$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.mft File: E9F2A418990B480D204FA0D037A5ABB3AEC360E9.mft (raw, json) Hash identifier: Gkhg33otVT6I5JXxGd7/P46M0rz8HmQsuATmOrgtbK8= Subject key identifier: 14:C9:CC:2D:0F:A2:96:38:7A:2D:44:40:CB:6F:24:04:D4:AC:A0:C8 Authority key identifier: E9:F2:A4:18:99:0B:48:0D:20:4F:A0:D0:37:A5:AB:B3:AE:C3:60:E9 Certificate issuer: /CN=E9F2A418990B480D204FA0D037A5ABB3AEC360E9 Certificate serial: 2D009FC86F2D5CA6A6C7F0A699430AB36FB70D2B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.mft Manifest number: BA Signing time: Thu 17 Sep 2026 08:54:34 +0000 Manifest this update: Thu 17 Sep 2026 08:49:34 +0000 Manifest next update: Fri 18 Sep 2026 11:32:34 +0000 Files and hashes: 1: 3130332e3139312e3131362e302f32342d3234203d3e20313439393137.roa (hash: 27oObCgWzykb6CFKZyK6/jDYuaqop/FIGkUT/qI+p/Q=) 2: E9F2A418990B480D204FA0D037A5ABB3AEC360E9.crl (hash: CMRXbzTnv67pN+5llPwTNz9MD3krt55d2QwlJVpnHhU=) 3: 3130332e3139312e3131362e302f32332d3233203d3e20313439393137.roa (hash: bL7nWexv3dr33uLwywkImAJrJWec+y7OgTN8pZ5ywaw=) 4: 3130332e3139312e3131372e302f32342d3234203d3e20313439393137.roa (hash: lAAUV9z8f3t9czOX/VqnympJr8MrNtNyhxmHLT5vnzY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.crl rsync://rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:00:9f:c8:6f:2d:5c:a6:a6:c7:f0:a6:99:43:0a:b3:6f:b7:0d:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9F2A418990B480D204FA0D037A5ABB3AEC360E9 Validity Not Before: Sep 17 08:49:34 2026 GMT Not After : Sep 18 11:32:34 2026 GMT Subject: CN=14C9CC2D0FA296387A2D4440CB6F2404D4ACA0C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:36:9d:5f:58:18:53:2f:e8:6f:1d:40:d2:fc: 8b:71:aa:2e:84:a7:a8:e3:bd:0e:87:b0:9c:74:a8: 4f:62:ea:6c:37:cd:df:6b:72:6e:16:bf:3e:c4:c0: 20:3a:7d:b8:e2:53:a1:e9:50:27:9f:1a:b8:fb:18: 17:c3:cf:c5:1d:18:70:d9:c5:60:9f:d1:08:df:39: ce:63:5b:62:43:eb:90:fd:ff:83:92:f9:5f:c0:28: bd:27:1f:0a:cd:00:dd:e3:2b:61:5b:4d:fe:8a:b2: 45:8d:ab:de:f1:33:97:a8:ce:60:67:2f:5b:53:1c: e5:4c:09:a0:67:50:66:3e:8c:85:75:72:59:91:4a: f6:3a:67:58:0c:49:58:2d:9e:6f:ca:23:41:67:af: e6:a6:c9:20:f8:83:1b:e2:88:43:de:91:2c:b5:67: ff:8b:17:05:ef:ed:5f:db:27:24:99:e8:5e:7c:f4: 8a:eb:39:30:d4:6a:fd:9c:74:58:a9:df:b3:bf:36: 5d:f8:df:b9:de:9a:de:d4:7d:e6:86:6e:6f:1c:9c: 26:f7:8e:2b:3e:09:4e:05:58:d7:d1:d6:eb:a7:dd: f3:20:8a:ec:2e:e4:2e:0f:d6:c7:ce:af:94:5a:38: 07:54:f8:0f:50:a6:28:18:35:86:c6:73:32:87:d4: 8d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C9:CC:2D:0F:A2:96:38:7A:2D:44:40:CB:6F:24:04:D4:AC:A0:C8 X509v3 Authority Key Identifier: keyid:E9:F2:A4:18:99:0B:48:0D:20:4F:A0:D0:37:A5:AB:B3:AE:C3:60:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:2a:97:55:ec:52:1a:55:d4:d0:9f:fa:bf:0e:fe:ae:8f:88: 31:ab:06:3e:01:1b:94:ef:a8:85:82:c1:79:1f:73:ad:af:ec: 8a:ad:8a:79:24:b7:ed:54:5c:65:18:70:4e:19:54:30:16:9d: 3e:22:c0:15:74:ad:43:0e:c0:45:d7:2d:e4:dc:c9:14:cd:0b: 7d:9d:43:6e:3b:b8:a1:21:47:8a:f1:84:4b:3f:c8:2d:cf:e2: 12:ff:e4:4b:0c:19:06:bd:f1:9b:54:bd:7c:68:80:00:de:cd: cb:aa:34:96:98:16:15:3b:c5:cc:4d:6a:5d:ee:66:65:0d:ef: d2:bc:7b:74:56:76:f5:e3:97:33:00:76:6d:9e:37:1d:22:59: cc:cd:41:c7:6f:ab:a6:f4:49:ac:4b:d5:f3:ed:0e:57:97:93: a1:d2:93:02:1e:77:fb:8a:83:08:61:ac:19:eb:97:3d:f3:db: e9:7c:f7:dc:d7:2a:3e:b5:c8:98:4f:04:be:16:5c:79:4b:23: ce:58:95:44:07:86:f6:6c:65:79:71:f2:db:78:75:3d:c9:e2: 25:6d:44:8b:16:13:ca:3b:29:2a:5d:c4:14:15:55:cc:bb:10: b6:cf:fc:79:cf:cb:ff:d5:d0:0e:7f:07:d4:a6:17:4c:09:77: da:ff:26:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULQCfyG8tXKamx/CmmUMKs2+3DSswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlGMkE0MTg5OTBCNDgwRDIwNEZBMEQwMzdBNUFCQjNB RUMzNjBFOTAeFw0yNjA5MTcwODQ5MzRaFw0yNjA5MTgxMTMyMzRaMDMxMTAvBgNV BAMTKDE0QzlDQzJEMEZBMjk2Mzg3QTJENDQ0MENCNkYyNDA0RDRBQ0EwQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyNp1fWBhTL+hvHUDS/Itxqi6E p6jjvQ6HsJx0qE9i6mw3zd9rcm4Wvz7EwCA6fbjiU6HpUCefGrj7GBfDz8UdGHDZ xWCf0QjfOc5jW2JD65D9/4OS+V/AKL0nHwrNAN3jK2FbTf6KskWNq97xM5eozmBn L1tTHOVMCaBnUGY+jIV1clmRSvY6Z1gMSVgtnm/KI0Fnr+amySD4gxviiEPekSy1 Z/+LFwXv7V/bJySZ6F589IrrOTDUav2cdFip37O/Nl3437nemt7UfeaGbm8cnCb3 jis+CU4FWNfR1uun3fMgiuwu5C4P1sfOr5RaOAdU+A9QpigYNYbGczKH1I3DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFMnMLQ+iljh6LURAy28kBNSsoMgwHwYDVR0j BBgwFoAU6fKkGJkLSA0gT6DQN6Wrs67DYOkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTZhZGFlMmEtNDdiNi00YWU1LTljM2YtM2U4Y2I5MmEzOTg3LzAvRTlGMkE0MTg5 OTBCNDgwRDIwNEZBMEQwMzdBNUFCQjNBRUMzNjBFOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOUYyQTQxODk5MEI0ODBEMjA0RkEwRDAzN0E1QUJCM0FFQzM2 MEU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTZhZGFlMmEtNDdiNi00YWU1LTlj M2YtM2U4Y2I5MmEzOTg3LzAvRTlGMkE0MTg5OTBCNDgwRDIwNEZBMEQwMzdBNUFC QjNBRUMzNjBFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI8ql1XsUhpV1NCf+r8O/q6PiDGrBj4BG5Tv qIWCwXkfc62v7Iqtinkkt+1UXGUYcE4ZVDAWnT4iwBV0rUMOwEXXLeTcyRTNC32d Q247uKEhR4rxhEs/yC3P4hL/5EsMGQa98ZtUvXxogADezcuqNJaYFhU7xcxNal3u ZmUN79K8e3RWdvXjlzMAdm2eNx0iWczNQcdvq6b0SaxL1fPtDleXk6HSkwIed/uK gwhhrBnrlz3z2+l899zXKj61yJhPBL4WXHlLI85YlUQHhvZsZXlx8tt4dT3J4iVt RIsWE8o7KSpdxBQVVcy7ELbP/HnPy//V0A5/B9SmF0wJd9r/JjE= -----END CERTIFICATE-----Generated at Thu Sep 17 10:54:09 2026 by rpki-client