$ rpki-client -vvvf rpki-rsync.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.mft File: EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.mft (raw, json) Hash identifier: Flieu/B/jaZILsIE6Z9jz/5zzmHq2Zoisl6AVyRNwD4= Subject key identifier: 70:DB:8E:AB:99:30:FD:F7:BA:01:14:E0:19:29:4D:4F:F3:40:E1:AF Authority key identifier: EC:37:43:E1:96:2B:A6:6D:28:18:EC:E8:EA:B3:62:CE:14:FE:F9:BA Certificate issuer: /CN=EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA Certificate serial: 52E512AAD934F0985126C302671BA6A860151A7A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.mft Manifest number: BF Signing time: Mon 21 Sep 2026 10:14:18 +0000 Manifest this update: Mon 21 Sep 2026 10:09:18 +0000 Manifest next update: Tue 22 Sep 2026 12:38:18 +0000 Files and hashes: 1: 3130332e3137302e3139382e302f32342d3234203d3e20313530343634.roa (hash: bDEwNBU/hyb8sFiOR3/rIXRPkiHtGsgyi3R43KSze7M=) 2: EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.crl (hash: LIYx29k7TOnvIkN9jVWRq7qSuMoeV3IA2qY2f/rtszI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.crl rsync://rpki-rsync.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:e5:12:aa:d9:34:f0:98:51:26:c3:02:67:1b:a6:a8:60:15:1a:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA Validity Not Before: Sep 21 10:09:18 2026 GMT Not After : Sep 22 12:38:18 2026 GMT Subject: CN=70DB8EAB9930FDF7BA0114E019294D4FF340E1AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:29:0a:89:3c:c5:50:6e:b6:4f:90:9d:ab:cb: 30:70:38:87:84:ad:27:aa:7b:82:99:da:a5:15:4e: 2e:67:f7:7d:6a:02:15:98:70:75:e9:88:8a:16:38: 8d:5d:d6:60:3c:b3:b4:42:4a:32:e9:2d:0c:30:24: c2:77:e8:92:1a:8f:19:9a:3e:83:dd:cc:84:94:64: 24:ec:79:e4:27:e5:81:c3:7b:b9:40:3c:6e:10:f4: 98:2b:77:e8:25:9f:47:71:5d:47:f3:75:4b:00:d9: 9e:fc:45:45:3a:a8:2e:57:7d:af:23:3e:c5:1c:47: 7a:46:3f:74:5b:38:a8:0a:65:45:62:3c:bc:21:b7: cf:2d:59:a0:d7:f9:f6:e6:6f:df:34:28:54:d1:59: 63:fe:9e:32:e2:e3:93:b0:4e:6c:e3:a2:39:ff:0c: 51:be:b9:91:ec:bc:de:80:09:04:fb:75:4d:6f:46: 73:d8:41:f5:7a:5d:02:a0:57:9c:59:72:4b:db:a7: 4b:ed:a6:bf:88:82:ca:0f:8f:3b:5d:01:ee:ec:a5: 58:f6:e8:8d:a9:61:4f:e8:7d:f0:85:77:11:3e:6c: 19:52:7a:d4:4e:f7:05:b2:7f:0c:1d:ab:43:39:80: 96:2b:ca:fc:46:7f:13:de:04:ac:6e:aa:30:9f:45: 75:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:DB:8E:AB:99:30:FD:F7:BA:01:14:E0:19:29:4D:4F:F3:40:E1:AF X509v3 Authority Key Identifier: keyid:EC:37:43:E1:96:2B:A6:6D:28:18:EC:E8:EA:B3:62:CE:14:FE:F9:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:e1:5b:ee:a2:25:78:07:99:21:21:91:22:c5:a2:7b:da:06: 80:df:4b:32:b6:ff:37:c2:92:77:2d:01:0f:da:ad:1f:83:db: 1e:f6:68:30:69:14:76:85:97:58:73:2d:50:ee:09:fa:2f:c5: 36:66:94:fd:03:85:5d:bc:41:b5:6b:27:25:fb:76:e9:2a:de: 98:44:b1:10:f2:cc:62:01:2f:55:30:e5:6e:e9:82:7a:af:33: f5:28:fc:35:41:d7:12:f9:00:25:8b:9d:ce:8f:18:38:a3:70: cd:07:9e:a4:83:c4:15:56:33:10:18:de:b6:92:15:94:da:99: c5:af:7e:b6:f5:b0:9e:cd:33:19:35:d2:53:c0:e6:8a:6b:9b: 02:b9:2a:ef:40:9b:6b:4c:2a:2e:4b:9b:0a:4f:13:ab:91:31: 2b:c9:f2:7d:3e:6b:63:06:99:f1:1e:13:fc:48:17:b6:d2:3f: 41:70:6d:ab:ee:0d:a8:10:76:59:dc:3f:03:16:71:e7:86:bc: f1:cd:94:5a:e5:2c:ba:17:70:0a:78:3b:ff:93:0d:96:5f:07: b7:2a:76:16:e6:6c:b8:81:1b:e6:2b:36:b5:ed:77:ec:ab:91: 19:97:17:b6:47:85:2d:ae:5e:20:12:27:97:9d:34:5e:1d:10: 3d:ca:2b:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUuUSqtk08JhRJsMCZxumqGAVGnowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUMzNzQzRTE5NjJCQTY2RDI4MThFQ0U4RUFCMzYyQ0Ux NEZFRjlCQTAeFw0yNjA5MjExMDA5MThaFw0yNjA5MjIxMjM4MThaMDMxMTAvBgNV BAMTKDcwREI4RUFCOTkzMEZERjdCQTAxMTRFMDE5Mjk0RDRGRjM0MEUxQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoKQqJPMVQbrZPkJ2ryzBwOIeE rSeqe4KZ2qUVTi5n931qAhWYcHXpiIoWOI1d1mA8s7RCSjLpLQwwJMJ36JIajxma PoPdzISUZCTseeQn5YHDe7lAPG4Q9Jgrd+gln0dxXUfzdUsA2Z78RUU6qC5Xfa8j PsUcR3pGP3RbOKgKZUViPLwht88tWaDX+fbmb980KFTRWWP+njLi45OwTmzjojn/ DFG+uZHsvN6ACQT7dU1vRnPYQfV6XQKgV5xZckvbp0vtpr+IgsoPjztdAe7spVj2 6I2pYU/offCFdxE+bBlSetRO9wWyfwwdq0M5gJYryvxGfxPeBKxuqjCfRXVdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcNuOq5kw/fe6ARTgGSlNT/NA4a8wHwYDVR0j BBgwFoAU7DdD4ZYrpm0oGOzo6rNizhT++bowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzBkYTU4ODItYjgwNC00MTU0LTk1OWItNjMzNmIyNGUxOGIyLzAvRUMzNzQzRTE5 NjJCQTY2RDI4MThFQ0U4RUFCMzYyQ0UxNEZFRjlCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQzM3NDNFMTk2MkJBNjZEMjgxOEVDRThFQUIzNjJDRTE0RkVG OUJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzBkYTU4ODItYjgwNC00MTU0LTk1 OWItNjMzNmIyNGUxOGIyLzAvRUMzNzQzRTE5NjJCQTY2RDI4MThFQ0U4RUFCMzYy Q0UxNEZFRjlCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIHhW+6iJXgHmSEhkSLFonvaBoDfSzK2/zfC knctAQ/arR+D2x72aDBpFHaFl1hzLVDuCfovxTZmlP0DhV28QbVrJyX7dukq3phE sRDyzGIBL1Uw5W7pgnqvM/Uo/DVB1xL5ACWLnc6PGDijcM0HnqSDxBVWMxAY3raS FZTamcWvfrb1sJ7NMxk10lPA5oprmwK5Ku9Am2tMKi5LmwpPE6uRMSvJ8n0+a2MG mfEeE/xIF7bSP0FwbavuDagQdlncPwMWceeGvPHNlFrlLLoXcAp4O/+TDZZfB7cq dhbmbLiBG+YrNrXtd+yrkRmXF7ZHhS2uXiASJ5edNF4dED3KKz0= -----END CERTIFICATE-----Generated at Mon Sep 21 14:07:43 2026 by rpki-client