$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.mft File: E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.mft (raw, json) Hash identifier: SKL+0g5cwrUl3NtGiT8Uf5+NDWV0hPa7FpMxYpYi1R0= Subject key identifier: D0:85:96:25:8E:1B:31:AB:A9:8A:1F:97:DA:AF:E1:5C:D7:91:DA:12 Authority key identifier: E4:02:A8:FE:9D:6E:6B:AD:DC:D9:41:4C:45:24:F9:F8:9F:C2:54:DB Certificate issuer: /CN=E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB Certificate serial: 42032D2AF7DBA539EA40A30F29CA3683C32E6A94 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.mft Manifest number: EA Signing time: Sat 24 Oct 2026 08:55:04 +0000 Manifest this update: Sat 24 Oct 2026 08:50:04 +0000 Manifest next update: Sun 25 Oct 2026 09:29:04 +0000 Files and hashes: 1: 3130332e3232332e302e302f32342d3234203d3e20313335343435.roa (hash: iYftcLRKhDFwawem+AQ5tjTifMhYvu82o/DYOa4xV1U=) 2: 3130332e3232332e322e302f32342d3234203d3e20313335343435.roa (hash: 3GTJ9ASFLrepqsCMecKCsjwg26cUhjn00ThNjhDZtps=) 3: 3130332e3232332e312e302f32342d3234203d3e20313335343435.roa (hash: OK3H4Npcn6XOhpp51geVZ4Jq+X5gSteni67GraMNgZs=) 4: 3130332e3232332e322e302f32332d3233203d3e20313335343435.roa (hash: JI1QrINQKw3fjadw40FIbP+TVzkcpzaoVCD4jvQ/h04=) 5: 3130332e3232332e302e302f32322d3232203d3e20313335343435.roa (hash: ySpYECTdEpPiYQXcAvE+ScNUXGwRe6ThRPZGhAvNk2s=) 6: E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.crl (hash: ClA1ayOiU2wQhaR6743FE+FiUZQ1dJ0chdrvRfkM3S8=) 7: 3130332e3232332e332e302f32342d3234203d3e20313335343435.roa (hash: QnST8vjK8bFCBoNsPJhM5VHBI9hMH1UeN2aqQjcNdSs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.crl rsync://rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 09:29:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:03:2d:2a:f7:db:a5:39:ea:40:a3:0f:29:ca:36:83:c3:2e:6a:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB Validity Not Before: Oct 24 08:50:04 2026 GMT Not After : Oct 25 09:29:04 2026 GMT Subject: CN=D08596258E1B31ABA98A1F97DAAFE15CD791DA12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c8:3b:7b:10:f7:15:a2:2a:fd:43:df:b7:eb: 45:c3:d7:15:37:b0:ce:af:d0:9c:42:d3:38:0a:07: 95:7e:78:f7:81:e9:51:bb:4a:ed:28:da:f4:31:a1: ff:ec:9b:81:bd:b5:6a:f7:66:1e:97:a7:b2:52:1d: 0c:cc:81:58:db:7c:85:cf:6e:05:87:66:72:4e:ee: cf:37:44:90:4d:a8:be:a2:4c:7f:a5:d3:f9:16:e5: 4b:36:13:fa:22:53:44:24:69:eb:a1:9d:95:de:56: 41:76:f9:c9:a0:02:9c:18:ea:29:f4:10:a2:22:be: 0d:db:a3:f2:29:e0:fb:2f:f6:3f:a9:1f:96:ac:2f: b5:f0:a4:e7:10:d0:7b:df:70:24:b0:76:c6:f2:4c: 14:28:25:74:99:47:8e:1e:c6:b1:0e:ef:aa:e1:5f: 69:75:77:6e:d1:87:47:ff:55:1e:b0:29:ff:4c:0d: 08:a2:74:40:54:90:af:26:8c:a4:5a:8d:c4:f2:20: a3:c6:4d:68:5b:8d:98:52:db:72:da:ac:2f:38:74: ca:51:ce:22:c0:e6:bd:2d:52:d3:d4:69:3b:30:06: 1d:c7:89:1d:e4:2c:f8:57:de:57:cc:b3:2c:d1:c6: b5:33:bb:29:b6:c5:b3:f0:98:0d:d7:56:45:75:8c: 9b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:85:96:25:8E:1B:31:AB:A9:8A:1F:97:DA:AF:E1:5C:D7:91:DA:12 X509v3 Authority Key Identifier: keyid:E4:02:A8:FE:9D:6E:6B:AD:DC:D9:41:4C:45:24:F9:F8:9F:C2:54:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:44:52:ec:3f:ff:3b:3a:e0:67:67:cd:df:70:e0:81:26:3f: dc:51:3b:75:9f:19:99:8a:c0:7e:96:40:eb:89:3c:90:d8:8e: 18:fb:77:18:42:ff:82:6e:d4:34:d5:0c:64:76:10:50:ef:c2: 55:d0:95:cc:66:51:14:ea:7d:fb:0a:15:1e:50:21:3e:f7:28: 73:63:f8:e0:56:c4:c1:05:c2:46:bd:29:cf:7a:52:9c:d2:f6: c6:5e:ee:45:17:af:8a:d5:d6:ac:05:3b:0e:04:95:95:07:c7: d8:f3:d1:54:7a:8f:b6:7b:90:ee:a7:05:29:c1:8b:ee:4e:78: d0:38:33:16:11:bb:d3:9c:48:15:39:66:59:f6:a7:ae:10:06: 50:77:3c:45:55:3f:28:0b:a1:e9:28:46:a3:60:15:8d:69:28: 9c:14:14:64:8d:65:3d:53:87:5d:a8:d2:59:f3:11:3c:07:6e: 92:a9:20:99:1b:00:fe:32:ad:7e:f2:d4:f9:f2:9e:70:e5:41: 39:51:a1:67:e7:6b:01:3e:5d:8b:5c:93:c2:a4:c6:ef:f8:61: 40:ea:83:5e:29:62:9e:f0:24:3b:a2:92:a8:9a:11:63:89:5e: 9e:a5:be:66:f3:b0:1a:c2:6f:bb:02:61:05:c2:4e:59:9f:76: f8:96:a1:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQgMtKvfbpTnqQKMPKco2g8MuapQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQwMkE4RkU5RDZFNkJBRERDRDk0MTRDNDUyNEY5Rjg5 RkMyNTREQjAeFw0yNjEwMjQwODUwMDRaFw0yNjEwMjUwOTI5MDRaMDMxMTAvBgNV BAMTKEQwODU5NjI1OEUxQjMxQUJBOThBMUY5N0RBQUZFMTVDRDc5MURBMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuyDt7EPcVoir9Q9+360XD1xU3 sM6v0JxC0zgKB5V+ePeB6VG7Su0o2vQxof/sm4G9tWr3Zh6Xp7JSHQzMgVjbfIXP bgWHZnJO7s83RJBNqL6iTH+l0/kW5Us2E/oiU0QkaeuhnZXeVkF2+cmgApwY6in0 EKIivg3bo/Ip4Psv9j+pH5asL7XwpOcQ0HvfcCSwdsbyTBQoJXSZR44exrEO76rh X2l1d27Rh0f/VR6wKf9MDQiidEBUkK8mjKRajcTyIKPGTWhbjZhS23LarC84dMpR ziLA5r0tUtPUaTswBh3HiR3kLPhX3lfMsyzRxrUzuym2xbPwmA3XVkV1jJslAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0IWWJY4bMaupih+X2q/hXNeR2hIwHwYDVR0j BBgwFoAU5AKo/p1ua63c2UFMRST5+J/CVNswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjc1NDViODUtOTI3NC00NzBhLWFkMjctMjQ2OWU5ZDE1NWJjLzAvRTQwMkE4RkU5 RDZFNkJBRERDRDk0MTRDNDUyNEY5Rjg5RkMyNTREQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNDAyQThGRTlENkU2QkFERENEOTQxNEM0NTI0RjlGODlGQzI1 NERCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjc1NDViODUtOTI3NC00NzBhLWFk MjctMjQ2OWU5ZDE1NWJjLzAvRTQwMkE4RkU5RDZFNkJBRERDRDk0MTRDNDUyNEY5 Rjg5RkMyNTREQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANNEUuw//zs64Gdnzd9w4IEmP9xRO3WfGZmK wH6WQOuJPJDYjhj7dxhC/4Ju1DTVDGR2EFDvwlXQlcxmURTqffsKFR5QIT73KHNj +OBWxMEFwka9Kc96UpzS9sZe7kUXr4rV1qwFOw4ElZUHx9jz0VR6j7Z7kO6nBSnB i+5OeNA4MxYRu9OcSBU5Zln2p64QBlB3PEVVPygLoekoRqNgFY1pKJwUFGSNZT1T h12o0lnzETwHbpKpIJkbAP4yrX7y1PnynnDlQTlRoWfnawE+XYtck8Kkxu/4YUDq g14pYp7wJDuikqiaEWOJXp6lvmbzsBrCb7sCYQXCTlmfdviWoZM= -----END CERTIFICATE-----Generated at Sat Oct 24 20:43:44 2026 by rpki-client