$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.mft File: E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.mft (raw, json) Hash identifier: tA8zCdewnADd8FvbVqwmDTLpOyPGdJo+YxoOgPMGHEk= Subject key identifier: 34:41:CD:D6:48:56:FF:16:6E:19:80:13:6A:E5:DF:EE:0C:9E:03:EF Authority key identifier: E4:02:A8:FE:9D:6E:6B:AD:DC:D9:41:4C:45:24:F9:F8:9F:C2:54:DB Certificate issuer: /CN=E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB Certificate serial: 3872CE552534191F69B5696343332B004F4B2075 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 19:57:13 +0000 Manifest this update: Wed 02 Sep 2026 19:52:13 +0000 Manifest next update: Thu 03 Sep 2026 20:02:13 +0000 Files and hashes: 1: E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.crl (hash: 8lu/S3BTu/UTcgEN8BdJo74sx/pZ6Tgdwx3WVTfJVQY=) 2: 3130332e3232332e302e302f32342d3234203d3e20313335343435.roa (hash: iYftcLRKhDFwawem+AQ5tjTifMhYvu82o/DYOa4xV1U=) 3: 3130332e3232332e302e302f32322d3232203d3e20313335343435.roa (hash: ySpYECTdEpPiYQXcAvE+ScNUXGwRe6ThRPZGhAvNk2s=) 4: 3130332e3232332e322e302f32332d3233203d3e20313335343435.roa (hash: JI1QrINQKw3fjadw40FIbP+TVzkcpzaoVCD4jvQ/h04=) 5: 3130332e3232332e332e302f32342d3234203d3e20313335343435.roa (hash: QnST8vjK8bFCBoNsPJhM5VHBI9hMH1UeN2aqQjcNdSs=) 6: 3130332e3232332e312e302f32342d3234203d3e20313335343435.roa (hash: OK3H4Npcn6XOhpp51geVZ4Jq+X5gSteni67GraMNgZs=) 7: 3130332e3232332e322e302f32342d3234203d3e20313335343435.roa (hash: 3GTJ9ASFLrepqsCMecKCsjwg26cUhjn00ThNjhDZtps=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.crl rsync://rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 20:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:72:ce:55:25:34:19:1f:69:b5:69:63:43:33:2b:00:4f:4b:20:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB Validity Not Before: Sep 2 19:52:13 2026 GMT Not After : Sep 3 20:02:13 2026 GMT Subject: CN=3441CDD64856FF166E1980136AE5DFEE0C9E03EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:42:ca:c1:d9:a9:b4:e7:42:46:da:4b:d8:55: 66:8b:16:18:45:df:08:35:47:b3:5d:3a:b7:ec:b6: 0d:66:f8:0a:ce:3f:b6:b0:18:2b:71:ec:2f:64:28: bb:f1:14:41:31:37:6e:59:9f:d7:34:a9:20:b3:f1: 3c:09:12:de:43:c5:ae:cb:44:1d:17:5e:35:99:13: 23:c7:26:97:03:b6:fd:01:ef:ad:cf:fd:f3:df:89: d3:6b:97:2e:94:d7:62:8b:7a:c0:69:3a:54:3e:7a: 90:a7:31:0e:5b:d8:9e:46:29:f5:17:b6:eb:66:82: 9f:42:16:d2:3c:0f:fd:f7:80:12:12:20:0d:17:42: fa:74:c4:b0:5c:4f:88:1b:63:c7:02:f4:a1:be:76: 0f:c8:ec:c1:88:c3:76:f3:06:c2:44:2e:2c:37:7f: 90:58:2f:48:ea:be:cb:0d:75:23:f3:8c:68:41:9a: 70:3e:09:70:1e:41:98:c9:24:b6:f8:ec:6b:47:2b: 0e:89:8a:5d:28:7a:4e:82:ed:14:d8:d1:67:9e:fa: 75:c9:7d:82:e6:5d:21:95:96:35:3c:30:b9:cd:a4: 62:81:f5:7e:48:e5:0e:13:44:c0:34:54:89:57:d0: e0:75:fc:42:ac:fc:c9:9f:de:4a:c6:e8:86:59:6f: 40:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:41:CD:D6:48:56:FF:16:6E:19:80:13:6A:E5:DF:EE:0C:9E:03:EF X509v3 Authority Key Identifier: keyid:E4:02:A8:FE:9D:6E:6B:AD:DC:D9:41:4C:45:24:F9:F8:9F:C2:54:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:02:7c:de:8a:66:0f:3a:f5:a0:e7:d8:b7:c8:10:c0:8b:69: eb:39:f2:c8:74:10:28:b0:a0:6f:13:64:b5:c5:a8:04:c5:cb: 7c:8e:ea:84:a4:a7:fd:cb:63:3a:9a:a4:40:26:c9:b2:42:a2: 24:47:5a:1c:ee:1e:87:13:5c:21:c3:90:54:93:63:8d:40:20: 71:4c:8d:7f:55:69:3b:fc:92:58:f1:a5:4b:e5:2a:02:4f:0a: a1:d9:1a:8c:84:ac:23:56:c7:c9:8e:e4:34:d3:7f:83:d9:51: a8:90:55:2b:91:71:05:58:5c:0b:43:42:fb:65:1d:a3:bb:9b: 76:f2:ae:e4:15:c8:aa:8e:22:b1:bc:02:24:fe:88:56:69:7b: 62:61:35:1d:56:53:75:7e:dc:14:8d:6b:2a:15:de:86:df:36: 4e:bc:69:ec:c0:01:a8:2e:18:62:52:56:aa:9c:16:fe:51:79: 79:0c:40:2e:95:fa:1c:6f:5d:c2:8a:69:f9:7c:32:ee:01:29: 97:05:27:dd:c5:b7:97:82:c6:af:c1:39:91:e5:8c:03:bd:a5: 9a:58:ac:5d:fc:80:d1:49:30:cd:75:d5:1f:65:d9:58:1a:a5: 8b:8f:eb:0f:5d:05:71:81:f4:6d:e4:8a:65:a0:e4:64:0f:f2: dd:a4:d8:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOHLOVSU0GR9ptWljQzMrAE9LIHUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQwMkE4RkU5RDZFNkJBRERDRDk0MTRDNDUyNEY5Rjg5 RkMyNTREQjAeFw0yNjA5MDIxOTUyMTNaFw0yNjA5MDMyMDAyMTNaMDMxMTAvBgNV BAMTKDM0NDFDREQ2NDg1NkZGMTY2RTE5ODAxMzZBRTVERkVFMEM5RTAzRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXQsrB2am050JG2kvYVWaLFhhF 3wg1R7NdOrfstg1m+ArOP7awGCtx7C9kKLvxFEExN25Zn9c0qSCz8TwJEt5Dxa7L RB0XXjWZEyPHJpcDtv0B763P/fPfidNrly6U12KLesBpOlQ+epCnMQ5b2J5GKfUX tutmgp9CFtI8D/33gBISIA0XQvp0xLBcT4gbY8cC9KG+dg/I7MGIw3bzBsJELiw3 f5BYL0jqvssNdSPzjGhBmnA+CXAeQZjJJLb47GtHKw6Jil0oek6C7RTY0Wee+nXJ fYLmXSGVljU8MLnNpGKB9X5I5Q4TRMA0VIlX0OB1/EKs/Mmf3krG6IZZb0BvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNEHN1khW/xZuGYATauXf7gyeA+8wHwYDVR0j BBgwFoAU5AKo/p1ua63c2UFMRST5+J/CVNswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjc1NDViODUtOTI3NC00NzBhLWFkMjctMjQ2OWU5ZDE1NWJjLzAvRTQwMkE4RkU5 RDZFNkJBRERDRDk0MTRDNDUyNEY5Rjg5RkMyNTREQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNDAyQThGRTlENkU2QkFERENEOTQxNEM0NTI0RjlGODlGQzI1 NERCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjc1NDViODUtOTI3NC00NzBhLWFk MjctMjQ2OWU5ZDE1NWJjLzAvRTQwMkE4RkU5RDZFNkJBRERDRDk0MTRDNDUyNEY5 Rjg5RkMyNTREQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFYCfN6KZg869aDn2LfIEMCLaes58sh0ECiw oG8TZLXFqATFy3yO6oSkp/3LYzqapEAmybJCoiRHWhzuHocTXCHDkFSTY41AIHFM jX9VaTv8kljxpUvlKgJPCqHZGoyErCNWx8mO5DTTf4PZUaiQVSuRcQVYXAtDQvtl HaO7m3byruQVyKqOIrG8AiT+iFZpe2JhNR1WU3V+3BSNayoV3obfNk68aezAAagu GGJSVqqcFv5ReXkMQC6V+hxvXcKKafl8Mu4BKZcFJ93Ft5eCxq/BOZHljAO9pZpY rF38gNFJMM111R9l2VgapYuP6w9dBXGB9G3kimWg5GQP8t2k2Pw= -----END CERTIFICATE-----Generated at Thu Sep 3 08:58:53 2026 by rpki-client