$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft File: EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft (raw, json) Hash identifier: YI9I5ZK1f8FbE+xRe00do5EnTxzq06Rl1revzStO7aA= Subject key identifier: 99:B2:94:74:D0:1E:F5:61:33:95:35:97:4C:31:2F:E2:4C:42:A2:27 Authority key identifier: EC:5A:E3:6D:AF:9B:DD:77:E6:23:FC:7C:7F:5A:8A:0F:67:FD:71:6F Certificate issuer: /CN=EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F Certificate serial: D75B3A34901C816F44B5D002ACA17B26F6C1A6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft Manifest number: BF Signing time: Tue 22 Sep 2026 12:52:15 +0000 Manifest this update: Tue 22 Sep 2026 12:47:15 +0000 Manifest next update: Wed 23 Sep 2026 16:50:15 +0000 Files and hashes: 1: 3136302e32322e3139392e302f32342d3234203d3e20313532383336.roa (hash: a0teJ5lq1xBgiI5mA8EcJ42YaSmlhBF26ShVqEb+s/8=) 2: EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.crl (hash: C5PuVVskl0bL3FUFPoY68dNYoOpJQPfDRDeCSCT1V8A=) 3: 3136302e32322e3139382e302f32342d3234203d3e20313532383336.roa (hash: 4hzEJ9YbAF9buAExFLN+RTSrGCyc9GGfXKqoc6rWOKY=) 4: 3136302e32322e3139382e302f32332d3233203d3e20313532383336.roa (hash: NyaKnWNdcDfhRDv5OOV0uHnlXww5Tu4WFH6FM+NsLLc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.crl rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 15:18:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: d7:5b:3a:34:90:1c:81:6f:44:b5:d0:02:ac:a1:7b:26:f6:c1:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F Validity Not Before: Sep 22 12:47:15 2026 GMT Not After : Sep 23 16:50:15 2026 GMT Subject: CN=99B29474D01EF561339535974C312FE24C42A227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f8:46:dc:63:d1:09:34:e8:b5:b6:8e:e7:0c: ee:81:aa:a0:29:3d:eb:35:04:d5:12:ee:28:18:05: 12:46:c1:38:a4:35:1c:59:7b:b7:6b:ae:96:74:ac: 19:45:f1:07:cd:32:31:f7:00:45:ca:c7:70:f1:a7: ac:2f:fd:d7:e6:8b:6a:1d:32:29:47:d3:e9:d8:60: 3d:2d:08:c6:20:fb:9a:c7:ca:a3:fb:5f:b6:9c:e7: 38:84:fc:4a:27:15:3c:31:fa:f8:14:8e:5b:ce:ad: c4:02:05:3c:9b:80:f1:b7:c4:e6:f9:00:c1:f0:42: 89:29:77:d2:e5:f2:d4:0a:cc:4c:56:c1:c0:17:85: 5d:c8:78:5b:8a:7d:72:a5:b5:a0:79:38:ab:f5:f8: 15:24:bd:ca:e9:d3:e3:16:67:67:84:cf:2a:be:2c: 3b:97:ea:ad:5e:e9:2b:82:d4:bc:29:37:d8:1b:a9: 24:96:1e:72:04:88:f7:15:7a:71:23:8e:0e:e1:5e: 7a:e1:f4:88:06:bf:0e:ec:de:a5:0d:bd:ff:ae:25: 9d:b1:89:ec:34:02:f9:4e:63:04:4f:d1:98:c9:e4: d0:81:c4:a9:e6:18:26:92:08:41:03:4a:f1:ba:a8: 6d:55:81:70:dc:8d:3b:7c:1b:99:2a:2b:95:72:b3: bd:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B2:94:74:D0:1E:F5:61:33:95:35:97:4C:31:2F:E2:4C:42:A2:27 X509v3 Authority Key Identifier: keyid:EC:5A:E3:6D:AF:9B:DD:77:E6:23:FC:7C:7F:5A:8A:0F:67:FD:71:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:f8:b0:23:bf:d2:35:8a:6f:cb:13:b8:fd:56:07:b2:65:39: 77:71:b0:8c:24:3e:b0:a8:c9:fc:6f:58:06:99:6b:0d:08:e0: 30:1f:f0:55:66:5e:7e:d4:13:dd:04:9f:bb:f5:3b:2b:8b:7f: 3b:bb:32:8d:88:4f:c2:53:4b:05:1e:a4:ce:4b:2e:db:4f:d9: 00:05:81:e6:f0:c7:5f:f2:68:1b:3e:ab:a8:c1:fe:6f:f6:4d: 79:94:bb:09:c2:3e:75:36:de:46:33:12:4f:96:e5:ba:fe:ec: 07:6a:57:72:21:3d:8f:c0:e6:24:52:a5:eb:87:58:9f:10:7f: 2c:75:22:83:43:8d:d6:b4:d9:b7:a8:b9:f0:7c:73:1f:d5:8f: aa:99:a6:7f:c6:7a:01:af:74:6a:82:13:67:8a:90:68:65:9f: c1:6f:e6:b1:d3:fb:01:88:f9:f2:b8:7c:cc:d9:b8:10:69:26: 5e:20:73:58:55:16:6c:32:f4:a1:3d:54:b7:fc:3b:7d:5f:7e: 94:d9:a6:7e:d0:1c:2e:e7:10:1b:9b:d9:0f:8e:95:42:88:55: 48:79:07:ea:3c:01:5d:d2:fc:d5:e5:d4:ef:ba:8d:26:8c:1d: 67:38:84:56:4f:a8:11:44:26:ee:26:9f:c9:59:db:67:9c:0c: 62:70:ef:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUANdbOjSQHIFvRLXQAqyheyb2waYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM1QUUzNkRBRjlCREQ3N0U2MjNGQzdDN0Y1QThBMEY2 N0ZENzE2RjAeFw0yNjA5MjIxMjQ3MTVaFw0yNjA5MjMxNjUwMTVaMDMxMTAvBgNV BAMTKDk5QjI5NDc0RDAxRUY1NjEzMzk1MzU5NzRDMzEyRkUyNEM0MkEyMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl+EbcY9EJNOi1to7nDO6BqqAp Pes1BNUS7igYBRJGwTikNRxZe7drrpZ0rBlF8QfNMjH3AEXKx3Dxp6wv/dfmi2od MilH0+nYYD0tCMYg+5rHyqP7X7ac5ziE/EonFTwx+vgUjlvOrcQCBTybgPG3xOb5 AMHwQokpd9Ll8tQKzExWwcAXhV3IeFuKfXKltaB5OKv1+BUkvcrp0+MWZ2eEzyq+ LDuX6q1e6SuC1LwpN9gbqSSWHnIEiPcVenEjjg7hXnrh9IgGvw7s3qUNvf+uJZ2x iew0AvlOYwRP0ZjJ5NCBxKnmGCaSCEEDSvG6qG1VgXDcjTt8G5kqK5Vys73TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmbKUdNAe9WEzlTWXTDEv4kxCoicwHwYDVR0j BBgwFoAU7Frjba+b3XfmI/x8f1qKD2f9cW8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWYzMGU0YWUtM2U0Ny00NTQwLTgyM2MtNTNjYWYyMjY3YjM2LzAvRUM1QUUzNkRB RjlCREQ3N0U2MjNGQzdDN0Y1QThBMEY2N0ZENzE2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FQzVBRTM2REFGOUJERDc3RTYyM0ZDN0M3RjVBOEEwRjY3RkQ3 MTZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWYzMGU0YWUtM2U0Ny00NTQwLTgy M2MtNTNjYWYyMjY3YjM2LzAvRUM1QUUzNkRBRjlCREQ3N0U2MjNGQzdDN0Y1QThB MEY2N0ZENzE2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACT4sCO/0jWKb8sTuP1WB7JlOXdxsIwkPrCo yfxvWAaZaw0I4DAf8FVmXn7UE90En7v1OyuLfzu7Mo2IT8JTSwUepM5LLttP2QAF gebwx1/yaBs+q6jB/m/2TXmUuwnCPnU23kYzEk+W5br+7AdqV3IhPY/A5iRSpeuH WJ8Qfyx1IoNDjda02beoufB8cx/Vj6qZpn/GegGvdGqCE2eKkGhln8Fv5rHT+wGI +fK4fMzZuBBpJl4gc1hVFmwy9KE9VLf8O31ffpTZpn7QHC7nEBub2Q+OlUKIVUh5 B+o8AV3S/NXl1O+6jSaMHWc4hFZPqBFEJu4mn8lZ22ecDGJw7wk= -----END CERTIFICATE-----Generated at Wed Sep 23 01:16:09 2026 by rpki-client