$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.mft File: E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.mft (raw, json) Hash identifier: b7mXIkS6jEG5JdSf1ejZdykLRp39n2OaoE7yW9fpNWA= Subject key identifier: E1:60:0F:BA:8F:F7:C8:DB:95:87:29:9A:7E:CD:0F:3C:EB:D9:97:40 Authority key identifier: E6:EC:35:CF:C2:49:3A:3A:79:DC:D5:9D:1C:1D:BA:FB:2E:74:27:93 Certificate issuer: /CN=E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793 Certificate serial: 2591D7E306E1B91DD8EB3EBB94722BA647544F91 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.mft Manifest number: AF Signing time: Thu 10 Sep 2026 13:48:56 +0000 Manifest this update: Thu 10 Sep 2026 13:43:56 +0000 Manifest next update: Fri 11 Sep 2026 16:31:56 +0000 Files and hashes: 1: 3230322e37332e3232342e302f32312d3234203d3e203138303034.roa (hash: m1pNwOSLl0bdCga72bgV0UjJBtOBSgU1ellU74iVk3k=) 2: 3131352e3137382e3136302e302f31392d3234203d3e203138303034.roa (hash: phcDv0m0vLlfwZ99qeKbMtyh63ijZFKiTdhh4MVincM=) 3: 323430373a613630303a3a2f33322d3338203d3e203138303034.roa (hash: v44LsT6qMPli0zPJF9qTEG8AjfBqu7Oywt77FQr+HWc=) 4: E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.crl (hash: wBFSdXt25hQhghLwA1lRE421nwq5qmtjg8ODOFdSBFs=) 5: 3131352e3137382e3139322e302f31392d3234203d3e203138303034.roa (hash: ho4hOFufXidWAYsTbOliD6cEtUCuHGtc5gpjUTGtn7w=) 6: 3130332e332e3230382e302f32322d3234203d3e203138303034.roa (hash: E6gLrMvPbF2DgnqL5izEh9JlZeBZOXfgDDhLttXgRCM=) 7: 3131342e37392e302e302f31382d3234203d3e203138303034.roa (hash: 0O4aswxD1VoxCc8I8JRXFhna+2fhOQAti4akwG9PjgQ=) 8: 3131352e3137382e3232342e302f31392d3234203d3e203138303034.roa (hash: PekXXJ/q55kTEO5kx0CRU0xx2H+12J366upyeQ1nZA8=) 9: 3130332e3233342e3132302e302f32322d3234203d3e203138303034.roa (hash: Sd3fhLkfAzIYKIa+lxI8//LD+Sqt+jk5hVCJVdmO8ro=) 10: 3230322e37302e34382e302f32302d3234203d3e203138303034.roa (hash: M9jyn5/cfkiIh8r7xaktGDoS2J9kM31RBGKJ46gBojU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.crl rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 16:31:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:91:d7:e3:06:e1:b9:1d:d8:eb:3e:bb:94:72:2b:a6:47:54:4f:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793 Validity Not Before: Sep 10 13:43:56 2026 GMT Not After : Sep 11 16:31:56 2026 GMT Subject: CN=E1600FBA8FF7C8DB9587299A7ECD0F3CEBD99740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:76:64:e0:8e:bd:6d:e0:ae:f7:2c:79:bd:08: 9a:17:d1:43:2a:51:eb:b0:47:52:86:24:ce:5b:29: 5b:af:92:e3:0a:8e:22:95:52:ad:c2:a4:49:55:05: 54:11:f7:1f:47:a7:60:e1:95:0b:00:5d:1a:e0:8c: b7:16:35:62:97:c5:35:ec:bd:d0:07:81:fc:48:07: 5c:da:dd:5c:ff:bd:61:fd:e3:94:f6:6c:ff:fb:2f: e8:2c:76:46:3a:46:52:eb:e1:45:54:e4:54:6b:51: c0:1a:8c:af:cb:ee:fd:6f:9f:ee:05:50:3c:4d:23: 00:26:17:52:f3:f8:7f:32:3c:26:62:b5:04:cd:72: ac:8a:01:78:d1:aa:e2:c6:88:78:3d:1d:98:1b:e8: 5e:d4:67:15:5e:aa:8f:fa:07:a4:b6:81:71:5f:c2: e4:82:cd:26:f3:9e:30:88:26:c0:d5:18:f0:1b:54: 45:95:4d:83:e3:7d:a5:ab:c2:fa:b6:2c:e9:93:ac: 30:8b:49:fa:05:af:42:d8:b6:90:7a:59:9d:08:4d: 3c:2c:6c:8c:af:3b:4a:3a:d2:a1:96:8c:50:dd:4a: 91:b2:e5:bc:aa:ae:b0:10:3b:6f:bf:76:b9:a3:a5: e9:66:55:66:cf:33:23:70:6f:f3:54:c0:23:aa:73: 10:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:60:0F:BA:8F:F7:C8:DB:95:87:29:9A:7E:CD:0F:3C:EB:D9:97:40 X509v3 Authority Key Identifier: keyid:E6:EC:35:CF:C2:49:3A:3A:79:DC:D5:9D:1C:1D:BA:FB:2E:74:27:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:5c:f3:d4:47:81:1a:be:89:0b:ab:0f:8a:b0:75:44:a4:e6: c1:ef:06:46:5d:72:1c:17:51:8b:2b:1a:8b:c6:ba:1d:e2:64: f5:ea:53:f7:36:f0:dc:3a:fc:bd:0b:61:6d:b7:ca:7e:06:ad: 2b:42:3e:d2:b2:76:9a:0a:dc:ee:da:38:64:6a:47:8e:b6:bc: dc:2d:d3:6a:3f:20:60:bf:1f:a4:54:92:85:39:e2:de:a8:7d: e9:4f:0a:2e:f8:d7:05:16:53:16:4b:35:2d:d2:ad:da:f1:b1: e3:af:37:0b:45:e3:f5:c0:a5:fb:c2:ad:10:8f:a5:d4:b7:45: 13:c8:b8:26:fc:98:80:23:d0:c1:4d:86:5c:bc:a4:db:ff:c6: 7e:17:6e:c5:86:c2:5f:a6:b1:fb:87:b5:63:d0:84:2c:b6:61: 09:f7:1b:07:95:67:b1:d3:04:ca:43:1e:a4:5f:f2:16:09:3d: fa:7c:94:af:87:8b:f6:a9:22:51:ce:ea:b4:da:be:ce:9a:ff: e5:09:8f:a2:4f:f8:5c:44:11:3b:a3:05:46:1c:c8:7d:01:fc: 49:65:a5:20:67:4c:bc:85:17:9d:d7:82:3a:fb:b9:8e:0d:19: b4:9b:2f:4b:c5:3a:c8:be:9f:52:d1:fb:32:0a:3c:a3:2e:77: 5b:f8:42:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJZHX4wbhuR3Y6z67lHIrpkdUT5EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTZFQzM1Q0ZDMjQ5M0EzQTc5RENENTlEMUMxREJBRkIy RTc0Mjc5MzAeFw0yNjA5MTAxMzQzNTZaFw0yNjA5MTExNjMxNTZaMDMxMTAvBgNV BAMTKEUxNjAwRkJBOEZGN0M4REI5NTg3Mjk5QTdFQ0QwRjNDRUJEOTk3NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRdmTgjr1t4K73LHm9CJoX0UMq UeuwR1KGJM5bKVuvkuMKjiKVUq3CpElVBVQR9x9Hp2DhlQsAXRrgjLcWNWKXxTXs vdAHgfxIB1za3Vz/vWH945T2bP/7L+gsdkY6RlLr4UVU5FRrUcAajK/L7v1vn+4F UDxNIwAmF1Lz+H8yPCZitQTNcqyKAXjRquLGiHg9HZgb6F7UZxVeqo/6B6S2gXFf wuSCzSbznjCIJsDVGPAbVEWVTYPjfaWrwvq2LOmTrDCLSfoFr0LYtpB6WZ0ITTws bIyvO0o60qGWjFDdSpGy5byqrrAQO2+/drmjpelmVWbPMyNwb/NUwCOqcxBRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4WAPuo/3yNuVhymafs0PPOvZl0AwHwYDVR0j BBgwFoAU5uw1z8JJOjp53NWdHB26+y50J5MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGY1ZDM2NGEtZGEwYi00NTQwLTkzNDktNTkzMGJkNzI1Y2UzLzAvRTZFQzM1Q0ZD MjQ5M0EzQTc5RENENTlEMUMxREJBRkIyRTc0Mjc5My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNkVDMzVDRkMyNDkzQTNBNzlEQ0Q1OUQxQzFEQkFGQjJFNzQy NzkzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGY1ZDM2NGEtZGEwYi00NTQwLTkz NDktNTkzMGJkNzI1Y2UzLzAvRTZFQzM1Q0ZDMjQ5M0EzQTc5RENENTlEMUMxREJB RkIyRTc0Mjc5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG1c89RHgRq+iQurD4qwdUSk5sHvBkZdchwX UYsrGovGuh3iZPXqU/c28Nw6/L0LYW23yn4GrStCPtKydpoK3O7aOGRqR462vNwt 02o/IGC/H6RUkoU54t6ofelPCi741wUWUxZLNS3SrdrxseOvNwtF4/XApfvCrRCP pdS3RRPIuCb8mIAj0MFNhly8pNv/xn4XbsWGwl+msfuHtWPQhCy2YQn3GweVZ7HT BMpDHqRf8hYJPfp8lK+Hi/apIlHO6rTavs6a/+UJj6JP+FxEETujBUYcyH0B/Ell pSBnTLyFF53Xgjr7uY4NGbSbL0vFOsi+n1LR+zIKPKMud1v4QvQ= -----END CERTIFICATE-----Generated at Fri Sep 11 09:53:33 2026 by rpki-client