$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.mft File: E029C9E3702797CC6083E1D4D891799F0F5AA144.mft (raw, json) Hash identifier: yCKsKsWj7IIr2cc4FK6jfhg6zNU0YoBKE9VW2NzO6P0= Subject key identifier: 0B:0A:69:07:00:DD:39:48:05:9E:51:40:13:FB:0E:18:25:51:67:A9 Authority key identifier: E0:29:C9:E3:70:27:97:CC:60:83:E1:D4:D8:91:79:9F:0F:5A:A1:44 Certificate issuer: /CN=E029C9E3702797CC6083E1D4D891799F0F5AA144 Certificate serial: 20FC0451EA0CC847C483CDEB5A55253E50EB1822 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E029C9E3702797CC6083E1D4D891799F0F5AA144.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 13:09:56 +0000 Manifest this update: Thu 17 Sep 2026 13:04:56 +0000 Manifest next update: Fri 18 Sep 2026 14:56:56 +0000 Files and hashes: 1: E029C9E3702797CC6083E1D4D891799F0F5AA144.crl (hash: YwVJBK5eFAop1LJWhdYSjKI+lqfgkWliFwc6Xg1g9MU=) 2: 3130332e3130392e3230362e302f32342d3234203d3e20313530393335.roa (hash: 8AqsSwbCPBkMa1bd8eWoyuIjrtuzrPJimjGA2fsl3AA=) 3: 3130332e3130392e3230372e302f32342d3234203d3e20313530393335.roa (hash: DY6/Cy+Nw1dnpzSyQJvKM4XZv0DQUdJYanxa6KJ+Sng=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.crl rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E029C9E3702797CC6083E1D4D891799F0F5AA144.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:fc:04:51:ea:0c:c8:47:c4:83:cd:eb:5a:55:25:3e:50:eb:18:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E029C9E3702797CC6083E1D4D891799F0F5AA144 Validity Not Before: Sep 17 13:04:56 2026 GMT Not After : Sep 18 14:56:56 2026 GMT Subject: CN=0B0A690700DD3948059E514013FB0E18255167A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:97:dc:35:3a:69:6d:26:a1:34:f5:c6:3a:14: 47:10:f0:15:f8:53:72:4a:38:85:db:e5:d1:d2:48: 32:68:81:ff:6c:e3:3f:ca:b7:5a:99:ab:09:fe:dc: 85:05:3b:0f:bd:50:d9:e1:70:9a:e5:7e:b0:7d:1d: 11:5c:8a:3d:44:05:72:d3:d7:b4:6e:92:c3:2c:e2: 8b:b8:24:a3:1c:1a:0f:f5:61:ac:b6:22:eb:61:f4: 9f:23:8c:39:77:9f:8b:f7:4e:13:57:9c:4d:f6:5e: 4b:f5:6f:f9:a8:32:b8:86:e7:26:06:ed:0d:de:f7: 26:5c:ba:03:59:e9:37:16:6b:01:d3:5f:7b:91:0b: 07:83:f5:30:8c:37:22:c8:76:99:4c:e6:86:50:58: 2b:13:e5:22:53:83:b4:b1:a9:ac:b9:ba:f8:9d:00: 73:b0:bf:10:14:52:01:3e:8e:ce:7c:23:c6:66:a1: 2e:a4:cb:a6:0e:ba:97:ae:c6:e1:26:8c:49:97:1f: 1b:5f:ee:45:dc:82:7f:f6:e5:af:a2:06:17:a9:26: 6d:70:19:75:63:5d:e2:06:79:c9:fa:b8:f5:0d:16: a0:30:4a:a5:d5:78:21:b1:80:cd:16:a4:c8:93:d9: 76:c4:e4:ab:eb:7f:d9:26:c0:fe:1f:3b:3f:f9:fc: aa:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:0A:69:07:00:DD:39:48:05:9E:51:40:13:FB:0E:18:25:51:67:A9 X509v3 Authority Key Identifier: keyid:E0:29:C9:E3:70:27:97:CC:60:83:E1:D4:D8:91:79:9F:0F:5A:A1:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E029C9E3702797CC6083E1D4D891799F0F5AA144.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:41:c4:89:a3:71:bf:91:67:d8:c1:bb:9b:d0:7c:54:78:fd: 4a:0b:41:d6:0f:ad:a2:0c:a6:1a:b5:8d:95:f5:34:6d:29:5d: 41:58:72:73:26:d1:f2:42:de:ed:d5:96:89:e0:a6:6e:9e:3c: 0b:a7:eb:2b:8e:bb:83:ee:8a:3a:58:a8:04:64:58:49:d8:cd: 56:91:c5:36:d4:d7:7c:e3:8d:2a:80:76:89:0c:66:83:4b:aa: 91:5e:db:20:da:a0:b0:78:7f:62:70:23:6f:01:bf:5e:d2:21: c5:9c:88:53:53:fa:a3:c1:28:b7:6f:e2:aa:79:b5:a0:e4:37: 98:a3:83:d6:5a:02:69:3c:ea:95:98:c1:68:01:81:28:71:f7: 0d:6f:2e:c1:16:b5:bc:ea:58:37:9f:73:e5:4f:d2:39:c3:a5: 71:f1:19:02:12:ce:78:9f:92:c2:2d:22:04:58:08:7e:92:3f: 4f:24:d8:a2:a0:42:b7:91:93:cf:55:ae:44:63:a1:a0:6a:b9: 88:d9:6e:ca:b5:99:39:3b:15:16:c7:15:9a:2a:59:44:f7:05: 26:17:a4:e8:55:00:29:08:58:d6:a8:1e:6a:0e:46:bc:c1:db: d8:e1:40:57:ff:8b:f3:78:be:f8:3f:52:1a:4b:d1:11:3b:69: b7:e1:a1:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIPwEUeoMyEfEg83rWlUlPlDrGCIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTAyOUM5RTM3MDI3OTdDQzYwODNFMUQ0RDg5MTc5OUYw RjVBQTE0NDAeFw0yNjA5MTcxMzA0NTZaFw0yNjA5MTgxNDU2NTZaMDMxMTAvBgNV BAMTKDBCMEE2OTA3MDBERDM5NDgwNTlFNTE0MDEzRkIwRTE4MjU1MTY3QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9l9w1OmltJqE09cY6FEcQ8BX4 U3JKOIXb5dHSSDJogf9s4z/Kt1qZqwn+3IUFOw+9UNnhcJrlfrB9HRFcij1EBXLT 17RuksMs4ou4JKMcGg/1Yay2Iuth9J8jjDl3n4v3ThNXnE32Xkv1b/moMriG5yYG 7Q3e9yZcugNZ6TcWawHTX3uRCweD9TCMNyLIdplM5oZQWCsT5SJTg7Sxqay5uvid AHOwvxAUUgE+js58I8ZmoS6ky6YOupeuxuEmjEmXHxtf7kXcgn/25a+iBhepJm1w GXVjXeIGecn6uPUNFqAwSqXVeCGxgM0WpMiT2XbE5Kvrf9kmwP4fOz/5/KorAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCwppBwDdOUgFnlFAE/sOGCVRZ6kwHwYDVR0j BBgwFoAU4CnJ43Anl8xgg+HU2JF5nw9aoUQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWM4ODkyZWItZGRjMC00Y2I2LTk1N2MtYjY1M2YyOGJiZjM5LzAvRTAyOUM5RTM3 MDI3OTdDQzYwODNFMUQ0RDg5MTc5OUYwRjVBQTE0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMDI5QzlFMzcwMjc5N0NDNjA4M0UxRDREODkxNzk5RjBGNUFB MTQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWM4ODkyZWItZGRjMC00Y2I2LTk1 N2MtYjY1M2YyOGJiZjM5LzAvRTAyOUM5RTM3MDI3OTdDQzYwODNFMUQ0RDg5MTc5 OUYwRjVBQTE0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACdBxImjcb+RZ9jBu5vQfFR4/UoLQdYPraIM phq1jZX1NG0pXUFYcnMm0fJC3u3Vlongpm6ePAun6yuOu4PuijpYqARkWEnYzVaR xTbU13zjjSqAdokMZoNLqpFe2yDaoLB4f2JwI28Bv17SIcWciFNT+qPBKLdv4qp5 taDkN5ijg9ZaAmk86pWYwWgBgShx9w1vLsEWtbzqWDefc+VP0jnDpXHxGQISznif ksItIgRYCH6SP08k2KKgQreRk89VrkRjoaBquYjZbsq1mTk7FRbHFZoqWUT3BSYX pOhVACkIWNaoHmoORrzB29jhQFf/i/N4vvg/UhpL0RE7abfhodE= -----END CERTIFICATE-----Generated at Thu Sep 17 14:41:45 2026 by rpki-client