$ rpki-client -vvvf rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.mft File: E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.mft (raw, json) Hash identifier: kTSyx38qmDPm6CCaxb3d/qBTCjW5a4FF0GNdunFpvZk= Subject key identifier: 02:08:A2:01:1D:08:94:74:61:76:CB:BF:0C:31:D8:00:23:71:D9:29 Authority key identifier: E9:7D:24:06:2E:3E:80:91:38:8E:0E:26:DF:E8:25:A3:AE:0F:5E:C1 Certificate issuer: /CN=E97D24062E3E8091388E0E26DFE825A3AE0F5EC1 Certificate serial: 0AABA440B5BC43FB162C366A57EA644E23C71A2A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.mft Manifest number: E9 Signing time: Sun 25 Oct 2026 07:00:06 +0000 Manifest this update: Sun 25 Oct 2026 06:55:05 +0000 Manifest next update: Mon 26 Oct 2026 08:42:05 +0000 Files and hashes: 1: 3130332e36382e3133362e302f32332d3234203d3e20313335343535.roa (hash: a9SdeOZSphcGVgljZg1tnbLWdBiFIVD0GygHfLT2ZLs=) 2: E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.crl (hash: ikyPJ1EO2+3rf8ZczOZOi2q65XX/Bx+4SqQ3edeITYA=) 3: 3130332e36382e3133372e302f32342d3234203d3e20313335343535.roa (hash: 2Vf+pTFqJv7XrQMn75awWPNpommC6ezf5Mi4NO6m5ug=) 4: 323030313a6466333a313230303a3a2f34382d3438203d3e20313335343535.roa (hash: R27uG9wLK3XnlCddZVxdbbwrtPpS8ZSeb7rGWZG6Ph4=) 5: 3130332e36382e3133362e302f32342d3234203d3e20313335343535.roa (hash: EhQ7R7hv9ww9SVAVibUO5OafRSJMymQa0QNdea7zNE0=) 6: 3130332e36382e3133362e302f32332d3233203d3e203338353131.roa (hash: mf3IPyVMZfES2LPj/qKW1uxRQxXFsgdbVk4fq7bhazg=) 7: 3130332e36382e3133362e302f32342d3234203d3e203338353131.roa (hash: GFz+TTDbnW2nztXcZjgib7laNHpvzTT0hcf+2L3G+7o=) 8: 3130332e36382e3133372e302f32342d3234203d3e203338353131.roa (hash: IBqjxLNXqSTykZaxJEDmSDLPjTO+m3MiFe7W+kVNa1Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.crl rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:ab:a4:40:b5:bc:43:fb:16:2c:36:6a:57:ea:64:4e:23:c7:1a:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E97D24062E3E8091388E0E26DFE825A3AE0F5EC1 Validity Not Before: Oct 25 06:55:05 2026 GMT Not After : Oct 26 08:42:05 2026 GMT Subject: CN=0208A2011D0894746176CBBF0C31D8002371D929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9f:48:35:08:bc:9b:fb:a9:c3:48:d3:08:eb: c5:93:f3:de:d9:7d:01:3d:8a:72:28:d5:d5:56:92: 62:fc:bd:15:66:1d:8f:3e:af:f4:52:10:74:25:86: 38:be:0c:5a:68:b9:09:ac:f6:b1:64:35:7e:3f:61: d9:58:7e:8e:92:b3:98:86:0d:16:2d:1b:b8:e9:dc: b8:c1:20:0b:ef:9c:62:07:0b:ba:61:da:12:fc:c3: 72:ed:0b:43:47:1a:20:f4:0c:36:55:10:80:e9:11: 35:ec:d4:b2:6d:17:30:af:a8:82:64:e2:85:c8:fc: 97:91:25:07:01:7f:1d:5a:19:2a:d0:54:84:ae:bb: b7:c5:d7:7d:07:8c:2b:66:b1:97:ff:31:ec:7a:42: aa:e7:73:b9:50:4c:c5:b9:58:eb:0d:8f:57:a4:68: 9d:75:25:9f:01:31:7c:51:f9:c9:1b:ea:5c:4e:35: 04:e3:01:5a:cc:16:bc:34:65:1d:d2:bd:8f:05:81: 17:e4:3b:85:94:c6:ee:04:4c:9c:3d:93:8f:f5:52: 1d:ef:93:74:13:6f:6d:41:52:fb:dc:6a:8c:c5:61: 7c:73:2c:92:b7:46:0d:74:e5:f3:a7:5c:8f:25:a7: c7:19:cf:8f:09:dd:09:3b:53:47:a3:ab:c8:4f:ef: e6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:08:A2:01:1D:08:94:74:61:76:CB:BF:0C:31:D8:00:23:71:D9:29 X509v3 Authority Key Identifier: keyid:E9:7D:24:06:2E:3E:80:91:38:8E:0E:26:DF:E8:25:A3:AE:0F:5E:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:78:ce:ad:16:38:9b:ce:be:7d:06:e6:3a:b1:b5:1d:6e:e6: 92:8d:fa:87:00:3a:fe:ef:cc:05:7a:77:0a:38:e0:30:3f:5a: 4a:13:fc:26:3b:97:40:87:90:cb:63:6d:28:ae:34:86:2c:94: 90:c4:7c:07:0b:5b:ee:1e:fb:ae:e1:7e:91:76:72:6b:8f:7b: 99:c6:f2:de:2a:96:56:b9:27:e3:43:2f:a1:6c:29:11:97:54: db:b7:34:4f:3b:41:05:76:7d:4e:4a:4a:09:b0:c9:73:60:b6: b6:6b:96:39:95:b4:bb:e7:85:64:98:5f:9d:88:b8:4d:3f:de: 66:00:6c:b9:96:03:93:5f:aa:47:96:11:7b:bb:0b:60:46:95: 81:62:24:27:35:b6:d8:38:63:56:f2:2e:a1:8b:93:e6:4b:2c: 75:c2:d7:1c:86:5b:30:b0:a4:b3:8e:70:c8:b0:fd:b4:19:01: 27:dd:e9:36:d6:55:1b:bc:9f:31:55:74:ed:21:39:58:df:16: 59:01:2b:07:40:c0:05:49:fc:ae:17:54:1c:d4:f8:2c:61:0a: 26:cd:e4:65:94:88:00:49:01:0d:b5:fb:77:89:5f:2b:72:68: 61:6b:3c:55:18:c3:1d:0f:6f:9a:90:89:64:de:97:10:13:1c: cf:e1:8c:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCqukQLW8Q/sWLDZqV+pkTiPHGiowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk3RDI0MDYyRTNFODA5MTM4OEUwRTI2REZFODI1QTNB RTBGNUVDMTAeFw0yNjEwMjUwNjU1MDVaFw0yNjEwMjYwODQyMDVaMDMxMTAvBgNV BAMTKDAyMDhBMjAxMUQwODk0NzQ2MTc2Q0JCRjBDMzFEODAwMjM3MUQ5MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOn0g1CLyb+6nDSNMI68WT897Z fQE9inIo1dVWkmL8vRVmHY8+r/RSEHQlhji+DFpouQms9rFkNX4/YdlYfo6Ss5iG DRYtG7jp3LjBIAvvnGIHC7ph2hL8w3LtC0NHGiD0DDZVEIDpETXs1LJtFzCvqIJk 4oXI/JeRJQcBfx1aGSrQVISuu7fF130HjCtmsZf/Mex6Qqrnc7lQTMW5WOsNj1ek aJ11JZ8BMXxR+ckb6lxONQTjAVrMFrw0ZR3SvY8FgRfkO4WUxu4ETJw9k4/1Uh3v k3QTb21BUvvcaozFYXxzLJK3Rg105fOnXI8lp8cZz48J3Qk7U0ejq8hP7+aFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAgiiAR0IlHRhdsu/DDHYACNx2SkwHwYDVR0j BBgwFoAU6X0kBi4+gJE4jg4m3+glo64PXsEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTNkYzFiMDUtMmE2OS00NWIwLThjNDQtNjI2NzcyMjc2YmQ5LzAvRTk3RDI0MDYy RTNFODA5MTM4OEUwRTI2REZFODI1QTNBRTBGNUVDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOTdEMjQwNjJFM0U4MDkxMzg4RTBFMjZERkU4MjVBM0FFMEY1 RUMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTNkYzFiMDUtMmE2OS00NWIwLThj NDQtNjI2NzcyMjc2YmQ5LzAvRTk3RDI0MDYyRTNFODA5MTM4OEUwRTI2REZFODI1 QTNBRTBGNUVDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALh4zq0WOJvOvn0G5jqxtR1u5pKN+ocAOv7v zAV6dwo44DA/WkoT/CY7l0CHkMtjbSiuNIYslJDEfAcLW+4e+67hfpF2cmuPe5nG 8t4qlla5J+NDL6FsKRGXVNu3NE87QQV2fU5KSgmwyXNgtrZrljmVtLvnhWSYX52I uE0/3mYAbLmWA5NfqkeWEXu7C2BGlYFiJCc1ttg4Y1byLqGLk+ZLLHXC1xyGWzCw pLOOcMiw/bQZASfd6TbWVRu8nzFVdO0hOVjfFlkBKwdAwAVJ/K4XVBzU+CxhCibN 5GWUiABJAQ21+3eJXytyaGFrPFUYwx0Pb5qQiWTelxATHM/hjPs= -----END CERTIFICATE-----Generated at Sun Oct 25 12:36:27 2026 by rpki-client