$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.mft File: E37B9DE76B8369C86CBDD85F17B4B08DA3903912.mft (raw, json) Hash identifier: USJiRBNvUgQ7lNlnDvAa1XYHTHeOvl7IVeA4OGRITcI= Subject key identifier: FB:7F:09:0A:B1:0C:B7:D9:71:7D:7A:36:64:04:B8:5A:2A:7D:05:F3 Authority key identifier: E3:7B:9D:E7:6B:83:69:C8:6C:BD:D8:5F:17:B4:B0:8D:A3:90:39:12 Certificate issuer: /CN=E37B9DE76B8369C86CBDD85F17B4B08DA3903912 Certificate serial: 6F285653F5AED5E63BFA17B3CF36E08A4EFF8084 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.mft Manifest number: E9 Signing time: Sat 24 Oct 2026 12:19:12 +0000 Manifest this update: Sat 24 Oct 2026 12:14:12 +0000 Manifest next update: Sun 25 Oct 2026 12:48:12 +0000 Files and hashes: 1: 3230332e3132332e36322e302f32342d3234203d3e203338373535.roa (hash: rS0I7oveJtn+l4aAAzlWodrD1fslAxWP3f3cXLvaPIY=) 2: 3230332e3132332e36302e302f32342d3234203d3e203338373535.roa (hash: oSx0cFa1nsipfiH0pkhplDWMeAxUpXV7UZUBLF8bNIo=) 3: 3230332e3132332e36312e302f32342d3234203d3e203338373535.roa (hash: WdpYi9xOJp2Ik1RGOa6PotA1dBwWjL6rALxGb9WjneQ=) 4: 3230332e3132332e36332e302f32342d3234203d3e203338373535.roa (hash: 8H0ycrYvaT3pEUwMuUYMPkeb6+nIJfK2o58CvS7laFE=) 5: 323030313a6466353a336530303a3a2f34382d3438203d3e203338373535.roa (hash: n2lJ9bzcnUw6O+w0adArBpP91Kujz+/33ven90vG4LQ=) 6: 3230332e3132332e36322e302f32332d3234203d3e203338373535.roa (hash: D9MoAcvsSp+WiO9dOaWrzis15LUcy+CINQir9MZwMpg=) 7: 3230332e3132332e36302e302f32332d3233203d3e203338373535.roa (hash: PQRif44rE/vHl6KI352lV/5EM+qmOZyEEJRR83eHyBI=) 8: 3230332e3132332e36302e302f32322d3232203d3e203338373535.roa (hash: gmD9ajpsyadNWLNIYrlzTIV+UYw18CE56nZqbLaELis=) 9: E37B9DE76B8369C86CBDD85F17B4B08DA3903912.crl (hash: 0h+xNJuwFxVb1pNRB3N6EQs9jEgOVoXHHasRvMs6BZc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.crl rsync://rpki-rsync.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:28:56:53:f5:ae:d5:e6:3b:fa:17:b3:cf:36:e0:8a:4e:ff:80:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E37B9DE76B8369C86CBDD85F17B4B08DA3903912 Validity Not Before: Oct 24 12:14:12 2026 GMT Not After : Oct 25 12:48:12 2026 GMT Subject: CN=FB7F090AB10CB7D9717D7A366404B85A2A7D05F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:83:69:a5:b0:7a:70:ed:48:44:6b:41:ed:30: b4:7f:62:c5:99:20:e8:ec:9d:d8:b1:9f:f7:66:95: 68:37:96:0d:e9:1d:59:d0:8a:8d:2d:4b:51:d7:bf: 8a:fe:49:d2:4b:98:04:1a:08:a7:45:c7:dc:f1:1f: 6f:3c:9f:52:25:9d:6d:af:0f:52:6b:c2:ed:00:3b: 60:45:0e:e8:6d:00:43:37:5b:06:da:e5:96:b0:5b: fc:e0:8a:16:1f:cf:a8:39:4b:04:44:d1:b9:e7:3c: 02:55:34:d7:c6:e9:a9:ba:7a:fb:be:74:fd:ba:3f: 87:4a:38:e3:52:54:e4:75:6a:17:6f:2b:72:a5:f8: f2:02:0c:9e:51:e7:15:38:c0:dc:44:29:e2:de:45: 49:a9:76:3e:ca:be:14:42:b6:30:29:43:e9:23:f6: 2a:71:ea:97:5d:9b:b8:28:76:8e:61:36:09:1c:69: 49:03:50:a7:55:f0:9f:cb:8e:9d:d7:01:a7:ed:97: 5f:d9:48:ed:e1:1f:b9:b0:d1:15:4f:c5:f1:a5:3e: d0:52:72:ac:8c:a2:c2:99:c5:6f:0a:10:e5:38:74: b4:60:33:6a:23:fd:f6:27:d6:06:36:83:1b:5e:f9: 63:2f:4f:fa:da:a7:43:66:ce:10:d5:7d:61:ca:06: a2:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:7F:09:0A:B1:0C:B7:D9:71:7D:7A:36:64:04:B8:5A:2A:7D:05:F3 X509v3 Authority Key Identifier: keyid:E3:7B:9D:E7:6B:83:69:C8:6C:BD:D8:5F:17:B4:B0:8D:A3:90:39:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:6e:3b:20:c0:49:30:f0:21:09:e5:91:30:a6:a9:58:f1:3b: 5f:92:1e:6f:e8:50:07:85:39:6a:cf:1e:31:b6:cc:ef:21:4f: e4:c8:56:9c:15:04:2f:fc:4e:8e:47:76:c6:45:2e:33:63:f6: f8:91:44:04:1e:9d:80:2c:ea:7b:ff:e6:9a:01:1e:20:2c:74: a8:a9:26:8e:ea:f0:e9:5d:0d:e3:ec:01:39:4c:ab:37:b9:0c: 36:34:51:b0:7f:56:cb:21:ce:ef:cb:d8:7b:d0:6c:c9:8f:15: 82:a3:df:18:ea:3b:45:de:c9:6f:cf:eb:26:1e:a5:e9:de:47: b4:cc:d0:a1:ec:7a:a2:0b:62:4a:c6:8c:31:e5:9e:21:4c:51: d7:ec:3f:1e:45:05:c1:9c:59:30:9f:77:45:8a:c8:1b:53:0a: 16:d2:88:10:4e:01:d0:77:40:e4:46:3d:54:b1:07:1a:5e:d7: 03:2c:55:f5:12:8b:b2:f7:d2:17:4c:d8:5f:bc:cf:fa:20:dd: e3:18:87:0f:5b:ae:5e:58:3b:cd:9b:b8:2b:d1:60:fa:09:f5: c1:87:ae:1c:95:9b:5b:89:59:fb:fe:f9:2c:fe:f9:0c:49:2c: 95:2e:53:9a:b7:1d:5c:70:92:dd:93:64:b8:4e:4f:e1:b0:eb: 72:5a:9f:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbyhWU/Wu1eY7+hezzzbgik7/gIQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM3QjlERTc2QjgzNjlDODZDQkREODVGMTdCNEIwOERB MzkwMzkxMjAeFw0yNjEwMjQxMjE0MTJaFw0yNjEwMjUxMjQ4MTJaMDMxMTAvBgNV BAMTKEZCN0YwOTBBQjEwQ0I3RDk3MTdEN0EzNjY0MDRCODVBMkE3RDA1RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyg2mlsHpw7UhEa0HtMLR/YsWZ IOjsndixn/dmlWg3lg3pHVnQio0tS1HXv4r+SdJLmAQaCKdFx9zxH288n1IlnW2v D1Jrwu0AO2BFDuhtAEM3Wwba5ZawW/zgihYfz6g5SwRE0bnnPAJVNNfG6am6evu+ dP26P4dKOONSVOR1ahdvK3Kl+PICDJ5R5xU4wNxEKeLeRUmpdj7KvhRCtjApQ+kj 9ipx6pddm7godo5hNgkcaUkDUKdV8J/Ljp3XAaftl1/ZSO3hH7mw0RVPxfGlPtBS cqyMosKZxW8KEOU4dLRgM2oj/fYn1gY2gxte+WMvT/rap0NmzhDVfWHKBqJlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+38JCrEMt9lxfXo2ZAS4Wip9BfMwHwYDVR0j BBgwFoAU43ud52uDachsvdhfF7SwjaOQORIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWFiMzkwMmItNzQ1OS00ODU0LWE1ZjUtMDlmMTVkOGM4N2QzLzAvRTM3QjlERTc2 QjgzNjlDODZDQkREODVGMTdCNEIwOERBMzkwMzkxMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMzdCOURFNzZCODM2OUM4NkNCREQ4NUYxN0I0QjA4REEzOTAz OTEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWFiMzkwMmItNzQ1OS00ODU0LWE1 ZjUtMDlmMTVkOGM4N2QzLzAvRTM3QjlERTc2QjgzNjlDODZDQkREODVGMTdCNEIw OERBMzkwMzkxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAhuOyDASTDwIQnlkTCmqVjxO1+SHm/oUAeF OWrPHjG2zO8hT+TIVpwVBC/8To5HdsZFLjNj9viRRAQenYAs6nv/5poBHiAsdKip Jo7q8OldDePsATlMqze5DDY0UbB/Vsshzu/L2HvQbMmPFYKj3xjqO0XeyW/P6yYe peneR7TM0KHseqILYkrGjDHlniFMUdfsPx5FBcGcWTCfd0WKyBtTChbSiBBOAdB3 QORGPVSxBxpe1wMsVfUSi7L30hdM2F+8z/og3eMYhw9brl5YO82buCvRYPoJ9cGH rhyVm1uJWfv++Sz++QxJLJUuU5q3HVxwkt2TZLhOT+Gw63Jan34= -----END CERTIFICATE-----Generated at Sat Oct 24 18:10:09 2026 by rpki-client