$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.mft File: E9F2A418990B480D204FA0D037A5ABB3AEC360E9.mft (raw, json) Hash identifier: fmcExGC/hjskN/q/jh5jF0QbUT5FBVaJSFoBt+mqV9E= Subject key identifier: 5D:9A:81:2D:98:F1:22:EF:22:5E:A5:B8:E5:92:F3:0A:4B:D2:7D:85 Authority key identifier: E9:F2:A4:18:99:0B:48:0D:20:4F:A0:D0:37:A5:AB:B3:AE:C3:60:E9 Certificate issuer: /CN=E9F2A418990B480D204FA0D037A5ABB3AEC360E9 Certificate serial: 2EAE5A09C72B5D964CE30D6609EBDC44596B73A0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.mft Manifest number: F7 Signing time: Mon 02 Nov 2026 08:28:02 +0000 Manifest this update: Mon 02 Nov 2026 08:23:01 +0000 Manifest next update: Tue 03 Nov 2026 09:54:01 +0000 Files and hashes: 1: 3130332e3139312e3131362e302f32332d3233203d3e20313439393137.roa (hash: bL7nWexv3dr33uLwywkImAJrJWec+y7OgTN8pZ5ywaw=) 2: 3130332e3139312e3131362e302f32342d3234203d3e20313439393137.roa (hash: 27oObCgWzykb6CFKZyK6/jDYuaqop/FIGkUT/qI+p/Q=) 3: 3130332e3139312e3131372e302f32342d3234203d3e20313439393137.roa (hash: lAAUV9z8f3t9czOX/VqnympJr8MrNtNyhxmHLT5vnzY=) 4: E9F2A418990B480D204FA0D037A5ABB3AEC360E9.crl (hash: rii/Tv2Z8blsUCciGJdYlzUU1etRBkachXsPP/niKpQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.crl rsync://rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 09:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:ae:5a:09:c7:2b:5d:96:4c:e3:0d:66:09:eb:dc:44:59:6b:73:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9F2A418990B480D204FA0D037A5ABB3AEC360E9 Validity Not Before: Nov 2 08:23:01 2026 GMT Not After : Nov 3 09:54:01 2026 GMT Subject: CN=5D9A812D98F122EF225EA5B8E592F30A4BD27D85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8c:69:ec:f9:b2:87:7a:29:24:de:79:4c:91: 56:8e:b4:30:1c:d2:44:24:ba:92:55:cc:0e:43:59: 58:b9:0e:21:46:b8:4d:7d:31:fa:dd:ec:bd:9e:14: 60:36:a1:e1:64:8a:0b:0b:84:5b:34:f7:32:61:b9: 3d:b6:61:af:05:aa:91:8b:ca:2b:a1:dc:6d:bd:e7: ee:8d:2d:3b:92:ee:01:19:16:a4:2d:d7:1d:83:b8: d6:6d:fa:5d:ee:72:d7:3c:46:0d:8b:64:7c:36:37: 2d:fe:ce:f2:9a:79:bd:9c:d5:50:94:a6:88:58:90: 87:b1:00:f8:8f:7b:02:04:12:bd:10:ab:47:28:02: c0:b7:3c:bc:b6:98:c5:3d:59:75:2d:97:f8:38:3d: 9a:5b:8a:92:31:80:52:16:19:de:b1:93:99:74:18: 05:9f:43:9c:bb:2c:07:50:83:91:81:5e:b7:18:39: 77:b6:d0:25:91:21:89:a0:cf:62:70:7b:92:53:dc: ef:6f:41:ce:db:b8:0f:0b:e6:91:03:78:af:d8:d3: 1b:18:9e:22:71:a1:2a:ea:08:45:42:a3:6d:87:19: 62:2e:4a:2c:07:b2:30:b1:7a:32:8c:61:ff:81:65: 95:48:d3:7e:c0:f7:92:0c:60:b3:46:75:9e:d7:eb: 3c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:9A:81:2D:98:F1:22:EF:22:5E:A5:B8:E5:92:F3:0A:4B:D2:7D:85 X509v3 Authority Key Identifier: keyid:E9:F2:A4:18:99:0B:48:0D:20:4F:A0:D0:37:A5:AB:B3:AE:C3:60:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:ef:59:e8:e9:3f:bc:9d:24:c2:b5:8f:f7:01:75:62:00:27: 51:a1:4c:f0:f5:0b:33:d8:cd:a0:35:87:de:1e:4c:52:92:5c: 0c:60:73:42:2d:9f:29:e4:bb:ef:13:7d:44:9e:cf:2f:4d:6a: d6:41:11:17:87:ea:35:29:e3:ed:c3:07:03:f2:f2:3f:d7:9e: 04:c0:0e:37:6f:83:ef:47:89:b7:3c:44:24:d9:31:aa:b5:d6: 1d:99:ad:5b:d8:e0:09:c4:d2:fc:24:90:4f:ed:85:fd:6b:ac: 12:29:44:7a:b6:61:86:9d:14:38:a6:51:d0:e0:70:18:ab:cc: 2e:61:56:06:75:29:de:f9:ca:7c:fd:8e:37:4a:09:60:11:c1: fa:2c:82:a0:08:5a:f0:60:2a:23:9f:6a:19:34:95:63:71:a4: b2:bc:66:b0:f5:ad:66:2c:7e:fc:fc:eb:20:c1:3f:83:ef:4e: 9d:ca:3b:55:f1:25:e2:95:b2:e0:9d:57:13:c4:2f:9c:44:7b: 56:aa:02:7d:c6:7a:97:0c:c0:64:b5:81:04:d2:e1:1f:d7:fd: 1f:ca:96:5f:0c:d8:cb:12:2c:3d:3c:0c:87:73:75:67:88:88: e1:ab:6c:36:ad:1e:c1:e9:31:32:ce:52:2a:9c:93:6d:fd:9e: 5f:22:dc:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULq5aCccrXZZM4w1mCevcRFlrc6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlGMkE0MTg5OTBCNDgwRDIwNEZBMEQwMzdBNUFCQjNB RUMzNjBFOTAeFw0yNjExMDIwODIzMDFaFw0yNjExMDMwOTU0MDFaMDMxMTAvBgNV BAMTKDVEOUE4MTJEOThGMTIyRUYyMjVFQTVCOEU1OTJGMzBBNEJEMjdEODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6jGns+bKHeikk3nlMkVaOtDAc 0kQkupJVzA5DWVi5DiFGuE19Mfrd7L2eFGA2oeFkigsLhFs09zJhuT22Ya8FqpGL yiuh3G295+6NLTuS7gEZFqQt1x2DuNZt+l3uctc8Rg2LZHw2Ny3+zvKaeb2c1VCU pohYkIexAPiPewIEEr0Qq0coAsC3PLy2mMU9WXUtl/g4PZpbipIxgFIWGd6xk5l0 GAWfQ5y7LAdQg5GBXrcYOXe20CWRIYmgz2Jwe5JT3O9vQc7buA8L5pEDeK/Y0xsY niJxoSrqCEVCo22HGWIuSiwHsjCxejKMYf+BZZVI037A95IMYLNGdZ7X6zx1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXZqBLZjxIu8iXqW45ZLzCkvSfYUwHwYDVR0j BBgwFoAU6fKkGJkLSA0gT6DQN6Wrs67DYOkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTZhZGFlMmEtNDdiNi00YWU1LTljM2YtM2U4Y2I5MmEzOTg3LzAvRTlGMkE0MTg5 OTBCNDgwRDIwNEZBMEQwMzdBNUFCQjNBRUMzNjBFOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOUYyQTQxODk5MEI0ODBEMjA0RkEwRDAzN0E1QUJCM0FFQzM2 MEU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTZhZGFlMmEtNDdiNi00YWU1LTlj M2YtM2U4Y2I5MmEzOTg3LzAvRTlGMkE0MTg5OTBCNDgwRDIwNEZBMEQwMzdBNUFC QjNBRUMzNjBFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABXvWejpP7ydJMK1j/cBdWIAJ1GhTPD1CzPY zaA1h94eTFKSXAxgc0Itnynku+8TfUSezy9NatZBEReH6jUp4+3DBwPy8j/XngTA Djdvg+9Hibc8RCTZMaq11h2ZrVvY4AnE0vwkkE/thf1rrBIpRHq2YYadFDimUdDg cBirzC5hVgZ1Kd75ynz9jjdKCWARwfosgqAIWvBgKiOfahk0lWNxpLK8ZrD1rWYs fvz86yDBP4PvTp3KO1XxJeKVsuCdVxPEL5xEe1aqAn3GepcMwGS1gQTS4R/X/R/K ll8M2MsSLD08DIdzdWeIiOGrbDatHsHpMTLOUiqck239nl8i3Eg= -----END CERTIFICATE-----Generated at Tue Nov 3 01:32:16 2026 by rpki-client