$ rpki-client -vvf rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft File: EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft (raw, json) Hash identifier: WQWn/RjPRm59DDlFV+vQlIFzCNT5URys9sNNyEjU0a8= Subject key identifier: 85:88:34:B2:4D:0E:E9:F6:9B:D8:D5:72:0C:0A:57:C7:94:8C:2E:FD Authority key identifier: EC:5A:E3:6D:AF:9B:DD:77:E6:23:FC:7C:7F:5A:8A:0F:67:FD:71:6F Certificate issuer: /CN=EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F Certificate serial: 62060C4D662F4192F00164C232C2834BD2631B3A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 04:01:46 +0000 Manifest this update: Thu 18 Jun 2026 03:56:46 +0000 Manifest next update: Fri 19 Jun 2026 04:25:46 +0000 Files and hashes: 1: EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.crl (hash: sC96I9bK9awOK7G1ylQ0rcCHfHFmA92+Tyrax8XYLAI=) 2: 3136302e32322e3139382e302f32342d3234203d3e20313532383336.roa (hash: 4hzEJ9YbAF9buAExFLN+RTSrGCyc9GGfXKqoc6rWOKY=) 3: 3136302e32322e3139392e302f32342d3234203d3e20313532383336.roa (hash: a0teJ5lq1xBgiI5mA8EcJ42YaSmlhBF26ShVqEb+s/8=) 4: 3136302e32322e3139382e302f32332d3233203d3e20313532383336.roa (hash: NyaKnWNdcDfhRDv5OOV0uHnlXww5Tu4WFH6FM+NsLLc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.crl rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 04:25:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:06:0c:4d:66:2f:41:92:f0:01:64:c2:32:c2:83:4b:d2:63:1b:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F Validity Not Before: Jun 18 03:56:46 2026 GMT Not After : Jun 19 04:25:46 2026 GMT Subject: CN=858834B24D0EE9F69BD8D5720C0A57C7948C2EFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f1:43:55:13:df:8d:9d:5e:b8:0d:bc:a9:c3: 16:ea:77:c6:b1:58:34:ef:1a:c9:d8:5d:0b:ff:f3: 46:65:e2:d7:5f:aa:2b:11:3f:ae:62:cd:99:f6:79: 4c:9a:54:49:2f:1e:cb:bf:99:15:73:95:09:7f:b5: f9:c1:99:9b:f5:e5:86:d4:2a:35:f1:30:e5:02:b3: cf:e8:be:c3:50:eb:aa:a4:c9:f9:90:44:72:49:c1: af:dd:ce:5d:82:fc:9d:06:4d:6a:1a:35:b6:34:3b: 44:ca:60:be:ef:3f:1d:7f:e9:86:c8:d2:1e:db:a0: 9c:1f:4b:75:81:dc:5c:52:e0:c7:82:01:80:8b:3d: f4:17:83:64:79:40:16:e2:30:10:68:59:c5:a0:f6: 40:2e:4b:b8:56:62:10:55:5d:f9:08:8d:35:42:8e: 99:75:23:00:20:0a:98:5f:0f:6c:cd:8b:9b:91:4a: d5:3b:21:ea:ee:b0:aa:96:28:7e:c4:e3:a3:c3:25: 28:2e:ae:79:53:13:a5:25:04:1b:6a:81:f3:03:22: 8b:03:83:21:02:a5:2f:40:da:20:1b:4a:f1:84:0c: 8c:cf:9e:08:90:17:59:74:48:44:f5:18:7d:54:cd: b3:b5:96:8b:f7:e7:7b:0a:e9:84:15:af:a7:25:91: 82:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:88:34:B2:4D:0E:E9:F6:9B:D8:D5:72:0C:0A:57:C7:94:8C:2E:FD X509v3 Authority Key Identifier: keyid:EC:5A:E3:6D:AF:9B:DD:77:E6:23:FC:7C:7F:5A:8A:0F:67:FD:71:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:3d:34:68:92:9a:8d:ba:1e:6a:81:81:1a:65:b8:b9:16:a4: 77:29:9e:ff:da:b8:8f:dd:2f:47:b3:14:aa:d7:58:b3:85:7f: e6:3a:00:8d:a4:4f:ae:dc:52:12:c6:41:c7:e2:5c:7e:3f:b9: 65:82:c2:4a:d0:3e:e0:46:1e:eb:52:7d:fd:a3:12:e6:fa:de: aa:0f:93:8e:1a:d4:b2:2f:fe:23:de:ce:30:88:3f:25:82:de: cc:38:30:51:4a:75:a2:5e:10:ce:81:8f:e4:a9:d6:d2:0b:61: 67:8e:d2:0a:2f:e0:2b:80:e4:18:ff:0a:73:23:5d:da:75:f3: 91:5e:da:ae:c9:f4:63:78:76:88:56:b9:ca:0d:c6:b9:ea:f2: 94:f8:a4:6f:34:ed:b4:44:36:06:ea:43:ac:3d:0a:ce:8b:50: 1e:93:d8:15:9f:b3:eb:63:79:12:a4:de:fb:e3:c6:ac:d2:3d: b7:2e:2f:c5:b3:71:53:d6:fb:92:5e:5c:94:ce:cf:22:0b:95: fa:5a:11:64:c3:c7:09:18:97:ea:22:07:1d:73:0b:3f:c3:05: 46:d4:4b:fe:0e:0f:ee:26:da:ef:8b:bc:98:03:59:96:a0:a1: b7:59:ce:22:22:5e:08:be:8b:b4:10:26:af:03:f7:32:30:c8: ef:50:f8:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYgYMTWYvQZLwAWTCMsKDS9JjGzowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM1QUUzNkRBRjlCREQ3N0U2MjNGQzdDN0Y1QThBMEY2 N0ZENzE2RjAeFw0yNjA2MTgwMzU2NDZaFw0yNjA2MTkwNDI1NDZaMDMxMTAvBgNV BAMTKDg1ODgzNEIyNEQwRUU5RjY5QkQ4RDU3MjBDMEE1N0M3OTQ4QzJFRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM8UNVE9+NnV64Dbypwxbqd8ax WDTvGsnYXQv/80Zl4tdfqisRP65izZn2eUyaVEkvHsu/mRVzlQl/tfnBmZv15YbU KjXxMOUCs8/ovsNQ66qkyfmQRHJJwa/dzl2C/J0GTWoaNbY0O0TKYL7vPx1/6YbI 0h7boJwfS3WB3FxS4MeCAYCLPfQXg2R5QBbiMBBoWcWg9kAuS7hWYhBVXfkIjTVC jpl1IwAgCphfD2zNi5uRStU7IerusKqWKH7E46PDJSgurnlTE6UlBBtqgfMDIosD gyECpS9A2iAbSvGEDIzPngiQF1l0SET1GH1UzbO1lov353sK6YQVr6clkYLxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhYg0sk0O6fab2NVyDApXx5SMLv0wHwYDVR0j BBgwFoAU7Frjba+b3XfmI/x8f1qKD2f9cW8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWYzMGU0YWUtM2U0Ny00NTQwLTgyM2MtNTNjYWYyMjY3YjM2LzAvRUM1QUUzNkRB RjlCREQ3N0U2MjNGQzdDN0Y1QThBMEY2N0ZENzE2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FQzVBRTM2REFGOUJERDc3RTYyM0ZDN0M3RjVBOEEwRjY3RkQ3 MTZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWYzMGU0YWUtM2U0Ny00NTQwLTgy M2MtNTNjYWYyMjY3YjM2LzAvRUM1QUUzNkRBRjlCREQ3N0U2MjNGQzdDN0Y1QThB MEY2N0ZENzE2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEs9NGiSmo26HmqBgRpluLkWpHcpnv/auI/d L0ezFKrXWLOFf+Y6AI2kT67cUhLGQcfiXH4/uWWCwkrQPuBGHutSff2jEub63qoP k44a1LIv/iPezjCIPyWC3sw4MFFKdaJeEM6Bj+Sp1tILYWeO0gov4CuA5Bj/CnMj Xdp185Fe2q7J9GN4dohWucoNxrnq8pT4pG807bRENgbqQ6w9Cs6LUB6T2BWfs+tj eRKk3vvjxqzSPbcuL8WzcVPW+5JeXJTOzyILlfpaEWTDxwkYl+oiBx1zCz/DBUbU S/4OD+4m2u+LvJgDWZagobdZziIiXgi+i7QQJq8D9zIwyO9Q+Dw= -----END CERTIFICATE-----Generated at Thu Jun 18 17:12:25 2026 by rpki-client