$ rpki-client -vvvf rpki-rsync.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.mft File: E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.mft (raw, json) Hash identifier: xY85i36vlssBE4rEsMyFkKu0mmHSC3951KD03gTpLV4= Subject key identifier: 38:CE:8F:40:65:BF:0E:E9:7B:7F:5A:08:44:0A:F7:E8:0B:2C:7F:FC Authority key identifier: E5:AD:37:F5:8F:E5:B7:B2:D6:C8:78:CC:65:72:DC:D9:7F:32:60:ED Certificate issuer: /CN=E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED Certificate serial: 2F44FE9E7BB5FCE0CBE2D3002DD2E763E14A3263 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 19:30:04 +0000 Manifest this update: Wed 23 Sep 2026 19:25:04 +0000 Manifest next update: Thu 24 Sep 2026 22:08:04 +0000 Files and hashes: 1: 3132302e38392e39342e302f32332d3234203d3e203536323333.roa (hash: Ywxuhkdga9hO4itaG+v5I5zsagA1Lbo8qR7ItHh5q8A=) 2: 3130332e31342e3131302e302f32332d3234203d3e203536323333.roa (hash: qjYTuEDU2WsEHRQKFziNHqHoI5n5tkB89sliYPfe+2U=) 3: 34332e3235322e3134342e302f32332d3234203d3e203536323333.roa (hash: +7LdedJhuPY+xo3rq8YD2pVQmA3XwTXZAE9pIrm2QyM=) 4: 3130332e3233332e38382e302f32332d3234203d3e203536323333.roa (hash: Gu7VKEObYusttjKWf2p2TmQYuB7pNrv24WI6rKxgrY0=) 5: E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.crl (hash: 8APnRXdmwJr3wbEo39tHk6bJsLaZEPKwxucPp0W2sp8=) 6: 3139322e3134302e3232342e302f32332d3234203d3e203536323333.roa (hash: Q4P3JJdyz+sguA+ShSmoSl4Uj2/ltj/HEOGjPDV46Ws=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.crl rsync://rpki-rsync.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 22:08:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:44:fe:9e:7b:b5:fc:e0:cb:e2:d3:00:2d:d2:e7:63:e1:4a:32:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED Validity Not Before: Sep 23 19:25:04 2026 GMT Not After : Sep 24 22:08:04 2026 GMT Subject: CN=38CE8F4065BF0EE97B7F5A08440AF7E80B2C7FFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:92:c9:75:9c:54:b1:d1:d9:98:09:14:58:3c: 72:ce:64:2b:99:4d:50:22:aa:ac:57:0c:5d:dd:2d: 1f:1e:cf:7b:80:d8:38:9e:bc:f9:59:91:f0:78:49: f0:07:d9:f0:41:9b:b4:ba:1f:59:cb:bb:7b:ee:0d: 9e:44:7f:32:b1:54:35:9a:c9:83:be:6d:95:bd:56: 4b:ee:22:27:3f:8b:c3:5e:dd:42:59:05:c6:23:0b: 5b:74:6b:b8:a6:02:8d:00:eb:e3:74:1c:fa:c9:b2: a9:56:39:97:d1:9b:88:a1:cf:74:a8:31:7a:4e:86: 62:7a:e7:71:bd:57:d5:13:2f:07:89:8b:ad:2a:53: 40:90:b2:28:c0:d8:76:23:3b:e4:72:f3:bc:64:18: 81:e3:13:6a:35:82:f0:03:92:8b:7f:53:0a:fa:75: 39:0f:94:0e:5b:34:06:4f:da:05:50:7f:77:aa:03: 7f:1c:80:35:15:b5:49:1b:76:dd:17:86:cc:f2:85: 13:34:a9:ad:dc:16:47:31:37:f9:89:02:62:d1:51: f5:60:53:06:42:b5:22:6a:70:d8:7e:48:d2:1d:b7: 5d:78:d7:f4:03:61:8d:e7:d0:0d:99:61:63:b7:be: fa:06:1e:94:ea:4f:11:88:b1:e4:f9:3d:61:6b:b1: de:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:CE:8F:40:65:BF:0E:E9:7B:7F:5A:08:44:0A:F7:E8:0B:2C:7F:FC X509v3 Authority Key Identifier: keyid:E5:AD:37:F5:8F:E5:B7:B2:D6:C8:78:CC:65:72:DC:D9:7F:32:60:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:0c:cf:c7:63:a7:07:0a:84:ce:d7:22:7a:97:02:ab:46:25: ef:89:16:b6:96:71:ef:5d:a0:5b:1a:23:00:7a:46:81:ad:15: 84:b1:e2:dd:11:a6:ce:89:80:40:78:a9:45:10:33:5c:24:c1: 70:13:8f:24:58:c3:ce:8a:3e:07:7c:97:f6:da:dc:1d:17:63: 65:be:8b:aa:f9:a1:36:01:9d:31:71:18:a9:96:5a:2b:df:de: ba:bf:19:c8:02:dc:ef:a9:2d:4e:2e:dd:a7:80:d5:90:8d:76: 23:94:7b:67:7c:36:dd:37:29:5c:0f:23:a3:6d:3e:bb:9c:68: 33:37:42:d6:04:ed:7f:6e:e6:39:32:f5:f9:71:d2:4f:6d:c2: 6d:4e:72:74:f7:81:2f:61:f2:b0:37:24:45:83:77:f3:fe:eb: 60:18:a7:d8:3c:47:5d:d4:4f:ef:f4:85:18:74:05:2f:e6:d7: f6:ca:51:04:72:aa:3a:e7:2d:12:70:5e:61:df:29:da:0a:9a: bd:0a:8e:be:2c:44:9e:7f:19:47:52:2c:27:72:09:f4:0e:e2: 7a:dc:cb:08:9b:69:6e:63:43:8c:2f:6f:92:7c:b0:66:84:06: 6d:2e:d8:ce:43:f6:23:af:a8:4a:23:f9:3e:8e:7f:5a:1c:66: d3:9c:ae:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL0T+nnu1/ODL4tMALdLnY+FKMmMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTVBRDM3RjU4RkU1QjdCMkQ2Qzg3OENDNjU3MkRDRDk3 RjMyNjBFRDAeFw0yNjA5MjMxOTI1MDRaFw0yNjA5MjQyMjA4MDRaMDMxMTAvBgNV BAMTKDM4Q0U4RjQwNjVCRjBFRTk3QjdGNUEwODQ0MEFGN0U4MEIyQzdGRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpksl1nFSx0dmYCRRYPHLOZCuZ TVAiqqxXDF3dLR8ez3uA2DievPlZkfB4SfAH2fBBm7S6H1nLu3vuDZ5EfzKxVDWa yYO+bZW9VkvuIic/i8Ne3UJZBcYjC1t0a7imAo0A6+N0HPrJsqlWOZfRm4ihz3So MXpOhmJ653G9V9UTLweJi60qU0CQsijA2HYjO+Ry87xkGIHjE2o1gvADkot/Uwr6 dTkPlA5bNAZP2gVQf3eqA38cgDUVtUkbdt0XhszyhRM0qa3cFkcxN/mJAmLRUfVg UwZCtSJqcNh+SNIdt1141/QDYY3n0A2ZYWO3vvoGHpTqTxGIseT5PWFrsd6pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOM6PQGW/Dul7f1oIRAr36Assf/wwHwYDVR0j BBgwFoAU5a039Y/lt7LWyHjMZXLc2X8yYO0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDRmZDRiYzItNDFkNC00MmU2LWE3ZmYtNTk0OTM4ODUxMjZhLzAvRTVBRDM3RjU4 RkU1QjdCMkQ2Qzg3OENDNjU3MkRDRDk3RjMyNjBFRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNUFEMzdGNThGRTVCN0IyRDZDODc4Q0M2NTcyRENEOTdGMzI2 MEVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDRmZDRiYzItNDFkNC00MmU2LWE3 ZmYtNTk0OTM4ODUxMjZhLzAvRTVBRDM3RjU4RkU1QjdCMkQ2Qzg3OENDNjU3MkRD RDk3RjMyNjBFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEYMz8djpwcKhM7XInqXAqtGJe+JFraWce9d oFsaIwB6RoGtFYSx4t0Rps6JgEB4qUUQM1wkwXATjyRYw86KPgd8l/ba3B0XY2W+ i6r5oTYBnTFxGKmWWivf3rq/GcgC3O+pLU4u3aeA1ZCNdiOUe2d8Nt03KVwPI6Nt PrucaDM3QtYE7X9u5jky9flx0k9twm1OcnT3gS9h8rA3JEWDd/P+62AYp9g8R13U T+/0hRh0BS/m1/bKUQRyqjrnLRJwXmHfKdoKmr0Kjr4sRJ5/GUdSLCdyCfQO4nrc ywibaW5jQ4wvb5J8sGaEBm0u2M5D9iOvqEoj+T6Of1ocZtOcrtU= -----END CERTIFICATE-----Generated at Thu Sep 24 03:43:10 2026 by rpki-client