$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft File: E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft (raw, json) Hash identifier: ncinJR7fZpvZFPASxVp2ylzk+l22R7L2zRM98lXMM6s= Subject key identifier: 7C:43:61:B2:49:D3:DA:F8:40:A1:E7:55:14:44:50:3A:6A:38:E6:6D Authority key identifier: E5:04:3A:05:3B:BA:5B:BD:65:F1:17:C3:80:A8:E5:ED:BB:FB:E9:6A Certificate issuer: /CN=E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A Certificate serial: 7A825CF7AFAB17AF7B2C4D6AE4E58F43C8776CBE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 20:54:49 +0000 Manifest this update: Wed 16 Sep 2026 20:49:49 +0000 Manifest next update: Fri 18 Sep 2026 00:50:49 +0000 Files and hashes: 1: 3136302e3138372e3133392e302f32342d3234203d3e20313533313232.roa (hash: mmr69bHLezkQuiDZandeSB0qYXcAYeWx1GHP/ifPRTA=) 2: E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.crl (hash: /FejRH89BbAMjYfzfkMuPBG0iX6FAMFGUTmIeoPuViM=) 3: 3136302e3138372e3133382e302f32342d3234203d3e20313533313232.roa (hash: is5WdfvUY1KRmUVaEDtXvqlI2WCzItjy85jNK7qc29s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.crl rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 00:50:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:82:5c:f7:af:ab:17:af:7b:2c:4d:6a:e4:e5:8f:43:c8:77:6c:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A Validity Not Before: Sep 16 20:49:49 2026 GMT Not After : Sep 18 00:50:49 2026 GMT Subject: CN=7C4361B249D3DAF840A1E7551444503A6A38E66D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e5:5d:47:e3:20:0e:c4:bb:f5:0f:2a:a5:1d: a2:87:3c:e8:2e:af:3b:d4:4c:6b:7f:a4:41:46:de: 4f:b6:ec:e2:45:57:2c:9b:de:4d:1e:5f:85:99:15: f2:bc:85:a8:65:7a:85:78:bb:ad:50:49:8e:82:b3: 79:82:c6:62:f1:e2:f2:d4:da:3b:72:76:35:fb:e5: 44:5c:35:cb:63:7c:71:96:5d:56:32:2e:fc:ea:47: 43:21:7f:7e:58:7d:db:dc:31:f5:87:91:94:d4:82: a0:7d:ec:30:cc:ec:be:b9:56:99:bf:7c:9e:ee:17: 7d:09:30:d7:ac:0d:73:cf:4b:e2:a2:3c:8d:53:c3: 9d:3a:07:25:5a:b8:56:25:4e:2e:13:ae:c8:5c:11: c6:30:a4:e5:63:ba:97:b7:7b:39:48:59:ae:94:34: 23:26:5d:ce:62:24:b0:8c:5b:a4:f5:a6:6e:c6:c6: be:71:eb:ff:ee:78:28:4c:a4:f0:16:0c:39:c3:43: 4c:ca:0c:11:de:9a:b3:09:5c:f7:7b:e1:00:28:a0: bc:3d:0b:0d:b8:40:3b:88:ce:e6:82:50:6f:d2:0f: 20:4a:d1:e0:d1:72:52:f9:a6:ca:de:79:79:a4:4b: 5c:dc:65:3b:2d:3a:e9:fd:b3:ad:d2:cf:ca:b9:45: 72:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:43:61:B2:49:D3:DA:F8:40:A1:E7:55:14:44:50:3A:6A:38:E6:6D X509v3 Authority Key Identifier: keyid:E5:04:3A:05:3B:BA:5B:BD:65:F1:17:C3:80:A8:E5:ED:BB:FB:E9:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:d2:b0:33:40:70:44:48:6c:fe:5e:f3:69:e1:08:b7:18:8e: 65:ed:06:32:83:b4:84:d5:18:58:50:16:13:98:21:f9:f4:1c: e0:7c:33:77:83:cd:e3:03:42:8b:77:40:98:ca:b5:6f:d0:82: 42:20:4c:b9:14:55:e8:17:8a:58:52:b7:f9:47:16:1b:80:38: 4a:c2:0a:27:33:75:d6:e2:7c:70:68:2f:16:af:ff:66:9c:64: b7:42:60:72:71:cb:93:85:72:eb:73:fe:98:ac:60:61:9a:4d: 4d:e4:6f:37:a0:b1:b3:d2:99:45:eb:fa:e9:bb:da:ac:55:e7: 2a:58:5d:3e:70:09:e0:d8:45:f0:54:89:86:e8:46:1b:2a:e0: 54:ab:38:df:ee:14:5a:9b:67:da:d1:d6:81:c6:71:e2:ef:67: 84:b3:14:9c:28:a3:9e:39:c8:09:3c:a1:11:04:8a:13:01:9d: 69:52:40:de:f1:6a:73:cd:7a:f4:87:36:8d:4d:e6:0a:1a:e8: 60:6c:23:e1:d8:c0:0d:6a:44:2e:1d:d1:17:67:f2:d8:45:af: 90:d5:07:aa:31:07:87:ab:b1:2c:38:24:2d:fb:0e:77:e8:c1: 88:87:f8:9a:54:8d:65:2a:10:e4:db:8b:89:20:b4:ff:67:98: b3:a4:0a:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeoJc96+rF697LE1q5OWPQ8h3bL4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTUwNDNBMDUzQkJBNUJCRDY1RjExN0MzODBBOEU1RURC QkZCRTk2QTAeFw0yNjA5MTYyMDQ5NDlaFw0yNjA5MTgwMDUwNDlaMDMxMTAvBgNV BAMTKDdDNDM2MUIyNDlEM0RBRjg0MEExRTc1NTE0NDQ1MDNBNkEzOEU2NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB5V1H4yAOxLv1DyqlHaKHPOgu rzvUTGt/pEFG3k+27OJFVyyb3k0eX4WZFfK8hahleoV4u61QSY6Cs3mCxmLx4vLU 2jtydjX75URcNctjfHGWXVYyLvzqR0Mhf35YfdvcMfWHkZTUgqB97DDM7L65Vpm/ fJ7uF30JMNesDXPPS+KiPI1Tw506ByVauFYlTi4TrshcEcYwpOVjupe3ezlIWa6U NCMmXc5iJLCMW6T1pm7Gxr5x6//ueChMpPAWDDnDQ0zKDBHemrMJXPd74QAooLw9 Cw24QDuIzuaCUG/SDyBK0eDRclL5psreeXmkS1zcZTstOun9s63Sz8q5RXKTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfENhsknT2vhAoedVFERQOmo45m0wHwYDVR0j BBgwFoAU5QQ6BTu6W71l8RfDgKjl7bv76WowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQyMmY2NDktOTk2OC00OTVkLWJkZjEtN2Q3NjI1NmRhYWQ1LzAvRTUwNDNBMDUz QkJBNUJCRDY1RjExN0MzODBBOEU1RURCQkZCRTk2QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FNTA0M0EwNTNCQkE1QkJENjVGMTE3QzM4MEE4RTVFREJCRkJF OTZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQyMmY2NDktOTk2OC00OTVkLWJk ZjEtN2Q3NjI1NmRhYWQ1LzAvRTUwNDNBMDUzQkJBNUJCRDY1RjExN0MzODBBOEU1 RURCQkZCRTk2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJDSsDNAcERIbP5e82nhCLcYjmXtBjKDtITV GFhQFhOYIfn0HOB8M3eDzeMDQot3QJjKtW/QgkIgTLkUVegXilhSt/lHFhuAOErC CiczddbifHBoLxav/2acZLdCYHJxy5OFcutz/pisYGGaTU3kbzegsbPSmUXr+um7 2qxV5ypYXT5wCeDYRfBUiYboRhsq4FSrON/uFFqbZ9rR1oHGceLvZ4SzFJwoo545 yAk8oREEihMBnWlSQN7xanPNevSHNo1N5goa6GBsI+HYwA1qRC4d0Rdn8thFr5DV B6oxB4ersSw4JC37DnfowYiH+JpUjWUqEOTbi4kgtP9nmLOkCic= -----END CERTIFICATE-----Generated at Thu Sep 17 14:46:10 2026 by rpki-client