$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft File: EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft (raw, json) Hash identifier: AGkX2H87BafSYyj3nIhKzJ5+GIhpZDy7pn4R9ooX4VI= Subject key identifier: CA:86:9A:24:F4:B7:D6:D7:EF:41:7C:7C:6B:6C:BC:FE:4C:9E:3E:4D Authority key identifier: EC:5A:E3:6D:AF:9B:DD:77:E6:23:FC:7C:7F:5A:8A:0F:67:FD:71:6F Certificate issuer: /CN=EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F Certificate serial: 5E7F1D1428EF572281B0316D53AF265F16B665F6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 09:09:51 +0000 Manifest this update: Thu 17 Sep 2026 09:04:51 +0000 Manifest next update: Fri 18 Sep 2026 12:15:51 +0000 Files and hashes: 1: 3136302e32322e3139382e302f32332d3233203d3e20313532383336.roa (hash: NyaKnWNdcDfhRDv5OOV0uHnlXww5Tu4WFH6FM+NsLLc=) 2: 3136302e32322e3139382e302f32342d3234203d3e20313532383336.roa (hash: 4hzEJ9YbAF9buAExFLN+RTSrGCyc9GGfXKqoc6rWOKY=) 3: EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.crl (hash: JY+jVuH4xf64uVqayAJ8Fms8yfJkWle0sRhyMrSYIAc=) 4: 3136302e32322e3139392e302f32342d3234203d3e20313532383336.roa (hash: a0teJ5lq1xBgiI5mA8EcJ42YaSmlhBF26ShVqEb+s/8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.crl rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:7f:1d:14:28:ef:57:22:81:b0:31:6d:53:af:26:5f:16:b6:65:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F Validity Not Before: Sep 17 09:04:51 2026 GMT Not After : Sep 18 12:15:51 2026 GMT Subject: CN=CA869A24F4B7D6D7EF417C7C6B6CBCFE4C9E3E4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:82:f7:48:98:46:f5:51:c8:92:e6:ff:8a:2e: cf:59:24:e8:01:cc:7e:61:9f:cf:84:26:dc:31:f6: 3b:b1:be:ed:4c:84:08:ab:1d:23:56:ec:a4:86:97: b4:96:dc:a2:d5:f6:59:73:62:21:fd:33:82:a2:91: 92:08:bd:06:6d:f7:da:f5:cf:71:cf:68:ff:39:ca: 57:ea:55:59:ea:98:27:b2:26:12:88:76:66:1b:24: 7e:1b:d6:d8:b9:c2:0d:b6:4c:a2:0e:85:b2:97:14: e0:b6:6b:f2:ef:1f:96:10:4d:50:54:ad:4b:36:4b: 7c:92:56:68:9f:b1:4f:ea:5a:9e:9c:44:2d:4e:04: d2:db:e0:b9:01:31:41:d5:c6:32:17:49:f1:f3:75: 04:63:0b:e7:5e:60:19:1c:fb:ec:06:96:11:69:97: 74:b6:56:ce:2b:0e:e4:9a:82:49:08:86:3d:e9:fe: 24:f4:ba:c1:b9:86:88:d3:a4:06:2e:33:33:96:36: 7a:b6:d7:5a:29:3e:cf:af:4b:5c:b0:bd:ce:63:c2: a8:ec:a0:20:f7:73:b1:1a:8a:db:eb:e5:bb:44:45: a4:4e:72:21:f6:05:61:d8:f4:2f:93:b4:b7:c5:33: 65:1f:13:d7:3a:6d:58:83:b4:6b:dd:67:21:c5:e2: 6c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:86:9A:24:F4:B7:D6:D7:EF:41:7C:7C:6B:6C:BC:FE:4C:9E:3E:4D X509v3 Authority Key Identifier: keyid:EC:5A:E3:6D:AF:9B:DD:77:E6:23:FC:7C:7F:5A:8A:0F:67:FD:71:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:dc:83:28:5e:21:3a:a5:6b:b9:ef:62:5a:84:6b:25:e8:89: c9:d0:8c:0b:5c:f8:69:56:4a:a9:cb:ef:14:f0:f4:24:d3:a7: 15:b3:0e:8e:db:52:fa:96:d1:f0:00:2c:74:fa:ac:14:66:32: 8a:1a:63:7f:c5:4c:32:c5:c6:58:93:7d:3e:44:77:f4:b3:f8: f0:c9:c1:28:88:cf:8b:d8:3a:2e:4f:80:83:aa:eb:fb:0a:fc: 36:5f:15:ed:2d:df:87:15:5a:ce:5e:ce:fe:13:be:3b:cd:da: 71:84:a8:40:8d:83:10:54:5c:0d:35:ae:f2:19:5b:1b:72:bf: 9e:d0:03:66:06:b4:cf:d5:3a:ab:d2:6f:90:f1:a6:5b:55:fd: 5e:73:4b:51:b1:2a:b0:41:6a:e1:dd:ac:b1:2d:bc:e1:2f:6a: 4f:58:6b:de:8c:fd:ff:0b:db:43:3f:5f:1d:c4:ca:cd:8c:ab: 6d:44:d1:5a:f4:81:87:43:dd:41:13:2a:e2:09:fe:47:b8:63: f3:41:2e:3e:33:a7:a2:b7:a5:0e:8d:ef:ee:25:b6:a9:85:e2: 93:cd:c0:49:04:5f:42:ba:80:d0:57:ac:03:50:34:a6:7d:42: 07:a0:dd:2f:a3:fd:38:4f:7c:ff:78:ea:15:49:f0:ac:64:2f: 5d:4c:08:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXn8dFCjvVyKBsDFtU68mXxa2ZfYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM1QUUzNkRBRjlCREQ3N0U2MjNGQzdDN0Y1QThBMEY2 N0ZENzE2RjAeFw0yNjA5MTcwOTA0NTFaFw0yNjA5MTgxMjE1NTFaMDMxMTAvBgNV BAMTKENBODY5QTI0RjRCN0Q2RDdFRjQxN0M3QzZCNkNCQ0ZFNEM5RTNFNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMgvdImEb1UciS5v+KLs9ZJOgB zH5hn8+EJtwx9juxvu1MhAirHSNW7KSGl7SW3KLV9llzYiH9M4KikZIIvQZt99r1 z3HPaP85ylfqVVnqmCeyJhKIdmYbJH4b1ti5wg22TKIOhbKXFOC2a/LvH5YQTVBU rUs2S3ySVmifsU/qWp6cRC1OBNLb4LkBMUHVxjIXSfHzdQRjC+deYBkc++wGlhFp l3S2Vs4rDuSagkkIhj3p/iT0usG5hojTpAYuMzOWNnq211opPs+vS1ywvc5jwqjs oCD3c7Eaitvr5btERaROciH2BWHY9C+TtLfFM2UfE9c6bViDtGvdZyHF4mwvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyoaaJPS31tfvQXx8a2y8/kyePk0wHwYDVR0j BBgwFoAU7Frjba+b3XfmI/x8f1qKD2f9cW8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWYzMGU0YWUtM2U0Ny00NTQwLTgyM2MtNTNjYWYyMjY3YjM2LzAvRUM1QUUzNkRB RjlCREQ3N0U2MjNGQzdDN0Y1QThBMEY2N0ZENzE2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FQzVBRTM2REFGOUJERDc3RTYyM0ZDN0M3RjVBOEEwRjY3RkQ3 MTZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWYzMGU0YWUtM2U0Ny00NTQwLTgy M2MtNTNjYWYyMjY3YjM2LzAvRUM1QUUzNkRBRjlCREQ3N0U2MjNGQzdDN0Y1QThB MEY2N0ZENzE2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAncgyheITqla7nvYlqEayXoicnQjAtc+GlW SqnL7xTw9CTTpxWzDo7bUvqW0fAALHT6rBRmMooaY3/FTDLFxliTfT5Ed/Sz+PDJ wSiIz4vYOi5PgIOq6/sK/DZfFe0t34cVWs5ezv4TvjvN2nGEqECNgxBUXA01rvIZ Wxtyv57QA2YGtM/VOqvSb5DxpltV/V5zS1GxKrBBauHdrLEtvOEvak9Ya96M/f8L 20M/Xx3Eys2Mq21E0Vr0gYdD3UETKuIJ/ke4Y/NBLj4zp6K3pQ6N7+4ltqmF4pPN wEkEX0K6gNBXrANQNKZ9Qgeg3S+j/ThPfP946hVJ8KxkL11MCM8= -----END CERTIFICATE-----Generated at Thu Sep 17 10:47:52 2026 by rpki-client