$ rpki-client -vvf rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft File: EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft (raw, json) Hash identifier: OyQBRO3gm2I5jYJHkk02Pbz/iHZ+PrWBRcXVGdisAEc= Subject key identifier: B1:22:7A:26:08:5E:FC:C2:50:D1:08:74:22:AC:61:65:E0:C9:1B:FD Authority key identifier: EC:5A:E3:6D:AF:9B:DD:77:E6:23:FC:7C:7F:5A:8A:0F:67:FD:71:6F Certificate issuer: /CN=EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F Certificate serial: 21F3D44A0FE522C43068874DDAAFCDC7E8BC9BBD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft Manifest number: 7B Signing time: Sun 02 Aug 2026 10:55:52 +0000 Manifest this update: Sun 02 Aug 2026 10:50:52 +0000 Manifest next update: Mon 03 Aug 2026 12:55:52 +0000 Files and hashes: 1: 3136302e32322e3139382e302f32342d3234203d3e20313532383336.roa (hash: 4hzEJ9YbAF9buAExFLN+RTSrGCyc9GGfXKqoc6rWOKY=) 2: EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.crl (hash: u7Ws7BL3j3tvHhXlCb8UntBYn0iBjT2fwVtK4q9q5WI=) 3: 3136302e32322e3139392e302f32342d3234203d3e20313532383336.roa (hash: a0teJ5lq1xBgiI5mA8EcJ42YaSmlhBF26ShVqEb+s/8=) 4: 3136302e32322e3139382e302f32332d3233203d3e20313532383336.roa (hash: NyaKnWNdcDfhRDv5OOV0uHnlXww5Tu4WFH6FM+NsLLc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.crl rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 12:55:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:f3:d4:4a:0f:e5:22:c4:30:68:87:4d:da:af:cd:c7:e8:bc:9b:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F Validity Not Before: Aug 2 10:50:52 2026 GMT Not After : Aug 3 12:55:52 2026 GMT Subject: CN=B1227A26085EFCC250D1087422AC6165E0C91BFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:08:43:96:6d:8e:6e:b7:a6:8d:84:64:1f:8c: 5f:1b:e4:0e:0b:3c:70:42:80:d8:47:5f:56:0e:36: 6f:40:14:de:5e:b0:d6:38:3b:a4:77:41:b4:55:68: 57:fe:5a:d5:b5:5b:76:d3:b0:41:9b:e6:8b:56:40: da:05:ce:fc:5d:3a:c5:b7:03:db:14:d2:fc:83:78: c7:e6:99:7d:0a:c4:7e:89:80:63:72:b4:7a:ae:50: aa:33:64:f3:08:0f:e3:0d:6d:b1:96:9b:8e:44:8e: 7d:0c:fa:69:6a:28:12:73:40:e8:f2:cb:bc:6e:7a: b1:2e:7e:94:20:9c:18:24:55:9b:ab:19:63:e1:10: 68:2d:b9:94:b3:e1:f1:43:a0:f4:66:b6:82:75:2a: b9:4e:ff:63:cf:0d:56:bd:48:c8:2c:cf:2e:b6:d3: 60:a6:d9:60:e2:64:2e:5b:91:06:2c:33:61:b3:a2: 1f:3b:9b:ba:fd:68:52:a8:7a:e1:10:90:29:5d:f0: 37:d3:f5:7c:56:53:08:c0:e9:8a:f8:5d:13:af:33: 18:e7:01:c9:70:2a:50:1a:1b:ee:47:d6:43:f7:d8: 29:86:2f:34:d4:d3:2e:61:63:f5:5b:86:21:34:97: 04:91:73:11:ad:10:cf:f5:2d:3b:28:0d:e7:97:9d: 09:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:22:7A:26:08:5E:FC:C2:50:D1:08:74:22:AC:61:65:E0:C9:1B:FD X509v3 Authority Key Identifier: keyid:EC:5A:E3:6D:AF:9B:DD:77:E6:23:FC:7C:7F:5A:8A:0F:67:FD:71:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:18:4f:62:73:f2:4d:8a:77:7b:45:06:c0:a3:21:86:ed:b1: d8:f2:3e:b6:fa:36:df:28:53:d0:14:ff:e7:c3:28:6a:2d:80: 98:a8:49:2b:05:6c:79:a5:2e:5e:69:47:86:aa:6a:82:a6:17: a5:02:33:5c:ce:f8:db:92:d9:2f:6a:67:5e:b6:e7:35:c9:86: 1c:55:ef:ac:7c:c4:d7:01:9f:86:f0:9a:7a:d7:5c:31:d9:23: 71:7f:72:b1:61:62:25:54:25:0a:2d:32:93:a6:44:4a:f1:7b: 2c:de:68:65:a0:2e:7e:6f:c0:ec:fa:af:60:d0:d6:cc:7a:74: bf:de:c2:38:f2:7f:46:79:46:8c:85:c7:c8:09:e4:90:79:bc: 56:5e:e4:69:06:1c:62:35:5c:32:75:73:0a:1d:26:16:78:7d: d8:55:c3:05:8d:f2:ef:c8:5b:bf:ed:11:c8:ac:b3:cf:5f:c2: 51:69:26:56:8e:af:fb:3b:2a:c8:53:9b:0f:f3:13:d9:20:82: c2:c8:49:4e:d4:0a:28:48:33:c4:9f:de:f9:ca:bf:b6:95:a4: 4b:e4:b7:d7:88:2d:66:0f:58:80:2d:43:8f:43:b4:f3:47:7f: ef:0a:f8:9f:82:7a:5a:bd:ad:cc:57:40:c2:fc:a4:56:a4:52: 24:32:03:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIfPUSg/lIsQwaIdN2q/Nx+i8m70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM1QUUzNkRBRjlCREQ3N0U2MjNGQzdDN0Y1QThBMEY2 N0ZENzE2RjAeFw0yNjA4MDIxMDUwNTJaFw0yNjA4MDMxMjU1NTJaMDMxMTAvBgNV BAMTKEIxMjI3QTI2MDg1RUZDQzI1MEQxMDg3NDIyQUM2MTY1RTBDOTFCRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQCEOWbY5ut6aNhGQfjF8b5A4L PHBCgNhHX1YONm9AFN5esNY4O6R3QbRVaFf+WtW1W3bTsEGb5otWQNoFzvxdOsW3 A9sU0vyDeMfmmX0KxH6JgGNytHquUKozZPMID+MNbbGWm45Ejn0M+mlqKBJzQOjy y7xuerEufpQgnBgkVZurGWPhEGgtuZSz4fFDoPRmtoJ1KrlO/2PPDVa9SMgszy62 02Cm2WDiZC5bkQYsM2Gzoh87m7r9aFKoeuEQkCld8DfT9XxWUwjA6Yr4XROvMxjn AclwKlAaG+5H1kP32CmGLzTU0y5hY/VbhiE0lwSRcxGtEM/1LTsoDeeXnQkNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsSJ6Jghe/MJQ0Qh0IqxhZeDJG/0wHwYDVR0j BBgwFoAU7Frjba+b3XfmI/x8f1qKD2f9cW8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWYzMGU0YWUtM2U0Ny00NTQwLTgyM2MtNTNjYWYyMjY3YjM2LzAvRUM1QUUzNkRB RjlCREQ3N0U2MjNGQzdDN0Y1QThBMEY2N0ZENzE2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FQzVBRTM2REFGOUJERDc3RTYyM0ZDN0M3RjVBOEEwRjY3RkQ3 MTZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWYzMGU0YWUtM2U0Ny00NTQwLTgy M2MtNTNjYWYyMjY3YjM2LzAvRUM1QUUzNkRBRjlCREQ3N0U2MjNGQzdDN0Y1QThB MEY2N0ZENzE2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF4YT2Jz8k2Kd3tFBsCjIYbtsdjyPrb6Nt8o U9AU/+fDKGotgJioSSsFbHmlLl5pR4aqaoKmF6UCM1zO+NuS2S9qZ1625zXJhhxV 76x8xNcBn4bwmnrXXDHZI3F/crFhYiVUJQotMpOmRErxeyzeaGWgLn5vwOz6r2DQ 1sx6dL/ewjjyf0Z5RoyFx8gJ5JB5vFZe5GkGHGI1XDJ1cwodJhZ4fdhVwwWN8u/I W7/tEciss89fwlFpJlaOr/s7KshTmw/zE9kggsLISU7UCihIM8Sf3vnKv7aVpEvk t9eILWYPWIAtQ49DtPNHf+8K+J+Celq9rcxXQML8pFakUiQyA/c= -----END CERTIFICATE-----Generated at Sun Aug 2 20:33:33 2026 by rpki-client