$ rpki-client -vvf rpki-rsync.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.mft File: EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.mft (raw, json) Hash identifier: 7koii0KR2AuW2JjGIPbTs46yRiXjagLnPs/7IaC4Oac= Subject key identifier: 94:0D:27:1E:AE:E4:AF:DA:E0:81:23:0A:0F:F0:65:25:94:40:FA:13 Authority key identifier: EC:37:43:E1:96:2B:A6:6D:28:18:EC:E8:EA:B3:62:CE:14:FE:F9:BA Certificate issuer: /CN=EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA Certificate serial: 7FFAD41C791BA3A351F8ED4C537589A02E8E8B05 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 00:08:12 +0000 Manifest this update: Wed 17 Jun 2026 00:03:12 +0000 Manifest next update: Thu 18 Jun 2026 00:42:12 +0000 Files and hashes: 1: 3130332e3137302e3139382e302f32342d3234203d3e20313530343634.roa (hash: bDEwNBU/hyb8sFiOR3/rIXRPkiHtGsgyi3R43KSze7M=) 2: EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.crl (hash: cIM4NermEjVpC0ZCHAKdPeDQ09k1AQw5+DmI10bBDK8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.crl rsync://rpki-rsync.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 00:42:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:fa:d4:1c:79:1b:a3:a3:51:f8:ed:4c:53:75:89:a0:2e:8e:8b:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA Validity Not Before: Jun 17 00:03:12 2026 GMT Not After : Jun 18 00:42:12 2026 GMT Subject: CN=940D271EAEE4AFDAE081230A0FF065259440FA13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8b:32:e5:e9:78:aa:8a:4d:88:a4:7d:f1:aa: e3:57:5b:40:02:cf:24:55:89:a9:33:2c:b3:8d:83: cf:12:2d:6c:33:8a:d8:67:a1:78:25:a4:69:22:4c: 20:e9:ec:b5:da:07:fa:9b:47:e2:15:1f:ce:23:12: 97:b8:a3:a2:ec:48:86:9a:f6:23:34:0e:56:98:5b: 6f:c8:16:79:01:8b:f7:9d:80:d1:be:9e:36:f6:4a: 1e:7f:13:f0:fe:97:7b:62:1e:58:62:f9:52:c2:68: e7:83:48:37:54:a4:fa:d4:b7:27:00:14:bf:9d:42: a9:bc:82:3d:a7:80:95:68:a6:a6:98:a8:4f:3d:60: ef:a0:3d:a5:2b:5f:00:e7:f8:10:be:15:34:8f:c8: 4a:8a:de:a2:53:68:45:50:80:48:c5:ff:4c:a8:b9: d3:7f:57:cc:55:b3:3d:6b:87:de:a2:c7:ce:b9:24: 9d:ad:24:49:ee:c6:60:14:93:22:76:e4:fe:01:20: 36:95:c6:4c:ea:c6:15:82:cc:29:d2:5f:c2:3f:9c: 12:bc:27:71:56:53:35:c8:85:b4:d2:fe:c3:89:2c: 4d:f4:04:41:62:d3:3c:7e:1f:1f:35:c2:78:8f:e3: e2:99:1c:f3:c7:66:1f:34:06:a3:b2:f6:54:43:b2: fc:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:0D:27:1E:AE:E4:AF:DA:E0:81:23:0A:0F:F0:65:25:94:40:FA:13 X509v3 Authority Key Identifier: keyid:EC:37:43:E1:96:2B:A6:6D:28:18:EC:E8:EA:B3:62:CE:14:FE:F9:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:91:ba:a4:cd:08:12:68:c3:a0:cc:3a:bd:25:97:68:96:f0: cd:ee:86:97:82:f9:21:18:57:72:9d:90:5c:8b:8e:d3:17:d6: f5:96:20:ec:41:46:48:97:ff:a2:94:0c:38:5d:d2:f4:95:3b: 86:03:6a:81:02:4d:47:ab:b6:f8:1b:de:1f:48:b6:60:e2:9c: ec:fb:ac:19:fd:6c:0b:1f:02:11:67:1a:1d:bb:4b:16:6f:ff: 7d:65:06:35:85:b8:ea:5a:34:10:1f:f2:90:bc:06:43:24:16: 3f:dc:03:84:b8:30:f1:6e:0a:1a:45:83:c1:7d:77:c5:06:a6: 15:36:fe:40:32:41:14:11:e3:38:2b:24:52:0b:9f:ab:d3:2b: 66:16:b9:b3:60:ed:f4:9e:f4:1e:3b:55:3d:aa:a8:06:84:4b: 59:c4:bc:9d:eb:a8:b8:d5:20:9d:fc:fb:ef:4f:20:7e:79:ac: b0:96:18:fc:b1:6c:0d:75:28:12:41:47:92:7f:04:3b:63:a2: c2:50:a2:29:59:5a:88:49:7a:ba:b9:06:6c:e9:7c:08:3d:c8: aa:dc:52:35:45:7e:a1:07:26:5b:e3:c6:97:a4:73:67:fe:95: a6:a0:54:8c:8e:93:23:0c:39:35:2d:24:ad:d2:1b:38:50:73: eb:e7:2c:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf/rUHHkbo6NR+O1MU3WJoC6OiwUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUMzNzQzRTE5NjJCQTY2RDI4MThFQ0U4RUFCMzYyQ0Ux NEZFRjlCQTAeFw0yNjA2MTcwMDAzMTJaFw0yNjA2MTgwMDQyMTJaMDMxMTAvBgNV BAMTKDk0MEQyNzFFQUVFNEFGREFFMDgxMjMwQTBGRjA2NTI1OTQ0MEZBMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2izLl6Xiqik2IpH3xquNXW0AC zyRViakzLLONg88SLWwzithnoXglpGkiTCDp7LXaB/qbR+IVH84jEpe4o6LsSIaa 9iM0DlaYW2/IFnkBi/edgNG+njb2Sh5/E/D+l3tiHlhi+VLCaOeDSDdUpPrUtycA FL+dQqm8gj2ngJVopqaYqE89YO+gPaUrXwDn+BC+FTSPyEqK3qJTaEVQgEjF/0yo udN/V8xVsz1rh96ix865JJ2tJEnuxmAUkyJ25P4BIDaVxkzqxhWCzCnSX8I/nBK8 J3FWUzXIhbTS/sOJLE30BEFi0zx+Hx81wniP4+KZHPPHZh80BqOy9lRDsvztAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlA0nHq7kr9rggSMKD/BlJZRA+hMwHwYDVR0j BBgwFoAU7DdD4ZYrpm0oGOzo6rNizhT++bowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzBkYTU4ODItYjgwNC00MTU0LTk1OWItNjMzNmIyNGUxOGIyLzAvRUMzNzQzRTE5 NjJCQTY2RDI4MThFQ0U4RUFCMzYyQ0UxNEZFRjlCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQzM3NDNFMTk2MkJBNjZEMjgxOEVDRThFQUIzNjJDRTE0RkVG OUJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzBkYTU4ODItYjgwNC00MTU0LTk1 OWItNjMzNmIyNGUxOGIyLzAvRUMzNzQzRTE5NjJCQTY2RDI4MThFQ0U4RUFCMzYy Q0UxNEZFRjlCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMiRuqTNCBJow6DMOr0ll2iW8M3uhpeC+SEY V3KdkFyLjtMX1vWWIOxBRkiX/6KUDDhd0vSVO4YDaoECTUertvgb3h9ItmDinOz7 rBn9bAsfAhFnGh27SxZv/31lBjWFuOpaNBAf8pC8BkMkFj/cA4S4MPFuChpFg8F9 d8UGphU2/kAyQRQR4zgrJFILn6vTK2YWubNg7fSe9B47VT2qqAaES1nEvJ3rqLjV IJ38++9PIH55rLCWGPyxbA11KBJBR5J/BDtjosJQoilZWohJerq5BmzpfAg9yKrc UjVFfqEHJlvjxpekc2f+laagVIyOkyMMOTUtJK3SGzhQc+vnLLg= -----END CERTIFICATE-----Generated at Wed Jun 17 09:20:37 2026 by rpki-client