$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/E6D8657E7EEA10982DC10335C8109731A067DDF4.mft File: E6D8657E7EEA10982DC10335C8109731A067DDF4.mft (raw, json) Hash identifier: CDiXE4Q1XeIWS2htu0BLTU1/kgc8eV3bAScwJ/vlha4= Subject key identifier: 36:20:1A:54:9F:FF:93:39:8E:54:34:56:3B:BD:D6:7B:3A:10:E7:6C Authority key identifier: E6:D8:65:7E:7E:EA:10:98:2D:C1:03:35:C8:10:97:31:A0:67:DD:F4 Certificate issuer: /CN=E6D8657E7EEA10982DC10335C8109731A067DDF4 Certificate serial: 1FEA1AA25CE5E1AED5B52D8E64743BAD918A2D64 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E6D8657E7EEA10982DC10335C8109731A067DDF4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/E6D8657E7EEA10982DC10335C8109731A067DDF4.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 11:22:38 +0000 Manifest this update: Thu 17 Sep 2026 11:17:38 +0000 Manifest next update: Fri 18 Sep 2026 13:41:38 +0000 Files and hashes: 1: E6D8657E7EEA10982DC10335C8109731A067DDF4.crl (hash: Yoj1w3hW+SvHP1Y6ICkY8lNX+hEoQrfOaXWWSerFdDs=) 2: 3135372e36362e33342e302f32332d3234203d3e203535363838.roa (hash: Q0bQ3r6hiZxbkMHCrchZCQ8u853MF4yPWxTMqg5/h/A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/E6D8657E7EEA10982DC10335C8109731A067DDF4.crl rsync://rpki-rsync.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/E6D8657E7EEA10982DC10335C8109731A067DDF4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E6D8657E7EEA10982DC10335C8109731A067DDF4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:ea:1a:a2:5c:e5:e1:ae:d5:b5:2d:8e:64:74:3b:ad:91:8a:2d:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E6D8657E7EEA10982DC10335C8109731A067DDF4 Validity Not Before: Sep 17 11:17:38 2026 GMT Not After : Sep 18 13:41:38 2026 GMT Subject: CN=36201A549FFF93398E5434563BBDD67B3A10E76C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:16:5b:ed:34:db:7c:e3:5e:07:84:ba:32:30: f8:da:25:b6:11:9a:66:11:b1:01:0e:e3:53:8b:49: 12:ca:ca:90:1b:d5:65:fd:da:9e:41:86:a1:75:c2: 6d:95:85:23:6c:7e:23:b9:97:aa:87:48:cc:95:36: 29:4a:af:3d:b8:44:61:f5:f8:40:17:a8:41:69:cc: 73:78:96:54:01:0a:65:eb:1c:ec:78:e8:68:ca:d0: 7c:83:fe:b5:73:f9:0f:b1:ea:b1:18:fd:c4:5a:5a: ea:4f:9f:e1:12:88:59:73:e2:7b:d6:03:16:19:37: b5:86:cb:a0:38:bc:5b:e6:6f:9e:c0:9e:ac:22:84: 46:e1:84:47:5e:9d:2a:5f:50:ee:0c:1c:65:b6:4a: 22:f7:47:ac:ad:40:66:a3:34:99:5a:1d:fb:40:ff: d7:a0:b9:03:6e:fd:63:ff:b1:82:d1:3d:e7:a9:e3: 03:eb:f9:99:90:08:ef:4e:5c:81:6b:4b:5a:ee:68: f7:8a:99:c2:b9:85:2b:98:9f:1b:cc:7b:6a:82:0c: 90:ac:b7:e6:42:d2:ff:2f:90:e9:b6:3f:ef:aa:f1: 62:de:d8:3b:5f:aa:d4:40:3d:3a:f1:f0:91:26:ba: 3c:f0:0e:3d:d5:fc:48:40:de:0b:4c:a1:a0:56:c5: f0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:20:1A:54:9F:FF:93:39:8E:54:34:56:3B:BD:D6:7B:3A:10:E7:6C X509v3 Authority Key Identifier: keyid:E6:D8:65:7E:7E:EA:10:98:2D:C1:03:35:C8:10:97:31:A0:67:DD:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/E6D8657E7EEA10982DC10335C8109731A067DDF4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E6D8657E7EEA10982DC10335C8109731A067DDF4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/E6D8657E7EEA10982DC10335C8109731A067DDF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:51:31:f9:2f:4c:c2:65:64:13:9d:70:2f:fe:16:81:28:f7: 11:86:19:d3:5b:44:4d:12:9d:07:3f:4e:83:2b:5f:fd:e5:01: 5b:da:e2:4f:b7:0c:49:fe:5d:50:6c:85:0c:9e:19:95:84:a5: 3d:d2:31:09:7d:a4:f1:b1:7d:cd:d2:45:01:f7:e5:25:79:57: 6f:52:d9:2a:0b:75:ca:4e:bb:c8:2e:79:f8:bc:0a:02:79:8f: 00:41:1b:04:ad:51:ec:9c:ce:bb:ca:eb:71:e4:55:1e:c5:14: 4b:0f:07:75:16:2b:6d:3f:9e:5f:86:55:f8:2f:d4:7f:d7:ee: 09:a1:d2:26:7a:ac:18:83:30:a6:65:65:a5:61:c9:69:5c:8e: 18:cc:0e:67:06:75:e6:33:76:e1:07:f1:f5:41:80:62:1c:dd: 11:cf:7d:72:57:f5:7f:6f:7e:cf:e6:ce:9c:df:ac:88:a0:5a: e3:38:8e:04:c3:12:8e:ac:bf:28:4e:8d:1c:48:07:c7:27:e2: a2:78:2d:49:15:b0:4f:6c:74:47:0f:5e:61:71:c7:79:37:5f: 59:6b:46:99:5c:40:15:d5:74:b8:88:8f:36:b1:74:09:cc:e9: 67:78:e6:85:41:ca:38:e0:c8:49:5f:47:90:33:15:a7:50:b0: 7c:c8:e5:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH+oaolzl4a7VtS2OZHQ7rZGKLWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTZEODY1N0U3RUVBMTA5ODJEQzEwMzM1QzgxMDk3MzFB MDY3RERGNDAeFw0yNjA5MTcxMTE3MzhaFw0yNjA5MTgxMzQxMzhaMDMxMTAvBgNV BAMTKDM2MjAxQTU0OUZGRjkzMzk4RTU0MzQ1NjNCQkRENjdCM0ExMEU3NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIFlvtNNt8414HhLoyMPjaJbYR mmYRsQEO41OLSRLKypAb1WX92p5BhqF1wm2VhSNsfiO5l6qHSMyVNilKrz24RGH1 +EAXqEFpzHN4llQBCmXrHOx46GjK0HyD/rVz+Q+x6rEY/cRaWupPn+ESiFlz4nvW AxYZN7WGy6A4vFvmb57AnqwihEbhhEdenSpfUO4MHGW2SiL3R6ytQGajNJlaHftA /9eguQNu/WP/sYLRPeep4wPr+ZmQCO9OXIFrS1ruaPeKmcK5hSuYnxvMe2qCDJCs t+ZC0v8vkOm2P++q8WLe2DtfqtRAPTrx8JEmujzwDj3V/EhA3gtMoaBWxfB9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNiAaVJ//kzmOVDRWO73WezoQ52wwHwYDVR0j BBgwFoAU5thlfn7qEJgtwQM1yBCXMaBn3fQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2MzZTY4YmQtYjA0Yy00ZDM1LTgwMjAtMDI5MzYzNDJmYjFkLzAvRTZEODY1N0U3 RUVBMTA5ODJEQzEwMzM1QzgxMDk3MzFBMDY3RERGNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FNkQ4NjU3RTdFRUExMDk4MkRDMTAzMzVDODEwOTczMUEwNjdE REY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2MzZTY4YmQtYjA0Yy00ZDM1LTgw MjAtMDI5MzYzNDJmYjFkLzAvRTZEODY1N0U3RUVBMTA5ODJEQzEwMzM1QzgxMDk3 MzFBMDY3RERGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGZRMfkvTMJlZBOdcC/+FoEo9xGGGdNbRE0S nQc/ToMrX/3lAVva4k+3DEn+XVBshQyeGZWEpT3SMQl9pPGxfc3SRQH35SV5V29S 2SoLdcpOu8guefi8CgJ5jwBBGwStUeyczrvK63HkVR7FFEsPB3UWK20/nl+GVfgv 1H/X7gmh0iZ6rBiDMKZlZaVhyWlcjhjMDmcGdeYzduEH8fVBgGIc3RHPfXJX9X9v fs/mzpzfrIigWuM4jgTDEo6svyhOjRxIB8cn4qJ4LUkVsE9sdEcPXmFxx3k3X1lr RplcQBXVdLiIjzaxdAnM6Wd45oVByjjgyElfR5AzFadQsHzI5UU= -----END CERTIFICATE-----Generated at Thu Sep 17 14:39:34 2026 by rpki-client