$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.mft File: E97B01E9B103A0595C106FBDB4EA9635F3812B44.mft (raw, json) Hash identifier: lSykm/BFmchRbyTOJpFHfYUzmswnC4+TNjpoRt4gyhM= Subject key identifier: 7F:6A:D5:4D:A7:07:0E:90:2B:0E:8C:E3:F2:BB:AE:8A:A1:23:6D:BF Authority key identifier: E9:7B:01:E9:B1:03:A0:59:5C:10:6F:BD:B4:EA:96:35:F3:81:2B:44 Certificate issuer: /CN=E97B01E9B103A0595C106FBDB4EA9635F3812B44 Certificate serial: 4D56F7FF1633F9EFC4939B293DFDED7BDED0A6A0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97B01E9B103A0595C106FBDB4EA9635F3812B44.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.mft Manifest number: F6 Signing time: Sun 01 Nov 2026 03:32:18 +0000 Manifest this update: Sun 01 Nov 2026 03:27:18 +0000 Manifest next update: Mon 02 Nov 2026 04:22:18 +0000 Files and hashes: 1: 3130332e3134382e38392e302f32342d3234203d3e20313430343231.roa (hash: vqX/mtnN0W8RLZb7l8bNIZx8LnJh0g2gbraFilNseKo=) 2: 3130332e3134382e38382e302f32342d3234203d3e20313430343231.roa (hash: 17JZlywqEJeGYZvXZ5p1XRwbIJcNG0ARBxLeQExtlUI=) 3: E97B01E9B103A0595C106FBDB4EA9635F3812B44.crl (hash: oIEG6OA87AOXpJpPZEcqnKfBFFH5gw/fsWsxdMAHTs8=) 4: 3130332e3134382e38382e302f32332d3233203d3e20313430343231.roa (hash: 3u4SqpMZHOiN005smob5L/czZ7TrAkEBbioYuGaCo6o=) 5: 323030313a6466323a633938303a3a2f34382d3438203d3e20313430343231.roa (hash: eE2EjWF5JyFRMHUXcgYuX1KiOGjP1McRgQBH4Ci3bis=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.crl rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97B01E9B103A0595C106FBDB4EA9635F3812B44.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 04:22:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:56:f7:ff:16:33:f9:ef:c4:93:9b:29:3d:fd:ed:7b:de:d0:a6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E97B01E9B103A0595C106FBDB4EA9635F3812B44 Validity Not Before: Nov 1 03:27:18 2026 GMT Not After : Nov 2 04:22:18 2026 GMT Subject: CN=7F6AD54DA7070E902B0E8CE3F2BBAE8AA1236DBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:b8:9e:b6:55:87:38:73:eb:11:c3:2b:d0:8f: a9:f1:db:b7:4b:0c:a7:2c:e6:4c:c5:5a:78:95:8e: 6b:f4:cc:0f:19:0f:09:c2:e1:47:92:7e:38:6f:19: a7:c4:ec:8a:1c:40:5b:3b:eb:49:c4:ee:cd:16:de: c7:d0:a1:b5:04:ba:79:80:20:44:aa:9b:5b:28:2f: 6f:b6:59:14:f0:4c:46:1b:c9:57:3e:ba:7e:39:4c: 09:aa:c6:ea:b5:3e:ad:4c:46:73:91:95:c1:52:6c: de:b2:f7:6c:19:5f:09:23:da:b4:6e:52:7a:ff:e6: 3a:0a:07:8d:e0:bd:60:e0:da:95:1c:26:fa:0f:e7: f7:ba:39:56:92:36:4b:bf:2a:54:10:4c:09:8c:39: 6f:c1:db:f2:fc:7e:eb:9c:9b:d2:f2:af:e6:a0:b7: 00:1d:a4:01:f0:97:da:27:7a:42:c4:74:d0:9c:f0: dc:b2:35:60:37:a0:1b:90:c4:81:af:8e:78:2e:b3: c8:f8:f1:ab:28:c5:b4:29:d5:3d:62:cf:84:49:06: fc:c8:bd:22:35:6c:fe:5c:42:e1:de:4d:28:82:82: 1c:0a:62:10:f2:17:22:73:4a:48:57:d2:53:4f:83: 63:db:4b:b9:6a:3a:a6:3f:ff:48:ab:f0:23:40:49: c1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:6A:D5:4D:A7:07:0E:90:2B:0E:8C:E3:F2:BB:AE:8A:A1:23:6D:BF X509v3 Authority Key Identifier: keyid:E9:7B:01:E9:B1:03:A0:59:5C:10:6F:BD:B4:EA:96:35:F3:81:2B:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97B01E9B103A0595C106FBDB4EA9635F3812B44.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:44:22:45:2d:52:7e:eb:ce:76:bc:29:81:23:07:24:70:fe: 0d:2c:76:12:c2:79:e6:cb:5b:42:b0:bc:c1:22:fd:70:32:72: cb:43:87:da:d5:1f:06:c7:94:25:24:a2:d3:5a:c7:d5:57:de: 7d:54:c2:f4:57:d1:9d:f6:89:99:e7:28:db:a5:5e:61:f4:dc: f3:e1:b3:72:18:58:43:b5:cf:b2:8d:6b:7a:4a:58:2b:a2:31: 8c:cf:da:cf:c6:49:d4:80:80:8d:a2:cf:b3:3d:64:4a:f1:3d: 55:c2:b3:b6:df:b4:43:bd:9f:21:e4:1b:11:55:29:cd:ff:a3: c1:b6:83:ab:11:df:6e:5e:f7:ba:56:ba:a0:f5:f2:e2:57:f5: f8:24:44:5d:1a:00:4b:b0:0b:c0:ee:50:d0:c0:86:2d:d3:d7: 6e:eb:50:15:01:e9:63:4b:e8:f4:13:c3:fd:e9:ea:9d:67:26: ac:20:4f:30:5b:58:4a:3b:4e:f8:47:a9:49:db:32:e5:53:eb: 9d:2a:0a:c7:b8:de:bc:6a:4c:d2:03:2d:9a:0d:ca:df:2b:88: 5f:d7:78:bf:b4:98:77:76:34:59:e9:7a:aa:97:b6:82:4d:f9: e7:82:b6:9c:60:8a:dd:fb:a7:a2:86:87:1f:28:c6:ca:f1:dc: b2:62:22:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTVb3/xYz+e/Ek5spPf3te97QpqAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk3QjAxRTlCMTAzQTA1OTVDMTA2RkJEQjRFQTk2MzVG MzgxMkI0NDAeFw0yNjExMDEwMzI3MThaFw0yNjExMDIwNDIyMThaMDMxMTAvBgNV BAMTKDdGNkFENTREQTcwNzBFOTAyQjBFOENFM0YyQkJBRThBQTEyMzZEQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2uJ62VYc4c+sRwyvQj6nx27dL DKcs5kzFWniVjmv0zA8ZDwnC4UeSfjhvGafE7IocQFs760nE7s0W3sfQobUEunmA IESqm1soL2+2WRTwTEYbyVc+un45TAmqxuq1Pq1MRnORlcFSbN6y92wZXwkj2rRu Unr/5joKB43gvWDg2pUcJvoP5/e6OVaSNku/KlQQTAmMOW/B2/L8fuucm9Lyr+ag twAdpAHwl9onekLEdNCc8NyyNWA3oBuQxIGvjngus8j48asoxbQp1T1iz4RJBvzI vSI1bP5cQuHeTSiCghwKYhDyFyJzSkhX0lNPg2PbS7lqOqY//0ir8CNAScEPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf2rVTacHDpArDozj8ruuiqEjbb8wHwYDVR0j BBgwFoAU6XsB6bEDoFlcEG+9tOqWNfOBK0QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGI3MmVjYTQtNzNhZC00ZTBiLWE2YTYtN2E2NTY5OGI3M2JlLzAvRTk3QjAxRTlC MTAzQTA1OTVDMTA2RkJEQjRFQTk2MzVGMzgxMkI0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOTdCMDFFOUIxMDNBMDU5NUMxMDZGQkRCNEVBOTYzNUYzODEy QjQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGI3MmVjYTQtNzNhZC00ZTBiLWE2 YTYtN2E2NTY5OGI3M2JlLzAvRTk3QjAxRTlCMTAzQTA1OTVDMTA2RkJEQjRFQTk2 MzVGMzgxMkI0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE1EIkUtUn7rzna8KYEjByRw/g0sdhLCeebL W0KwvMEi/XAycstDh9rVHwbHlCUkotNax9VX3n1UwvRX0Z32iZnnKNulXmH03PPh s3IYWEO1z7KNa3pKWCuiMYzP2s/GSdSAgI2iz7M9ZErxPVXCs7bftEO9nyHkGxFV Kc3/o8G2g6sR325e97pWuqD18uJX9fgkRF0aAEuwC8DuUNDAhi3T127rUBUB6WNL 6PQTw/3p6p1nJqwgTzBbWEo7TvhHqUnbMuVT650qCse43rxqTNIDLZoNyt8riF/X eL+0mHd2NFnpeqqXtoJN+eeCtpxgit37p6KGhx8oxsrx3LJiIks= -----END CERTIFICATE-----Generated at Sun Nov 1 22:04:35 2026 by rpki-client