$ rpki-client -vvf rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft File: EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft (raw, json) Hash identifier: JFhuX1RpmN6g2vbbkZFMdPD8fjOymP0bMFJodp07KUA= Subject key identifier: 99:68:D5:A9:27:61:A3:4E:FD:A0:52:11:70:64:5D:D8:FA:84:7F:82 Authority key identifier: EC:5A:E3:6D:AF:9B:DD:77:E6:23:FC:7C:7F:5A:8A:0F:67:FD:71:6F Certificate issuer: /CN=EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F Certificate serial: 66F8D944875242CC48A1FA10506B2CF478E020D2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft Manifest number: 38 Signing time: Sat 13 Jun 2026 01:05:39 +0000 Manifest this update: Sat 13 Jun 2026 01:00:39 +0000 Manifest next update: Sun 14 Jun 2026 02:27:39 +0000 Files and hashes: 1: EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.crl (hash: J0R42h3GWMFpn3Yl4ow73MfsiD/9QqTOOBSHLi9ryG4=) 2: 3136302e32322e3139392e302f32342d3234203d3e20313532383336.roa (hash: a0teJ5lq1xBgiI5mA8EcJ42YaSmlhBF26ShVqEb+s/8=) 3: 3136302e32322e3139382e302f32342d3234203d3e20313532383336.roa (hash: 4hzEJ9YbAF9buAExFLN+RTSrGCyc9GGfXKqoc6rWOKY=) 4: 3136302e32322e3139382e302f32332d3233203d3e20313532383336.roa (hash: NyaKnWNdcDfhRDv5OOV0uHnlXww5Tu4WFH6FM+NsLLc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.crl rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 02:27:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:f8:d9:44:87:52:42:cc:48:a1:fa:10:50:6b:2c:f4:78:e0:20:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F Validity Not Before: Jun 13 01:00:39 2026 GMT Not After : Jun 14 02:27:39 2026 GMT Subject: CN=9968D5A92761A34EFDA0521170645DD8FA847F82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:34:a2:bb:23:42:9e:c9:4f:68:d9:78:f4:e2: 7f:b8:b8:40:eb:c1:b3:fd:f6:e8:3d:6c:71:df:10: 4b:0a:d5:6b:1c:9c:ca:88:a7:22:e9:58:dd:2b:1e: 2a:d3:38:1d:e7:02:3c:cf:6d:cd:37:21:8d:42:a2: e8:73:cc:73:20:13:d9:03:35:fb:00:14:41:ba:81: 9e:9f:50:20:d0:af:86:02:4d:50:07:7e:c2:ae:dc: e3:26:57:91:1e:2a:a5:be:8b:3a:f6:3e:e3:48:a9: e2:ce:10:47:16:6e:72:1a:0b:dd:ff:fa:65:63:fe: ce:a0:2c:0f:9b:27:92:2c:6e:9c:46:69:74:63:89: 24:69:f4:52:b5:42:8f:98:01:41:50:6f:10:00:38: 99:9c:8f:63:36:33:19:ee:0d:2f:c3:cb:97:ed:c3: ed:9b:cf:9b:2b:88:94:49:ea:60:73:e7:94:98:72: 5a:30:a4:d9:03:7c:01:2b:46:f3:6a:15:4b:77:e1: 34:a4:43:56:70:e7:9a:c5:3c:81:a6:17:73:47:58: 46:b8:cf:cc:3f:27:37:56:b4:ba:28:1b:f9:5a:44: 89:38:48:f7:62:c0:39:2e:39:b2:22:48:76:f8:e1: bb:85:38:16:54:bd:e9:0d:09:c9:5f:53:51:a6:82: 5f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:68:D5:A9:27:61:A3:4E:FD:A0:52:11:70:64:5D:D8:FA:84:7F:82 X509v3 Authority Key Identifier: keyid:EC:5A:E3:6D:AF:9B:DD:77:E6:23:FC:7C:7F:5A:8A:0F:67:FD:71:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:0f:d4:27:6b:b1:de:37:c1:03:99:6c:3b:64:47:15:fe:96: fd:d4:c2:1e:16:9a:bd:67:fc:b1:03:80:62:02:06:e2:ac:9f: f8:b1:c9:f2:de:ce:c0:57:f5:9d:ce:3c:4a:ee:64:f8:37:01: 9c:17:00:06:fc:74:0c:b9:a2:36:fb:ee:d3:99:bc:e4:1f:5f: e3:cf:e5:45:18:7b:e4:70:31:e7:ec:bd:40:64:33:03:94:81: c9:be:04:90:f2:df:75:13:6c:af:91:80:0c:e2:5d:82:00:1a: f3:45:ae:43:b4:2b:e5:04:07:5f:b8:76:d2:f2:29:4d:f1:07: bf:75:3e:80:29:9f:48:8d:76:0f:ea:e5:57:18:68:21:02:67: 39:5b:8a:91:27:c0:d2:a3:2a:7f:9c:d9:e9:e2:22:1a:bc:d5: a5:16:17:ce:3d:47:d4:92:d3:eb:25:35:9d:25:56:8a:0b:95: 06:3f:d3:33:cb:7d:cb:eb:d2:ae:44:e9:ef:2e:0d:65:52:11: 33:99:0a:c6:34:bc:43:78:b7:c6:3c:b5:e5:1d:22:48:14:e4: 3e:f2:3c:6f:bd:48:0e:7c:09:dd:6d:12:f5:be:8a:65:a1:f2: 0f:52:39:02:72:df:af:e1:e0:f1:ed:4b:77:a3:7e:e8:79:12: b1:ad:be:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZvjZRIdSQsxIofoQUGss9HjgINIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM1QUUzNkRBRjlCREQ3N0U2MjNGQzdDN0Y1QThBMEY2 N0ZENzE2RjAeFw0yNjA2MTMwMTAwMzlaFw0yNjA2MTQwMjI3MzlaMDMxMTAvBgNV BAMTKDk5NjhENUE5Mjc2MUEzNEVGREEwNTIxMTcwNjQ1REQ4RkE4NDdGODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4NKK7I0KeyU9o2Xj04n+4uEDr wbP99ug9bHHfEEsK1WscnMqIpyLpWN0rHirTOB3nAjzPbc03IY1CouhzzHMgE9kD NfsAFEG6gZ6fUCDQr4YCTVAHfsKu3OMmV5EeKqW+izr2PuNIqeLOEEcWbnIaC93/ +mVj/s6gLA+bJ5IsbpxGaXRjiSRp9FK1Qo+YAUFQbxAAOJmcj2M2MxnuDS/Dy5ft w+2bz5sriJRJ6mBz55SYclowpNkDfAErRvNqFUt34TSkQ1Zw55rFPIGmF3NHWEa4 z8w/JzdWtLooG/laRIk4SPdiwDkuObIiSHb44buFOBZUvekNCclfU1Gmgl9PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmWjVqSdho079oFIRcGRd2PqEf4IwHwYDVR0j BBgwFoAU7Frjba+b3XfmI/x8f1qKD2f9cW8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWYzMGU0YWUtM2U0Ny00NTQwLTgyM2MtNTNjYWYyMjY3YjM2LzAvRUM1QUUzNkRB RjlCREQ3N0U2MjNGQzdDN0Y1QThBMEY2N0ZENzE2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FQzVBRTM2REFGOUJERDc3RTYyM0ZDN0M3RjVBOEEwRjY3RkQ3 MTZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWYzMGU0YWUtM2U0Ny00NTQwLTgy M2MtNTNjYWYyMjY3YjM2LzAvRUM1QUUzNkRBRjlCREQ3N0U2MjNGQzdDN0Y1QThB MEY2N0ZENzE2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHQP1Cdrsd43wQOZbDtkRxX+lv3Uwh4Wmr1n /LEDgGICBuKsn/ixyfLezsBX9Z3OPEruZPg3AZwXAAb8dAy5ojb77tOZvOQfX+PP 5UUYe+RwMefsvUBkMwOUgcm+BJDy33UTbK+RgAziXYIAGvNFrkO0K+UEB1+4dtLy KU3xB791PoApn0iNdg/q5VcYaCECZzlbipEnwNKjKn+c2eniIhq81aUWF849R9SS 0+slNZ0lVooLlQY/0zPLfcvr0q5E6e8uDWVSETOZCsY0vEN4t8Y8teUdIkgU5D7y PG+9SA58Cd1tEvW+imWh8g9SOQJy36/h4PHtS3ejfuh5ErGtvkk= -----END CERTIFICATE-----Generated at Sat Jun 13 16:09:44 2026 by rpki-client