$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/E3D6C125B35E67510271310D928E4578404A3A46.mft File: E3D6C125B35E67510271310D928E4578404A3A46.mft (raw, json) Hash identifier: RPRERqhYJ8grablHj3/n6rMEJoxFAYRITsBNVOGvXVc= Subject key identifier: 1E:7B:C3:21:D2:42:D4:7E:35:0E:D5:59:DF:73:58:0F:90:C2:53:1A Authority key identifier: E3:D6:C1:25:B3:5E:67:51:02:71:31:0D:92:8E:45:78:40:4A:3A:46 Certificate issuer: /CN=E3D6C125B35E67510271310D928E4578404A3A46 Certificate serial: 324B1C2553EEC9FB6E620FAACB7C33E736493A8E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3D6C125B35E67510271310D928E4578404A3A46.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/E3D6C125B35E67510271310D928E4578404A3A46.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 02:41:50 +0000 Manifest this update: Thu 17 Sep 2026 02:36:50 +0000 Manifest next update: Fri 18 Sep 2026 05:59:50 +0000 Files and hashes: 1: 3130332e3137362e3139392e302f32342d3234203d3e20313437313334.roa (hash: T5uRj9PC/T10VKks3wi10c2uBNec4FkHRnP0vvfYiOk=) 2: E3D6C125B35E67510271310D928E4578404A3A46.crl (hash: Qy2NQcKW4sNsJQn5b67iohoJBqicIoxAalGcLQF84m8=) 3: 3130332e3137362e3139382e302f32342d3234203d3e20313437313334.roa (hash: 8qQMC3EFOK3yCgkVj+C7FEr6qF+CfYoBtbfTyKhcjE4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/E3D6C125B35E67510271310D928E4578404A3A46.crl rsync://rpki-rsync.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/E3D6C125B35E67510271310D928E4578404A3A46.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3D6C125B35E67510271310D928E4578404A3A46.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:59:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:4b:1c:25:53:ee:c9:fb:6e:62:0f:aa:cb:7c:33:e7:36:49:3a:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3D6C125B35E67510271310D928E4578404A3A46 Validity Not Before: Sep 17 02:36:50 2026 GMT Not After : Sep 18 05:59:50 2026 GMT Subject: CN=1E7BC321D242D47E350ED559DF73580F90C2531A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b7:98:5d:f5:49:21:56:ed:36:51:70:6b:fe: dd:1e:f9:8b:ef:50:1f:27:25:8c:a6:0e:20:b3:11: 29:f5:ba:a0:c2:f1:32:29:f5:55:40:0e:62:42:d4: 8d:09:86:bb:57:e3:98:82:02:0a:e6:50:cb:f6:63: 13:93:cf:38:75:07:ac:73:4b:d8:47:1a:11:91:2c: cc:7e:27:c5:47:71:57:be:da:29:56:ac:9e:5b:bb: ad:00:ec:52:4d:34:e3:40:19:0c:ef:bf:26:70:31: 46:d4:83:66:95:60:0a:28:e4:f0:b3:ed:07:55:bb: 7e:f4:8f:50:17:aa:ed:3e:d3:a5:3a:f0:02:d7:86: ef:4e:89:23:01:74:4b:6a:c8:25:54:be:28:e6:1a: 63:c2:2e:c0:f5:d9:dc:fe:2c:e6:61:3b:73:44:9c: 66:db:51:5c:17:2d:8c:0c:ac:e6:5c:b3:7d:8b:5e: 49:6e:11:6d:c6:bc:e7:07:79:fa:7e:a5:49:ef:91: db:a6:6c:28:cd:40:b2:6e:3c:92:00:85:64:e8:bd: b8:c5:a2:5e:c0:7d:fa:f6:9f:c7:ce:2e:d8:7b:8b: 52:e7:ed:14:2d:91:16:fb:9e:32:13:61:a9:ff:03: a0:b6:45:a6:07:dc:4a:e8:12:2a:c0:21:72:d5:78: c8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:7B:C3:21:D2:42:D4:7E:35:0E:D5:59:DF:73:58:0F:90:C2:53:1A X509v3 Authority Key Identifier: keyid:E3:D6:C1:25:B3:5E:67:51:02:71:31:0D:92:8E:45:78:40:4A:3A:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/E3D6C125B35E67510271310D928E4578404A3A46.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3D6C125B35E67510271310D928E4578404A3A46.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/E3D6C125B35E67510271310D928E4578404A3A46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:8a:79:8a:58:82:5f:58:59:c5:a4:1d:7d:9a:33:08:76:0b: 1b:1b:a0:c5:16:80:5f:30:d8:ca:f2:f9:f4:39:b6:c0:f2:73: e1:3f:7e:5d:11:cb:6b:fb:b9:ba:b3:ad:d8:18:53:21:28:f7: 2a:bc:95:dc:c5:b3:a2:ab:26:bd:6d:e8:c7:e7:97:fc:18:0a: e4:6b:b8:14:c2:01:b6:a1:5f:d6:72:d2:7d:bc:6c:53:73:5f: 03:ad:9e:e9:9a:6d:e1:10:9f:0a:91:69:58:56:9c:b3:af:27: 74:ce:4c:ee:4f:f7:40:c5:db:fe:b7:49:3c:5c:34:2b:29:0a: 25:a6:34:79:41:25:4f:fc:88:ac:9b:30:8f:9a:b2:3a:f3:e3: 0c:54:7e:34:d6:e2:34:3f:3a:4d:d9:09:92:5e:eb:15:51:5c: 60:47:ba:1c:a9:20:86:72:62:5f:db:a4:5d:13:53:fe:15:25: 40:54:85:5f:de:ff:75:de:6e:74:be:2f:0e:e1:6a:d7:20:da: 27:4e:55:76:c0:fc:43:d0:6b:aa:35:06:8e:a6:4a:c3:e5:33: 6c:89:62:2f:d8:eb:88:66:1c:2f:a5:26:d4:2b:74:35:cf:f7: f7:a9:08:ef:fd:cd:ed:55:81:e6:6c:b3:1f:68:18:7d:77:cc: 98:db:6b:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMkscJVPuyftuYg+qy3wz5zZJOo4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTNENkMxMjVCMzVFNjc1MTAyNzEzMTBEOTI4RTQ1Nzg0 MDRBM0E0NjAeFw0yNjA5MTcwMjM2NTBaFw0yNjA5MTgwNTU5NTBaMDMxMTAvBgNV BAMTKDFFN0JDMzIxRDI0MkQ0N0UzNTBFRDU1OURGNzM1ODBGOTBDMjUzMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGt5hd9UkhVu02UXBr/t0e+Yvv UB8nJYymDiCzESn1uqDC8TIp9VVADmJC1I0JhrtX45iCAgrmUMv2YxOTzzh1B6xz S9hHGhGRLMx+J8VHcVe+2ilWrJ5bu60A7FJNNONAGQzvvyZwMUbUg2aVYAoo5PCz 7QdVu370j1AXqu0+06U68ALXhu9OiSMBdEtqyCVUvijmGmPCLsD12dz+LOZhO3NE nGbbUVwXLYwMrOZcs32LXkluEW3GvOcHefp+pUnvkdumbCjNQLJuPJIAhWTovbjF ol7Affr2n8fOLth7i1Ln7RQtkRb7njITYan/A6C2RaYH3EroEirAIXLVeMipAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHnvDIdJC1H41DtVZ33NYD5DCUxowHwYDVR0j BBgwFoAU49bBJbNeZ1ECcTENko5FeEBKOkYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGI5ZTZkYTQtZGM0Ni00NzBmLWIwZTktMTZlNmU1N2Q0NzlhLzAvRTNENkMxMjVC MzVFNjc1MTAyNzEzMTBEOTI4RTQ1Nzg0MDRBM0E0Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FM0Q2QzEyNUIzNUU2NzUxMDI3MTMxMEQ5MjhFNDU3ODQwNEEz QTQ2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGI5ZTZkYTQtZGM0Ni00NzBmLWIw ZTktMTZlNmU1N2Q0NzlhLzAvRTNENkMxMjVCMzVFNjc1MTAyNzEzMTBEOTI4RTQ1 Nzg0MDRBM0E0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABSKeYpYgl9YWcWkHX2aMwh2CxsboMUWgF8w 2Mry+fQ5tsDyc+E/fl0Ry2v7ubqzrdgYUyEo9yq8ldzFs6KrJr1t6Mfnl/wYCuRr uBTCAbahX9Zy0n28bFNzXwOtnumabeEQnwqRaVhWnLOvJ3TOTO5P90DF2/63STxc NCspCiWmNHlBJU/8iKybMI+asjrz4wxUfjTW4jQ/Ok3ZCZJe6xVRXGBHuhypIIZy Yl/bpF0TU/4VJUBUhV/e/3XebnS+Lw7hatcg2idOVXbA/EPQa6o1Bo6mSsPlM2yJ Yi/Y64hmHC+lJtQrdDXP9/epCO/9ze1VgeZssx9oGH13zJjba2Q= -----END CERTIFICATE-----Generated at Thu Sep 17 14:46:58 2026 by rpki-client