$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.mft File: E029C9E3702797CC6083E1D4D891799F0F5AA144.mft (raw, json) Hash identifier: ukMj9FhbcuAeDDTQOYiQ15rOL2MWZHlR1pXGVvD6snQ= Subject key identifier: 82:9C:75:FE:7F:4B:EE:DA:6A:96:2E:5E:0C:6F:79:F3:47:A5:18:02 Authority key identifier: E0:29:C9:E3:70:27:97:CC:60:83:E1:D4:D8:91:79:9F:0F:5A:A1:44 Certificate issuer: /CN=E029C9E3702797CC6083E1D4D891799F0F5AA144 Certificate serial: 5DADB32625E943CE4DC8BC801C40A6B050202A8C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E029C9E3702797CC6083E1D4D891799F0F5AA144.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.mft Manifest number: F6 Signing time: Mon 02 Nov 2026 06:05:14 +0000 Manifest this update: Mon 02 Nov 2026 06:00:14 +0000 Manifest next update: Tue 03 Nov 2026 09:55:14 +0000 Files and hashes: 1: E029C9E3702797CC6083E1D4D891799F0F5AA144.crl (hash: QBSP7nCR/fwkZxCW/VKoKzeVxWE2SbsAWn3N4Lv0xss=) 2: 3130332e3130392e3230372e302f32342d3234203d3e20313530393335.roa (hash: DY6/Cy+Nw1dnpzSyQJvKM4XZv0DQUdJYanxa6KJ+Sng=) 3: 3130332e3130392e3230362e302f32342d3234203d3e20313530393335.roa (hash: 8AqsSwbCPBkMa1bd8eWoyuIjrtuzrPJimjGA2fsl3AA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.crl rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E029C9E3702797CC6083E1D4D891799F0F5AA144.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 09:55:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:ad:b3:26:25:e9:43:ce:4d:c8:bc:80:1c:40:a6:b0:50:20:2a:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E029C9E3702797CC6083E1D4D891799F0F5AA144 Validity Not Before: Nov 2 06:00:14 2026 GMT Not After : Nov 3 09:55:14 2026 GMT Subject: CN=829C75FE7F4BEEDA6A962E5E0C6F79F347A51802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:08:48:97:54:30:27:63:e0:78:23:85:c1:42: c6:e8:57:ee:78:59:b8:e9:ae:56:02:72:70:4f:3c: 4c:25:17:6d:71:ab:2d:c6:0d:ab:ca:f5:10:3e:e4: 46:d7:0f:ff:fd:21:12:7e:66:76:28:0b:09:b1:97: f9:e6:b0:a9:58:5e:b6:02:db:ae:15:f6:2c:a5:94: 73:ea:3c:df:97:bc:a7:c1:68:27:0f:43:e9:76:e1: 67:bf:2b:22:00:4a:b3:9e:8d:7e:44:4b:9b:b4:63: 17:59:b3:39:5c:c6:ea:76:ae:2d:45:88:87:7e:e9: ef:8a:08:9c:ef:16:0a:2c:06:17:b8:a7:93:e8:11: b6:46:d0:21:ef:e3:2d:06:6c:34:4e:40:67:83:90: 45:f9:86:91:2a:9d:3c:e8:b1:6d:ff:ce:7f:9b:41: 72:5e:a3:fb:24:0b:58:65:17:05:ce:d1:58:8a:ea: 1d:b4:41:fd:33:e3:d5:a8:f8:d9:cf:ba:06:cd:99: 9c:45:9b:13:34:92:80:e4:c5:c2:dc:1c:50:59:82: e9:5e:87:dd:9a:8c:48:49:0d:91:57:6f:22:13:4f: 94:09:56:cb:cb:58:cc:0a:01:09:fa:b5:32:36:7a: 38:44:02:dd:da:69:47:f3:4b:1d:1f:99:3a:3a:c1: e1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:9C:75:FE:7F:4B:EE:DA:6A:96:2E:5E:0C:6F:79:F3:47:A5:18:02 X509v3 Authority Key Identifier: keyid:E0:29:C9:E3:70:27:97:CC:60:83:E1:D4:D8:91:79:9F:0F:5A:A1:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E029C9E3702797CC6083E1D4D891799F0F5AA144.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:c3:7b:18:a4:b9:47:7a:5e:f9:e0:90:84:a8:b1:48:94:bc: 8e:7e:6a:25:25:0c:a1:83:e6:65:7f:4f:66:14:f5:f1:8d:36: 0a:4f:15:74:e4:b7:e5:eb:a3:5e:18:64:50:e7:29:f4:6e:fe: 9e:77:e1:55:79:81:3c:2b:fd:b2:aa:f2:8c:99:09:ad:45:cc: 33:0a:b9:46:77:30:34:98:ab:e6:57:b3:49:8f:ff:f4:f5:b6: b4:a5:7c:60:9c:7f:b6:5c:62:37:0e:77:95:ba:31:99:98:c7: 0b:83:b3:fd:87:f3:0b:c9:73:78:47:63:66:47:d1:44:3e:7e: bb:61:cc:23:77:f7:96:a7:83:75:b2:d3:1e:c8:d9:9b:5d:fc: bd:df:96:90:7e:dd:c2:d0:16:ce:4a:1f:a1:d9:69:49:5d:50: 60:ee:c4:e2:db:4d:a1:05:20:c8:71:f6:bd:75:3a:06:9f:ad: a6:8c:b7:76:0b:26:9e:3f:d5:7c:72:19:78:83:c0:88:2e:b5: 19:79:ca:92:02:9e:91:f8:cb:b6:df:27:c9:9b:59:a5:b8:9e: 81:24:e3:85:78:4a:2c:76:bf:00:c2:cc:17:40:3a:11:f6:60: 65:58:7a:ec:4a:e0:70:1b:45:39:6b:89:8f:97:7d:df:e4:f9: 33:06:43:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXa2zJiXpQ85NyLyAHECmsFAgKowwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTAyOUM5RTM3MDI3OTdDQzYwODNFMUQ0RDg5MTc5OUYw RjVBQTE0NDAeFw0yNjExMDIwNjAwMTRaFw0yNjExMDMwOTU1MTRaMDMxMTAvBgNV BAMTKDgyOUM3NUZFN0Y0QkVFREE2QTk2MkU1RTBDNkY3OUYzNDdBNTE4MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiCEiXVDAnY+B4I4XBQsboV+54 WbjprlYCcnBPPEwlF21xqy3GDavK9RA+5EbXD//9IRJ+ZnYoCwmxl/nmsKlYXrYC 264V9iyllHPqPN+XvKfBaCcPQ+l24We/KyIASrOejX5ES5u0YxdZszlcxup2ri1F iId+6e+KCJzvFgosBhe4p5PoEbZG0CHv4y0GbDROQGeDkEX5hpEqnTzosW3/zn+b QXJeo/skC1hlFwXO0ViK6h20Qf0z49Wo+NnPugbNmZxFmxM0koDkxcLcHFBZgule h92ajEhJDZFXbyITT5QJVsvLWMwKAQn6tTI2ejhEAt3aaUfzSx0fmTo6weE7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgpx1/n9L7tpqli5eDG9580elGAIwHwYDVR0j BBgwFoAU4CnJ43Anl8xgg+HU2JF5nw9aoUQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWM4ODkyZWItZGRjMC00Y2I2LTk1N2MtYjY1M2YyOGJiZjM5LzAvRTAyOUM5RTM3 MDI3OTdDQzYwODNFMUQ0RDg5MTc5OUYwRjVBQTE0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMDI5QzlFMzcwMjc5N0NDNjA4M0UxRDREODkxNzk5RjBGNUFB MTQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWM4ODkyZWItZGRjMC00Y2I2LTk1 N2MtYjY1M2YyOGJiZjM5LzAvRTAyOUM5RTM3MDI3OTdDQzYwODNFMUQ0RDg5MTc5 OUYwRjVBQTE0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJrDexikuUd6XvngkISosUiUvI5+aiUlDKGD 5mV/T2YU9fGNNgpPFXTkt+Xro14YZFDnKfRu/p534VV5gTwr/bKq8oyZCa1FzDMK uUZ3MDSYq+ZXs0mP//T1trSlfGCcf7ZcYjcOd5W6MZmYxwuDs/2H8wvJc3hHY2ZH 0UQ+frthzCN395ang3Wy0x7I2Ztd/L3flpB+3cLQFs5KH6HZaUldUGDuxOLbTaEF IMhx9r11OgafraaMt3YLJp4/1XxyGXiDwIgutRl5ypICnpH4y7bfJ8mbWaW4noEk 44V4Six2vwDCzBdAOhH2YGVYeuxK4HAbRTlriY+Xfd/k+TMGQ5g= -----END CERTIFICATE-----Generated at Tue Nov 3 01:33:19 2026 by rpki-client