$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.mft File: ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.mft (raw, json) Hash identifier: mw/60YOqUqdwM/6g8VO5tvkhOAKV+0GoQNIkOYy6nwc= Subject key identifier: E0:88:93:A0:0B:CB:65:88:40:D9:53:7C:D2:D2:2A:37:48:0D:12:5F Authority key identifier: EC:C7:A0:2E:2A:15:47:57:E3:DB:5D:E7:2B:90:DA:46:6F:43:0E:E3 Certificate issuer: /CN=ECC7A02E2A154757E3DB5DE72B90DA466F430EE3 Certificate serial: 7892FBAEF5F9A38856F86B628CFFE42588D24960 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.mft Manifest number: BF Signing time: Mon 21 Sep 2026 12:42:06 +0000 Manifest this update: Mon 21 Sep 2026 12:37:06 +0000 Manifest next update: Tue 22 Sep 2026 12:57:06 +0000 Files and hashes: 1: ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.crl (hash: l+ebnleWduVrBLcHmz2ZT4OAFIOxqC2Gl4A9dsA8WdA=) 2: 3135372e31352e35312e302f32342d3234203d3e20313530343934.roa (hash: eXa5aSDdrCtqvVMG17UDbY8fW0WBNN3GZ2WD5zRuz9o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.crl rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:92:fb:ae:f5:f9:a3:88:56:f8:6b:62:8c:ff:e4:25:88:d2:49:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ECC7A02E2A154757E3DB5DE72B90DA466F430EE3 Validity Not Before: Sep 21 12:37:06 2026 GMT Not After : Sep 22 12:57:06 2026 GMT Subject: CN=E08893A00BCB658840D9537CD2D22A37480D125F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c2:f4:49:8b:f5:d0:9f:64:8a:a2:d6:93:e0: 0a:65:ab:01:ee:9e:d3:3f:23:e2:69:63:4e:c5:75: 29:b1:09:2c:ec:c9:4b:04:8c:a0:a1:e3:53:eb:e8: 33:13:b7:ae:ae:01:24:61:ee:a9:45:55:40:5e:6e: c8:af:76:94:e5:03:86:4e:80:24:16:00:32:7f:b9: d4:2a:b7:5d:d6:a3:b8:3c:21:39:a4:eb:76:a5:e7: db:fc:e0:3b:81:ef:2c:6f:c5:95:ba:bd:ed:3c:7e: b1:0d:07:9f:02:ba:e6:a2:39:8e:f8:ac:4d:c3:66: a9:79:05:91:c2:71:bc:c4:bd:1c:25:46:05:f0:ce: 2c:4f:e5:1b:1f:4d:64:72:92:37:a0:70:78:d2:19: b6:69:70:f5:b5:35:7f:b4:f9:7d:91:c8:d8:26:56: 95:cc:2c:50:c2:7a:73:b7:1e:9a:ac:96:7c:19:11: 4a:70:09:68:e5:21:f6:49:81:4b:7b:4c:c6:6a:d2: ab:86:da:b8:c2:9c:18:da:f4:61:a3:14:47:e5:44: ac:f5:d9:ba:b5:57:02:89:35:3d:f2:e6:6c:6f:5b: 04:e5:50:61:2c:27:ce:13:60:95:58:a0:20:27:cd: b4:39:d4:d6:59:f9:ff:e9:2b:5e:7d:fe:6b:7e:37: 76:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:88:93:A0:0B:CB:65:88:40:D9:53:7C:D2:D2:2A:37:48:0D:12:5F X509v3 Authority Key Identifier: keyid:EC:C7:A0:2E:2A:15:47:57:E3:DB:5D:E7:2B:90:DA:46:6F:43:0E:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:91:16:f0:ce:18:73:60:fa:6c:96:52:f7:a5:23:3f:ae:44: b6:fd:5b:6f:e1:f5:49:31:04:b0:41:39:e7:93:a4:84:4d:e1: df:c4:1f:22:38:39:94:88:67:66:32:74:62:dc:72:1c:af:25: 03:93:a9:08:dc:c1:46:86:e7:f5:af:72:3e:58:b4:1c:23:67: e0:e3:98:bd:03:53:be:a3:8b:46:d9:45:c7:54:47:f2:b8:02: 6b:0a:d3:05:cf:89:c1:29:a5:14:01:42:1d:ee:c8:ef:fc:e2: 3a:02:e8:0c:a6:8a:95:4a:68:82:a9:b5:39:64:df:95:8f:fe: 91:ab:9e:f7:e1:e0:da:be:59:52:02:70:66:f6:2f:08:ab:8e: 58:5d:4d:04:2a:77:1f:20:74:e6:29:27:95:fa:7d:81:10:1f: b9:0c:13:76:53:d4:d0:89:9b:d6:1a:70:50:dc:27:29:8e:4d: 4a:94:21:10:da:ba:43:2e:88:50:bd:18:78:fe:a8:5b:27:e6: c1:36:fb:c0:aa:46:0c:79:93:79:8d:0f:5b:41:cb:c2:9d:73: de:88:b2:00:e4:9b:6b:38:26:b6:87:6b:cb:0d:95:c8:73:97: 89:72:33:ec:86:9a:a7:55:65:2a:12:0b:55:77:bc:bf:bf:79: f0:3c:30:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeJL7rvX5o4hW+GtijP/kJYjSSWAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUNDN0EwMkUyQTE1NDc1N0UzREI1REU3MkI5MERBNDY2 RjQzMEVFMzAeFw0yNjA5MjExMjM3MDZaFw0yNjA5MjIxMjU3MDZaMDMxMTAvBgNV BAMTKEUwODg5M0EwMEJDQjY1ODg0MEQ5NTM3Q0QyRDIyQTM3NDgwRDEyNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAwvRJi/XQn2SKotaT4AplqwHu ntM/I+JpY07FdSmxCSzsyUsEjKCh41Pr6DMTt66uASRh7qlFVUBebsivdpTlA4ZO gCQWADJ/udQqt13Wo7g8ITmk63al59v84DuB7yxvxZW6ve08frENB58CuuaiOY74 rE3DZql5BZHCcbzEvRwlRgXwzixP5RsfTWRykjegcHjSGbZpcPW1NX+0+X2RyNgm VpXMLFDCenO3HpqslnwZEUpwCWjlIfZJgUt7TMZq0quG2rjCnBja9GGjFEflRKz1 2bq1VwKJNT3y5mxvWwTlUGEsJ84TYJVYoCAnzbQ51NZZ+f/pK159/mt+N3aPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4IiToAvLZYhA2VN80tIqN0gNEl8wHwYDVR0j BBgwFoAU7MegLioVR1fj213nK5DaRm9DDuMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGJiOGU2MTItN2JiMy00OGRlLTk2OWQtNzFiNDVmNDZhMTYxLzAvRUNDN0EwMkUy QTE1NDc1N0UzREI1REU3MkI5MERBNDY2RjQzMEVFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FQ0M3QTAyRTJBMTU0NzU3RTNEQjVERTcyQjkwREE0NjZGNDMw RUUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGJiOGU2MTItN2JiMy00OGRlLTk2 OWQtNzFiNDVmNDZhMTYxLzAvRUNDN0EwMkUyQTE1NDc1N0UzREI1REU3MkI5MERB NDY2RjQzMEVFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABaRFvDOGHNg+myWUvelIz+uRLb9W2/h9Ukx BLBBOeeTpIRN4d/EHyI4OZSIZ2YydGLcchyvJQOTqQjcwUaG5/Wvcj5YtBwjZ+Dj mL0DU76ji0bZRcdUR/K4AmsK0wXPicEppRQBQh3uyO/84joC6AymipVKaIKptTlk 35WP/pGrnvfh4Nq+WVICcGb2LwirjlhdTQQqdx8gdOYpJ5X6fYEQH7kME3ZT1NCJ m9YacFDcJymOTUqUIRDaukMuiFC9GHj+qFsn5sE2+8CqRgx5k3mND1tBy8Kdc96I sgDkm2s4JraHa8sNlchzl4lyM+yGmqdVZSoSC1V3vL+/efA8MFE= -----END CERTIFICATE-----Generated at Mon Sep 21 18:56:24 2026 by rpki-client