$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.mft File: E4FD11A334BDCA34C2EAB964DCA226B6942B929D.mft (raw, json) Hash identifier: 9hplbqv5H+fcjVyebPwaIWaDnxqUNVvaiRck08qAs5s= Subject key identifier: 06:F8:04:7C:0B:29:E9:3B:C4:18:A3:F3:5D:4B:F6:1C:ED:19:1D:EC Authority key identifier: E4:FD:11:A3:34:BD:CA:34:C2:EA:B9:64:DC:A2:26:B6:94:2B:92:9D Certificate issuer: /CN=E4FD11A334BDCA34C2EAB964DCA226B6942B929D Certificate serial: 53C33DE7D24C5A7DF1A5F18837F8AC220EF407D1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.mft Manifest number: E9 Signing time: Fri 23 Oct 2026 21:25:50 +0000 Manifest this update: Fri 23 Oct 2026 21:20:50 +0000 Manifest next update: Sat 24 Oct 2026 23:37:50 +0000 Files and hashes: 1: 3130332e32392e3137312e302f32342d3234203d3e203538333738.roa (hash: Bo3J9bvJrG5KvK6zISNrunddpueB7wbNcCGt/02SR80=) 2: E4FD11A334BDCA34C2EAB964DCA226B6942B929D.crl (hash: +VKETWOMzd8zZcEgLIPXlmXxhoJ/M9hVnMrQGsN4HD4=) 3: 3130332e32392e3137302e302f32342d3234203d3e203536323631.roa (hash: O1jacwkaM82L67sDrz7lXelPyRl9Rz1j5J3jiVwgpPw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.crl rsync://rpki-rsync.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Oct 2026 23:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:c3:3d:e7:d2:4c:5a:7d:f1:a5:f1:88:37:f8:ac:22:0e:f4:07:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4FD11A334BDCA34C2EAB964DCA226B6942B929D Validity Not Before: Oct 23 21:20:50 2026 GMT Not After : Oct 24 23:37:50 2026 GMT Subject: CN=06F8047C0B29E93BC418A3F35D4BF61CED191DEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b9:23:6b:72:87:07:36:34:77:b9:bc:b4:c7: 77:e5:33:b1:5c:24:08:cc:eb:37:be:3f:e5:bd:89: f7:f9:c5:05:28:33:22:cb:f0:ed:56:a5:81:73:35: d5:63:97:46:34:23:44:61:55:0a:a3:87:d1:cb:82: a8:2b:2b:ea:4e:8b:cc:74:d4:ae:c3:b5:d5:cd:8c: fd:0c:37:16:09:89:90:39:51:08:3b:53:d4:28:d2: 8f:f3:19:f8:b9:df:97:da:98:58:39:06:81:9c:45: 7f:bb:e8:ac:6b:ec:a8:f5:1d:9b:1e:e1:ec:8f:63: 5a:36:33:65:68:32:58:82:c3:f4:fa:2a:96:cd:60: 39:d7:47:a1:f9:ed:b2:ba:63:8e:5d:35:5e:ef:00: 3e:e9:32:9a:78:03:ca:d4:98:43:d9:6b:0d:a8:b8: 68:74:7b:54:09:e7:62:fe:46:52:57:3c:ab:16:66: a6:ae:d1:dd:a2:a7:b9:d4:63:49:43:d9:17:56:26: 36:e9:2f:0d:26:d8:42:4e:10:69:51:64:63:c5:35: 8a:d8:83:0f:25:80:10:60:fa:97:1a:50:45:a5:51: c0:a4:df:8d:d1:7d:c2:3f:47:86:d2:72:8d:73:2d: ef:0b:fc:30:4b:87:f0:8c:4f:1b:fc:b6:eb:20:18: a4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:F8:04:7C:0B:29:E9:3B:C4:18:A3:F3:5D:4B:F6:1C:ED:19:1D:EC X509v3 Authority Key Identifier: keyid:E4:FD:11:A3:34:BD:CA:34:C2:EA:B9:64:DC:A2:26:B6:94:2B:92:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:40:58:fc:d9:45:97:df:cb:34:b9:9e:97:79:c1:ff:39:52: b1:03:22:83:31:f4:9b:f3:83:70:74:04:3b:e9:32:ee:d5:ae: e3:e9:38:27:7b:cf:54:29:87:67:87:cc:a5:c3:05:35:b9:6e: 73:91:66:ac:55:e4:bd:6c:a4:84:48:9b:7c:35:e6:c2:3c:44: df:aa:e0:e3:0f:6a:94:bd:94:db:0b:b6:79:21:bb:28:7e:d5: 20:19:f6:96:22:d8:a2:b6:d4:13:b6:cc:b7:bb:9d:11:f7:48: b7:aa:06:b4:09:93:be:9e:15:74:ba:52:00:37:e9:57:57:71: 2f:08:d0:a8:61:d0:9b:ba:24:b3:b5:8d:07:31:27:d8:1a:01: 81:57:c6:01:aa:0e:c2:ed:70:86:1a:c2:a5:03:f7:62:15:b0: 05:08:97:34:ec:e5:ec:c5:b3:30:4e:05:c8:22:44:91:fa:50: f6:a1:5b:e9:2c:95:c1:78:87:45:82:28:65:9c:19:3c:cf:c0: 33:60:35:44:48:9b:18:79:d0:eb:ea:f3:b8:56:4b:14:ff:d4: ff:ec:ae:7b:31:03:13:9a:e3:d1:68:01:55:17:a5:90:38:a5: 42:e8:17:40:27:ee:b2:9e:23:5d:fd:d8:c2:20:47:72:ba:eb: 78:54:eb:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU8M959JMWn3xpfGIN/isIg70B9EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTRGRDExQTMzNEJEQ0EzNEMyRUFCOTY0RENBMjI2QjY5 NDJCOTI5RDAeFw0yNjEwMjMyMTIwNTBaFw0yNjEwMjQyMzM3NTBaMDMxMTAvBgNV BAMTKDA2RjgwNDdDMEIyOUU5M0JDNDE4QTNGMzVENEJGNjFDRUQxOTFERUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFuSNrcocHNjR3uby0x3flM7Fc JAjM6ze+P+W9iff5xQUoMyLL8O1WpYFzNdVjl0Y0I0RhVQqjh9HLgqgrK+pOi8x0 1K7DtdXNjP0MNxYJiZA5UQg7U9Qo0o/zGfi535famFg5BoGcRX+76Kxr7Kj1HZse 4eyPY1o2M2VoMliCw/T6KpbNYDnXR6H57bK6Y45dNV7vAD7pMpp4A8rUmEPZaw2o uGh0e1QJ52L+RlJXPKsWZqau0d2ip7nUY0lD2RdWJjbpLw0m2EJOEGlRZGPFNYrY gw8lgBBg+pcaUEWlUcCk343RfcI/R4bSco1zLe8L/DBLh/CMTxv8tusgGKS5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBvgEfAsp6TvEGKPzXUv2HO0ZHewwHwYDVR0j BBgwFoAU5P0RozS9yjTC6rlk3KImtpQrkp0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTM4MDkzODQtOWIxYy00ZjVhLWFhNmItOWRlM2I1MmE5YzA1LzAvRTRGRDExQTMz NEJEQ0EzNEMyRUFCOTY0RENBMjI2QjY5NDJCOTI5RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNEZEMTFBMzM0QkRDQTM0QzJFQUI5NjREQ0EyMjZCNjk0MkI5 MjlELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTM4MDkzODQtOWIxYy00ZjVhLWFh NmItOWRlM2I1MmE5YzA1LzAvRTRGRDExQTMzNEJEQ0EzNEMyRUFCOTY0RENBMjI2 QjY5NDJCOTI5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAhAWPzZRZffyzS5npd5wf85UrEDIoMx9Jvz g3B0BDvpMu7VruPpOCd7z1Qph2eHzKXDBTW5bnORZqxV5L1spIRIm3w15sI8RN+q 4OMPapS9lNsLtnkhuyh+1SAZ9pYi2KK21BO2zLe7nRH3SLeqBrQJk76eFXS6UgA3 6VdXcS8I0Khh0Ju6JLO1jQcxJ9gaAYFXxgGqDsLtcIYawqUD92IVsAUIlzTs5ezF szBOBcgiRJH6UPahW+kslcF4h0WCKGWcGTzPwDNgNURImxh50Ovq87hWSxT/1P/s rnsxAxOa49FoAVUXpZA4pULoF0An7rKeI1392MIgR3K663hU69I= -----END CERTIFICATE-----Generated at Sat Oct 24 14:33:12 2026 by rpki-client