$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/E41C49050CBD3032F041D83A7A089A3E23CBE621.mft File: E41C49050CBD3032F041D83A7A089A3E23CBE621.mft (raw, json) Hash identifier: O3f/tsfuor822Ou201wDaKtA9KHV1rrBVRgUlbNqWUE= Subject key identifier: C1:51:8B:51:26:48:82:3E:7B:5D:26:0C:F1:A8:89:00:90:37:16:43 Authority key identifier: E4:1C:49:05:0C:BD:30:32:F0:41:D8:3A:7A:08:9A:3E:23:CB:E6:21 Certificate issuer: /CN=E41C49050CBD3032F041D83A7A089A3E23CBE621 Certificate serial: 09E0F90FDD19C95AF471C324A68B8595BDB5FDBB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E41C49050CBD3032F041D83A7A089A3E23CBE621.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/E41C49050CBD3032F041D83A7A089A3E23CBE621.mft Manifest number: EE Signing time: Tue 27 Oct 2026 12:56:27 +0000 Manifest this update: Tue 27 Oct 2026 12:51:27 +0000 Manifest next update: Wed 28 Oct 2026 16:20:27 +0000 Files and hashes: 1: E41C49050CBD3032F041D83A7A089A3E23CBE621.crl (hash: 4iI48+mlRCqM1+MLIwE/eZC3RtgVn7+scymJxD8Dkds=) 2: 3130332e32362e3137362e302f32332d3234203d3e203538383231.roa (hash: Pn35/z/Opy4+bi+hOwdyJNg9JFN1Pwq8xx84oYEuYAc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/E41C49050CBD3032F041D83A7A089A3E23CBE621.crl rsync://rpki-rsync.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/E41C49050CBD3032F041D83A7A089A3E23CBE621.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E41C49050CBD3032F041D83A7A089A3E23CBE621.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 11:39:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:e0:f9:0f:dd:19:c9:5a:f4:71:c3:24:a6:8b:85:95:bd:b5:fd:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E41C49050CBD3032F041D83A7A089A3E23CBE621 Validity Not Before: Oct 27 12:51:27 2026 GMT Not After : Oct 28 16:20:27 2026 GMT Subject: CN=C1518B512648823E7B5D260CF1A8890090371643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:44:3f:35:69:45:83:63:84:01:c8:cb:64:49: d1:5f:14:04:79:14:f4:67:5c:19:15:1c:93:7e:da: bb:9d:aa:45:d2:90:f7:66:63:f5:d8:f7:17:1d:cc: b0:99:75:87:46:d6:cd:81:73:c6:66:e3:fa:37:3d: 51:cb:29:f4:29:34:01:30:94:e9:ad:33:75:07:16: 78:7d:52:5f:93:6b:83:f9:50:a9:e8:60:99:96:0f: de:1f:e5:a1:c4:ef:ce:e3:9b:68:86:8d:d3:86:5b: f4:3d:93:d2:bb:0a:34:61:ad:3a:88:3a:f3:69:c6: 35:56:5c:fe:65:ea:ee:53:8d:23:ff:bc:9a:91:72: 57:07:52:1f:1f:9f:ef:da:b2:13:d3:10:23:50:d8: 99:03:1e:b3:59:d9:7f:02:ae:25:4f:08:ee:c3:24: 24:86:ce:a5:94:b1:eb:ca:22:79:98:48:20:08:60: b9:a9:d0:0e:d4:d1:c2:d6:d1:20:0c:f7:f9:9a:05: ae:02:f6:5b:93:63:01:5a:c8:ac:1e:6e:5f:5f:48: 92:f5:de:bd:01:bf:d8:2d:fb:16:5e:4b:91:94:44: e9:3e:53:0a:26:75:64:be:92:bc:91:42:7c:fb:2b: 4a:fa:0f:d4:63:e0:2b:62:c9:95:64:65:30:60:13: 75:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:51:8B:51:26:48:82:3E:7B:5D:26:0C:F1:A8:89:00:90:37:16:43 X509v3 Authority Key Identifier: keyid:E4:1C:49:05:0C:BD:30:32:F0:41:D8:3A:7A:08:9A:3E:23:CB:E6:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/E41C49050CBD3032F041D83A7A089A3E23CBE621.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E41C49050CBD3032F041D83A7A089A3E23CBE621.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/E41C49050CBD3032F041D83A7A089A3E23CBE621.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:c5:40:42:5a:10:e2:5c:72:ec:90:a6:b4:04:0c:a3:79:a7: 66:41:fd:43:8e:4d:2e:4b:a0:39:4d:03:f0:05:52:e2:58:d8: 28:b2:fc:73:67:76:f1:ee:94:8f:95:e3:cc:e1:00:62:a1:f0: f1:81:34:ee:a2:1f:8b:9e:30:10:a9:7f:9d:1e:91:f7:08:e4: e9:38:5c:64:7a:bb:6d:91:ad:9e:dc:04:d0:4c:b9:19:06:41: a0:9e:a3:ea:cb:4c:a6:5c:32:42:f3:f0:4e:02:3d:fb:d9:c1: c3:9a:91:83:a4:0a:c4:7a:ab:0f:51:f3:be:db:d1:2a:26:ec: d5:49:4a:84:e6:8d:3a:b0:a4:0d:9a:7f:64:95:97:89:26:65: 31:a7:d7:d0:8c:0a:3c:f4:aa:5b:c2:b3:b2:93:b7:9f:1a:9f: 9b:f4:40:01:8a:41:df:a3:0f:91:47:eb:d1:a6:27:98:2c:ab: 05:97:40:4d:a0:5e:44:bb:91:7f:55:58:e1:e9:7c:e1:c2:b3: f4:0b:de:f6:44:33:58:92:8d:8f:ff:47:fe:7a:59:19:ca:e7: 4c:d9:37:5f:3e:ea:11:fc:0b:80:cb:e2:ef:20:d0:54:23:00: fa:4a:d7:a7:f5:4d:45:c0:97:a8:31:6e:a5:9a:a4:24:16:7e: c9:37:1e:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCeD5D90ZyVr0ccMkpouFlb21/bswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQxQzQ5MDUwQ0JEMzAzMkYwNDFEODNBN0EwODlBM0Uy M0NCRTYyMTAeFw0yNjEwMjcxMjUxMjdaFw0yNjEwMjgxNjIwMjdaMDMxMTAvBgNV BAMTKEMxNTE4QjUxMjY0ODgyM0U3QjVEMjYwQ0YxQTg4OTAwOTAzNzE2NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoRD81aUWDY4QByMtkSdFfFAR5 FPRnXBkVHJN+2rudqkXSkPdmY/XY9xcdzLCZdYdG1s2Bc8Zm4/o3PVHLKfQpNAEw lOmtM3UHFnh9Ul+Ta4P5UKnoYJmWD94f5aHE787jm2iGjdOGW/Q9k9K7CjRhrTqI OvNpxjVWXP5l6u5TjSP/vJqRclcHUh8fn+/ashPTECNQ2JkDHrNZ2X8CriVPCO7D JCSGzqWUsevKInmYSCAIYLmp0A7U0cLW0SAM9/maBa4C9luTYwFayKwebl9fSJL1 3r0Bv9gt+xZeS5GUROk+UwomdWS+kryRQnz7K0r6D9Rj4CtiyZVkZTBgE3WhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwVGLUSZIgj57XSYM8aiJAJA3FkMwHwYDVR0j BBgwFoAU5BxJBQy9MDLwQdg6egiaPiPL5iEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTc0ZDBiZjktY2M5YS00MmEzLTgzMGEtNzZmNmQzMmIyZjQ1LzAvRTQxQzQ5MDUw Q0JEMzAzMkYwNDFEODNBN0EwODlBM0UyM0NCRTYyMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNDFDNDkwNTBDQkQzMDMyRjA0MUQ4M0E3QTA4OUEzRTIzQ0JF NjIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTc0ZDBiZjktY2M5YS00MmEzLTgz MGEtNzZmNmQzMmIyZjQ1LzAvRTQxQzQ5MDUwQ0JEMzAzMkYwNDFEODNBN0EwODlB M0UyM0NCRTYyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACTFQEJaEOJccuyQprQEDKN5p2ZB/UOOTS5L oDlNA/AFUuJY2Ciy/HNndvHulI+V48zhAGKh8PGBNO6iH4ueMBCpf50ekfcI5Ok4 XGR6u22RrZ7cBNBMuRkGQaCeo+rLTKZcMkLz8E4CPfvZwcOakYOkCsR6qw9R877b 0Som7NVJSoTmjTqwpA2af2SVl4kmZTGn19CMCjz0qlvCs7KTt58an5v0QAGKQd+j D5FH69GmJ5gsqwWXQE2gXkS7kX9VWOHpfOHCs/QL3vZEM1iSjY//R/56WRnK50zZ N18+6hH8C4DL4u8g0FQjAPpK16f1TUXAl6gxbqWapCQWfsk3Htc= -----END CERTIFICATE-----Generated at Wed Oct 28 00:48:24 2026 by rpki-client