$ rpki-client -vvvf rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.mft File: ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.mft (raw, json) Hash identifier: eZLSp91BX2DZycVDjT7caJhRBh990eDAJbEw2ZvkBqI= Subject key identifier: AF:39:05:BC:A5:8B:F6:2D:4A:51:CC:F0:97:4A:6B:47:73:1B:AC:ED Authority key identifier: EC:A0:04:7E:A8:E4:DC:E9:2E:BC:57:2E:E8:A1:1D:17:C6:B6:48:72 Certificate issuer: /CN=ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872 Certificate serial: 247EA4D403B8238967F17FB78D21A956BE277177 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.mft Manifest number: BA Signing time: Thu 17 Sep 2026 09:40:36 +0000 Manifest this update: Thu 17 Sep 2026 09:35:36 +0000 Manifest next update: Fri 18 Sep 2026 12:23:36 +0000 Files and hashes: 1: 3135372e36362e35392e302f32342d3234203d3e203633383633.roa (hash: xBh74co4G4oy4kEOH1+s92iqFVlcazWJc0LznYHJ110=) 2: ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.crl (hash: YLXCrISoXLVhsQ2H5GMAJj9S+1XalHU3WGbGu4sAc38=) 3: 3135372e36362e35382e302f32342d3234203d3e203633383633.roa (hash: a6w3hGAhWsxMabz324Q4GA5dPuEuhj0nKmf3WW+KTCc=) 4: 3135372e36362e35382e302f32332d3233203d3e203633383633.roa (hash: UIZ5WPv7k1hpGcTiFHJVpKxY08OSIOQ+IDxbkKabgJw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.crl rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:7e:a4:d4:03:b8:23:89:67:f1:7f:b7:8d:21:a9:56:be:27:71:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872 Validity Not Before: Sep 17 09:35:36 2026 GMT Not After : Sep 18 12:23:36 2026 GMT Subject: CN=AF3905BCA58BF62D4A51CCF0974A6B47731BACED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9b:7d:d5:97:5a:d8:1a:fb:9e:89:31:b9:c9: 7d:9f:76:39:ef:94:18:1b:62:90:66:05:ff:d8:7a: 1f:fe:41:53:0e:86:28:e9:8d:ef:c4:53:09:f5:40: 8c:5d:a2:6b:41:5d:cb:ca:7c:d9:99:43:af:81:24: 4d:aa:84:07:2b:fc:b8:f6:f3:69:2b:3a:53:4b:28: d5:6c:80:50:3c:03:01:f3:e0:7b:ce:20:36:7e:02: 00:47:de:33:4c:48:5a:90:83:18:54:ac:0b:98:12: 80:b5:81:d0:ab:6b:6f:f3:aa:81:b2:65:42:47:b2: 9f:02:21:47:bb:e5:f2:55:ef:e4:48:8e:87:ad:55: 5c:62:0a:1e:ec:2c:16:68:8c:13:ea:72:bc:84:c9: 23:c4:51:59:89:f3:30:a5:c6:8a:9f:15:f0:54:e8: 24:e8:3f:db:d1:4d:96:b4:8d:45:73:5f:e9:00:02: 42:e7:bc:de:9d:57:43:45:13:4e:52:ae:69:4f:80: 90:82:ad:26:fc:58:9b:64:d5:21:a9:93:15:9d:be: 32:2a:df:81:38:f6:19:5d:a2:3b:d9:d2:d1:7e:4f: 6c:7a:42:59:6e:bd:e7:a3:2c:51:24:1a:2c:ca:46: 41:e2:48:10:c3:da:b9:4e:49:2c:af:c0:0d:ab:ae: 71:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:39:05:BC:A5:8B:F6:2D:4A:51:CC:F0:97:4A:6B:47:73:1B:AC:ED X509v3 Authority Key Identifier: keyid:EC:A0:04:7E:A8:E4:DC:E9:2E:BC:57:2E:E8:A1:1D:17:C6:B6:48:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:9e:62:a9:e7:77:b7:c0:2c:28:f4:c9:8e:cd:00:dd:e7:aa: 76:36:02:a5:bd:da:e8:c0:78:74:cd:7d:29:ef:2f:43:01:50: a0:ac:9b:65:6e:50:b6:ce:a9:6a:6f:8b:1f:e8:9a:67:d9:bd: 80:53:73:eb:c7:46:5d:88:45:b2:89:23:ee:f4:6c:82:c7:6e: c6:2b:23:6e:3b:0c:a2:ef:72:fe:c1:ef:96:b8:04:79:74:81: 8c:f2:fb:e6:4a:dc:c4:60:86:80:8a:62:50:41:9f:5a:64:57: 7f:1d:0c:96:85:89:77:06:b4:e7:07:14:4d:36:2b:bf:b7:10: ef:3a:4d:dc:56:e5:90:e0:2e:62:2e:c4:19:46:21:82:f3:bb: 43:69:6d:9e:24:05:fd:65:9f:25:cb:dc:1e:5b:58:96:22:a4: 49:78:01:15:46:8c:ec:90:e6:74:3a:21:13:00:f3:5c:53:6f: 28:2a:a2:00:54:87:cd:50:53:21:3d:7c:1b:de:70:13:f9:cd: e9:8d:67:10:f4:24:d7:95:38:5e:20:9b:19:8f:43:69:ca:dd: 08:3d:eb:3a:d5:4e:96:54:40:55:2b:8f:03:64:78:33:b6:04: fd:d9:5f:30:02:cc:28:77:0e:16:e6:cd:8c:d2:09:07:97:0d: 05:5a:fd:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJH6k1AO4I4ln8X+3jSGpVr4ncXcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUNBMDA0N0VBOEU0RENFOTJFQkM1NzJFRThBMTFEMTdD NkI2NDg3MjAeFw0yNjA5MTcwOTM1MzZaFw0yNjA5MTgxMjIzMzZaMDMxMTAvBgNV BAMTKEFGMzkwNUJDQTU4QkY2MkQ0QTUxQ0NGMDk3NEE2QjQ3NzMxQkFDRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqm33Vl1rYGvueiTG5yX2fdjnv lBgbYpBmBf/Yeh/+QVMOhijpje/EUwn1QIxdomtBXcvKfNmZQ6+BJE2qhAcr/Lj2 82krOlNLKNVsgFA8AwHz4HvOIDZ+AgBH3jNMSFqQgxhUrAuYEoC1gdCra2/zqoGy ZUJHsp8CIUe75fJV7+RIjoetVVxiCh7sLBZojBPqcryEySPEUVmJ8zClxoqfFfBU 6CToP9vRTZa0jUVzX+kAAkLnvN6dV0NFE05SrmlPgJCCrSb8WJtk1SGpkxWdvjIq 34E49hldojvZ0tF+T2x6QlluveejLFEkGizKRkHiSBDD2rlOSSyvwA2rrnFJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrzkFvKWL9i1KUczwl0prR3MbrO0wHwYDVR0j BBgwFoAU7KAEfqjk3OkuvFcu6KEdF8a2SHIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDZiMDVmMzYtZTE3NC00ZGFkLWJjMmEtMDg5MjZjNWRkMDQ2LzAvRUNBMDA0N0VB OEU0RENFOTJFQkM1NzJFRThBMTFEMTdDNkI2NDg3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FQ0EwMDQ3RUE4RTREQ0U5MkVCQzU3MkVFOEExMUQxN0M2QjY0 ODcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDZiMDVmMzYtZTE3NC00ZGFkLWJj MmEtMDg5MjZjNWRkMDQ2LzAvRUNBMDA0N0VBOEU0RENFOTJFQkM1NzJFRThBMTFE MTdDNkI2NDg3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKieYqnnd7fALCj0yY7NAN3nqnY2AqW92ujA eHTNfSnvL0MBUKCsm2VuULbOqWpvix/ommfZvYBTc+vHRl2IRbKJI+70bILHbsYr I247DKLvcv7B75a4BHl0gYzy++ZK3MRghoCKYlBBn1pkV38dDJaFiXcGtOcHFE02 K7+3EO86TdxW5ZDgLmIuxBlGIYLzu0NpbZ4kBf1lnyXL3B5bWJYipEl4ARVGjOyQ 5nQ6IRMA81xTbygqogBUh81QUyE9fBvecBP5zemNZxD0JNeVOF4gmxmPQ2nK3Qg9 6zrVTpZUQFUrjwNkeDO2BP3ZXzACzCh3DhbmzYzSCQeXDQVa/ZE= -----END CERTIFICATE-----Generated at Thu Sep 17 12:20:33 2026 by rpki-client