$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.mft File: E1CBE571A9B35E54880250F3C035E3A2C5EA3688.mft (raw, json) Hash identifier: xb0rJo1VNmKVsYztHeMafB+mXDjDtY8+SzYA2dRb8DY= Subject key identifier: D9:D8:3A:4E:EC:E2:CF:A1:E0:09:C3:14:F5:91:AD:17:D2:AE:04:9B Authority key identifier: E1:CB:E5:71:A9:B3:5E:54:88:02:50:F3:C0:35:E3:A2:C5:EA:36:88 Certificate issuer: /CN=E1CBE571A9B35E54880250F3C035E3A2C5EA3688 Certificate serial: 300A0B27D79479F639B0422F462070599E6BE209 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 01:30:23 +0000 Manifest this update: Thu 17 Sep 2026 01:25:23 +0000 Manifest next update: Fri 18 Sep 2026 03:40:23 +0000 Files and hashes: 1: E1CBE571A9B35E54880250F3C035E3A2C5EA3688.crl (hash: qtbA2SFf79LdDqhUGa7Phg/HquYlR+GW6c8+rIJvjgk=) 2: 323430323a343234303a3a2f33322d3332203d3e20313336383830.roa (hash: P320z9KUFpWQ3fuDHhMBAn5wP+R8TtjEv0OQMaUZbt0=) 3: 3130332e3130362e3131322e302f32322d3234203d3e20313336383830.roa (hash: sb2b0BvTmrzj1UZrNAjcbapczR2THwPhTn7rFLIGhwc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.crl rsync://rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 03:40:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:0a:0b:27:d7:94:79:f6:39:b0:42:2f:46:20:70:59:9e:6b:e2:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1CBE571A9B35E54880250F3C035E3A2C5EA3688 Validity Not Before: Sep 17 01:25:23 2026 GMT Not After : Sep 18 03:40:23 2026 GMT Subject: CN=D9D83A4EECE2CFA1E009C314F591AD17D2AE049B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:80:cb:0e:14:18:64:3f:fd:44:13:ba:10:8a: 84:39:4a:60:e1:22:64:4f:18:49:ec:7b:ec:4d:80: 46:bb:a5:20:2a:0b:94:9e:c4:ac:3d:35:c0:e9:b9: 4c:1d:2f:58:a0:00:a5:5e:64:54:35:a5:df:53:bd: f7:00:db:59:9f:e2:19:5a:56:ab:a5:6d:ce:e6:cd: 4f:10:68:c5:56:a4:77:7a:98:fb:8f:f2:99:b0:cd: 05:ab:14:26:e8:c2:f4:80:34:14:81:62:3d:c1:5e: bd:bb:09:09:88:1d:1f:4e:4a:b1:be:0a:40:ba:7b: 64:a6:7c:0b:57:8b:8b:49:ac:98:c7:0d:14:b4:18: d8:f5:9c:05:5c:07:e7:78:c7:84:ac:3f:3e:f4:11: 4a:dd:91:0a:ff:87:62:71:36:ef:6f:d1:1d:49:02: 9f:62:27:e2:f5:79:84:52:ae:a9:de:80:e4:59:51: c5:23:70:b7:8e:6d:12:0b:b1:25:ac:47:c5:34:58: ab:4f:32:a0:5d:23:9b:9f:98:5a:d8:1d:e1:83:bd: 1d:71:9b:87:f1:3a:46:16:92:4f:2f:b8:b7:5d:28: 16:5c:22:5d:b1:50:85:f1:5a:85:bd:5a:ab:ff:26: c5:92:e6:a3:67:c8:73:81:b9:97:66:73:22:ac:95: 06:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:D8:3A:4E:EC:E2:CF:A1:E0:09:C3:14:F5:91:AD:17:D2:AE:04:9B X509v3 Authority Key Identifier: keyid:E1:CB:E5:71:A9:B3:5E:54:88:02:50:F3:C0:35:E3:A2:C5:EA:36:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:ee:2d:00:57:a0:c1:8d:c0:05:f3:a7:c2:40:dc:ad:62:b3: af:53:af:93:b1:43:b1:2c:4d:72:71:e6:0d:aa:09:75:09:bf: 7c:a2:52:2d:2a:09:9e:ef:69:45:f9:48:7a:0f:75:31:9f:8b: 7e:be:0d:58:c4:5c:65:38:3e:bc:49:05:01:bb:22:b1:31:61: 78:5b:f0:6b:06:78:e9:ce:f6:77:23:e4:c7:4f:e7:4c:d7:87: dd:fa:dc:f6:8e:aa:6f:d1:fa:f0:be:47:e6:4c:16:04:20:5b: 05:95:e8:78:c6:67:f7:f4:81:3d:30:08:34:1d:c5:8f:42:0f: 28:0d:42:5d:ed:40:b7:03:99:5c:b8:a9:be:52:e1:d1:53:a1: 47:e4:95:fc:b3:16:c1:60:07:4d:76:9b:cd:f3:51:a5:bd:d8: fa:f7:2b:64:40:53:7b:a8:72:c0:5c:b6:e3:2c:92:ab:6c:54: 6c:1d:56:01:5a:c8:20:c1:cd:aa:ed:42:a0:0a:df:0c:29:bb: 30:13:06:42:bb:45:46:8c:3f:78:fa:84:54:49:24:a6:be:67: b1:aa:aa:5f:74:89:f0:29:bb:69:98:53:fc:01:c7:17:23:e4: c3:f2:4e:6d:05:cb:4e:4a:d2:1d:b6:04:97:99:bb:b9:22:5e: 60:29:b6:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMAoLJ9eUefY5sEIvRiBwWZ5r4gkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFDQkU1NzFBOUIzNUU1NDg4MDI1MEYzQzAzNUUzQTJD NUVBMzY4ODAeFw0yNjA5MTcwMTI1MjNaFw0yNjA5MTgwMzQwMjNaMDMxMTAvBgNV BAMTKEQ5RDgzQTRFRUNFMkNGQTFFMDA5QzMxNEY1OTFBRDE3RDJBRTA0OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIgMsOFBhkP/1EE7oQioQ5SmDh ImRPGEnse+xNgEa7pSAqC5SexKw9NcDpuUwdL1igAKVeZFQ1pd9TvfcA21mf4hla Vqulbc7mzU8QaMVWpHd6mPuP8pmwzQWrFCbowvSANBSBYj3BXr27CQmIHR9OSrG+ CkC6e2SmfAtXi4tJrJjHDRS0GNj1nAVcB+d4x4SsPz70EUrdkQr/h2JxNu9v0R1J Ap9iJ+L1eYRSrqnegORZUcUjcLeObRILsSWsR8U0WKtPMqBdI5ufmFrYHeGDvR1x m4fxOkYWkk8vuLddKBZcIl2xUIXxWoW9Wqv/JsWS5qNnyHOBuZdmcyKslQYLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2dg6Tuziz6HgCcMU9ZGtF9KuBJswHwYDVR0j BBgwFoAU4cvlcamzXlSIAlDzwDXjosXqNogwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmIwN2IzN2MtMDUwNy00OTEzLTgzMjktM2YxNjFiNmFmZjU2LzAvRTFDQkU1NzFB OUIzNUU1NDg4MDI1MEYzQzAzNUUzQTJDNUVBMzY4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMUNCRTU3MUE5QjM1RTU0ODgwMjUwRjNDMDM1RTNBMkM1RUEz Njg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmIwN2IzN2MtMDUwNy00OTEzLTgz MjktM2YxNjFiNmFmZjU2LzAvRTFDQkU1NzFBOUIzNUU1NDg4MDI1MEYzQzAzNUUz QTJDNUVBMzY4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFLuLQBXoMGNwAXzp8JA3K1is69Tr5OxQ7Es TXJx5g2qCXUJv3yiUi0qCZ7vaUX5SHoPdTGfi36+DVjEXGU4PrxJBQG7IrExYXhb 8GsGeOnO9ncj5MdP50zXh9363PaOqm/R+vC+R+ZMFgQgWwWV6HjGZ/f0gT0wCDQd xY9CDygNQl3tQLcDmVy4qb5S4dFToUfklfyzFsFgB012m83zUaW92Pr3K2RAU3uo csBctuMskqtsVGwdVgFayCDBzartQqAK3wwpuzATBkK7RUaMP3j6hFRJJKa+Z7Gq ql90ifApu2mYU/wBxxcj5MPyTm0Fy05K0h22BJeZu7kiXmAptlY= -----END CERTIFICATE-----Generated at Thu Sep 17 16:24:14 2026 by rpki-client