$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft File: EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft (raw, json) Hash identifier: Z/aann8wIE/u3evYYP3qlboaq6FOJK8lRTJDHrF+c9w= Subject key identifier: 91:A3:07:20:01:3F:AB:C6:6E:7C:BA:61:1E:79:78:F1:11:22:E2:6D Authority key identifier: EC:5A:E3:6D:AF:9B:DD:77:E6:23:FC:7C:7F:5A:8A:0F:67:FD:71:6F Certificate issuer: /CN=EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F Certificate serial: 31E6DB8A2B29227A30655C69AC71DE7CA0136D48 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft Manifest number: F5 Signing time: Mon 02 Nov 2026 10:51:17 +0000 Manifest this update: Mon 02 Nov 2026 10:46:17 +0000 Manifest next update: Tue 03 Nov 2026 14:12:17 +0000 Files and hashes: 1: 3136302e32322e3139392e302f32342d3234203d3e20313532383336.roa (hash: a0teJ5lq1xBgiI5mA8EcJ42YaSmlhBF26ShVqEb+s/8=) 2: 3136302e32322e3139382e302f32342d3234203d3e20313532383336.roa (hash: 4hzEJ9YbAF9buAExFLN+RTSrGCyc9GGfXKqoc6rWOKY=) 3: 3136302e32322e3139382e302f32332d3233203d3e20313532383336.roa (hash: NyaKnWNdcDfhRDv5OOV0uHnlXww5Tu4WFH6FM+NsLLc=) 4: EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.crl (hash: DWFKUpqjrmeujc3yzlbFtUsOHKsqv6VSACo+oGTzBs8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.crl rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 11:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:e6:db:8a:2b:29:22:7a:30:65:5c:69:ac:71:de:7c:a0:13:6d:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F Validity Not Before: Nov 2 10:46:17 2026 GMT Not After : Nov 3 14:12:17 2026 GMT Subject: CN=91A30720013FABC66E7CBA611E7978F11122E26D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2c:5e:94:d3:f5:05:14:8f:45:38:4a:3b:f1: 0e:12:ac:61:16:43:92:e7:44:8e:81:0d:a5:5a:11: 88:d2:6b:e9:89:39:c6:79:a3:a4:09:2a:84:cd:6f: 5a:30:51:0e:f9:95:26:d2:fc:81:cc:f4:98:d6:db: f8:90:fd:f1:69:48:8b:f3:4d:28:b1:c2:8a:d5:71: 9f:fd:91:79:98:51:b8:70:2e:00:c8:f7:60:54:a1: e0:18:d3:91:da:0b:35:0b:78:85:6c:6d:99:fb:0a: d9:e7:54:3a:ea:cf:71:aa:63:af:2b:d2:b9:59:26: 3c:26:04:8e:f0:b7:75:7a:4d:38:6f:6a:6e:2d:23: ba:cc:c7:99:82:34:70:12:9e:fe:b9:4d:a1:76:98: 21:eb:1e:1d:0b:e3:ea:c6:b0:ad:8b:39:1a:13:99: 65:f0:ad:2f:d6:a5:37:7e:f7:22:10:14:44:71:13: d5:c3:58:4c:b0:b7:c9:aa:6b:fa:0e:b3:b1:7d:c8: 18:88:92:49:e7:ce:ea:b9:ab:f3:5c:59:2a:c2:d7: 37:d5:b6:94:8e:42:74:50:6f:f7:39:6e:ed:b4:52: 74:eb:b1:52:93:6c:5b:f4:e7:e6:cb:9c:ff:35:c6: 4b:ec:0d:54:31:17:ab:a3:0d:ce:86:61:8a:79:50: f4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A3:07:20:01:3F:AB:C6:6E:7C:BA:61:1E:79:78:F1:11:22:E2:6D X509v3 Authority Key Identifier: keyid:EC:5A:E3:6D:AF:9B:DD:77:E6:23:FC:7C:7F:5A:8A:0F:67:FD:71:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:c4:db:c8:48:8b:a1:b6:ab:70:6f:e8:c5:7a:40:66:f4:9f: 0e:30:25:c4:65:41:14:ce:08:9d:e7:5b:74:67:53:6d:71:3e: 90:fe:e3:e9:6e:6c:32:ef:43:1d:d5:a3:7c:72:2a:6a:06:8d: ab:74:74:44:70:43:36:b0:98:ae:79:63:1e:fc:cd:f3:93:da: 6b:1e:7c:f5:91:a1:b9:71:3f:1d:c4:f3:13:ca:b6:86:52:f4: c4:99:52:12:f6:a6:33:7d:72:ee:f7:d1:c5:ea:80:0d:a6:25: 07:0d:86:03:f1:90:7d:2b:df:ef:52:ae:f6:91:95:16:f0:61: cd:8b:dd:45:3c:23:44:fb:f4:bd:82:a5:e7:14:07:64:93:cf: 2f:9e:a3:69:e3:86:52:ab:bf:db:97:75:81:d4:c5:f3:87:90: c4:d7:a1:6a:41:59:6c:de:6b:fe:e9:96:55:c5:31:3a:3c:d6: 6e:3a:3c:e4:af:fb:db:94:2e:fd:35:da:ad:57:a4:ef:53:cd: 93:b9:39:2b:70:82:43:2a:80:ac:4f:e4:b3:73:6c:0f:8f:fa: 48:90:19:83:19:3b:5a:45:43:f8:9f:87:b0:0e:72:d4:57:88: f3:6d:31:c4:02:66:a4:87:2b:6b:75:df:71:f4:ac:7f:5c:f5: bd:fb:94:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMebbiispInowZVxprHHefKATbUgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM1QUUzNkRBRjlCREQ3N0U2MjNGQzdDN0Y1QThBMEY2 N0ZENzE2RjAeFw0yNjExMDIxMDQ2MTdaFw0yNjExMDMxNDEyMTdaMDMxMTAvBgNV BAMTKDkxQTMwNzIwMDEzRkFCQzY2RTdDQkE2MTFFNzk3OEYxMTEyMkUyNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDILF6U0/UFFI9FOEo78Q4SrGEW Q5LnRI6BDaVaEYjSa+mJOcZ5o6QJKoTNb1owUQ75lSbS/IHM9JjW2/iQ/fFpSIvz TSixworVcZ/9kXmYUbhwLgDI92BUoeAY05HaCzULeIVsbZn7CtnnVDrqz3GqY68r 0rlZJjwmBI7wt3V6TThvam4tI7rMx5mCNHASnv65TaF2mCHrHh0L4+rGsK2LORoT mWXwrS/WpTd+9yIQFERxE9XDWEywt8mqa/oOs7F9yBiIkknnzuq5q/NcWSrC1zfV tpSOQnRQb/c5bu20UnTrsVKTbFv05+bLnP81xkvsDVQxF6ujDc6GYYp5UPQ5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkaMHIAE/q8ZufLphHnl48REi4m0wHwYDVR0j BBgwFoAU7Frjba+b3XfmI/x8f1qKD2f9cW8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWYzMGU0YWUtM2U0Ny00NTQwLTgyM2MtNTNjYWYyMjY3YjM2LzAvRUM1QUUzNkRB RjlCREQ3N0U2MjNGQzdDN0Y1QThBMEY2N0ZENzE2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FQzVBRTM2REFGOUJERDc3RTYyM0ZDN0M3RjVBOEEwRjY3RkQ3 MTZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWYzMGU0YWUtM2U0Ny00NTQwLTgy M2MtNTNjYWYyMjY3YjM2LzAvRUM1QUUzNkRBRjlCREQ3N0U2MjNGQzdDN0Y1QThB MEY2N0ZENzE2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG7E28hIi6G2q3Bv6MV6QGb0nw4wJcRlQRTO CJ3nW3RnU21xPpD+4+lubDLvQx3Vo3xyKmoGjat0dERwQzawmK55Yx78zfOT2mse fPWRoblxPx3E8xPKtoZS9MSZUhL2pjN9cu730cXqgA2mJQcNhgPxkH0r3+9SrvaR lRbwYc2L3UU8I0T79L2CpecUB2STzy+eo2njhlKrv9uXdYHUxfOHkMTXoWpBWWze a/7pllXFMTo81m46POSv+9uULv012q1XpO9TzZO5OStwgkMqgKxP5LNzbA+P+kiQ GYMZO1pFQ/ifh7AOctRXiPNtMcQCZqSHK2t133H0rH9c9b37lBg= -----END CERTIFICATE-----Generated at Mon Nov 2 22:11:39 2026 by rpki-client