$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/E1476FC7E4095A3095E47FBC4834D7ECE111F313.mft File: E1476FC7E4095A3095E47FBC4834D7ECE111F313.mft (raw, json) Hash identifier: 292KKsmLAP/w0e+Ghqwq7c0DJ0ljBd5zZCIgfE8YZU8= Subject key identifier: 0F:37:E8:5A:37:1D:EF:4B:D5:0A:9C:7A:EC:5D:51:5B:1C:C0:E7:72 Authority key identifier: E1:47:6F:C7:E4:09:5A:30:95:E4:7F:BC:48:34:D7:EC:E1:11:F3:13 Certificate issuer: /CN=E1476FC7E4095A3095E47FBC4834D7ECE111F313 Certificate serial: 2B9776A73BB5C5F577A6835564AAC5CD0909D73D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1476FC7E4095A3095E47FBC4834D7ECE111F313.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/E1476FC7E4095A3095E47FBC4834D7ECE111F313.mft Manifest number: EB Signing time: Sat 24 Oct 2026 10:57:41 +0000 Manifest this update: Sat 24 Oct 2026 10:52:41 +0000 Manifest next update: Sun 25 Oct 2026 14:20:41 +0000 Files and hashes: 1: 3130332e3138302e3136322e302f32342d3234203d3e20313439333737.roa (hash: +kRo7LiXN7GRQQL/5vawAMwmjkMc/A/ZykmCvCb8Chs=) 2: 3130332e3233302e3234362e302f32342d3234203d3e20313331373735.roa (hash: /1MgccGZfskMTbGr8xqejz+aa0C1YMlfgjpiT2WdsBo=) 3: E1476FC7E4095A3095E47FBC4834D7ECE111F313.crl (hash: QuHtWkK/r/IlPLhomaVLWCDoqlRXX8kPf8FYwWJBtSY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/E1476FC7E4095A3095E47FBC4834D7ECE111F313.crl rsync://rpki-rsync.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/E1476FC7E4095A3095E47FBC4834D7ECE111F313.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1476FC7E4095A3095E47FBC4834D7ECE111F313.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:97:76:a7:3b:b5:c5:f5:77:a6:83:55:64:aa:c5:cd:09:09:d7:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1476FC7E4095A3095E47FBC4834D7ECE111F313 Validity Not Before: Oct 24 10:52:41 2026 GMT Not After : Oct 25 14:20:41 2026 GMT Subject: CN=0F37E85A371DEF4BD50A9C7AEC5D515B1CC0E772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a0:db:f3:03:f1:1b:e0:2d:f8:b5:d4:a2:c0: d4:a0:91:89:e2:2b:7a:58:be:f3:3b:e7:99:82:35: 4a:b0:86:7f:2e:13:d7:27:01:96:d2:3b:6a:d2:ef: ad:4e:e5:59:df:58:64:99:d1:98:36:a3:3d:06:d3: 32:6b:ea:d6:b8:6f:5d:18:86:dc:6b:7e:83:9d:15: 5f:75:a0:46:4a:01:68:ca:dd:a0:50:c8:fd:87:39: d0:5c:50:4a:b9:e2:87:26:6b:ea:05:7b:5e:69:94: d0:a5:86:ff:4e:35:36:12:cc:4d:68:6f:1c:36:f5: aa:8f:ed:48:2c:6c:cd:e6:52:c4:4d:7d:86:46:db: 56:11:17:8d:8d:c6:52:10:f7:f4:1b:68:62:2e:29: f0:40:c2:15:71:6b:f3:94:09:0b:e7:fd:7d:45:e7: 3b:a8:21:8d:84:9d:61:eb:b5:e7:b5:ab:28:33:df: de:0e:4a:71:06:8a:d0:cb:a4:18:f7:11:94:dc:5f: 6c:67:3d:e3:18:db:f7:e0:f6:0a:b2:17:cd:04:4e: e0:04:b7:0e:0a:cb:3c:00:56:6e:f1:2e:78:81:80: 8e:9b:6c:f7:34:b6:5a:75:11:02:63:fb:73:5c:98: 59:fd:71:bb:59:52:e0:1c:7b:b1:8e:e2:e9:d7:8a: 5c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:37:E8:5A:37:1D:EF:4B:D5:0A:9C:7A:EC:5D:51:5B:1C:C0:E7:72 X509v3 Authority Key Identifier: keyid:E1:47:6F:C7:E4:09:5A:30:95:E4:7F:BC:48:34:D7:EC:E1:11:F3:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/E1476FC7E4095A3095E47FBC4834D7ECE111F313.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1476FC7E4095A3095E47FBC4834D7ECE111F313.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/E1476FC7E4095A3095E47FBC4834D7ECE111F313.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:e6:67:89:e1:4c:4c:00:83:90:88:45:2b:ba:9f:c4:89:99: 75:9c:2f:cd:b4:20:4f:bb:f8:06:48:17:80:02:63:f9:94:49: 04:4c:b2:82:2e:aa:06:44:50:80:f5:ee:15:15:92:e8:9c:f9: e3:63:37:74:a6:21:36:bc:fc:71:86:af:32:57:bd:16:99:64: 43:c9:06:6f:4f:d1:d7:c6:b3:e6:b8:ea:c9:70:ac:17:25:8c: e8:37:88:2a:87:97:04:8d:85:cd:cf:29:c0:54:dd:7e:56:10: b1:d4:c0:bd:34:74:4b:0d:02:9d:49:b9:fc:26:60:c2:67:c0: 74:7a:53:ec:47:9e:21:a3:72:60:91:6f:d8:33:23:75:00:d0: 77:c2:43:10:b6:97:ef:83:af:cb:6b:85:f9:43:82:82:70:15: 7b:9a:4d:40:e4:6b:c7:64:6f:1d:88:64:76:98:62:72:bd:7c: 4b:4e:cd:4e:95:9a:9b:6b:5f:16:5b:cf:9e:0b:b6:c2:46:fd: 73:ee:03:d8:b6:af:85:d9:b0:2a:49:3a:c0:c1:dc:61:b2:ac: 4c:38:59:f2:31:48:1d:aa:92:1c:b2:de:65:8d:10:b3:22:94: 0b:46:08:dd:99:94:3e:d3:f8:40:b4:81:65:02:10:0d:e6:4a: 46:cb:ea:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK5d2pzu1xfV3poNVZKrFzQkJ1z0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE0NzZGQzdFNDA5NUEzMDk1RTQ3RkJDNDgzNEQ3RUNF MTExRjMxMzAeFw0yNjEwMjQxMDUyNDFaFw0yNjEwMjUxNDIwNDFaMDMxMTAvBgNV BAMTKDBGMzdFODVBMzcxREVGNEJENTBBOUM3QUVDNUQ1MTVCMUNDMEU3NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+oNvzA/Eb4C34tdSiwNSgkYni K3pYvvM755mCNUqwhn8uE9cnAZbSO2rS761O5VnfWGSZ0Zg2oz0G0zJr6ta4b10Y htxrfoOdFV91oEZKAWjK3aBQyP2HOdBcUEq54ocma+oFe15plNClhv9ONTYSzE1o bxw29aqP7UgsbM3mUsRNfYZG21YRF42NxlIQ9/QbaGIuKfBAwhVxa/OUCQvn/X1F 5zuoIY2EnWHrtee1qygz394OSnEGitDLpBj3EZTcX2xnPeMY2/fg9gqyF80ETuAE tw4KyzwAVm7xLniBgI6bbPc0tlp1EQJj+3NcmFn9cbtZUuAce7GO4unXilx1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDzfoWjcd70vVCpx67F1RWxzA53IwHwYDVR0j BBgwFoAU4Udvx+QJWjCV5H+8SDTX7OER8xMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDcwZDYyOWEtOTZlZC00NTFhLTg3ODctMzQxMjIyODJhNzA2LzAvRTE0NzZGQzdF NDA5NUEzMDk1RTQ3RkJDNDgzNEQ3RUNFMTExRjMxMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMTQ3NkZDN0U0MDk1QTMwOTVFNDdGQkM0ODM0RDdFQ0UxMTFG MzEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDcwZDYyOWEtOTZlZC00NTFhLTg3 ODctMzQxMjIyODJhNzA2LzAvRTE0NzZGQzdFNDA5NUEzMDk1RTQ3RkJDNDgzNEQ3 RUNFMTExRjMxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANzmZ4nhTEwAg5CIRSu6n8SJmXWcL820IE+7 +AZIF4ACY/mUSQRMsoIuqgZEUID17hUVkuic+eNjN3SmITa8/HGGrzJXvRaZZEPJ Bm9P0dfGs+a46slwrBcljOg3iCqHlwSNhc3PKcBU3X5WELHUwL00dEsNAp1Jufwm YMJnwHR6U+xHniGjcmCRb9gzI3UA0HfCQxC2l++Dr8trhflDgoJwFXuaTUDka8dk bx2IZHaYYnK9fEtOzU6VmptrXxZbz54LtsJG/XPuA9i2r4XZsCpJOsDB3GGyrEw4 WfIxSB2qkhyy3mWNELMilAtGCN2ZlD7T+EC0gWUCEA3mSkbL6uk= -----END CERTIFICATE-----Generated at Sat Oct 24 20:46:37 2026 by rpki-client