$ rpki-client -vvf rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.mft File: ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.mft (raw, json) Hash identifier: MSguYF3Lhwljffwr6vkkGY9o8MLi8Ej5yuNYOcFsLpk= Subject key identifier: 93:5D:51:0F:D5:7B:E1:28:24:62:07:18:1A:7C:C9:05:14:54:7D:39 Authority key identifier: EC:C7:A0:2E:2A:15:47:57:E3:DB:5D:E7:2B:90:DA:46:6F:43:0E:E3 Certificate issuer: /CN=ECC7A02E2A154757E3DB5DE72B90DA466F430EE3 Certificate serial: 14D5DE6C712CB8A5CA5C56C422FFC712775577CA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.mft Manifest number: 40 Signing time: Wed 17 Jun 2026 23:00:28 +0000 Manifest this update: Wed 17 Jun 2026 22:55:28 +0000 Manifest next update: Fri 19 Jun 2026 02:21:28 +0000 Files and hashes: 1: ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.crl (hash: dtk78ISaGe6D74N2BwKS8zHCSflxHre4nQXsaXFYqhU=) 2: 3135372e31352e35312e302f32342d3234203d3e20313530343934.roa (hash: eXa5aSDdrCtqvVMG17UDbY8fW0WBNN3GZ2WD5zRuz9o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.crl rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 02:21:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:d5:de:6c:71:2c:b8:a5:ca:5c:56:c4:22:ff:c7:12:77:55:77:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ECC7A02E2A154757E3DB5DE72B90DA466F430EE3 Validity Not Before: Jun 17 22:55:28 2026 GMT Not After : Jun 19 02:21:28 2026 GMT Subject: CN=935D510FD57BE128246207181A7CC90514547D39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ce:09:96:0d:19:9d:a6:fd:7b:49:3e:74:2e: 54:31:99:26:3e:3f:4e:92:c3:27:bb:60:14:0c:c7: 43:7d:78:85:0a:e8:e7:8a:39:47:d5:d0:1e:82:88: a4:fc:49:9c:0d:7e:1c:5e:dd:0f:87:4d:71:c8:f4: 71:ed:0c:82:01:c7:b9:d7:1c:22:96:d7:da:1c:f4: 12:69:0a:e9:2f:a3:fe:d5:b4:5b:ce:6f:b3:19:39: b8:3a:5d:10:a2:0b:46:7b:b6:cc:95:35:a4:7c:38: 48:b7:fe:1e:12:c2:0e:c2:0f:47:16:00:bc:dd:db: 9a:56:ea:2d:42:e8:9e:ee:2f:f5:ca:89:51:df:3c: 8c:c2:f8:76:61:42:21:58:81:4c:d7:1c:0f:21:2a: 76:04:33:34:61:d4:22:8e:0a:07:9e:4c:4b:4f:61: 73:02:98:b4:ad:9f:8f:49:ab:27:68:83:72:52:9c: ee:47:76:fe:d1:af:6e:bf:05:ac:f5:fb:22:d8:b1: be:5a:83:e9:78:3a:a2:89:79:e3:4d:11:0a:c3:9a: ae:3a:db:c7:b0:53:8c:f9:6f:43:e5:ea:b9:6e:be: 2b:26:54:f3:3c:bc:83:29:15:49:4c:0c:9d:e3:f5: c6:a6:6f:ab:0e:c6:1f:cd:51:88:a8:f5:bd:0b:e0: 66:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:5D:51:0F:D5:7B:E1:28:24:62:07:18:1A:7C:C9:05:14:54:7D:39 X509v3 Authority Key Identifier: keyid:EC:C7:A0:2E:2A:15:47:57:E3:DB:5D:E7:2B:90:DA:46:6F:43:0E:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:69:d0:31:77:bf:a4:c2:d1:a6:1c:a8:5c:53:2c:06:cb:80: 32:5e:db:85:0b:e8:39:6a:86:32:e4:9a:0c:53:74:0c:e8:19: ce:dc:4c:e5:b6:93:f2:93:fe:78:27:a0:22:00:9c:4e:20:5d: 58:0b:5b:99:0a:88:95:c3:4c:eb:c0:6e:b7:75:ae:b5:7c:bf: 56:c5:49:56:d4:e5:63:8a:5a:a0:4d:95:2d:14:ae:89:4d:a7: 3f:a1:1d:8d:15:b7:7b:ef:42:ab:dc:a6:96:01:d8:0b:b2:4e: ee:36:93:46:a6:ba:6a:28:48:a2:02:cd:bc:b9:fb:20:c2:6e: f1:8a:89:57:e3:7c:1e:f3:d9:ca:4f:cf:87:dd:6c:18:6d:e5: aa:fc:68:9f:0a:41:66:3b:73:d7:14:28:fc:b9:50:1e:de:ee: ed:65:0e:86:d2:9f:b7:d6:17:74:32:68:af:1a:e2:1e:27:06: 1b:a0:19:4f:19:49:54:76:1e:03:9d:9c:1b:08:66:75:de:a4: d9:bc:90:e3:81:1d:02:b1:9f:52:b6:1a:12:5d:b8:29:ba:0e: fc:2d:34:72:37:83:c7:10:5f:55:48:40:aa:83:3b:8b:6f:6e: 22:c5:19:56:8d:9a:7e:fd:3c:84:43:26:04:2d:92:c1:a2:b9: 10:aa:12:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFNXebHEsuKXKXFbEIv/HEndVd8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUNDN0EwMkUyQTE1NDc1N0UzREI1REU3MkI5MERBNDY2 RjQzMEVFMzAeFw0yNjA2MTcyMjU1MjhaFw0yNjA2MTkwMjIxMjhaMDMxMTAvBgNV BAMTKDkzNUQ1MTBGRDU3QkUxMjgyNDYyMDcxODFBN0NDOTA1MTQ1NDdEMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGzgmWDRmdpv17ST50LlQxmSY+ P06Swye7YBQMx0N9eIUK6OeKOUfV0B6CiKT8SZwNfhxe3Q+HTXHI9HHtDIIBx7nX HCKW19oc9BJpCukvo/7VtFvOb7MZObg6XRCiC0Z7tsyVNaR8OEi3/h4Swg7CD0cW ALzd25pW6i1C6J7uL/XKiVHfPIzC+HZhQiFYgUzXHA8hKnYEMzRh1CKOCgeeTEtP YXMCmLStn49Jqydog3JSnO5Hdv7Rr26/Baz1+yLYsb5ag+l4OqKJeeNNEQrDmq46 28ewU4z5b0Pl6rluvismVPM8vIMpFUlMDJ3j9camb6sOxh/NUYio9b0L4GYXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk11RD9V74SgkYgcYGnzJBRRUfTkwHwYDVR0j BBgwFoAU7MegLioVR1fj213nK5DaRm9DDuMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGJiOGU2MTItN2JiMy00OGRlLTk2OWQtNzFiNDVmNDZhMTYxLzAvRUNDN0EwMkUy QTE1NDc1N0UzREI1REU3MkI5MERBNDY2RjQzMEVFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FQ0M3QTAyRTJBMTU0NzU3RTNEQjVERTcyQjkwREE0NjZGNDMw RUUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGJiOGU2MTItN2JiMy00OGRlLTk2 OWQtNzFiNDVmNDZhMTYxLzAvRUNDN0EwMkUyQTE1NDc1N0UzREI1REU3MkI5MERB NDY2RjQzMEVFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFxp0DF3v6TC0aYcqFxTLAbLgDJe24UL6Dlq hjLkmgxTdAzoGc7cTOW2k/KT/ngnoCIAnE4gXVgLW5kKiJXDTOvAbrd1rrV8v1bF SVbU5WOKWqBNlS0UrolNpz+hHY0Vt3vvQqvcppYB2AuyTu42k0amumooSKICzby5 +yDCbvGKiVfjfB7z2cpPz4fdbBht5ar8aJ8KQWY7c9cUKPy5UB7e7u1lDobSn7fW F3QyaK8a4h4nBhugGU8ZSVR2HgOdnBsIZnXepNm8kOOBHQKxn1K2GhJduCm6Dvwt NHI3g8cQX1VIQKqDO4tvbiLFGVaNmn79PIRDJgQtksGiuRCqEsA= -----END CERTIFICATE-----Generated at Thu Jun 18 17:14:09 2026 by rpki-client