$ rpki-client -vvvf rpki-rsync.idnic.net/repo/99104c50-40ff-4aaf-a209-be31ceda679b/0/E87EEEAA35D76955AEB555F946ED794035B56B72.mft File: E87EEEAA35D76955AEB555F946ED794035B56B72.mft (raw, json) Hash identifier: b8kjBdQTtEdqe84V1bdm9uJp3So5l8QhQDwFTRdIRzg= Subject key identifier: F6:D9:5F:18:56:76:FB:7B:FB:4B:0B:CA:28:E6:97:4B:10:DD:5F:5D Authority key identifier: E8:7E:EE:AA:35:D7:69:55:AE:B5:55:F9:46:ED:79:40:35:B5:6B:72 Certificate issuer: /CN=E87EEEAA35D76955AEB555F946ED794035B56B72 Certificate serial: 29C96FC56AAB79D3780BDDC460E701EFC14CFC2E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E87EEEAA35D76955AEB555F946ED794035B56B72.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/99104c50-40ff-4aaf-a209-be31ceda679b/0/E87EEEAA35D76955AEB555F946ED794035B56B72.mft Manifest number: A6 Signing time: Thu 03 Sep 2026 14:03:58 +0000 Manifest this update: Thu 03 Sep 2026 13:58:58 +0000 Manifest next update: Fri 04 Sep 2026 16:23:58 +0000 Files and hashes: 1: 3130332e3234392e31382e302f32332d3234203d3e20313530323036.roa (hash: 23cNk898TX6KCtmP7qTej4qkKvszzgnklZmFVcKo/dk=) 2: E87EEEAA35D76955AEB555F946ED794035B56B72.crl (hash: om63FnPh7LLI2EztjXNDJvG9mVeCjvSG6z3Q7BmI5nU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/99104c50-40ff-4aaf-a209-be31ceda679b/0/E87EEEAA35D76955AEB555F946ED794035B56B72.crl rsync://rpki-rsync.idnic.net/repo/99104c50-40ff-4aaf-a209-be31ceda679b/0/E87EEEAA35D76955AEB555F946ED794035B56B72.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E87EEEAA35D76955AEB555F946ED794035B56B72.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:c9:6f:c5:6a:ab:79:d3:78:0b:dd:c4:60:e7:01:ef:c1:4c:fc:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E87EEEAA35D76955AEB555F946ED794035B56B72 Validity Not Before: Sep 3 13:58:58 2026 GMT Not After : Sep 4 16:23:58 2026 GMT Subject: CN=F6D95F185676FB7BFB4B0BCA28E6974B10DD5F5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:06:af:a0:9c:42:d2:8f:36:5a:08:d3:b7:81: 0a:a3:98:5b:dd:90:60:61:ce:82:7b:c8:25:ad:c6: d5:55:8e:85:70:60:f4:22:8e:ec:1a:86:b0:ab:5f: 48:99:8c:7c:e4:d9:a1:ab:84:ea:d1:56:c9:49:0d: 8a:04:a7:c8:11:b8:d0:34:ec:2e:56:fc:9c:8c:5a: ce:e0:71:86:8f:77:83:5e:c0:fd:52:67:ec:92:fd: 9a:16:9d:24:6e:2e:0f:77:03:5a:06:ad:b1:ab:a8: 86:04:c4:80:bb:12:a1:3a:93:38:86:95:ad:64:68: a2:59:52:56:db:ca:8a:52:93:11:79:e8:8f:54:66: a9:df:6b:2d:6e:3d:99:fc:5d:41:7c:ef:77:cc:6b: 7c:d8:e1:24:ac:19:17:b9:0c:3c:ba:47:3b:da:ec: ae:9b:91:6c:44:9f:d3:6e:de:d7:db:d6:90:26:ad: bf:57:64:ff:d3:d9:34:d2:80:3c:23:6f:63:87:fd: be:4c:50:95:11:86:1c:65:97:39:09:33:a5:35:6c: 6f:58:8b:95:b6:1c:bb:a3:32:67:65:bf:d6:a2:33: 7c:f8:4f:0d:97:ba:ab:b0:88:7f:0d:88:d1:4c:82: 0c:80:bb:33:3e:cb:35:93:8c:e5:6e:fd:b2:29:7b: 27:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:D9:5F:18:56:76:FB:7B:FB:4B:0B:CA:28:E6:97:4B:10:DD:5F:5D X509v3 Authority Key Identifier: keyid:E8:7E:EE:AA:35:D7:69:55:AE:B5:55:F9:46:ED:79:40:35:B5:6B:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/99104c50-40ff-4aaf-a209-be31ceda679b/0/E87EEEAA35D76955AEB555F946ED794035B56B72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E87EEEAA35D76955AEB555F946ED794035B56B72.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/99104c50-40ff-4aaf-a209-be31ceda679b/0/E87EEEAA35D76955AEB555F946ED794035B56B72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:e9:d4:a5:bc:30:cb:ab:54:b7:97:79:db:4c:d7:19:c5:fd: 3b:fc:e0:b9:63:4f:14:f1:35:a1:be:6a:d2:a2:c3:14:1e:91: 1d:6b:08:49:b1:f8:e4:ee:b6:d4:f1:cd:9b:a2:a2:e1:12:4b: 08:06:cb:0c:a6:0e:a4:23:ec:25:83:6a:87:31:74:ba:72:41: 9a:83:3e:c6:a6:82:28:e5:db:9f:de:9c:84:ff:2d:de:4b:19: 69:70:3b:9c:d8:6e:42:4a:05:14:a9:3e:be:83:6d:94:43:10: 3c:50:0f:c2:d3:3d:ed:f5:73:77:6f:28:81:1e:93:46:27:00: 33:95:16:c5:56:e9:15:f5:0e:1a:43:13:ce:4f:d3:19:ec:66: c7:6a:70:df:65:e6:d5:f1:15:c0:07:de:bd:f5:a3:16:7d:9d: 8e:d7:1a:d0:4f:90:9b:38:56:4e:ae:9e:ee:cf:99:cc:f3:ca: d6:f7:94:02:95:2b:e4:d7:7b:56:0b:ec:23:9c:b6:43:e7:f1: 2d:0e:29:bc:36:0b:db:ef:b8:23:b3:46:c4:3c:c5:ac:c1:a8: d4:9a:74:e7:d5:e1:93:b0:a3:c7:45:dd:f9:23:ba:6b:82:cc: 2f:49:b3:3c:67:dd:83:ba:d1:64:95:ba:1b:d6:95:01:3f:60: 61:6d:5c:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKclvxWqredN4C93EYOcB78FM/C4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg3RUVFQUEzNUQ3Njk1NUFFQjU1NUY5NDZFRDc5NDAz NUI1NkI3MjAeFw0yNjA5MDMxMzU4NThaFw0yNjA5MDQxNjIzNThaMDMxMTAvBgNV BAMTKEY2RDk1RjE4NTY3NkZCN0JGQjRCMEJDQTI4RTY5NzRCMTBERDVGNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTBq+gnELSjzZaCNO3gQqjmFvd kGBhzoJ7yCWtxtVVjoVwYPQijuwahrCrX0iZjHzk2aGrhOrRVslJDYoEp8gRuNA0 7C5W/JyMWs7gcYaPd4NewP1SZ+yS/ZoWnSRuLg93A1oGrbGrqIYExIC7EqE6kziG la1kaKJZUlbbyopSkxF56I9UZqnfay1uPZn8XUF873fMa3zY4SSsGRe5DDy6Rzva 7K6bkWxEn9Nu3tfb1pAmrb9XZP/T2TTSgDwjb2OH/b5MUJURhhxllzkJM6U1bG9Y i5W2HLujMmdlv9aiM3z4Tw2XuquwiH8NiNFMggyAuzM+yzWTjOVu/bIpeyepAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9tlfGFZ2+3v7SwvKKOaXSxDdX10wHwYDVR0j BBgwFoAU6H7uqjXXaVWutVX5Ru15QDW1a3IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTkxMDRjNTAtNDBmZi00YWFmLWEyMDktYmUzMWNlZGE2NzliLzAvRTg3RUVFQUEz NUQ3Njk1NUFFQjU1NUY5NDZFRDc5NDAzNUI1NkI3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FODdFRUVBQTM1RDc2OTU1QUVCNTU1Rjk0NkVENzk0MDM1QjU2 QjcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTkxMDRjNTAtNDBmZi00YWFmLWEy MDktYmUzMWNlZGE2NzliLzAvRTg3RUVFQUEzNUQ3Njk1NUFFQjU1NUY5NDZFRDc5 NDAzNUI1NkI3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH3p1KW8MMurVLeXedtM1xnF/Tv84LljTxTx NaG+atKiwxQekR1rCEmx+OTuttTxzZuiouESSwgGywymDqQj7CWDaocxdLpyQZqD Psamgijl25/enIT/Ld5LGWlwO5zYbkJKBRSpPr6DbZRDEDxQD8LTPe31c3dvKIEe k0YnADOVFsVW6RX1DhpDE85P0xnsZsdqcN9l5tXxFcAH3r31oxZ9nY7XGtBPkJs4 Vk6unu7Pmczzytb3lAKVK+TXe1YL7COctkPn8S0OKbw2C9vvuCOzRsQ8xazBqNSa dOfV4ZOwo8dF3fkjumuCzC9Jszxn3YO60WSVuhvWlQE/YGFtXDE= -----END CERTIFICATE-----Generated at Thu Sep 3 19:26:58 2026 by rpki-client