$ rpki-client -vvf rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft File: EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft (raw, json) Hash identifier: y3R8piI/oQqy0s5CynY+DT7Y93/vZrKPGqN/Pfa96kU= Subject key identifier: 35:B2:64:13:6A:8A:21:C6:8F:C0:95:8E:EC:41:05:60:C6:90:DA:24 Authority key identifier: EC:5A:E3:6D:AF:9B:DD:77:E6:23:FC:7C:7F:5A:8A:0F:67:FD:71:6F Certificate issuer: /CN=EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F Certificate serial: 1FF7BF4F4181B68E141E96E4C0FAE2793CEA8CA8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 20:06:22 +0000 Manifest this update: Tue 28 Jul 2026 20:01:22 +0000 Manifest next update: Wed 29 Jul 2026 21:12:22 +0000 Files and hashes: 1: 3136302e32322e3139382e302f32332d3233203d3e20313532383336.roa (hash: NyaKnWNdcDfhRDv5OOV0uHnlXww5Tu4WFH6FM+NsLLc=) 2: 3136302e32322e3139392e302f32342d3234203d3e20313532383336.roa (hash: a0teJ5lq1xBgiI5mA8EcJ42YaSmlhBF26ShVqEb+s/8=) 3: EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.crl (hash: 45f4FydadO6fKmId6zhVWgtxyRMzfVAWWFN5SmKskqY=) 4: 3136302e32322e3139382e302f32342d3234203d3e20313532383336.roa (hash: 4hzEJ9YbAF9buAExFLN+RTSrGCyc9GGfXKqoc6rWOKY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.crl rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 09:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:f7:bf:4f:41:81:b6:8e:14:1e:96:e4:c0:fa:e2:79:3c:ea:8c:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F Validity Not Before: Jul 28 20:01:22 2026 GMT Not After : Jul 29 21:12:22 2026 GMT Subject: CN=35B264136A8A21C68FC0958EEC410560C690DA24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e1:9c:3e:99:01:ea:6f:ad:2f:52:dd:c2:70: 8a:b4:e8:21:72:5f:a9:7a:4e:b9:31:96:2b:eb:13: 41:3e:05:f2:b7:03:c1:7e:77:89:fe:d6:b6:2e:f1: 92:6e:75:a9:c7:16:1b:82:df:01:81:bb:84:2b:48: 45:1c:37:49:92:34:75:b3:bb:21:a6:0e:e9:4b:79: e7:c5:2b:34:c3:4c:37:78:68:ba:a0:89:cb:c8:4e: 68:e4:3d:ca:1a:15:83:f7:a7:d4:4d:ec:91:7d:6b: d3:75:0e:7b:dc:24:a6:ae:67:85:7c:69:56:37:90: 63:e3:dd:68:33:b2:97:db:91:97:7d:87:20:30:65: d3:f7:cb:2d:34:1f:ae:8e:e3:4f:be:f1:50:05:fb: b2:55:db:87:7c:d5:eb:5d:9e:96:5b:d8:be:b2:82: a4:3f:e8:65:32:5a:de:bb:22:b8:39:fd:74:cd:e0: 22:fe:cd:5e:93:29:1c:1e:d0:30:90:74:08:f7:81: 35:87:1f:b1:f0:88:f7:c4:ee:e8:db:05:27:b0:23: de:7f:1e:ad:f1:43:6b:6a:cc:2d:f2:44:85:42:55: 8d:ae:34:e2:34:06:93:ec:be:e5:47:2d:b2:9c:02: e2:37:f6:4d:4f:6c:f1:22:bb:0c:d4:a6:41:92:91: 07:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B2:64:13:6A:8A:21:C6:8F:C0:95:8E:EC:41:05:60:C6:90:DA:24 X509v3 Authority Key Identifier: keyid:EC:5A:E3:6D:AF:9B:DD:77:E6:23:FC:7C:7F:5A:8A:0F:67:FD:71:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:50:69:3f:a0:39:a8:2a:d8:c3:a1:23:45:3c:28:5e:5e:80: ac:44:62:7f:38:ca:68:34:1a:dd:35:fc:81:0b:21:a3:59:d5: 44:2d:18:3e:1d:af:18:b3:27:0d:2a:29:d1:0a:60:8d:ab:7b: 92:bd:d3:9a:14:32:67:9c:c5:69:78:92:1b:e6:73:ce:ab:7a: 60:f4:ff:cf:6d:d8:80:65:02:e4:ee:23:c1:64:1a:e2:da:8b: 1e:a8:41:ab:0e:ca:e1:dc:f5:c2:56:84:2a:73:b4:73:06:a6: 4e:fa:75:bf:51:ba:7d:6d:fe:bf:5e:b6:5e:23:33:e0:2e:f9: f2:18:8d:58:27:b9:e3:96:af:35:44:87:0f:a3:32:9e:9b:f3: cb:ea:c0:26:7c:a1:7f:e0:5f:cf:48:5a:4b:0a:15:95:1e:52: a0:57:cf:a5:af:b7:4a:a1:28:ec:3f:4e:9d:34:16:50:e0:fb: 8f:1c:2a:e1:8b:48:91:30:2b:7b:03:e6:30:2f:90:74:1d:da: 38:90:cf:81:4a:0c:1f:18:cb:6e:ac:90:c4:27:f4:41:f0:d7: 6b:3b:0a:f2:32:2f:4b:a8:2b:e7:e6:f6:a4:23:69:d0:b3:d5: 36:73:39:51:95:31:af:ed:11:9c:09:ea:18:e4:94:b4:ed:9b: f2:3a:27:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH/e/T0GBto4UHpbkwPrieTzqjKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM1QUUzNkRBRjlCREQ3N0U2MjNGQzdDN0Y1QThBMEY2 N0ZENzE2RjAeFw0yNjA3MjgyMDAxMjJaFw0yNjA3MjkyMTEyMjJaMDMxMTAvBgNV BAMTKDM1QjI2NDEzNkE4QTIxQzY4RkMwOTU4RUVDNDEwNTYwQzY5MERBMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS4Zw+mQHqb60vUt3CcIq06CFy X6l6TrkxlivrE0E+BfK3A8F+d4n+1rYu8ZJudanHFhuC3wGBu4QrSEUcN0mSNHWz uyGmDulLeefFKzTDTDd4aLqgicvITmjkPcoaFYP3p9RN7JF9a9N1DnvcJKauZ4V8 aVY3kGPj3WgzspfbkZd9hyAwZdP3yy00H66O40++8VAF+7JV24d81etdnpZb2L6y gqQ/6GUyWt67Irg5/XTN4CL+zV6TKRwe0DCQdAj3gTWHH7HwiPfE7ujbBSewI95/ Hq3xQ2tqzC3yRIVCVY2uNOI0BpPsvuVHLbKcAuI39k1PbPEiuwzUpkGSkQdjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNbJkE2qKIcaPwJWO7EEFYMaQ2iQwHwYDVR0j BBgwFoAU7Frjba+b3XfmI/x8f1qKD2f9cW8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWYzMGU0YWUtM2U0Ny00NTQwLTgyM2MtNTNjYWYyMjY3YjM2LzAvRUM1QUUzNkRB RjlCREQ3N0U2MjNGQzdDN0Y1QThBMEY2N0ZENzE2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FQzVBRTM2REFGOUJERDc3RTYyM0ZDN0M3RjVBOEEwRjY3RkQ3 MTZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWYzMGU0YWUtM2U0Ny00NTQwLTgy M2MtNTNjYWYyMjY3YjM2LzAvRUM1QUUzNkRBRjlCREQ3N0U2MjNGQzdDN0Y1QThB MEY2N0ZENzE2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADpQaT+gOagq2MOhI0U8KF5egKxEYn84ymg0 Gt01/IELIaNZ1UQtGD4drxizJw0qKdEKYI2re5K905oUMmecxWl4khvmc86remD0 /89t2IBlAuTuI8FkGuLaix6oQasOyuHc9cJWhCpztHMGpk76db9Run1t/r9etl4j M+Au+fIYjVgnueOWrzVEhw+jMp6b88vqwCZ8oX/gX89IWksKFZUeUqBXz6Wvt0qh KOw/Tp00FlDg+48cKuGLSJEwK3sD5jAvkHQd2jiQz4FKDB8Yy26skMQn9EHw12s7 CvIyL0uoK+fm9qQjadCz1TZzOVGVMa/tEZwJ6hjklLTtm/I6Jx8= -----END CERTIFICATE-----Generated at Tue Jul 28 21:31:17 2026 by rpki-client