$ rpki-client -vvvf rpki-rsync.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.mft File: EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.mft (raw, json) Hash identifier: EcI+ipzbmSAz85jOXX5ygXdaVb+aXAB+HVDsha+d5uY= Subject key identifier: E9:67:35:75:C7:69:D9:F6:09:9B:CC:75:C0:72:7E:A3:18:EB:9C:19 Authority key identifier: EC:37:43:E1:96:2B:A6:6D:28:18:EC:E8:EA:B3:62:CE:14:FE:F9:BA Certificate issuer: /CN=EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA Certificate serial: 1255B4A4EB3B86180395925179197B4E5687AD00 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.mft Manifest number: 010A Signing time: Sun 15 Nov 2026 12:50:08 +0000 Manifest this update: Sun 15 Nov 2026 12:45:08 +0000 Manifest next update: Mon 16 Nov 2026 16:07:08 +0000 Files and hashes: 1: 3130332e3137302e3139382e302f32342d3234203d3e20313531353736.roa (hash: GdBTBf+CQyZI9w590qaRyTxxIiNifYfBvTxGa3o07RE=) 2: EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.crl (hash: PE+UGTDlItoV3m8GDBjt4iQcVRuU6pblDMgiIPxEvCo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.crl rsync://rpki-rsync.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:55:b4:a4:eb:3b:86:18:03:95:92:51:79:19:7b:4e:56:87:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA Validity Not Before: Nov 15 12:45:08 2026 GMT Not After : Nov 16 16:07:08 2026 GMT Subject: CN=E9673575C769D9F6099BCC75C0727EA318EB9C19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:47:6b:92:99:43:eb:1b:f6:10:b1:e3:9f:44: 34:d3:93:fb:4c:2f:80:bf:23:ed:79:66:44:88:33: 27:6c:54:33:a7:d0:46:b9:73:b5:ee:e3:77:1f:bf: 95:7d:ad:1e:1b:b2:51:1e:ac:b4:4f:70:0d:66:6d: 19:22:5f:49:10:da:cb:dd:05:fe:a0:07:ca:c6:f2: 82:9d:28:3a:ea:10:da:f3:1c:6e:33:c2:58:e3:79: e4:a8:a1:6e:7a:75:16:fe:3e:27:55:d1:19:02:66: 38:89:fc:17:a2:94:6b:de:e3:2e:5d:4e:0c:56:24: 98:38:34:60:ca:6b:c2:ee:62:09:22:ce:19:a2:2b: ef:55:d8:df:43:56:69:73:f1:dc:48:8b:2d:6a:0d: c4:5e:43:8a:a2:da:f7:01:7d:6c:51:29:f6:9c:83: 9f:35:99:f0:5f:1f:e1:14:19:96:f0:e0:e0:a6:7b: 3d:0e:04:ac:fd:c8:d3:dc:51:ce:a7:b5:0b:1b:b2: 52:77:f8:e0:66:a1:c7:c2:88:24:44:c0:df:b6:5f: 6d:e4:0e:a4:a0:be:43:ae:c0:49:83:5b:ce:9c:fb: ea:74:49:d8:f5:e0:1a:c4:0f:1b:09:15:7d:ea:4d: b4:6d:9b:fd:c5:cc:c2:cb:f0:16:96:e4:33:5a:e9: 4b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:67:35:75:C7:69:D9:F6:09:9B:CC:75:C0:72:7E:A3:18:EB:9C:19 X509v3 Authority Key Identifier: keyid:EC:37:43:E1:96:2B:A6:6D:28:18:EC:E8:EA:B3:62:CE:14:FE:F9:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:b9:32:97:fb:fe:74:d3:81:ea:93:23:ae:27:3b:36:32:99: 1b:16:10:33:0c:83:33:3a:ac:c7:1e:9f:a7:85:94:85:12:cd: d6:fa:9c:8e:a4:52:08:dc:60:b8:e1:88:b8:71:b0:c4:50:bb: 48:cc:46:bb:01:21:46:9e:b5:20:d0:3a:87:a2:8d:35:03:cf: a8:58:28:30:16:4c:09:20:d4:28:25:f6:ec:1e:82:d6:6e:9d: d1:d8:dc:b3:87:67:05:cf:c4:ca:21:ad:e7:9e:ae:60:8d:78: da:41:ff:81:61:3e:08:33:a0:58:7c:69:52:66:90:3e:fa:a0: b3:03:13:6f:1c:cf:8f:d0:7e:b8:30:d0:98:03:54:6f:6f:e5: ab:32:43:a6:ef:3c:82:8c:e6:e2:6f:eb:29:54:69:e3:74:06: 1e:fe:33:3c:15:76:41:27:7c:02:90:77:c0:d4:7d:03:96:58: d0:18:5e:79:99:5c:85:89:9f:9f:f2:12:ab:22:e0:67:57:16: 34:d4:be:7c:b4:cb:ff:f9:1f:6e:69:12:eb:9a:e0:88:e1:3c: f3:f8:28:40:73:65:f2:13:42:a9:f1:83:3d:ba:12:09:b0:80: 93:a8:97:8c:2d:5a:a5:b6:3f:c2:51:5c:8a:f5:eb:3b:67:32: 47:45:fc:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUElW0pOs7hhgDlZJReRl7TlaHrQAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUMzNzQzRTE5NjJCQTY2RDI4MThFQ0U4RUFCMzYyQ0Ux NEZFRjlCQTAeFw0yNjExMTUxMjQ1MDhaFw0yNjExMTYxNjA3MDhaMDMxMTAvBgNV BAMTKEU5NjczNTc1Qzc2OUQ5RjYwOTlCQ0M3NUMwNzI3RUEzMThFQjlDMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkR2uSmUPrG/YQseOfRDTTk/tM L4C/I+15ZkSIMydsVDOn0Ea5c7Xu43cfv5V9rR4bslEerLRPcA1mbRkiX0kQ2svd Bf6gB8rG8oKdKDrqENrzHG4zwljjeeSooW56dRb+PidV0RkCZjiJ/BeilGve4y5d TgxWJJg4NGDKa8LuYgkizhmiK+9V2N9DVmlz8dxIiy1qDcReQ4qi2vcBfWxRKfac g581mfBfH+EUGZbw4OCmez0OBKz9yNPcUc6ntQsbslJ3+OBmocfCiCREwN+2X23k DqSgvkOuwEmDW86c++p0Sdj14BrEDxsJFX3qTbRtm/3FzMLL8BaW5DNa6Us/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6Wc1dcdp2fYJm8x1wHJ+oxjrnBkwHwYDVR0j BBgwFoAU7DdD4ZYrpm0oGOzo6rNizhT++bowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzBkYTU4ODItYjgwNC00MTU0LTk1OWItNjMzNmIyNGUxOGIyLzAvRUMzNzQzRTE5 NjJCQTY2RDI4MThFQ0U4RUFCMzYyQ0UxNEZFRjlCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQzM3NDNFMTk2MkJBNjZEMjgxOEVDRThFQUIzNjJDRTE0RkVG OUJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzBkYTU4ODItYjgwNC00MTU0LTk1 OWItNjMzNmIyNGUxOGIyLzAvRUMzNzQzRTE5NjJCQTY2RDI4MThFQ0U4RUFCMzYy Q0UxNEZFRjlCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGe5Mpf7/nTTgeqTI64nOzYymRsWEDMMgzM6 rMcen6eFlIUSzdb6nI6kUgjcYLjhiLhxsMRQu0jMRrsBIUaetSDQOoeijTUDz6hY KDAWTAkg1Cgl9uwegtZundHY3LOHZwXPxMohreeermCNeNpB/4FhPggzoFh8aVJm kD76oLMDE28cz4/Qfrgw0JgDVG9v5asyQ6bvPIKM5uJv6ylUaeN0Bh7+MzwVdkEn fAKQd8DUfQOWWNAYXnmZXIWJn5/yEqsi4GdXFjTUvny0y//5H25pEuua4IjhPPP4 KEBzZfITQqnxgz26EgmwgJOol4wtWqW2P8JRXIr16ztnMkdF/FE= -----END CERTIFICATE-----Generated at Sun Nov 15 18:11:19 2026 by rpki-client