$ rpki-client -vvf rpki-rsync.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.mft File: EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.mft (raw, json) Hash identifier: lXUqqCHTHXSBXDxgoMKr9GZY0AXk9UnexLv3+9KU3EQ= Subject key identifier: 69:0D:E6:66:40:AC:F3:BE:67:01:9B:61:07:FA:97:F2:94:A0:7F:97 Authority key identifier: EC:37:43:E1:96:2B:A6:6D:28:18:EC:E8:EA:B3:62:CE:14:FE:F9:BA Certificate issuer: /CN=EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA Certificate serial: 53F484E6FA28CD7B2C063B13110A364B16AA7EFD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 19:09:08 +0000 Manifest this update: Fri 19 Jun 2026 19:04:08 +0000 Manifest next update: Sat 20 Jun 2026 22:03:08 +0000 Files and hashes: 1: EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.crl (hash: cgMslmSZbMUzogiNbZT5X4x2Atc07QkTKsyKzwjtAdk=) 2: 3130332e3137302e3139382e302f32342d3234203d3e20313530343634.roa (hash: bDEwNBU/hyb8sFiOR3/rIXRPkiHtGsgyi3R43KSze7M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.crl rsync://rpki-rsync.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 22:03:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:f4:84:e6:fa:28:cd:7b:2c:06:3b:13:11:0a:36:4b:16:aa:7e:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA Validity Not Before: Jun 19 19:04:08 2026 GMT Not After : Jun 20 22:03:08 2026 GMT Subject: CN=690DE66640ACF3BE67019B6107FA97F294A07F97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:cf:ab:33:cb:61:ca:7e:a2:3c:56:1b:4b:26: 99:a7:b3:e3:5d:ea:9a:83:bd:20:31:8d:14:af:15: 89:c0:3e:1c:06:ad:82:ce:34:cc:e0:ce:b9:ce:2f: 68:39:25:09:92:0e:a6:90:64:4b:f7:dd:99:dc:27: cb:2d:a3:2f:f7:61:b8:78:07:27:38:48:8b:0c:31: 4a:d2:3e:3b:34:76:23:6a:c8:93:61:99:26:c7:19: 0d:be:e7:f3:53:1d:bb:cb:4d:54:a8:cc:f9:7d:81: 12:b0:5d:ec:1e:9e:b8:05:db:b9:f3:94:f1:7c:b1: 43:f9:ce:06:d5:11:e5:a7:39:c4:47:ba:7c:59:9e: bd:de:f7:86:98:c4:d6:14:9f:80:bf:53:16:fb:64: f9:ee:b4:89:da:38:1a:66:c4:e0:72:8e:ad:5b:e0: a2:be:f2:15:fc:86:dc:99:b8:2c:79:21:ba:2b:83: 10:e3:b1:26:5e:50:76:11:65:52:75:d2:46:ed:63: de:49:5c:c4:32:d8:95:e7:22:db:ce:f2:04:34:de: e1:6b:ab:29:24:49:9b:4a:8c:dd:69:e6:c1:18:39: af:3c:10:10:1e:fa:bc:e5:17:34:1b:b1:d8:a4:ec: 24:77:55:4c:4e:ab:f1:51:d3:33:fc:e7:52:08:e8: 00:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:0D:E6:66:40:AC:F3:BE:67:01:9B:61:07:FA:97:F2:94:A0:7F:97 X509v3 Authority Key Identifier: keyid:EC:37:43:E1:96:2B:A6:6D:28:18:EC:E8:EA:B3:62:CE:14:FE:F9:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:9c:27:1f:2f:cd:9c:b6:45:c4:b1:79:82:2f:6d:a3:02:e7: 0d:16:7b:5f:cb:80:cb:5e:88:6a:17:da:f8:78:ec:b2:72:5d: 2f:49:a1:ca:4b:17:60:8e:c5:e9:b3:ce:2f:24:08:11:9d:98: 8b:fa:72:c3:f3:c1:c0:a0:14:46:aa:62:f4:a3:93:8b:30:a3: b0:f9:d4:99:ca:6e:fc:05:cb:96:99:61:71:23:26:26:9c:96: 6f:4f:b3:74:02:aa:5c:77:f9:68:d0:f9:4f:69:38:17:a8:fa: c1:25:45:56:69:7b:87:a1:a8:ab:ab:c7:9d:9f:68:8a:ef:d8: f4:13:c3:84:ca:eb:06:60:57:51:c8:f7:bf:25:64:31:07:9b: 37:85:cf:1b:e8:54:bb:d3:0a:db:3e:e8:09:eb:5f:c0:1a:15: 76:0f:d9:42:19:6a:0f:94:41:16:b5:8d:45:f1:c5:42:13:72: 58:cb:ae:4f:32:25:07:ee:0d:8f:0a:1a:fe:fb:ac:60:77:00: 55:0d:cc:41:f4:d4:fa:36:f1:c1:35:28:eb:08:ca:29:a6:89: e7:07:3c:7d:f7:e0:7c:5d:75:08:f3:6a:7c:ce:cb:ad:6e:0b: 7d:f8:cc:e0:b3:bc:58:d5:99:70:b6:b9:f4:e4:0a:5c:17:6e: f9:dc:f4:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU/SE5voozXssBjsTEQo2Sxaqfv0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUMzNzQzRTE5NjJCQTY2RDI4MThFQ0U4RUFCMzYyQ0Ux NEZFRjlCQTAeFw0yNjA2MTkxOTA0MDhaFw0yNjA2MjAyMjAzMDhaMDMxMTAvBgNV BAMTKDY5MERFNjY2NDBBQ0YzQkU2NzAxOUI2MTA3RkE5N0YyOTRBMDdGOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWz6szy2HKfqI8VhtLJpmns+Nd 6pqDvSAxjRSvFYnAPhwGrYLONMzgzrnOL2g5JQmSDqaQZEv33ZncJ8stoy/3Ybh4 Byc4SIsMMUrSPjs0diNqyJNhmSbHGQ2+5/NTHbvLTVSozPl9gRKwXewenrgF27nz lPF8sUP5zgbVEeWnOcRHunxZnr3e94aYxNYUn4C/Uxb7ZPnutInaOBpmxOByjq1b 4KK+8hX8htyZuCx5IborgxDjsSZeUHYRZVJ10kbtY95JXMQy2JXnItvO8gQ03uFr qykkSZtKjN1p5sEYOa88EBAe+rzlFzQbsdik7CR3VUxOq/FR0zP851II6AB/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaQ3mZkCs875nAZthB/qX8pSgf5cwHwYDVR0j BBgwFoAU7DdD4ZYrpm0oGOzo6rNizhT++bowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzBkYTU4ODItYjgwNC00MTU0LTk1OWItNjMzNmIyNGUxOGIyLzAvRUMzNzQzRTE5 NjJCQTY2RDI4MThFQ0U4RUFCMzYyQ0UxNEZFRjlCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQzM3NDNFMTk2MkJBNjZEMjgxOEVDRThFQUIzNjJDRTE0RkVG OUJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzBkYTU4ODItYjgwNC00MTU0LTk1 OWItNjMzNmIyNGUxOGIyLzAvRUMzNzQzRTE5NjJCQTY2RDI4MThFQ0U4RUFCMzYy Q0UxNEZFRjlCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADScJx8vzZy2RcSxeYIvbaMC5w0We1/LgMte iGoX2vh47LJyXS9JocpLF2COxemzzi8kCBGdmIv6csPzwcCgFEaqYvSjk4swo7D5 1JnKbvwFy5aZYXEjJiaclm9Ps3QCqlx3+WjQ+U9pOBeo+sElRVZpe4ehqKurx52f aIrv2PQTw4TK6wZgV1HI978lZDEHmzeFzxvoVLvTCts+6AnrX8AaFXYP2UIZag+U QRa1jUXxxUITcljLrk8yJQfuDY8KGv77rGB3AFUNzEH01Po28cE1KOsIyimmiecH PH334HxddQjzanzOy61uC334zOCzvFjVmXC2ufTkClwXbvnc9DM= -----END CERTIFICATE-----Generated at Sat Jun 20 08:58:51 2026 by rpki-client