$ rpki-client -vvvf rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/E9ED07059EB01F61BF6A902EB0D95F92D005672C.mft File: E9ED07059EB01F61BF6A902EB0D95F92D005672C.mft (raw, json) Hash identifier: 88xfX2WNaKWkFgahfALLD2Kg0UozccGS2JjgjrU/QaE= Subject key identifier: 6B:53:6C:DE:95:E5:90:6E:8C:A7:81:D2:41:31:B7:83:DD:22:66:D7 Authority key identifier: E9:ED:07:05:9E:B0:1F:61:BF:6A:90:2E:B0:D9:5F:92:D0:05:67:2C Certificate issuer: /CN=E9ED07059EB01F61BF6A902EB0D95F92D005672C Certificate serial: 3A5C7835A2A8FA72831636EDE54708A908494C11 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9ED07059EB01F61BF6A902EB0D95F92D005672C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/E9ED07059EB01F61BF6A902EB0D95F92D005672C.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 11:12:22 +0000 Manifest this update: Thu 17 Sep 2026 11:07:22 +0000 Manifest next update: Fri 18 Sep 2026 12:17:22 +0000 Files and hashes: 1: 3130332e3133362e31332e302f32342d3234203d3e20313338383231.roa (hash: O71Jl4mqVIKRIDU7d2ujmnsBUwDFC83l2q24DcsCcFA=) 2: 3130332e3133362e31322e302f32342d3234203d3e20313338383231.roa (hash: O/24bYRJHwn8lGm4x/5IsjKHiRZPSA0Jbap1Vz4bsHo=) 3: 3130332e3133362e31352e302f32342d3234203d3e20313338383231.roa (hash: fB2Vl1cIcPoBjN5rs9Ik+Eab2HMgRuDFWdtvrKSJoVw=) 4: E9ED07059EB01F61BF6A902EB0D95F92D005672C.crl (hash: gxIemqINEgrsaxpxEsOQyJbQeFJsdqy88tz63Vyb5Z8=) 5: 3130332e3133362e31342e302f32342d3234203d3e20313338383231.roa (hash: j+y6AXj1f3E3oHmAFOLhkBlzYepk37VPnp6D6mtPQkY=) 6: 3130332e3133362e31322e302f32322d3234203d3e20313338383231.roa (hash: adRerI3tyaAoAsC9J+hV/5/qxos6XlWsLUCLBDHVCkI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/E9ED07059EB01F61BF6A902EB0D95F92D005672C.crl rsync://rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/E9ED07059EB01F61BF6A902EB0D95F92D005672C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9ED07059EB01F61BF6A902EB0D95F92D005672C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:5c:78:35:a2:a8:fa:72:83:16:36:ed:e5:47:08:a9:08:49:4c:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9ED07059EB01F61BF6A902EB0D95F92D005672C Validity Not Before: Sep 17 11:07:22 2026 GMT Not After : Sep 18 12:17:22 2026 GMT Subject: CN=6B536CDE95E5906E8CA781D24131B783DD2266D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:dd:71:c0:91:e5:4a:80:06:b1:67:4e:3a:50: 19:69:b1:03:1e:fc:32:1b:33:2d:22:e9:30:62:77: 20:69:10:a7:48:f2:3f:3b:92:c2:03:16:9b:6d:a9: 81:76:c6:d5:45:ec:dc:ab:86:10:e9:b9:8c:39:e5: 41:31:d4:55:14:25:9b:b4:17:71:60:33:d9:7a:8e: 5e:36:34:59:c6:9b:5d:dc:3e:2a:3c:41:27:10:0a: 28:88:09:99:4b:12:07:37:e5:54:4b:bd:46:5b:3b: 5d:dc:1e:8a:c3:f3:f7:7e:bb:03:21:be:10:2a:7f: a7:56:84:1d:26:a4:2a:9d:39:02:6f:61:eb:71:17: 94:47:24:04:bf:3a:81:21:f8:78:bc:3a:98:02:73: 1f:7a:59:db:4e:27:74:c0:44:d4:3c:14:77:a4:57: d8:81:fb:86:a3:36:18:cf:7f:2c:b1:78:91:43:c5: 71:48:23:d4:e1:d5:f4:4a:2c:65:0a:79:af:e2:3c: d2:9e:44:b7:3a:76:f4:8e:ca:f1:60:8f:66:1e:a4: 3c:2b:64:93:80:4d:57:4b:21:7c:40:cd:e9:a3:50: fb:76:7e:03:e3:57:80:65:5d:a2:ac:47:3f:94:e3: b8:16:fe:47:e5:a1:fc:bd:6f:1c:46:23:3d:7b:ef: 6d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:53:6C:DE:95:E5:90:6E:8C:A7:81:D2:41:31:B7:83:DD:22:66:D7 X509v3 Authority Key Identifier: keyid:E9:ED:07:05:9E:B0:1F:61:BF:6A:90:2E:B0:D9:5F:92:D0:05:67:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/E9ED07059EB01F61BF6A902EB0D95F92D005672C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9ED07059EB01F61BF6A902EB0D95F92D005672C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/E9ED07059EB01F61BF6A902EB0D95F92D005672C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:89:39:c0:7a:36:f7:fc:2e:0b:fc:cc:2b:6d:0e:a2:01:0a: 83:41:7b:9e:f6:62:48:77:a8:d8:12:9b:94:4b:2b:0a:02:54: 09:0e:01:32:8f:86:50:55:30:5e:9e:8b:86:c4:65:ef:32:f7: 17:4a:60:40:93:b7:cb:78:3e:a5:85:83:36:93:86:4a:32:4d: bc:09:33:a3:92:f2:4f:bd:9c:cd:06:e6:6c:76:29:a2:42:d0: 5b:97:e8:da:9c:0e:5b:ed:d3:d4:8d:0a:bb:53:fc:70:13:29: 6a:27:2a:c1:a5:0c:4f:64:f0:e1:91:9e:84:48:f9:e3:60:d5: fc:f9:5f:8c:65:9e:96:3e:bd:1b:7a:03:4b:e8:91:73:8b:1c: ec:1c:47:62:03:d1:ba:f0:b3:a1:c6:7f:37:06:1e:2e:be:bc: 4c:3e:7e:f9:59:c4:73:a5:86:21:81:e5:83:9c:17:15:b3:cc: c7:d8:7e:a7:3a:d8:69:b6:6e:11:2f:20:8c:32:0a:b4:d2:d7: d6:1b:0b:ae:62:8b:28:f8:cf:4c:6a:e4:b4:a8:35:4f:5d:a6: 4b:fe:b5:49:bd:92:aa:ac:f2:64:1a:b7:34:6d:2f:32:bd:46: 04:02:83:0c:52:5a:fc:83:a5:56:2f:5b:52:be:41:0d:93:d1: 11:60:9c:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOlx4NaKo+nKDFjbt5UcIqQhJTBEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlFRDA3MDU5RUIwMUY2MUJGNkE5MDJFQjBEOTVGOTJE MDA1NjcyQzAeFw0yNjA5MTcxMTA3MjJaFw0yNjA5MTgxMjE3MjJaMDMxMTAvBgNV BAMTKDZCNTM2Q0RFOTVFNTkwNkU4Q0E3ODFEMjQxMzFCNzgzREQyMjY2RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD3XHAkeVKgAaxZ046UBlpsQMe /DIbMy0i6TBidyBpEKdI8j87ksIDFpttqYF2xtVF7NyrhhDpuYw55UEx1FUUJZu0 F3FgM9l6jl42NFnGm13cPio8QScQCiiICZlLEgc35VRLvUZbO13cHorD8/d+uwMh vhAqf6dWhB0mpCqdOQJvYetxF5RHJAS/OoEh+Hi8OpgCcx96WdtOJ3TARNQ8FHek V9iB+4ajNhjPfyyxeJFDxXFII9Th1fRKLGUKea/iPNKeRLc6dvSOyvFgj2YepDwr ZJOATVdLIXxAzemjUPt2fgPjV4BlXaKsRz+U47gW/kflofy9bxxGIz17723XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa1Ns3pXlkG6Mp4HSQTG3g90iZtcwHwYDVR0j BBgwFoAU6e0HBZ6wH2G/apAusNlfktAFZywwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDAxYjFjMWItNjU2Yy00ODlkLTllZDMtY2NjNzdjODMwMThkLzAvRTlFRDA3MDU5 RUIwMUY2MUJGNkE5MDJFQjBEOTVGOTJEMDA1NjcyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOUVEMDcwNTlFQjAxRjYxQkY2QTkwMkVCMEQ5NUY5MkQwMDU2 NzJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDAxYjFjMWItNjU2Yy00ODlkLTll ZDMtY2NjNzdjODMwMThkLzAvRTlFRDA3MDU5RUIwMUY2MUJGNkE5MDJFQjBEOTVG OTJEMDA1NjcyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHCJOcB6Nvf8Lgv8zCttDqIBCoNBe572Ykh3 qNgSm5RLKwoCVAkOATKPhlBVMF6ei4bEZe8y9xdKYECTt8t4PqWFgzaThkoyTbwJ M6OS8k+9nM0G5mx2KaJC0FuX6NqcDlvt09SNCrtT/HATKWonKsGlDE9k8OGRnoRI +eNg1fz5X4xlnpY+vRt6A0vokXOLHOwcR2ID0brws6HGfzcGHi6+vEw+fvlZxHOl hiGB5YOcFxWzzMfYfqc62Gm2bhEvIIwyCrTS19YbC65iiyj4z0xq5LSoNU9dpkv+ tUm9kqqs8mQatzRtLzK9RgQCgwxSWvyDpVYvW1K+QQ2T0RFgnKo= -----END CERTIFICATE-----Generated at Thu Sep 17 13:48:47 2026 by rpki-client