$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/E6D8657E7EEA10982DC10335C8109731A067DDF4.mft File: E6D8657E7EEA10982DC10335C8109731A067DDF4.mft (raw, json) Hash identifier: g25ow422Im+tz0Fx7YTh/1nSroZ5W+aMla7CcgBUWvk= Subject key identifier: 27:33:78:47:D1:8E:81:FC:2B:0A:90:36:13:F9:C2:B5:43:58:88:A6 Authority key identifier: E6:D8:65:7E:7E:EA:10:98:2D:C1:03:35:C8:10:97:31:A0:67:DD:F4 Certificate issuer: /CN=E6D8657E7EEA10982DC10335C8109731A067DDF4 Certificate serial: 4B79EF1B73723DE3B0020BB01611FB2DF6C9FA22 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E6D8657E7EEA10982DC10335C8109731A067DDF4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/E6D8657E7EEA10982DC10335C8109731A067DDF4.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 17:10:24 +0000 Manifest this update: Wed 16 Sep 2026 17:05:24 +0000 Manifest next update: Thu 17 Sep 2026 19:22:24 +0000 Files and hashes: 1: 3135372e36362e33342e302f32332d3234203d3e203535363838.roa (hash: Q0bQ3r6hiZxbkMHCrchZCQ8u853MF4yPWxTMqg5/h/A=) 2: E6D8657E7EEA10982DC10335C8109731A067DDF4.crl (hash: 4MDssVk5mlOHpnYSK21EY0FfsJ+7XX5sTne4ABodG1g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/E6D8657E7EEA10982DC10335C8109731A067DDF4.crl rsync://rpki-rsync.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/E6D8657E7EEA10982DC10335C8109731A067DDF4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E6D8657E7EEA10982DC10335C8109731A067DDF4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 19:22:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:79:ef:1b:73:72:3d:e3:b0:02:0b:b0:16:11:fb:2d:f6:c9:fa:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E6D8657E7EEA10982DC10335C8109731A067DDF4 Validity Not Before: Sep 16 17:05:24 2026 GMT Not After : Sep 17 19:22:24 2026 GMT Subject: CN=27337847D18E81FC2B0A903613F9C2B5435888A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:21:98:ce:94:82:2e:fe:ce:86:f8:27:f5:e4: b2:dd:cc:e3:94:38:2e:e5:00:9e:0f:79:69:b7:ec: 3e:43:4b:b7:d6:74:bb:ab:01:19:ae:db:74:81:d0: c6:d0:0e:af:86:aa:5f:66:ee:f1:53:bc:ff:ba:72: 48:c9:7a:e0:6c:51:42:32:fc:14:d9:0b:53:b8:0c: 39:b7:17:3a:97:23:4d:90:2e:e2:06:93:6b:8b:68: 9b:36:85:bc:3f:6b:e8:38:bc:ce:8b:81:27:6a:f4: a0:f5:d4:b0:c1:ba:90:6d:ff:27:e6:3a:7c:b7:cc: e9:02:af:32:78:ef:78:49:28:fa:3b:43:c8:93:62: a4:10:7c:d4:80:bf:2c:42:34:9f:51:2a:41:a2:b0: 58:0f:40:83:3e:c8:3e:55:24:bf:9d:a1:ec:4e:82: ee:06:ce:c5:8b:70:fd:a9:79:fb:80:28:d8:98:49: 12:77:e0:fa:7c:1e:f1:bd:9a:e9:9f:fc:be:90:88: 0d:25:18:72:fd:a0:cb:03:89:86:b8:00:5a:85:6b: b9:db:29:68:08:40:b2:bf:87:7e:31:6d:65:d5:d7: a9:ad:a8:9a:8d:5b:bc:4e:88:ab:ca:11:8a:42:fc: 64:c6:92:75:55:ea:eb:6e:15:1b:7d:ca:a8:9d:06: 12:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:33:78:47:D1:8E:81:FC:2B:0A:90:36:13:F9:C2:B5:43:58:88:A6 X509v3 Authority Key Identifier: keyid:E6:D8:65:7E:7E:EA:10:98:2D:C1:03:35:C8:10:97:31:A0:67:DD:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/E6D8657E7EEA10982DC10335C8109731A067DDF4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E6D8657E7EEA10982DC10335C8109731A067DDF4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/E6D8657E7EEA10982DC10335C8109731A067DDF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:88:de:c5:9f:eb:3e:8f:e7:9c:04:dc:04:5f:60:38:60:67: f7:19:ca:48:15:56:63:5f:57:bb:5f:6c:71:7c:52:bc:cd:60: ef:de:c7:b8:ed:2d:4d:75:04:6a:50:1f:eb:c4:d9:cc:19:fe: e6:72:cf:e8:33:72:a6:62:ce:95:8b:89:e6:46:a0:a2:61:69: 47:ea:47:7a:4a:c7:2d:92:8c:46:bf:90:f4:d6:6b:5a:16:fc: 3d:10:fc:35:40:44:06:82:de:24:cf:84:c6:c8:33:63:66:c9: 32:8c:67:fc:4e:43:20:01:60:cf:68:12:35:6d:73:b5:62:97: c3:6a:ed:e8:9a:c9:bb:a5:b0:a8:ce:23:11:f7:8b:ac:6b:5a: 45:a4:42:1f:c8:86:e4:61:96:0f:7a:8f:c2:37:85:dd:83:cf: ff:db:c9:48:98:61:07:2a:c2:0c:82:f5:4d:aa:71:f2:ce:c3: 33:b9:e9:ca:91:92:93:8f:c1:5c:31:49:7a:be:f3:5a:b6:31: db:32:de:48:b4:68:c4:a4:23:8b:38:ca:24:11:b7:0a:97:ee: ad:63:03:fb:e4:75:04:55:a2:4a:81:97:e2:8d:84:68:1c:46: 46:a8:15:2a:b2:c4:c5:0b:83:ae:3e:f8:cf:5c:0c:9c:45:c0: ad:1b:d3:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS3nvG3NyPeOwAguwFhH7LfbJ+iIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTZEODY1N0U3RUVBMTA5ODJEQzEwMzM1QzgxMDk3MzFB MDY3RERGNDAeFw0yNjA5MTYxNzA1MjRaFw0yNjA5MTcxOTIyMjRaMDMxMTAvBgNV BAMTKDI3MzM3ODQ3RDE4RTgxRkMyQjBBOTAzNjEzRjlDMkI1NDM1ODg4QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIIZjOlIIu/s6G+Cf15LLdzOOU OC7lAJ4PeWm37D5DS7fWdLurARmu23SB0MbQDq+Gql9m7vFTvP+6ckjJeuBsUUIy /BTZC1O4DDm3FzqXI02QLuIGk2uLaJs2hbw/a+g4vM6LgSdq9KD11LDBupBt/yfm Ony3zOkCrzJ473hJKPo7Q8iTYqQQfNSAvyxCNJ9RKkGisFgPQIM+yD5VJL+doexO gu4GzsWLcP2pefuAKNiYSRJ34Pp8HvG9mumf/L6QiA0lGHL9oMsDiYa4AFqFa7nb KWgIQLK/h34xbWXV16mtqJqNW7xOiKvKEYpC/GTGknVV6utuFRt9yqidBhJDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJzN4R9GOgfwrCpA2E/nCtUNYiKYwHwYDVR0j BBgwFoAU5thlfn7qEJgtwQM1yBCXMaBn3fQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2MzZTY4YmQtYjA0Yy00ZDM1LTgwMjAtMDI5MzYzNDJmYjFkLzAvRTZEODY1N0U3 RUVBMTA5ODJEQzEwMzM1QzgxMDk3MzFBMDY3RERGNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FNkQ4NjU3RTdFRUExMDk4MkRDMTAzMzVDODEwOTczMUEwNjdE REY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2MzZTY4YmQtYjA0Yy00ZDM1LTgw MjAtMDI5MzYzNDJmYjFkLzAvRTZEODY1N0U3RUVBMTA5ODJEQzEwMzM1QzgxMDk3 MzFBMDY3RERGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB+I3sWf6z6P55wE3ARfYDhgZ/cZykgVVmNf V7tfbHF8UrzNYO/ex7jtLU11BGpQH+vE2cwZ/uZyz+gzcqZizpWLieZGoKJhaUfq R3pKxy2SjEa/kPTWa1oW/D0Q/DVARAaC3iTPhMbIM2NmyTKMZ/xOQyABYM9oEjVt c7Vil8Nq7eiaybulsKjOIxH3i6xrWkWkQh/IhuRhlg96j8I3hd2Dz//byUiYYQcq wgyC9U2qcfLOwzO56cqRkpOPwVwxSXq+81q2Mdsy3ki0aMSkI4s4yiQRtwqX7q1j A/vkdQRVokqBl+KNhGgcRkaoFSqyxMULg64++M9cDJxFwK0b09I= -----END CERTIFICATE-----Generated at Thu Sep 17 13:24:38 2026 by rpki-client