$ rpki-client -vvvf rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.mft File: E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.mft (raw, json) Hash identifier: HV1KczGFpMbOguxzrL250uKa7v/M3ll5z1Z+vT0aATE= Subject key identifier: E1:B2:8F:9D:DC:38:65:86:29:B2:8E:E7:20:91:62:6D:2F:5C:75:DA Authority key identifier: E4:50:1E:7F:DB:C5:71:60:C6:DA:F0:D3:BE:92:FB:D3:B1:32:4A:B9 Certificate issuer: /CN=E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9 Certificate serial: 11F1C07D067488FFC36212126AC95AD3A7C1C983 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.mft Manifest number: B3 Signing time: Sat 12 Sep 2026 17:16:50 +0000 Manifest this update: Sat 12 Sep 2026 17:11:50 +0000 Manifest next update: Sun 13 Sep 2026 19:37:50 +0000 Files and hashes: 1: 3230332e38302e31322e302f32342d3234203d3e203234323034.roa (hash: h2tT8uN39aiQAWcw3BdGn9c/xBwZZb5nFDTta01r+Os=) 2: 3230332e38302e31312e302f32342d3234203d3e203234323034.roa (hash: Z8294bGV1BqnPHshmggOhT7N0D0yzpQrvHBjc8hglpQ=) 3: 3230332e38302e31302e302f32342d3234203d3e203234323034.roa (hash: 1WqLfIO26zKRMIVkfVN7TnPFzjNdo3+29X6uUFeeV7A=) 4: 3230332e38302e392e302f32342d3234203d3e203234323034.roa (hash: ctsdmpn5r5VUvDq4FMqshtD+HVeYmHxVfhu5eYtcuDY=) 5: 3230332e38302e382e302f32342d3234203d3e203234323034.roa (hash: 0Yyl1JFAblaXf8Yb0JCPy2SmOr5D/U6YS39l5rE81q0=) 6: E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.crl (hash: Nuri2bzXtBDstPa9CxEQuepPkhLFFxONJAFCV+yubFE=) 7: 3230332e38302e31342e302f32342d3234203d3e203234323034.roa (hash: 4fpWKKYBY0nnGQkJs0R+bmSKgdPRaMES9zE1728pF2E=) 8: 323430353a386530303a3a2f33322d3332203d3e203234323034.roa (hash: sqWc0G+az7rG1OKeMlrjkBetXfc6E3+lsrE6DeDNqXY=) 9: 3230332e38302e31352e302f32342d3234203d3e203234323034.roa (hash: nN8alNrnuAC96uGmiPX7P2NYnsdlkO57xsP55iMfUwk=) 10: 3230332e38302e31332e302f32342d3234203d3e203234323034.roa (hash: v5fNxHZnP1wOLH3moKO1JSlLZXs/nZienvrRCarDRlk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.crl rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Sep 2026 19:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:f1:c0:7d:06:74:88:ff:c3:62:12:12:6a:c9:5a:d3:a7:c1:c9:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9 Validity Not Before: Sep 12 17:11:50 2026 GMT Not After : Sep 13 19:37:50 2026 GMT Subject: CN=E1B28F9DDC38658629B28EE72091626D2F5C75DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6c:f6:72:f7:9b:83:f9:8d:61:cc:4a:f3:c5: 46:2a:cd:9f:db:c7:1e:91:d2:de:86:14:43:ed:7b: 95:48:f5:2c:a0:89:68:7e:dd:cf:75:12:30:09:5c: 57:ad:ab:88:4d:3e:c1:99:80:d4:5c:9e:a0:6b:1a: e1:1b:a0:fe:33:df:c8:fe:dc:6d:c5:d5:88:bf:61: 3c:62:ad:14:f1:23:ca:d8:a0:a3:f2:09:30:d3:e2: f0:7c:6a:90:dd:ab:5f:1a:b2:71:f2:7e:51:9e:24: 0f:45:63:b6:d8:c1:28:c9:c1:1f:9e:df:b2:ac:25: fb:f0:3f:d2:85:18:ba:a8:ad:51:cf:dd:48:e3:bd: cf:8d:96:91:99:87:40:66:7d:72:21:2a:05:98:6c: 8a:b3:75:d9:94:40:01:4c:c1:97:32:fa:b3:55:9f: 84:a2:9f:05:3d:35:04:5c:5f:dc:d2:5e:18:c7:3a: c5:a8:4d:61:44:c2:50:96:7c:b8:ed:42:b7:30:ca: 68:52:ea:cc:1f:34:76:b2:3f:b7:ff:0a:8c:92:bc: 81:68:d2:9e:86:1c:6b:56:5b:7b:b6:5b:a8:0e:0d: 99:dd:c2:18:07:a9:47:38:c5:b2:36:2f:0d:7c:b2: 17:d0:29:bc:f4:e9:8a:c0:d7:4c:a6:34:24:9b:68: 7e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B2:8F:9D:DC:38:65:86:29:B2:8E:E7:20:91:62:6D:2F:5C:75:DA X509v3 Authority Key Identifier: keyid:E4:50:1E:7F:DB:C5:71:60:C6:DA:F0:D3:BE:92:FB:D3:B1:32:4A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:b9:05:f5:b0:3b:fb:a4:13:05:64:69:d9:ce:14:06:46:80: e8:91:1e:f3:74:63:6d:a8:50:ec:f0:a8:d0:b7:29:33:bb:a7: fb:8d:ab:69:91:2a:22:83:24:02:ef:ea:27:73:ae:3d:96:0b: 32:13:55:42:63:98:ac:46:e2:14:6d:ea:6e:75:c1:0b:fe:d7: c6:80:63:6f:a7:8f:7d:a0:cc:b7:2f:77:f0:a2:aa:da:b0:17: 1a:5a:eb:be:23:68:14:1e:69:f8:6c:e6:e1:db:ee:da:a7:50: 22:28:8b:a7:9f:48:39:ab:2c:eb:c3:06:ec:3a:ec:8a:79:fd: 2f:24:4c:bb:17:57:47:91:aa:3d:2f:e6:d3:8d:e1:30:c0:68: a8:fe:4a:35:48:f8:ee:92:d5:7d:37:c9:81:ad:aa:4e:3d:81: 6a:ce:50:5f:49:04:76:84:0b:eb:c2:27:fd:53:8c:f8:ee:94: 26:ca:0c:2a:25:6d:1b:a8:30:e6:b6:10:9e:42:9a:b8:54:ed: 50:34:9e:b2:83:d6:ac:d5:7c:18:40:e4:90:da:5c:61:67:3e: d3:a1:20:62:bf:c5:1a:76:f6:89:f7:95:2e:03:df:19:24:a3: 61:7f:7c:fb:7b:df:7c:18:7c:99:4c:73:aa:d2:89:1e:57:60: cb:83:15:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEfHAfQZ0iP/DYhISasla06fByYMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ1MDFFN0ZEQkM1NzE2MEM2REFGMEQzQkU5MkZCRDNC MTMyNEFCOTAeFw0yNjA5MTIxNzExNTBaFw0yNjA5MTMxOTM3NTBaMDMxMTAvBgNV BAMTKEUxQjI4RjlEREMzODY1ODYyOUIyOEVFNzIwOTE2MjZEMkY1Qzc1REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCobPZy95uD+Y1hzErzxUYqzZ/b xx6R0t6GFEPte5VI9SygiWh+3c91EjAJXFetq4hNPsGZgNRcnqBrGuEboP4z38j+ 3G3F1Yi/YTxirRTxI8rYoKPyCTDT4vB8apDdq18asnHyflGeJA9FY7bYwSjJwR+e 37KsJfvwP9KFGLqorVHP3Ujjvc+NlpGZh0BmfXIhKgWYbIqzddmUQAFMwZcy+rNV n4SinwU9NQRcX9zSXhjHOsWoTWFEwlCWfLjtQrcwymhS6swfNHayP7f/CoySvIFo 0p6GHGtWW3u2W6gODZndwhgHqUc4xbI2Lw18shfQKbz06YrA10ymNCSbaH41AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4bKPndw4ZYYpso7nIJFibS9cddowHwYDVR0j BBgwFoAU5FAef9vFcWDG2vDTvpL707EySrkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTI0YTkxMDUtOGQyYS00YjM4LWE2YWUtMDVlYWQ2OTcxOWEzLzAvRTQ1MDFFN0ZE QkM1NzE2MEM2REFGMEQzQkU5MkZCRDNCMTMyNEFCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNDUwMUU3RkRCQzU3MTYwQzZEQUYwRDNCRTkyRkJEM0IxMzI0 QUI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTI0YTkxMDUtOGQyYS00YjM4LWE2 YWUtMDVlYWQ2OTcxOWEzLzAvRTQ1MDFFN0ZEQkM1NzE2MEM2REFGMEQzQkU5MkZC RDNCMTMyNEFCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALm5BfWwO/ukEwVkadnOFAZGgOiRHvN0Y22o UOzwqNC3KTO7p/uNq2mRKiKDJALv6idzrj2WCzITVUJjmKxG4hRt6m51wQv+18aA Y2+nj32gzLcvd/CiqtqwFxpa674jaBQeafhs5uHb7tqnUCIoi6efSDmrLOvDBuw6 7Ip5/S8kTLsXV0eRqj0v5tON4TDAaKj+SjVI+O6S1X03yYGtqk49gWrOUF9JBHaE C+vCJ/1TjPjulCbKDColbRuoMOa2EJ5CmrhU7VA0nrKD1qzVfBhA5JDaXGFnPtOh IGK/xRp29on3lS4D3xkko2F/fPt733wYfJlMc6rSiR5XYMuDFXk= -----END CERTIFICATE-----Generated at Sat Sep 12 19:33:58 2026 by rpki-client