$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.mft File: E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.mft (raw, json) Hash identifier: tFMli7i+UenH4ZcWtfaKBCF7+rbnnMZUsNhBpI7pCJY= Subject key identifier: 83:91:4A:5E:C8:D5:DF:A8:69:DE:3F:90:88:CC:9D:CF:CD:E8:58:2B Authority key identifier: E0:AE:9F:AD:9E:25:90:82:B0:6C:CB:B9:4A:F4:78:F6:B8:61:25:F9 Certificate issuer: /CN=E0AE9FAD9E259082B06CCBB94AF478F6B86125F9 Certificate serial: 290B3E6F34216D3A7345BC09EEBD1625BCEE111A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 06:52:01 +0000 Manifest this update: Thu 17 Sep 2026 06:47:01 +0000 Manifest next update: Fri 18 Sep 2026 07:04:01 +0000 Files and hashes: 1: E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.crl (hash: CFNB+5t65agbGc0gm7JZpnIX0xM069xo1YGWaBvi4a8=) 2: 3130332e3133392e3230372e302f32342d3234203d3e20313530353133.roa (hash: PrnOvop5MQlI3Bsjow/Ci5R1laOpI/zKBTh7ZhHcVKA=) 3: 3130332e3139352e32382e302f32342d3234203d3e20313530353133.roa (hash: q+RRwqPLMgbRcU4CF8v6ceD8xY9lz0UrAi1vn0vplwA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.crl rsync://rpki-rsync.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:04:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:0b:3e:6f:34:21:6d:3a:73:45:bc:09:ee:bd:16:25:bc:ee:11:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0AE9FAD9E259082B06CCBB94AF478F6B86125F9 Validity Not Before: Sep 17 06:47:01 2026 GMT Not After : Sep 18 07:04:01 2026 GMT Subject: CN=83914A5EC8D5DFA869DE3F9088CC9DCFCDE8582B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:58:81:d2:ef:1d:d1:c7:46:14:63:ba:cb:98: df:f5:0e:ed:f1:03:d8:cb:59:e6:36:72:bc:ab:ec: 9a:29:b7:82:57:44:f3:7f:16:26:e8:54:ce:55:f5: f1:7b:9a:75:78:56:63:59:ce:4b:a4:63:0c:a5:31: 45:69:cf:1c:ee:3d:3b:7e:f2:23:d1:17:2d:b4:06: 32:07:10:e5:50:b1:22:e0:b8:5d:9c:44:90:cc:20: b9:dd:61:45:60:df:92:cb:c8:57:20:87:81:91:55: 33:b3:3a:28:24:e4:88:ed:9c:85:94:50:de:61:7f: ee:8e:25:f7:41:34:a4:65:dc:71:e9:95:11:45:8c: 46:75:c9:7b:80:6f:27:a3:38:46:cc:66:48:78:fe: 12:20:db:4b:7b:06:83:d4:d3:37:1b:85:c3:0a:11: a1:06:0d:59:6a:7d:91:9c:56:a7:4f:11:88:4c:93: 84:9d:97:9c:57:c4:a0:29:cd:b7:5f:ff:ef:70:17: 29:77:b4:1f:fe:43:46:6a:39:62:5a:1a:6c:00:ed: 02:09:f7:a2:f1:50:1c:7a:00:d8:10:8e:30:dc:35: a9:93:1d:8d:76:10:94:10:1a:48:e5:ea:e1:ce:44: 05:74:a7:53:a3:8f:c4:c2:d2:80:44:f5:91:6d:b1: fa:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:91:4A:5E:C8:D5:DF:A8:69:DE:3F:90:88:CC:9D:CF:CD:E8:58:2B X509v3 Authority Key Identifier: keyid:E0:AE:9F:AD:9E:25:90:82:B0:6C:CB:B9:4A:F4:78:F6:B8:61:25:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:44:3f:20:35:5e:20:4c:5f:76:f1:b3:f0:c1:4d:2e:5e:ce: 7a:13:d3:2d:35:cd:65:28:f7:6e:89:35:cd:5e:4b:90:57:e6: 4b:b6:fc:c1:63:e4:cf:9b:6f:f0:ec:7f:12:c8:bd:86:0c:9a: 7c:71:4b:9f:3d:66:41:64:aa:d4:91:99:dd:c0:a3:d9:0d:5e: b0:ab:fb:07:ae:cb:87:32:01:b2:25:1f:bc:1b:5b:a6:57:20: 9d:28:05:2a:54:b9:90:e9:9f:b1:5f:63:e7:4a:8e:5c:29:12: 0a:1a:7f:85:b2:7b:d5:bc:80:02:a8:2a:52:71:2c:fd:b4:87: be:a5:3e:7d:8d:f6:ba:e0:32:a0:2f:a4:a4:4e:9f:1f:2b:7e: f8:04:a6:ea:1a:b7:a1:d6:7d:01:91:2d:d8:9f:43:8c:69:46: ee:8c:f9:e0:cd:be:f2:08:d1:9f:97:80:81:72:c4:1c:0d:88: a8:73:2d:c8:a8:11:2c:ca:33:19:d7:ea:cc:1c:b2:53:01:8a: 41:e8:18:64:7f:aa:8a:c3:86:b7:2f:b9:a5:f8:61:a2:b6:4b: f7:a4:35:cf:c6:de:11:55:8b:7d:7d:1f:12:fc:1e:76:31:aa: a7:1b:41:42:53:e6:58:d8:00:21:26:7f:a2:87:35:fb:23:6f: 1c:39:15:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKQs+bzQhbTpzRbwJ7r0WJbzuERowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBBRTlGQUQ5RTI1OTA4MkIwNkNDQkI5NEFGNDc4RjZC ODYxMjVGOTAeFw0yNjA5MTcwNjQ3MDFaFw0yNjA5MTgwNzA0MDFaMDMxMTAvBgNV BAMTKDgzOTE0QTVFQzhENURGQTg2OURFM0Y5MDg4Q0M5RENGQ0RFODU4MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuWIHS7x3Rx0YUY7rLmN/1Du3x A9jLWeY2cryr7Jopt4JXRPN/FiboVM5V9fF7mnV4VmNZzkukYwylMUVpzxzuPTt+ 8iPRFy20BjIHEOVQsSLguF2cRJDMILndYUVg35LLyFcgh4GRVTOzOigk5IjtnIWU UN5hf+6OJfdBNKRl3HHplRFFjEZ1yXuAbyejOEbMZkh4/hIg20t7BoPU0zcbhcMK EaEGDVlqfZGcVqdPEYhMk4Sdl5xXxKApzbdf/+9wFyl3tB/+Q0ZqOWJaGmwA7QIJ 96LxUBx6ANgQjjDcNamTHY12EJQQGkjl6uHORAV0p1Ojj8TC0oBE9ZFtsfo3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg5FKXsjV36hp3j+QiMydz83oWCswHwYDVR0j BBgwFoAU4K6frZ4lkIKwbMu5SvR49rhhJfkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjQ5MTJjOWItZGNlNC00MGU2LTk1ODgtZDdjYThjMzdlZjRkLzAvRTBBRTlGQUQ5 RTI1OTA4MkIwNkNDQkI5NEFGNDc4RjZCODYxMjVGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMEFFOUZBRDlFMjU5MDgyQjA2Q0NCQjk0QUY0NzhGNkI4NjEy NUY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjQ5MTJjOWItZGNlNC00MGU2LTk1 ODgtZDdjYThjMzdlZjRkLzAvRTBBRTlGQUQ5RTI1OTA4MkIwNkNDQkI5NEFGNDc4 RjZCODYxMjVGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADdEPyA1XiBMX3bxs/DBTS5eznoT0y01zWUo 926JNc1eS5BX5ku2/MFj5M+bb/DsfxLIvYYMmnxxS589ZkFkqtSRmd3Ao9kNXrCr +weuy4cyAbIlH7wbW6ZXIJ0oBSpUuZDpn7FfY+dKjlwpEgoaf4Wye9W8gAKoKlJx LP20h76lPn2N9rrgMqAvpKROnx8rfvgEpuoat6HWfQGRLdifQ4xpRu6M+eDNvvII 0Z+XgIFyxBwNiKhzLcioESzKMxnX6swcslMBikHoGGR/qorDhrcvuaX4YaK2S/ek Nc/G3hFVi319HxL8HnYxqqcbQUJT5ljYACEmf6KHNfsjbxw5FTo= -----END CERTIFICATE-----Generated at Thu Sep 17 12:40:46 2026 by rpki-client