$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/E34C8E8E9B9B8D0D672DBA596B883531646A2C6E.mft File: E34C8E8E9B9B8D0D672DBA596B883531646A2C6E.mft (raw, json) Hash identifier: SNKQ4joHt8RqH4y06QAi5bk4ralbQlvNzO6i+2gpGI4= Subject key identifier: A5:A4:AA:7B:DE:95:B1:C4:61:EF:9E:9A:EC:BD:C3:81:60:F4:91:94 Authority key identifier: E3:4C:8E:8E:9B:9B:8D:0D:67:2D:BA:59:6B:88:35:31:64:6A:2C:6E Certificate issuer: /CN=E34C8E8E9B9B8D0D672DBA596B883531646A2C6E Certificate serial: 1559E549650767BD899DFEE557AD9E9B1649FA13 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E34C8E8E9B9B8D0D672DBA596B883531646A2C6E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/E34C8E8E9B9B8D0D672DBA596B883531646A2C6E.mft Manifest number: A8 Signing time: Fri 04 Sep 2026 07:05:00 +0000 Manifest this update: Fri 04 Sep 2026 07:00:00 +0000 Manifest next update: Sat 05 Sep 2026 07:56:00 +0000 Files and hashes: 1: E34C8E8E9B9B8D0D672DBA596B883531646A2C6E.crl (hash: ViX4r7zoKi90rM/HVS49vwUY0ZxU90u+TofsWDC2Rk8=) 2: 3130332e31372e3139322e302f32342d3234203d3e20313331373836.roa (hash: 3K7HIaNZHq6siHJ1rjKjSGagB9KT2fdBKPyuyy2IpIc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/E34C8E8E9B9B8D0D672DBA596B883531646A2C6E.crl rsync://rpki-rsync.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/E34C8E8E9B9B8D0D672DBA596B883531646A2C6E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E34C8E8E9B9B8D0D672DBA596B883531646A2C6E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Sep 2026 04:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:59:e5:49:65:07:67:bd:89:9d:fe:e5:57:ad:9e:9b:16:49:fa:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E34C8E8E9B9B8D0D672DBA596B883531646A2C6E Validity Not Before: Sep 4 07:00:00 2026 GMT Not After : Sep 5 07:56:00 2026 GMT Subject: CN=A5A4AA7BDE95B1C461EF9E9AECBDC38160F49194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:3e:ed:42:b5:7c:1d:3a:01:b0:7e:e3:d1:84: 0b:df:7f:0c:16:80:0e:3b:b1:71:ea:43:f1:00:27: 20:48:af:e7:a3:e8:bf:53:40:a1:a4:c0:f3:93:be: a9:fa:66:8e:ec:85:b9:85:a5:68:f7:18:07:6b:28: 58:40:e4:ab:f0:eb:98:85:c6:5c:f0:ba:5e:7b:a2: e7:10:69:55:15:f5:ea:06:83:d6:22:fa:a1:50:c1: ef:21:7b:60:e0:74:ed:b3:9d:9b:e3:8c:74:b5:e2: 03:71:b6:09:0c:7d:04:e5:c9:26:b4:d9:f7:8b:1a: 6f:bd:46:4a:69:ea:aa:22:ec:df:2c:dc:5b:2a:9a: aa:35:81:15:3e:25:a2:fd:56:16:aa:c2:e0:35:3c: e8:5e:0a:1e:ef:ac:35:46:7e:45:f9:00:b0:45:7f: 71:44:95:83:c8:e5:dd:7e:cb:9c:4b:52:0a:43:05: c4:cb:cd:d1:d8:de:73:03:d0:24:5b:2d:e8:23:49: 6e:ae:ff:00:d3:4f:2b:66:b7:20:08:e3:e2:1a:bb: 65:c4:54:a5:bb:57:c4:29:31:cb:8d:35:93:41:c0: a9:0c:9b:18:79:68:66:7b:70:ab:90:50:b7:8b:fd: 94:cb:a9:66:31:58:83:8d:f3:94:0e:01:40:36:d5: a2:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:A4:AA:7B:DE:95:B1:C4:61:EF:9E:9A:EC:BD:C3:81:60:F4:91:94 X509v3 Authority Key Identifier: keyid:E3:4C:8E:8E:9B:9B:8D:0D:67:2D:BA:59:6B:88:35:31:64:6A:2C:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/E34C8E8E9B9B8D0D672DBA596B883531646A2C6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E34C8E8E9B9B8D0D672DBA596B883531646A2C6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/E34C8E8E9B9B8D0D672DBA596B883531646A2C6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:2e:6f:d9:a4:ca:00:61:b7:89:05:13:15:38:cb:85:33:28: 2b:c6:5c:81:dc:31:2d:e9:4d:e4:f4:91:e6:b6:42:65:98:66: 27:70:8e:65:b2:42:4e:d4:8e:e6:05:77:ab:a1:57:39:36:5c: 38:92:a1:7a:c5:15:e3:f5:f1:b9:37:3e:a3:bc:1c:1c:3f:89: 87:a7:69:ec:e1:3c:95:0b:02:69:78:47:a5:f7:31:48:12:5d: 17:a2:e3:69:ce:a0:25:36:3d:28:70:9f:bf:f7:4f:98:17:d2: 9a:87:5a:50:a4:57:9d:16:f9:5c:86:7b:47:ba:d1:1b:1d:0a: c5:de:44:ac:8d:a9:c3:b0:36:ba:83:89:6e:98:38:c1:60:84: 5e:af:da:ac:b1:b0:8f:df:43:22:4b:9a:bc:64:09:9d:62:41: 1c:ed:24:fd:a5:ab:44:3e:29:9e:3e:bd:c7:14:fd:bd:3a:64: cf:9a:8e:f2:56:b1:4a:6d:ba:10:cb:d0:fa:2f:a7:db:98:5c: 84:cd:a0:2a:90:4c:22:bf:11:8d:ad:e0:21:33:78:55:bd:bd: b1:2a:08:03:d6:90:85:3a:42:32:f2:7d:a1:c0:af:9e:71:a9: 22:7a:0c:5f:c1:53:de:8b:61:9e:60:18:1b:e6:11:7f:49:be: b6:37:4e:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFVnlSWUHZ72Jnf7lV62emxZJ+hMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM0QzhFOEU5QjlCOEQwRDY3MkRCQTU5NkI4ODM1MzE2 NDZBMkM2RTAeFw0yNjA5MDQwNzAwMDBaFw0yNjA5MDUwNzU2MDBaMDMxMTAvBgNV BAMTKEE1QTRBQTdCREU5NUIxQzQ2MUVGOUU5QUVDQkRDMzgxNjBGNDkxOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNPu1CtXwdOgGwfuPRhAvffwwW gA47sXHqQ/EAJyBIr+ej6L9TQKGkwPOTvqn6Zo7shbmFpWj3GAdrKFhA5Kvw65iF xlzwul57oucQaVUV9eoGg9Yi+qFQwe8he2DgdO2znZvjjHS14gNxtgkMfQTlySa0 2feLGm+9Rkpp6qoi7N8s3Fsqmqo1gRU+JaL9VhaqwuA1POheCh7vrDVGfkX5ALBF f3FElYPI5d1+y5xLUgpDBcTLzdHY3nMD0CRbLegjSW6u/wDTTytmtyAI4+Iau2XE VKW7V8QpMcuNNZNBwKkMmxh5aGZ7cKuQULeL/ZTLqWYxWION85QOAUA21aKtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpaSqe96VscRh756a7L3DgWD0kZQwHwYDVR0j BBgwFoAU40yOjpubjQ1nLbpZa4g1MWRqLG4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTE1MTRkNjEtOTlmZi00MmE5LWJhOWEtNTk2MWRkNjhkYjY1LzAvRTM0QzhFOEU5 QjlCOEQwRDY3MkRCQTU5NkI4ODM1MzE2NDZBMkM2RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMzRDOEU4RTlCOUI4RDBENjcyREJBNTk2Qjg4MzUzMTY0NkEy QzZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTE1MTRkNjEtOTlmZi00MmE5LWJh OWEtNTk2MWRkNjhkYjY1LzAvRTM0QzhFOEU5QjlCOEQwRDY3MkRCQTU5NkI4ODM1 MzE2NDZBMkM2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGkub9mkygBht4kFExU4y4UzKCvGXIHcMS3p TeT0kea2QmWYZidwjmWyQk7UjuYFd6uhVzk2XDiSoXrFFeP18bk3PqO8HBw/iYen aezhPJULAml4R6X3MUgSXRei42nOoCU2PShwn7/3T5gX0pqHWlCkV50W+VyGe0e6 0RsdCsXeRKyNqcOwNrqDiW6YOMFghF6v2qyxsI/fQyJLmrxkCZ1iQRztJP2lq0Q+ KZ4+vccU/b06ZM+ajvJWsUptuhDL0Povp9uYXITNoCqQTCK/EY2t4CEzeFW9vbEq CAPWkIU6QjLyfaHAr55xqSJ6DF/BU96LYZ5gGBvmEX9JvrY3Tp0= -----END CERTIFICATE-----Generated at Fri Sep 4 15:17:32 2026 by rpki-client