$ rpki-client -vvvf rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.mft File: E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.mft (raw, json) Hash identifier: sz5PSSsADC7AMqJRECOTikB5tRPBpWUw9HlPlXWhbVw= Subject key identifier: 3C:0C:FF:69:A3:9F:5F:C6:89:99:D7:09:8F:C2:F9:C4:5B:E7:F7:9F Authority key identifier: E9:7D:24:06:2E:3E:80:91:38:8E:0E:26:DF:E8:25:A3:AE:0F:5E:C1 Certificate issuer: /CN=E97D24062E3E8091388E0E26DFE825A3AE0F5EC1 Certificate serial: 4962913F3F90A63FC0846A732501C9EE0257B359 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.mft Manifest number: A4 Signing time: Wed 02 Sep 2026 19:21:36 +0000 Manifest this update: Wed 02 Sep 2026 19:16:36 +0000 Manifest next update: Thu 03 Sep 2026 22:57:36 +0000 Files and hashes: 1: 3130332e36382e3133362e302f32332d3234203d3e20313335343535.roa (hash: a9SdeOZSphcGVgljZg1tnbLWdBiFIVD0GygHfLT2ZLs=) 2: 3130332e36382e3133372e302f32342d3234203d3e20313335343535.roa (hash: 2Vf+pTFqJv7XrQMn75awWPNpommC6ezf5Mi4NO6m5ug=) 3: E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.crl (hash: ia5+xDJrdKc+9AV8WhbtTu2sbSE0wwiekQxGGefLBDE=) 4: 3130332e36382e3133362e302f32342d3234203d3e20313335343535.roa (hash: EhQ7R7hv9ww9SVAVibUO5OafRSJMymQa0QNdea7zNE0=) 5: 323030313a6466333a313230303a3a2f34382d3438203d3e20313335343535.roa (hash: R27uG9wLK3XnlCddZVxdbbwrtPpS8ZSeb7rGWZG6Ph4=) 6: 3130332e36382e3133362e302f32332d3233203d3e203338353131.roa (hash: mf3IPyVMZfES2LPj/qKW1uxRQxXFsgdbVk4fq7bhazg=) 7: 3130332e36382e3133362e302f32342d3234203d3e203338353131.roa (hash: GFz+TTDbnW2nztXcZjgib7laNHpvzTT0hcf+2L3G+7o=) 8: 3130332e36382e3133372e302f32342d3234203d3e203338353131.roa (hash: IBqjxLNXqSTykZaxJEDmSDLPjTO+m3MiFe7W+kVNa1Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.crl rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:62:91:3f:3f:90:a6:3f:c0:84:6a:73:25:01:c9:ee:02:57:b3:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E97D24062E3E8091388E0E26DFE825A3AE0F5EC1 Validity Not Before: Sep 2 19:16:36 2026 GMT Not After : Sep 3 22:57:36 2026 GMT Subject: CN=3C0CFF69A39F5FC68999D7098FC2F9C45BE7F79F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f8:09:f2:68:1f:cf:20:a8:1c:40:f3:6d:68: 2f:64:ca:e8:d9:04:6a:1a:54:c8:be:ec:0c:13:d2: 15:b1:49:9c:18:cb:c9:31:2e:4b:e5:74:5e:18:ce: 06:2b:28:1d:6d:e4:9e:8b:c7:fc:2d:71:67:65:cf: 08:ad:99:15:c4:5d:92:10:28:2d:a1:74:4c:5f:e4: 9a:00:be:9b:25:eb:41:28:2b:6a:8a:d5:98:c6:d7: 67:aa:6f:67:98:61:c2:b1:97:d1:e5:20:6d:4d:73: c8:a5:59:14:23:92:a4:5f:83:a9:8b:de:6d:e9:c9: 78:d5:99:2a:c0:d8:1f:05:56:f0:bf:2b:37:ac:d6: 3b:02:02:4d:ac:1c:09:66:69:68:e7:d3:54:b8:ac: 3e:29:65:f7:80:ff:4a:a0:ef:be:a4:f3:57:03:36: 7d:cc:42:90:ba:03:a1:06:d5:fd:5c:63:9e:73:26: f9:31:72:8d:3f:5b:0c:1a:06:0b:89:36:20:93:04: b6:de:44:25:ca:1a:02:40:3b:e7:ea:fa:3d:5a:42: 19:76:79:ab:1a:55:65:c7:42:f0:37:00:6b:ce:30: 6e:6b:88:e7:2e:02:23:62:bc:11:27:0e:8d:63:a2: f2:dc:ce:9d:62:7d:3f:18:cf:e4:c1:1a:16:e1:0d: f2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:0C:FF:69:A3:9F:5F:C6:89:99:D7:09:8F:C2:F9:C4:5B:E7:F7:9F X509v3 Authority Key Identifier: keyid:E9:7D:24:06:2E:3E:80:91:38:8E:0E:26:DF:E8:25:A3:AE:0F:5E:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:64:20:f8:1d:4a:32:21:f0:70:e1:ee:e2:10:59:14:b9:74: b5:9b:fb:57:01:7e:1d:a1:d6:33:65:14:c7:23:11:62:5a:d9: 2d:9f:f5:55:db:fa:e1:b2:1c:c8:85:db:fc:8d:f7:8f:1e:22: 4a:af:64:82:98:ff:fe:d0:bb:76:19:47:97:e5:0d:a5:af:15: 44:7a:98:96:56:ab:68:32:c6:54:05:73:89:a2:8b:75:db:16: 96:34:05:90:17:11:87:aa:9d:80:f8:ed:02:d2:f5:19:14:68: e3:7a:4f:96:23:e9:8a:a4:ba:73:6f:15:67:4f:b8:00:6f:26: 41:7e:52:39:66:c4:d4:34:5b:4b:fb:0d:f4:1f:a3:df:b1:c5: 7c:a1:a9:08:ff:4a:22:5c:cb:0a:4d:be:5b:70:47:e4:b7:ff: 2c:7b:12:e6:a1:50:98:a1:d1:8d:de:68:a2:e5:22:29:ac:fb: 0a:82:a3:a9:fb:1e:a2:ef:a1:36:80:f4:fb:7b:ca:2e:c5:b7: d9:b2:12:69:10:91:61:cf:8f:13:35:8e:aa:f8:c5:18:19:10: e2:3b:5b:d3:32:9a:94:a2:51:1d:d5:ba:21:12:14:b9:86:56: 46:c1:2a:28:95:a3:72:8c:58:8e:4d:c7:85:69:f1:5e:73:97: 98:94:4f:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSWKRPz+Qpj/AhGpzJQHJ7gJXs1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk3RDI0MDYyRTNFODA5MTM4OEUwRTI2REZFODI1QTNB RTBGNUVDMTAeFw0yNjA5MDIxOTE2MzZaFw0yNjA5MDMyMjU3MzZaMDMxMTAvBgNV BAMTKDNDMENGRjY5QTM5RjVGQzY4OTk5RDcwOThGQzJGOUM0NUJFN0Y3OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM+AnyaB/PIKgcQPNtaC9kyujZ BGoaVMi+7AwT0hWxSZwYy8kxLkvldF4YzgYrKB1t5J6Lx/wtcWdlzwitmRXEXZIQ KC2hdExf5JoAvpsl60EoK2qK1ZjG12eqb2eYYcKxl9HlIG1Nc8ilWRQjkqRfg6mL 3m3pyXjVmSrA2B8FVvC/Kzes1jsCAk2sHAlmaWjn01S4rD4pZfeA/0qg776k81cD Nn3MQpC6A6EG1f1cY55zJvkxco0/WwwaBguJNiCTBLbeRCXKGgJAO+fq+j1aQhl2 easaVWXHQvA3AGvOMG5riOcuAiNivBEnDo1jovLczp1ifT8Yz+TBGhbhDfLPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPAz/aaOfX8aJmdcJj8L5xFvn958wHwYDVR0j BBgwFoAU6X0kBi4+gJE4jg4m3+glo64PXsEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTNkYzFiMDUtMmE2OS00NWIwLThjNDQtNjI2NzcyMjc2YmQ5LzAvRTk3RDI0MDYy RTNFODA5MTM4OEUwRTI2REZFODI1QTNBRTBGNUVDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOTdEMjQwNjJFM0U4MDkxMzg4RTBFMjZERkU4MjVBM0FFMEY1 RUMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTNkYzFiMDUtMmE2OS00NWIwLThj NDQtNjI2NzcyMjc2YmQ5LzAvRTk3RDI0MDYyRTNFODA5MTM4OEUwRTI2REZFODI1 QTNBRTBGNUVDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMJkIPgdSjIh8HDh7uIQWRS5dLWb+1cBfh2h 1jNlFMcjEWJa2S2f9VXb+uGyHMiF2/yN948eIkqvZIKY//7Qu3YZR5flDaWvFUR6 mJZWq2gyxlQFc4mii3XbFpY0BZAXEYeqnYD47QLS9RkUaON6T5Yj6YqkunNvFWdP uABvJkF+UjlmxNQ0W0v7DfQfo9+xxXyhqQj/SiJcywpNvltwR+S3/yx7EuahUJih 0Y3eaKLlIims+wqCo6n7HqLvoTaA9Pt7yi7Ft9myEmkQkWHPjxM1jqr4xRgZEOI7 W9MympSiUR3VuiESFLmGVkbBKiiVo3KMWI5Nx4Vp8V5zl5iUT/0= -----END CERTIFICATE-----Generated at Thu Sep 3 07:16:33 2026 by rpki-client