$ rpki-client -vvvf rpki-rsync.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/E9E6271C170F0B74B97B8446B07AA5AB428648F1.mft File: E9E6271C170F0B74B97B8446B07AA5AB428648F1.mft (raw, json) Hash identifier: /mFtCrSwhi75ekheN6vGBVDO4WjBskM3i69ZgZXf10Q= Subject key identifier: 38:FE:45:F7:CE:55:B1:AC:4C:72:25:0E:C6:93:D0:DA:6C:13:32:17 Authority key identifier: E9:E6:27:1C:17:0F:0B:74:B9:7B:84:46:B0:7A:A5:AB:42:86:48:F1 Certificate issuer: /CN=E9E6271C170F0B74B97B8446B07AA5AB428648F1 Certificate serial: 2ED88488D181EB48ED23D22E8EA831551DDAC896 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9E6271C170F0B74B97B8446B07AA5AB428648F1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/E9E6271C170F0B74B97B8446B07AA5AB428648F1.mft Manifest number: A5 Signing time: Thu 03 Sep 2026 09:44:12 +0000 Manifest this update: Thu 03 Sep 2026 09:39:12 +0000 Manifest next update: Fri 04 Sep 2026 12:54:12 +0000 Files and hashes: 1: E9E6271C170F0B74B97B8446B07AA5AB428648F1.crl (hash: gQVblU2/u1Mkxx2QTlIA26XPZr+/yGNHBKdMad5NpRo=) 2: 3130332e33392e37332e302f32342d3234203d3e20313530343838.roa (hash: oUTlPe6tGlob4PSOrDICpszf8EfDI+Vj0wKtKJkAXJw=) 3: 3130332e33392e37322e302f32342d3234203d3e20313530343838.roa (hash: wpAJDLUihNgZdkXIKLfMYOAsPAxxh17Ib2DtgmuX8UA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/E9E6271C170F0B74B97B8446B07AA5AB428648F1.crl rsync://rpki-rsync.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/E9E6271C170F0B74B97B8446B07AA5AB428648F1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9E6271C170F0B74B97B8446B07AA5AB428648F1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:d8:84:88:d1:81:eb:48:ed:23:d2:2e:8e:a8:31:55:1d:da:c8:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9E6271C170F0B74B97B8446B07AA5AB428648F1 Validity Not Before: Sep 3 09:39:12 2026 GMT Not After : Sep 4 12:54:12 2026 GMT Subject: CN=38FE45F7CE55B1AC4C72250EC693D0DA6C133217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c1:50:d7:fd:9a:95:f0:d8:e2:1f:cc:4e:ad: 1a:bb:84:88:9e:09:a1:9c:c3:b8:d3:72:84:33:13: f8:b1:39:ae:70:87:92:ef:10:a2:a8:85:bf:f1:14: a5:70:ca:16:73:e8:cf:ce:34:32:a8:75:4d:6c:df: c2:44:c6:c1:08:86:f6:5c:3f:4a:11:2f:b7:da:ff: 48:63:cb:6b:a4:35:5b:40:f7:66:f9:f2:55:55:db: 55:56:77:14:15:32:c6:73:01:3d:a6:40:d6:ce:2d: c9:55:5c:e6:11:ab:dd:f9:0c:ca:a9:88:ac:de:df: d0:6c:ff:b8:4d:71:c6:ec:74:bd:45:82:37:7a:ac: 20:1c:ef:4d:a7:30:84:b8:7d:b2:3f:fb:ed:6a:8c: 3b:e4:ef:41:ed:98:6d:b8:7e:87:3d:18:26:e6:be: aa:62:d6:f2:7a:b4:b0:10:b7:a2:83:d3:ce:d4:66: 0a:d4:24:87:c2:2d:51:41:19:da:d1:77:4b:05:7d: 99:c6:d3:7d:66:69:d9:cc:52:4a:19:1d:7d:2e:3a: ad:87:40:53:3e:23:33:2c:c7:6d:98:15:0f:eb:d2: e3:26:c9:2e:15:27:0f:95:cc:aa:0b:54:1f:86:29: 49:94:2e:2f:72:12:ee:ab:4a:4d:03:bb:52:7f:38: ec:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:FE:45:F7:CE:55:B1:AC:4C:72:25:0E:C6:93:D0:DA:6C:13:32:17 X509v3 Authority Key Identifier: keyid:E9:E6:27:1C:17:0F:0B:74:B9:7B:84:46:B0:7A:A5:AB:42:86:48:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/E9E6271C170F0B74B97B8446B07AA5AB428648F1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9E6271C170F0B74B97B8446B07AA5AB428648F1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/E9E6271C170F0B74B97B8446B07AA5AB428648F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:2f:37:3f:99:73:a8:b7:b2:96:20:59:b0:68:3a:be:f2:0b: 54:b5:d5:36:16:dc:cb:b2:e6:e4:0c:71:93:2f:24:70:ca:4f: 3b:05:a3:18:de:36:3a:64:64:55:cd:18:75:65:e1:c6:b7:1e: 99:7b:95:68:78:62:d7:cd:8a:e0:70:50:28:33:a4:2b:d4:ff: 95:0f:57:d0:73:a9:de:e3:54:8b:e9:70:48:3a:d9:a5:1a:0a: 27:60:ab:13:23:22:04:45:54:ff:91:71:96:8f:2b:99:29:68: e5:a1:78:cf:6f:bc:b8:91:2d:03:a1:d5:63:fd:28:05:11:64: 89:ed:3d:65:92:4b:ac:8d:0f:2c:6a:52:48:4a:1d:a9:3f:b9: 27:a2:d8:0a:fa:59:62:d9:83:62:92:c1:e7:ea:7d:e3:d3:5e: a5:bd:37:77:7e:db:d9:49:36:1f:c5:07:7a:55:a9:09:93:e7: c5:91:d4:75:a2:89:3e:a5:4e:10:8c:d4:ee:de:0a:64:36:bd: 8c:6a:91:72:3e:24:99:90:01:40:23:bb:86:f8:eb:a7:f3:53: 12:54:c2:40:56:9e:33:db:f5:49:72:9e:45:c9:f2:bf:e7:e2: 03:40:ee:e3:f2:20:a3:46:ef:60:6b:47:6c:18:01:45:17:b0: b4:5b:31:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULtiEiNGB60jtI9IujqgxVR3ayJYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlFNjI3MUMxNzBGMEI3NEI5N0I4NDQ2QjA3QUE1QUI0 Mjg2NDhGMTAeFw0yNjA5MDMwOTM5MTJaFw0yNjA5MDQxMjU0MTJaMDMxMTAvBgNV BAMTKDM4RkU0NUY3Q0U1NUIxQUM0QzcyMjUwRUM2OTNEMERBNkMxMzMyMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3wVDX/ZqV8NjiH8xOrRq7hIie CaGcw7jTcoQzE/ixOa5wh5LvEKKohb/xFKVwyhZz6M/ONDKodU1s38JExsEIhvZc P0oRL7fa/0hjy2ukNVtA92b58lVV21VWdxQVMsZzAT2mQNbOLclVXOYRq935DMqp iKze39Bs/7hNccbsdL1Fgjd6rCAc702nMIS4fbI/++1qjDvk70HtmG24foc9GCbm vqpi1vJ6tLAQt6KD087UZgrUJIfCLVFBGdrRd0sFfZnG031madnMUkoZHX0uOq2H QFM+IzMsx22YFQ/r0uMmyS4VJw+VzKoLVB+GKUmULi9yEu6rSk0Du1J/OOzrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOP5F985VsaxMciUOxpPQ2mwTMhcwHwYDVR0j BBgwFoAU6eYnHBcPC3S5e4RGsHqlq0KGSPEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTBjNzNhZjUtYTJjMC00MjRkLTg2MmUtMTEyYzU4YjcyNzBlLzAvRTlFNjI3MUMx NzBGMEI3NEI5N0I4NDQ2QjA3QUE1QUI0Mjg2NDhGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOUU2MjcxQzE3MEYwQjc0Qjk3Qjg0NDZCMDdBQTVBQjQyODY0 OEYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTBjNzNhZjUtYTJjMC00MjRkLTg2 MmUtMTEyYzU4YjcyNzBlLzAvRTlFNjI3MUMxNzBGMEI3NEI5N0I4NDQ2QjA3QUE1 QUI0Mjg2NDhGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD8vNz+Zc6i3spYgWbBoOr7yC1S11TYW3Muy 5uQMcZMvJHDKTzsFoxjeNjpkZFXNGHVl4ca3Hpl7lWh4YtfNiuBwUCgzpCvU/5UP V9Bzqd7jVIvpcEg62aUaCidgqxMjIgRFVP+RcZaPK5kpaOWheM9vvLiRLQOh1WP9 KAURZIntPWWSS6yNDyxqUkhKHak/uSei2Ar6WWLZg2KSwefqfePTXqW9N3d+29lJ Nh/FB3pVqQmT58WR1HWiiT6lThCM1O7eCmQ2vYxqkXI+JJmQAUAju4b466fzUxJU wkBWnjPb9UlynkXJ8r/n4gNA7uPyIKNG72BrR2wYAUUXsLRbMVU= -----END CERTIFICATE-----Generated at Thu Sep 3 13:16:29 2026 by rpki-client