$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.mft File: E97B01E9B103A0595C106FBDB4EA9635F3812B44.mft (raw, json) Hash identifier: ZFvWH05Yc5OlwilXYWSuG+ZBYSe9Q36zXrxtfp46dSw= Subject key identifier: 4F:78:EA:53:FB:C1:E9:D1:CC:E3:7B:65:9D:56:2D:53:58:85:E7:CE Authority key identifier: E9:7B:01:E9:B1:03:A0:59:5C:10:6F:BD:B4:EA:96:35:F3:81:2B:44 Certificate issuer: /CN=E97B01E9B103A0595C106FBDB4EA9635F3812B44 Certificate serial: 09CC7421685379D80758F3CDA414407204610D9A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97B01E9B103A0595C106FBDB4EA9635F3812B44.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.mft Manifest number: B8 Signing time: Tue 15 Sep 2026 20:35:31 +0000 Manifest this update: Tue 15 Sep 2026 20:30:31 +0000 Manifest next update: Wed 16 Sep 2026 20:35:31 +0000 Files and hashes: 1: 3130332e3134382e38382e302f32342d3234203d3e20313430343231.roa (hash: 17JZlywqEJeGYZvXZ5p1XRwbIJcNG0ARBxLeQExtlUI=) 2: E97B01E9B103A0595C106FBDB4EA9635F3812B44.crl (hash: 32sOrp9SYYn73kokg3V1uuAFQFWAoOVQlhVfuZ7J5Uw=) 3: 3130332e3134382e38382e302f32332d3233203d3e20313430343231.roa (hash: 3u4SqpMZHOiN005smob5L/czZ7TrAkEBbioYuGaCo6o=) 4: 3130332e3134382e38392e302f32342d3234203d3e20313430343231.roa (hash: vqX/mtnN0W8RLZb7l8bNIZx8LnJh0g2gbraFilNseKo=) 5: 323030313a6466323a633938303a3a2f34382d3438203d3e20313430343231.roa (hash: eE2EjWF5JyFRMHUXcgYuX1KiOGjP1McRgQBH4Ci3bis=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.crl rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97B01E9B103A0595C106FBDB4EA9635F3812B44.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Sep 2026 20:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:cc:74:21:68:53:79:d8:07:58:f3:cd:a4:14:40:72:04:61:0d:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E97B01E9B103A0595C106FBDB4EA9635F3812B44 Validity Not Before: Sep 15 20:30:31 2026 GMT Not After : Sep 16 20:35:31 2026 GMT Subject: CN=4F78EA53FBC1E9D1CCE37B659D562D535885E7CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:25:74:75:14:97:58:ac:bb:ae:ab:b0:e5:77: 77:b0:c9:c1:c0:30:f4:5c:24:4f:5f:46:c6:8b:85: ce:d4:b8:84:77:0d:9d:84:71:e9:ef:cf:fe:c7:3b: a7:28:01:b8:e4:76:99:27:fc:41:97:69:1e:22:03: df:69:17:9c:5a:47:a9:4c:07:68:ff:47:3a:21:7e: 82:3f:77:a9:6b:00:5f:6a:1d:06:c0:41:8a:80:8e: 7d:23:a3:d6:f5:e1:c0:22:aa:a6:df:b0:97:ce:95: f6:54:90:8b:a3:22:08:fc:f5:d9:f6:5b:07:3d:47: 99:25:37:2f:52:84:60:84:31:02:e1:80:a0:41:c8: 1b:04:fb:23:bc:54:54:77:cd:ac:00:a5:89:ae:cc: 54:09:b6:49:3d:95:35:ff:98:9d:13:a6:e2:c3:db: 9c:72:42:01:8b:1a:b1:5c:49:62:95:0a:59:50:43: 1a:7e:df:bf:f2:0b:96:3a:d0:f5:c8:37:c7:99:e3: ce:f0:a9:2b:2c:f9:34:0f:1f:28:df:02:c9:03:2f: 45:6e:4c:16:1d:68:26:af:cc:a8:04:47:71:ed:10: 46:3d:51:df:1b:6a:5a:63:e5:28:49:90:bf:36:20: c6:37:91:e0:0f:ab:9c:55:96:54:92:91:69:64:a1: e8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:78:EA:53:FB:C1:E9:D1:CC:E3:7B:65:9D:56:2D:53:58:85:E7:CE X509v3 Authority Key Identifier: keyid:E9:7B:01:E9:B1:03:A0:59:5C:10:6F:BD:B4:EA:96:35:F3:81:2B:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97B01E9B103A0595C106FBDB4EA9635F3812B44.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:50:22:be:79:34:23:40:e1:01:35:7b:b2:3d:f6:2b:c7:df: d6:73:c2:58:6c:96:6c:c1:1b:d7:c0:c5:76:99:cb:2d:51:a3: 9e:07:7d:2f:1c:30:84:cc:d8:14:92:00:00:dc:e9:38:fa:2e: 56:71:d3:54:b8:74:ff:eb:0d:12:ad:a7:a2:26:e8:32:de:c2: 5c:1f:38:5c:e1:c2:c6:59:68:ff:30:0c:09:79:e8:51:4b:42: 70:af:3e:77:9a:69:d2:1a:9e:41:e6:6a:35:48:b1:8a:a7:c5: ec:30:89:b5:3a:dd:70:df:38:7e:89:23:0c:86:32:94:b6:da: ae:21:17:0a:4d:58:fc:aa:0f:10:6f:f7:3c:3e:cd:91:9a:eb: 51:90:81:bd:2c:77:62:9c:c2:34:03:50:98:ab:fd:85:c6:7d: ca:41:a9:c1:4f:ba:c4:ef:4f:10:82:cd:2d:4c:3e:21:50:27: fc:ef:68:56:28:6a:c8:df:6d:9d:5c:66:3f:6e:98:59:6a:7a: f9:60:06:68:d1:6d:89:db:e0:15:5a:77:be:9f:72:08:a4:48: fd:1c:a1:5c:92:cd:f1:86:6e:c1:a3:02:c5:5f:90:f6:b1:72: f8:09:35:55:92:3a:94:f5:e1:3a:7f:ec:46:85:45:fd:00:82: e6:6b:d3:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCcx0IWhTedgHWPPNpBRAcgRhDZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk3QjAxRTlCMTAzQTA1OTVDMTA2RkJEQjRFQTk2MzVG MzgxMkI0NDAeFw0yNjA5MTUyMDMwMzFaFw0yNjA5MTYyMDM1MzFaMDMxMTAvBgNV BAMTKDRGNzhFQTUzRkJDMUU5RDFDQ0UzN0I2NTlENTYyRDUzNTg4NUU3Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQJXR1FJdYrLuuq7Dld3ewycHA MPRcJE9fRsaLhc7UuIR3DZ2Ecenvz/7HO6coAbjkdpkn/EGXaR4iA99pF5xaR6lM B2j/RzohfoI/d6lrAF9qHQbAQYqAjn0jo9b14cAiqqbfsJfOlfZUkIujIgj89dn2 Wwc9R5klNy9ShGCEMQLhgKBByBsE+yO8VFR3zawApYmuzFQJtkk9lTX/mJ0TpuLD 25xyQgGLGrFcSWKVCllQQxp+37/yC5Y60PXIN8eZ487wqSss+TQPHyjfAskDL0Vu TBYdaCavzKgER3HtEEY9Ud8balpj5ShJkL82IMY3keAPq5xVllSSkWlkoegxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT3jqU/vB6dHM43tlnVYtU1iF584wHwYDVR0j BBgwFoAU6XsB6bEDoFlcEG+9tOqWNfOBK0QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGI3MmVjYTQtNzNhZC00ZTBiLWE2YTYtN2E2NTY5OGI3M2JlLzAvRTk3QjAxRTlC MTAzQTA1OTVDMTA2RkJEQjRFQTk2MzVGMzgxMkI0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOTdCMDFFOUIxMDNBMDU5NUMxMDZGQkRCNEVBOTYzNUYzODEy QjQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGI3MmVjYTQtNzNhZC00ZTBiLWE2 YTYtN2E2NTY5OGI3M2JlLzAvRTk3QjAxRTlCMTAzQTA1OTVDMTA2RkJEQjRFQTk2 MzVGMzgxMkI0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKhQIr55NCNA4QE1e7I99ivH39ZzwlhslmzB G9fAxXaZyy1Ro54HfS8cMITM2BSSAADc6Tj6LlZx01S4dP/rDRKtp6Im6DLewlwf OFzhwsZZaP8wDAl56FFLQnCvPneaadIankHmajVIsYqnxewwibU63XDfOH6JIwyG MpS22q4hFwpNWPyqDxBv9zw+zZGa61GQgb0sd2KcwjQDUJir/YXGfcpBqcFPusTv TxCCzS1MPiFQJ/zvaFYoasjfbZ1cZj9umFlqevlgBmjRbYnb4BVad76fcgikSP0c oVySzfGGbsGjAsVfkPaxcvgJNVWSOpT14Tp/7EaFRf0AguZr04w= -----END CERTIFICATE-----Generated at Wed Sep 16 09:20:20 2026 by rpki-client