$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/E1476FC7E4095A3095E47FBC4834D7ECE111F313.mft File: E1476FC7E4095A3095E47FBC4834D7ECE111F313.mft (raw, json) Hash identifier: qs0PPSR0e0mzjpT7dFfJU+oJBX1PtkZSYDEHHlL7PPQ= Subject key identifier: A7:44:5B:F5:89:B8:37:10:DE:55:F6:D3:8A:4E:EF:2A:08:0C:CA:EA Authority key identifier: E1:47:6F:C7:E4:09:5A:30:95:E4:7F:BC:48:34:D7:EC:E1:11:F3:13 Certificate issuer: /CN=E1476FC7E4095A3095E47FBC4834D7ECE111F313 Certificate serial: 05C5D5F7CB55317B431810884A5ADE6BBC4CE036 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1476FC7E4095A3095E47FBC4834D7ECE111F313.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/E1476FC7E4095A3095E47FBC4834D7ECE111F313.mft Manifest number: A9 Signing time: Fri 04 Sep 2026 14:09:20 +0000 Manifest this update: Fri 04 Sep 2026 14:04:20 +0000 Manifest next update: Sat 05 Sep 2026 15:58:20 +0000 Files and hashes: 1: 3130332e3233302e3234362e302f32342d3234203d3e20313331373735.roa (hash: /1MgccGZfskMTbGr8xqejz+aa0C1YMlfgjpiT2WdsBo=) 2: E1476FC7E4095A3095E47FBC4834D7ECE111F313.crl (hash: d7mIe3oD6HAj6DTZUBO7I+C4CUrtuFLlY0GyF+Yb9Fc=) 3: 3130332e3138302e3136322e302f32342d3234203d3e20313439333737.roa (hash: +kRo7LiXN7GRQQL/5vawAMwmjkMc/A/ZykmCvCb8Chs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/E1476FC7E4095A3095E47FBC4834D7ECE111F313.crl rsync://rpki-rsync.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/E1476FC7E4095A3095E47FBC4834D7ECE111F313.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1476FC7E4095A3095E47FBC4834D7ECE111F313.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Sep 2026 04:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:c5:d5:f7:cb:55:31:7b:43:18:10:88:4a:5a:de:6b:bc:4c:e0:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1476FC7E4095A3095E47FBC4834D7ECE111F313 Validity Not Before: Sep 4 14:04:20 2026 GMT Not After : Sep 5 15:58:20 2026 GMT Subject: CN=A7445BF589B83710DE55F6D38A4EEF2A080CCAEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f8:78:5f:1d:49:c5:23:f8:fa:db:59:15:b2: 56:9a:0f:1c:a3:5a:ec:96:92:c2:22:9d:fc:d6:8e: 57:fd:34:0d:f3:2d:00:e2:72:67:3f:af:99:2a:46: 3c:15:7d:04:87:79:4a:11:4c:d3:42:cd:ae:c4:4b: f2:09:72:5d:3c:38:89:fa:1f:31:30:07:47:b5:21: 57:45:6f:7a:3c:a2:21:19:37:0b:aa:8d:cd:3f:a4: d3:ef:38:80:d1:4c:97:1b:79:89:2c:71:94:b0:78: 22:fe:c1:d1:60:6b:f1:5b:15:ef:61:4b:bb:61:97: 3e:a2:44:75:d9:4c:f9:e5:d0:84:b3:17:56:b4:c6: a4:fa:9d:0f:65:a0:39:8a:cb:49:16:92:69:b8:06: b3:ef:67:95:5e:78:f5:1c:f5:36:b0:a9:a1:ae:98: 57:ad:da:88:13:8f:ff:d5:29:7b:f0:2c:44:d8:fc: 96:22:22:80:f8:a1:98:0c:e9:7b:aa:b2:b2:bd:2a: aa:eb:cb:28:96:36:cf:99:a5:cf:a6:a4:75:fd:85: 1e:04:6a:d1:7a:07:ba:d4:5d:d8:89:7f:63:1a:07: 4c:e9:51:0b:dc:1f:e4:cf:8e:ad:01:84:03:b5:32: c6:21:40:65:70:73:96:af:54:3e:41:c4:50:f5:f5: 24:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:44:5B:F5:89:B8:37:10:DE:55:F6:D3:8A:4E:EF:2A:08:0C:CA:EA X509v3 Authority Key Identifier: keyid:E1:47:6F:C7:E4:09:5A:30:95:E4:7F:BC:48:34:D7:EC:E1:11:F3:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/E1476FC7E4095A3095E47FBC4834D7ECE111F313.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1476FC7E4095A3095E47FBC4834D7ECE111F313.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/E1476FC7E4095A3095E47FBC4834D7ECE111F313.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:e4:08:8f:20:59:a1:9c:95:9a:6f:ed:20:ef:a2:f6:c3:01: c0:80:f6:7f:2f:69:a2:a0:57:81:9f:bb:b1:99:82:cf:ba:08: 62:52:38:5a:61:96:90:16:03:fc:61:df:dd:bb:18:7d:f5:51: 2d:20:d4:e1:24:30:af:41:35:2d:eb:83:f9:4b:c6:56:36:10: f8:2c:25:f8:c9:0c:15:2f:79:45:03:60:f0:62:1a:39:62:e2: 2a:d2:92:41:e1:97:27:86:45:94:fe:14:3c:04:82:4b:10:52: 2b:fa:80:58:d9:61:ee:04:20:1e:cf:95:de:5b:cb:1a:cb:09: 21:15:b4:48:23:1a:a7:b0:41:ee:7b:4b:c4:34:de:ea:d9:7f: 6f:4a:48:37:c8:c9:71:cc:b6:88:a7:2e:34:b6:96:84:54:94: cc:09:39:c7:81:53:6f:53:f0:d6:bb:e2:cb:a0:ff:30:48:ea: b1:e2:75:1a:81:f7:78:88:33:bb:5f:cb:7c:0b:63:05:37:e3: c9:c8:0d:c4:07:60:11:05:9b:87:dd:65:2a:51:b5:4a:76:05: e9:61:69:d4:bd:43:79:75:a9:85:45:4c:a2:8f:fe:b4:e9:83: 2f:f7:45:37:e5:97:2a:0e:81:0c:76:a3:2f:df:f2:1b:6e:e3: fa:60:30:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBcXV98tVMXtDGBCISlrea7xM4DYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE0NzZGQzdFNDA5NUEzMDk1RTQ3RkJDNDgzNEQ3RUNF MTExRjMxMzAeFw0yNjA5MDQxNDA0MjBaFw0yNjA5MDUxNTU4MjBaMDMxMTAvBgNV BAMTKEE3NDQ1QkY1ODlCODM3MTBERTU1RjZEMzhBNEVFRjJBMDgwQ0NBRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC+HhfHUnFI/j621kVslaaDxyj WuyWksIinfzWjlf9NA3zLQDicmc/r5kqRjwVfQSHeUoRTNNCza7ES/IJcl08OIn6 HzEwB0e1IVdFb3o8oiEZNwuqjc0/pNPvOIDRTJcbeYkscZSweCL+wdFga/FbFe9h S7thlz6iRHXZTPnl0ISzF1a0xqT6nQ9loDmKy0kWkmm4BrPvZ5VeePUc9TawqaGu mFet2ogTj//VKXvwLETY/JYiIoD4oZgM6XuqsrK9KqrryyiWNs+Zpc+mpHX9hR4E atF6B7rUXdiJf2MaB0zpUQvcH+TPjq0BhAO1MsYhQGVwc5avVD5BxFD19STxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp0Rb9Ym4NxDeVfbTik7vKggMyuowHwYDVR0j BBgwFoAU4Udvx+QJWjCV5H+8SDTX7OER8xMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDcwZDYyOWEtOTZlZC00NTFhLTg3ODctMzQxMjIyODJhNzA2LzAvRTE0NzZGQzdF NDA5NUEzMDk1RTQ3RkJDNDgzNEQ3RUNFMTExRjMxMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMTQ3NkZDN0U0MDk1QTMwOTVFNDdGQkM0ODM0RDdFQ0UxMTFG MzEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDcwZDYyOWEtOTZlZC00NTFhLTg3 ODctMzQxMjIyODJhNzA2LzAvRTE0NzZGQzdFNDA5NUEzMDk1RTQ3RkJDNDgzNEQ3 RUNFMTExRjMxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKvkCI8gWaGclZpv7SDvovbDAcCA9n8vaaKg V4Gfu7GZgs+6CGJSOFphlpAWA/xh3927GH31US0g1OEkMK9BNS3rg/lLxlY2EPgs JfjJDBUveUUDYPBiGjli4irSkkHhlyeGRZT+FDwEgksQUiv6gFjZYe4EIB7Pld5b yxrLCSEVtEgjGqewQe57S8Q03urZf29KSDfIyXHMtoinLjS2loRUlMwJOceBU29T 8Na74sug/zBI6rHidRqB93iIM7tfy3wLYwU348nIDcQHYBEFm4fdZSpRtUp2Belh adS9Q3l1qYVFTKKP/rTpgy/3RTfllyoOgQx2oy/f8htu4/pgMOY= -----END CERTIFICATE-----Generated at Fri Sep 4 21:10:27 2026 by rpki-client