMzYtZTE3NC00ZGFkLWJj MmEtMDg5MjZjNWRkMDQ2LzAvRUNBMDA0N0VBOEU0RENFOTJFQkM1NzJFRThBMTFE MTdDNkI2NDg3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJq2EP/Ot2yI+d0Q6attnCiyw078fmm8jrWY R4PvWgRSH8/8W1W7WEQ4dtbxcyNK+didWl3mBiDKs10rlWn9DxhGhWnOPZTsIjg3 VUNtcXiz+QzbqW/OvI40AhvvVxvoN+G4fVhaHizqLSxJZT1IP7RnIr8Xd0W4W56o IOARranA+4dvgZKOoILbfYg0aN6nRigC31ErjmAKrYiGHLp7yh4ILjo73OdyR1yg dahoIgNStgrmss45mdMO/EJf80UljMgYTonRJub/mUdXjRf/PqHQX7G9igScFGMQ y7bTbxqbCL/wIrU9KSdlE1D4M7IeEXGaGtRHpxhZ2/v5hwot7rU= -----END CERTIFICATE-----Generated at Wed Nov 4 09:55:14 2026 by rpki-client