$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/E41C49050CBD3032F041D83A7A089A3E23CBE621.mft File: E41C49050CBD3032F041D83A7A089A3E23CBE621.mft (raw, json) Hash identifier: 030t2kxw41UIFbSv5n3X3WiBMtosfdnO4CYJlNpTTgw= Subject key identifier: CD:24:A9:84:C9:6F:BA:39:6A:23:3B:E2:99:01:C4:26:0D:4A:68:14 Authority key identifier: E4:1C:49:05:0C:BD:30:32:F0:41:D8:3A:7A:08:9A:3E:23:CB:E6:21 Certificate issuer: /CN=E41C49050CBD3032F041D83A7A089A3E23CBE621 Certificate serial: 5B9EB649CE2FF5C4CD8CD2CFB3691D04E8BCCDC5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E41C49050CBD3032F041D83A7A089A3E23CBE621.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/E41C49050CBD3032F041D83A7A089A3E23CBE621.mft Manifest number: AF Signing time: Thu 10 Sep 2026 12:42:44 +0000 Manifest this update: Thu 10 Sep 2026 12:37:44 +0000 Manifest next update: Fri 11 Sep 2026 14:36:44 +0000 Files and hashes: 1: E41C49050CBD3032F041D83A7A089A3E23CBE621.crl (hash: DSKP9TnbsdFtjarT5J2wFrq2DGqlcxlDgbCVg3J0eGU=) 2: 3130332e32362e3137362e302f32332d3234203d3e203538383231.roa (hash: Pn35/z/Opy4+bi+hOwdyJNg9JFN1Pwq8xx84oYEuYAc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/E41C49050CBD3032F041D83A7A089A3E23CBE621.crl rsync://rpki-rsync.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/E41C49050CBD3032F041D83A7A089A3E23CBE621.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E41C49050CBD3032F041D83A7A089A3E23CBE621.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 14:36:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:9e:b6:49:ce:2f:f5:c4:cd:8c:d2:cf:b3:69:1d:04:e8:bc:cd:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E41C49050CBD3032F041D83A7A089A3E23CBE621 Validity Not Before: Sep 10 12:37:44 2026 GMT Not After : Sep 11 14:36:44 2026 GMT Subject: CN=CD24A984C96FBA396A233BE29901C4260D4A6814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:70:d2:83:a2:3c:9b:34:de:5e:f3:38:17:15: 3c:17:c1:ae:6a:53:c4:1b:ef:86:5f:c6:c4:f5:36: fc:48:78:ac:d0:cf:6a:5c:67:fc:be:1c:ed:8f:27: 75:61:a4:44:8d:f0:06:d9:a0:cf:8f:dd:23:e2:5b: cc:d3:dc:cc:af:fa:5d:2d:39:e8:e9:31:fc:a2:f9: 4b:ca:96:3f:e4:9c:d3:ad:73:49:97:c6:51:5b:2e: d7:24:94:48:48:bf:be:02:fb:fa:d0:32:c5:94:f5: 85:af:ad:8f:5c:21:57:ce:1b:3b:7c:44:70:ac:0b: 51:dd:8b:21:af:fc:4c:f1:99:e1:8a:87:32:1c:ba: bb:d8:9f:cf:fc:4d:ef:94:f3:94:c5:ee:9c:7c:fb: a7:ff:8f:22:09:1b:2a:54:b5:44:3c:a7:c4:bc:36: a7:87:bf:55:cb:92:e6:1c:c2:2a:a0:aa:90:e0:1f: 25:35:9b:d6:f8:3a:93:f6:20:f0:8c:e6:84:d8:ee: 62:64:cf:1d:7e:f1:d5:cc:c8:a2:af:91:23:89:8e: aa:e4:01:e7:b4:b0:25:ad:07:95:ba:9a:80:f2:a7: d7:1a:ba:55:09:80:c6:80:5d:7e:2d:53:99:b1:ec: 20:90:e2:97:61:39:75:9f:57:28:ac:23:16:ab:0a: 39:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:24:A9:84:C9:6F:BA:39:6A:23:3B:E2:99:01:C4:26:0D:4A:68:14 X509v3 Authority Key Identifier: keyid:E4:1C:49:05:0C:BD:30:32:F0:41:D8:3A:7A:08:9A:3E:23:CB:E6:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/E41C49050CBD3032F041D83A7A089A3E23CBE621.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E41C49050CBD3032F041D83A7A089A3E23CBE621.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/E41C49050CBD3032F041D83A7A089A3E23CBE621.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:75:a4:8c:03:98:ce:f0:bf:0f:87:b4:aa:1a:83:fd:18:3b: f6:77:3b:0d:de:d4:73:11:af:c3:5b:b3:15:85:99:88:b6:04: 14:e2:a0:87:77:6c:43:d4:70:57:23:c1:7d:a3:45:b8:90:11: a3:e1:03:02:2e:d2:17:d4:6a:4e:b9:26:a0:4b:2c:7b:83:df: 2e:37:04:b9:1c:16:e8:85:da:b7:42:25:fa:48:ed:0e:7b:6f: 50:17:33:61:8b:e2:db:18:79:5a:80:98:b1:38:de:e3:c1:29: be:00:a4:e2:41:31:25:44:c6:ae:bd:6c:64:94:96:2a:47:0c: 58:e1:cc:45:03:b0:7f:73:47:00:38:57:a1:f3:ae:ac:5b:4c: 64:c3:20:0d:e5:c5:6f:7e:3a:a9:7b:77:d1:5d:95:12:e7:a2: 3a:41:cf:d0:96:d3:6f:59:23:00:2f:b0:39:15:84:5b:e5:60: 40:3a:ce:01:f0:0e:09:0c:f0:a1:69:bb:15:ed:cc:21:08:69: d0:9d:35:0b:10:2b:10:24:35:0d:66:e9:b7:ac:f8:04:97:74: f5:e6:d1:cb:56:d2:f4:02:5f:4e:47:8d:6f:ec:aa:c0:da:89: 7a:69:dd:f9:a0:8d:01:35:30:7f:b9:36:61:93:33:f7:67:c4: 61:89:c2:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW562Sc4v9cTNjNLPs2kdBOi8zcUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQxQzQ5MDUwQ0JEMzAzMkYwNDFEODNBN0EwODlBM0Uy M0NCRTYyMTAeFw0yNjA5MTAxMjM3NDRaFw0yNjA5MTExNDM2NDRaMDMxMTAvBgNV BAMTKENEMjRBOTg0Qzk2RkJBMzk2QTIzM0JFMjk5MDFDNDI2MEQ0QTY4MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6cNKDojybNN5e8zgXFTwXwa5q U8Qb74ZfxsT1NvxIeKzQz2pcZ/y+HO2PJ3VhpESN8AbZoM+P3SPiW8zT3Myv+l0t OejpMfyi+UvKlj/knNOtc0mXxlFbLtcklEhIv74C+/rQMsWU9YWvrY9cIVfOGzt8 RHCsC1HdiyGv/EzxmeGKhzIcurvYn8/8Te+U85TF7px8+6f/jyIJGypUtUQ8p8S8 NqeHv1XLkuYcwiqgqpDgHyU1m9b4OpP2IPCM5oTY7mJkzx1+8dXMyKKvkSOJjqrk Aee0sCWtB5W6moDyp9caulUJgMaAXX4tU5mx7CCQ4pdhOXWfVyisIxarCjm7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzSSphMlvujlqIzvimQHEJg1KaBQwHwYDVR0j BBgwFoAU5BxJBQy9MDLwQdg6egiaPiPL5iEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTc0ZDBiZjktY2M5YS00MmEzLTgzMGEtNzZmNmQzMmIyZjQ1LzAvRTQxQzQ5MDUw Q0JEMzAzMkYwNDFEODNBN0EwODlBM0UyM0NCRTYyMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNDFDNDkwNTBDQkQzMDMyRjA0MUQ4M0E3QTA4OUEzRTIzQ0JF NjIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTc0ZDBiZjktY2M5YS00MmEzLTgz MGEtNzZmNmQzMmIyZjQ1LzAvRTQxQzQ5MDUwQ0JEMzAzMkYwNDFEODNBN0EwODlB M0UyM0NCRTYyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB91pIwDmM7wvw+HtKoag/0YO/Z3Ow3e1HMR r8NbsxWFmYi2BBTioId3bEPUcFcjwX2jRbiQEaPhAwIu0hfUak65JqBLLHuD3y43 BLkcFuiF2rdCJfpI7Q57b1AXM2GL4tsYeVqAmLE43uPBKb4ApOJBMSVExq69bGSU lipHDFjhzEUDsH9zRwA4V6HzrqxbTGTDIA3lxW9+Oql7d9FdlRLnojpBz9CW029Z IwAvsDkVhFvlYEA6zgHwDgkM8KFpuxXtzCEIadCdNQsQKxAkNQ1m6bes+ASXdPXm 0ctW0vQCX05HjW/sqsDaiXpp3fmgjQE1MH+5NmGTM/dnxGGJwgk= -----END CERTIFICATE-----Generated at Fri Sep 11 02:56:02 2026 by rpki-client