$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/E16393AC88E5DBEEB9429903B2E0EB729C677B05.mft File: E16393AC88E5DBEEB9429903B2E0EB729C677B05.mft (raw, json) Hash identifier: zpoMdI7OVFr4RGtNKRgioFWbyTxk9c5tVyVa/zByTsc= Subject key identifier: 86:85:4F:D6:CA:37:10:28:77:A2:7C:89:E5:3B:DC:BF:7D:5D:E0:2F Authority key identifier: E1:63:93:AC:88:E5:DB:EE:B9:42:99:03:B2:E0:EB:72:9C:67:7B:05 Certificate issuer: /CN=E16393AC88E5DBEEB9429903B2E0EB729C677B05 Certificate serial: 0749B12724DDB462CAD0B874780A1896CC25B7AD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E16393AC88E5DBEEB9429903B2E0EB729C677B05.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/E16393AC88E5DBEEB9429903B2E0EB729C677B05.mft Manifest number: EC Signing time: Sun 25 Oct 2026 11:56:20 +0000 Manifest this update: Sun 25 Oct 2026 11:51:20 +0000 Manifest next update: Mon 26 Oct 2026 13:08:20 +0000 Files and hashes: 1: 3130332e3136302e3231322e302f32342d3234203d3e20313430333839.roa (hash: EhNVRNwBN9rmTh1XBPBt7PuHkNC/TzJTTCRJrkNcKrw=) 2: 3130332e3136302e3231332e302f32342d3234203d3e20313430333839.roa (hash: YUN+BY5pcnBVMiCm7rVh9YVL1oMMPlCxBU9cg/9p1D0=) 3: E16393AC88E5DBEEB9429903B2E0EB729C677B05.crl (hash: Zjd8D5qaQomJSmCqbayJ8WaMeXvaAxOqotovHMSTDNQ=) 4: 3130332e3136302e3231322e302f32332d3233203d3e20313430333839.roa (hash: LOf1A+/Ws/h9DMvY/QrE3vs2jRFuJ1lQwAwdpdoNvRc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/E16393AC88E5DBEEB9429903B2E0EB729C677B05.crl rsync://rpki-rsync.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/E16393AC88E5DBEEB9429903B2E0EB729C677B05.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E16393AC88E5DBEEB9429903B2E0EB729C677B05.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:49:b1:27:24:dd:b4:62:ca:d0:b8:74:78:0a:18:96:cc:25:b7:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E16393AC88E5DBEEB9429903B2E0EB729C677B05 Validity Not Before: Oct 25 11:51:20 2026 GMT Not After : Oct 26 13:08:20 2026 GMT Subject: CN=86854FD6CA37102877A27C89E53BDCBF7D5DE02F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5b:ae:04:3e:ad:01:b5:a0:a6:4a:51:da:c8: e5:f5:52:7b:12:96:9e:3b:5e:05:48:97:84:10:38: 75:b0:42:b7:6e:ab:7a:cd:4f:26:57:f9:7d:87:a9: 9a:0d:8d:2f:97:34:fb:b8:b8:bd:e9:e9:ad:39:af: 74:a7:b5:b2:6d:09:c3:0c:15:36:1b:72:a6:e0:78: 1e:6d:46:3f:cf:35:49:26:ac:9e:9c:dc:c5:d3:7a: bd:3b:7a:98:7d:b6:c8:38:81:fc:ea:6f:b9:0b:84: 1f:e7:a9:f1:ad:f9:7e:52:34:31:78:ba:a3:19:ec: 85:b1:54:b7:b8:c5:a7:f6:c8:33:26:27:fd:4d:b1: 41:6b:22:c9:93:9f:e9:e9:67:df:57:6c:4d:58:cf: db:de:9a:91:e0:cf:ca:ab:49:53:56:09:1a:81:15: 4a:e3:27:2e:ee:2b:8d:08:eb:75:68:31:ff:3b:05: 46:16:fc:f5:a5:94:71:bf:b3:c1:bd:3f:02:88:38: 0c:ec:de:c7:ab:c3:92:b9:81:93:6c:cf:57:3e:d5: c2:24:a0:d9:09:fa:66:16:d3:37:7b:54:0b:72:6d: 4a:23:39:01:ef:a2:55:94:41:d2:b5:06:b4:52:ca: a1:8e:ae:dc:b2:8c:66:22:f1:f3:b7:e0:d8:69:d7: e4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:85:4F:D6:CA:37:10:28:77:A2:7C:89:E5:3B:DC:BF:7D:5D:E0:2F X509v3 Authority Key Identifier: keyid:E1:63:93:AC:88:E5:DB:EE:B9:42:99:03:B2:E0:EB:72:9C:67:7B:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/E16393AC88E5DBEEB9429903B2E0EB729C677B05.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E16393AC88E5DBEEB9429903B2E0EB729C677B05.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/E16393AC88E5DBEEB9429903B2E0EB729C677B05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:82:53:6b:51:88:ce:44:d3:97:62:5c:eb:48:e2:41:a2:31: b7:b3:34:00:da:ec:54:66:68:98:89:47:c2:28:fc:19:a3:cb: 70:1f:98:f1:18:f1:ec:49:f5:6d:a8:74:db:fb:d2:72:2c:56: 33:fa:7c:bb:69:b1:9f:2d:c7:2d:41:1b:c0:84:fe:2a:11:4d: 9a:82:d6:df:ad:fe:da:42:70:ec:57:89:25:c0:3a:99:54:f0: 2d:96:3a:a0:30:de:11:09:9d:12:2f:24:a6:79:1b:d4:2e:3a: 25:3b:9a:4d:27:6c:fc:86:ff:5d:79:31:fb:6d:99:51:40:7e: 52:a0:fc:f4:2a:d4:1d:dd:17:61:27:c7:c4:fb:4a:e6:bd:a6: 83:c7:29:74:cb:fc:f7:b9:a5:c5:67:e1:08:0d:74:56:88:cf: 4d:58:11:cb:bf:e7:d4:59:ea:49:3e:34:25:15:e3:42:89:1e: 60:d1:77:15:f8:d7:43:1b:7b:f6:f3:2c:16:4e:3f:91:25:e0: 34:01:db:0e:cc:93:3d:9d:36:6c:da:71:6b:ab:90:6d:69:e0: 0f:59:12:67:69:24:aa:87:96:03:12:1c:78:87:ed:bf:15:a5: 5f:17:50:6c:de:8e:80:52:2d:b9:87:1c:2f:bb:09:ec:63:a7: ba:31:1e:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB0mxJyTdtGLK0Lh0eAoYlswlt60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE2MzkzQUM4OEU1REJFRUI5NDI5OTAzQjJFMEVCNzI5 QzY3N0IwNTAeFw0yNjEwMjUxMTUxMjBaFw0yNjEwMjYxMzA4MjBaMDMxMTAvBgNV BAMTKDg2ODU0RkQ2Q0EzNzEwMjg3N0EyN0M4OUU1M0JEQ0JGN0Q1REUwMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaW64EPq0BtaCmSlHayOX1UnsS lp47XgVIl4QQOHWwQrduq3rNTyZX+X2HqZoNjS+XNPu4uL3p6a05r3SntbJtCcMM FTYbcqbgeB5tRj/PNUkmrJ6c3MXTer07eph9tsg4gfzqb7kLhB/nqfGt+X5SNDF4 uqMZ7IWxVLe4xaf2yDMmJ/1NsUFrIsmTn+npZ99XbE1Yz9vempHgz8qrSVNWCRqB FUrjJy7uK40I63VoMf87BUYW/PWllHG/s8G9PwKIOAzs3serw5K5gZNsz1c+1cIk oNkJ+mYW0zd7VAtybUojOQHvolWUQdK1BrRSyqGOrtyyjGYi8fO34Nhp1+SHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhoVP1so3ECh3onyJ5Tvcv31d4C8wHwYDVR0j BBgwFoAU4WOTrIjl2+65QpkDsuDrcpxnewUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmJlZTFlZTEtYTViNS00YzY0LWJiYmItMjYzNjM1MmRhY2ZjLzAvRTE2MzkzQUM4 OEU1REJFRUI5NDI5OTAzQjJFMEVCNzI5QzY3N0IwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMTYzOTNBQzg4RTVEQkVFQjk0Mjk5MDNCMkUwRUI3MjlDNjc3 QjA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmJlZTFlZTEtYTViNS00YzY0LWJi YmItMjYzNjM1MmRhY2ZjLzAvRTE2MzkzQUM4OEU1REJFRUI5NDI5OTAzQjJFMEVC NzI5QzY3N0IwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAOCU2tRiM5E05diXOtI4kGiMbezNADa7FRm aJiJR8Io/Bmjy3AfmPEY8exJ9W2odNv70nIsVjP6fLtpsZ8txy1BG8CE/ioRTZqC 1t+t/tpCcOxXiSXAOplU8C2WOqAw3hEJnRIvJKZ5G9QuOiU7mk0nbPyG/115Mftt mVFAflKg/PQq1B3dF2Enx8T7Sua9poPHKXTL/Pe5pcVn4QgNdFaIz01YEcu/59RZ 6kk+NCUV40KJHmDRdxX410Mbe/bzLBZOP5El4DQB2w7Mkz2dNmzacWurkG1p4A9Z EmdpJKqHlgMSHHiH7b8VpV8XUGzejoBSLbmHHC+7Cexjp7oxHko= -----END CERTIFICATE-----Generated at Sun Oct 25 20:53:40 2026 by rpki-client