$ rpki-client -vvvf rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.mft File: ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.mft (raw, json) Hash identifier: bqcSmk6U2o9R49n+VC3lMf4xQSORnomQE8hpslHFH94= Subject key identifier: 0C:3B:11:C7:22:F3:5E:0D:E6:1C:86:2F:52:71:AF:86:A2:ED:72:BE Authority key identifier: EC:A0:04:7E:A8:E4:DC:E9:2E:BC:57:2E:E8:A1:1D:17:C6:B6:48:72 Certificate issuer: /CN=ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872 Certificate serial: 792EA14F41AE15368FE04B49536AC2A6015AD886 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.mft Manifest number: C0 Signing time: Mon 21 Sep 2026 19:25:28 +0000 Manifest this update: Mon 21 Sep 2026 19:20:28 +0000 Manifest next update: Tue 22 Sep 2026 20:34:28 +0000 Files and hashes: 1: 3135372e36362e35382e302f32342d3234203d3e203633383633.roa (hash: a6w3hGAhWsxMabz324Q4GA5dPuEuhj0nKmf3WW+KTCc=) 2: 3135372e36362e35392e302f32342d3234203d3e203633383633.roa (hash: xBh74co4G4oy4kEOH1+s92iqFVlcazWJc0LznYHJ110=) 3: 3135372e36362e35382e302f32332d3233203d3e203633383633.roa (hash: UIZ5WPv7k1hpGcTiFHJVpKxY08OSIOQ+IDxbkKabgJw=) 4: ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.crl (hash: WhWcB1xNHzGe6qJQkRP9GejnyLfVJhUBP4yyfD4MnO0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.crl rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 20:34:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:2e:a1:4f:41:ae:15:36:8f:e0:4b:49:53:6a:c2:a6:01:5a:d8:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872 Validity Not Before: Sep 21 19:20:28 2026 GMT Not After : Sep 22 20:34:28 2026 GMT Subject: CN=0C3B11C722F35E0DE61C862F5271AF86A2ED72BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:04:d6:1f:a4:b3:ba:94:1d:cb:6b:25:d4:d2: e4:73:76:9b:03:e0:96:87:52:01:6c:33:cd:9f:14: 28:25:7e:8e:0b:45:5f:2d:9e:32:06:02:3d:7c:54: e1:69:97:94:22:69:93:58:e8:53:55:30:33:66:96: 08:0e:07:ef:8e:bd:cb:3e:5d:65:ec:cf:f6:28:6f: f2:36:1e:5f:cd:8b:3f:7f:e0:aa:37:96:49:40:4d: 41:e5:b1:1f:02:40:73:6b:be:b1:10:90:db:51:53: 28:fa:9e:ca:f7:4e:15:f8:c1:cc:b6:84:38:6b:32: 28:eb:06:b5:a5:96:19:04:af:9f:cc:c1:72:f7:b8: a9:30:40:af:49:ce:c4:5f:01:eb:69:33:2f:a1:ac: 35:aa:04:2e:ea:c7:e7:f8:9f:4e:df:95:5d:33:24: 01:94:58:82:f2:49:10:21:74:ef:4c:48:d5:44:61: ed:ba:bd:26:77:31:41:c5:60:ef:ca:41:f9:c5:44: 13:bb:24:3c:b2:28:34:14:0a:8c:04:4e:2c:e6:4a: 13:c7:9b:71:a6:0b:8d:e0:18:4c:28:74:36:1c:0a: f4:a1:d2:67:78:65:eb:8e:e4:5b:d4:77:d4:05:06: 6a:55:90:17:c9:b5:7a:7c:3b:93:f7:31:f0:50:d6: 89:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:3B:11:C7:22:F3:5E:0D:E6:1C:86:2F:52:71:AF:86:A2:ED:72:BE X509v3 Authority Key Identifier: keyid:EC:A0:04:7E:A8:E4:DC:E9:2E:BC:57:2E:E8:A1:1D:17:C6:B6:48:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:0e:95:4d:ee:8b:d5:68:36:88:3d:95:f8:a8:d3:af:68:d6: 0d:60:64:e8:c9:9c:b2:c7:f3:48:07:3a:97:85:95:91:a4:cc: 59:cb:f3:e0:26:ec:64:be:5f:21:cd:ec:7d:40:b1:70:3b:64: 54:47:64:c1:d2:c0:d1:98:fb:57:03:6c:ae:2b:cf:51:86:30: cd:f2:38:f9:a1:b2:c0:10:d4:2d:7f:5d:27:2f:3a:21:05:ae: f4:f7:20:7a:dd:12:b5:37:92:5c:d4:00:53:f1:01:45:39:d7: d3:f8:c3:aa:7c:7f:07:ec:63:6d:4f:7b:4e:82:1b:87:5d:ba: 0d:78:b7:2a:55:c3:c4:1c:e6:2b:5a:27:d3:ff:8c:a6:94:12: 97:a7:9d:cc:c0:00:e1:1b:18:0c:33:9f:79:77:42:53:f8:99: 30:ec:d3:4b:ce:40:77:39:c3:5e:b0:fa:23:5e:dd:23:fb:07: 7d:c5:b0:46:53:cc:a9:d1:4b:1b:4a:92:46:aa:e6:63:9d:76: 27:4c:30:d7:8a:15:bf:e5:a6:4a:e5:f8:74:a8:76:d9:03:48: cc:3c:18:83:ea:15:aa:06:b2:4d:17:a3:05:8b:e9:ff:88:7d: 61:eb:34:60:bf:57:f4:50:aa:85:53:eb:00:5b:b2:4a:5d:5a: c4:61:73:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeS6hT0GuFTaP4EtJU2rCpgFa2IYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUNBMDA0N0VBOEU0RENFOTJFQkM1NzJFRThBMTFEMTdD NkI2NDg3MjAeFw0yNjA5MjExOTIwMjhaFw0yNjA5MjIyMDM0MjhaMDMxMTAvBgNV BAMTKDBDM0IxMUM3MjJGMzVFMERFNjFDODYyRjUyNzFBRjg2QTJFRDcyQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyBNYfpLO6lB3LayXU0uRzdpsD 4JaHUgFsM82fFCglfo4LRV8tnjIGAj18VOFpl5QiaZNY6FNVMDNmlggOB++Ovcs+ XWXsz/Yob/I2Hl/Niz9/4Ko3lklATUHlsR8CQHNrvrEQkNtRUyj6nsr3ThX4wcy2 hDhrMijrBrWllhkEr5/MwXL3uKkwQK9JzsRfAetpMy+hrDWqBC7qx+f4n07flV0z JAGUWILySRAhdO9MSNVEYe26vSZ3MUHFYO/KQfnFRBO7JDyyKDQUCowETizmShPH m3GmC43gGEwodDYcCvSh0md4ZeuO5FvUd9QFBmpVkBfJtXp8O5P3MfBQ1olDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDDsRxyLzXg3mHIYvUnGvhqLtcr4wHwYDVR0j BBgwFoAU7KAEfqjk3OkuvFcu6KEdF8a2SHIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDZiMDVmMzYtZTE3NC00ZGFkLWJjMmEtMDg5MjZjNWRkMDQ2LzAvRUNBMDA0N0VB OEU0RENFOTJFQkM1NzJFRThBMTFEMTdDNkI2NDg3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FQ0EwMDQ3RUE4RTREQ0U5MkVCQzU3MkVFOEExMUQxN0M2QjY0 ODcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDZiMDVmMzYtZTE3NC00ZGFkLWJj MmEtMDg5MjZjNWRkMDQ2LzAvRUNBMDA0N0VBOEU0RENFOTJFQkM1NzJFRThBMTFE MTdDNkI2NDg3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANcOlU3ui9VoNog9lfio069o1g1gZOjJnLLH 80gHOpeFlZGkzFnL8+Am7GS+XyHN7H1AsXA7ZFRHZMHSwNGY+1cDbK4rz1GGMM3y OPmhssAQ1C1/XScvOiEFrvT3IHrdErU3klzUAFPxAUU519P4w6p8fwfsY21Pe06C G4ddug14typVw8Qc5itaJ9P/jKaUEpennczAAOEbGAwzn3l3QlP4mTDs00vOQHc5 w16w+iNe3SP7B33FsEZTzKnRSxtKkkaq5mOddidMMNeKFb/lpkrl+HSodtkDSMw8 GIPqFaoGsk0XowWL6f+IfWHrNGC/V/RQqoVT6wBbskpdWsRhc3Y= -----END CERTIFICATE-----Generated at Tue Sep 22 06:56:18 2026 by rpki-client