$ rpki-client -vvvf rpki-rsync.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/E5E46B40DA4B39812590F66F8D9A48EB7BF80663.mft File: E5E46B40DA4B39812590F66F8D9A48EB7BF80663.mft (raw, json) Hash identifier: mtVoCX4bjMnJBMCPwWiHf7H5JAc/+dUJNtO6Ax9w4iE= Subject key identifier: 1A:36:CC:63:87:BE:42:9C:67:32:44:FF:F8:86:F1:4C:5C:42:3C:3D Authority key identifier: E5:E4:6B:40:DA:4B:39:81:25:90:F6:6F:8D:9A:48:EB:7B:F8:06:63 Certificate issuer: /CN=E5E46B40DA4B39812590F66F8D9A48EB7BF80663 Certificate serial: 5A5FAD37578D3EE4A1219DDF0EF5B2D346F30407 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5E46B40DA4B39812590F66F8D9A48EB7BF80663.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/E5E46B40DA4B39812590F66F8D9A48EB7BF80663.mft Manifest number: C2 Signing time: Fri 25 Sep 2026 01:21:50 +0000 Manifest this update: Fri 25 Sep 2026 01:16:49 +0000 Manifest next update: Sat 26 Sep 2026 01:31:49 +0000 Files and hashes: 1: 3130332e382e35362e302f32322d3234203d3e203435373037.roa (hash: 7VYgmOP0YO7cH1VxALvRRKcOoHBx5YAjdZr3/vH5WcY=) 2: 3230322e34332e3131362e302f32332d3234203d3e203435373037.roa (hash: x/aLbzvpFAKtjeU3rH0ALM/iYwbJRGNDYx6P3rrU1Q8=) 3: 3131302e39332e31322e302f32322d3234203d3e203435373037.roa (hash: qWYNgEcwRG0KPNqrROH2O3FctIU4/zQ2NKHO3/uikuo=) 4: E5E46B40DA4B39812590F66F8D9A48EB7BF80663.crl (hash: 8vrN2S+vO3vE5qMkxI9CjwReoDsFul4rMND7MD8rvEc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/E5E46B40DA4B39812590F66F8D9A48EB7BF80663.crl rsync://rpki-rsync.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/E5E46B40DA4B39812590F66F8D9A48EB7BF80663.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5E46B40DA4B39812590F66F8D9A48EB7BF80663.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 01:31:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:5f:ad:37:57:8d:3e:e4:a1:21:9d:df:0e:f5:b2:d3:46:f3:04:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5E46B40DA4B39812590F66F8D9A48EB7BF80663 Validity Not Before: Sep 25 01:16:49 2026 GMT Not After : Sep 26 01:31:49 2026 GMT Subject: CN=1A36CC6387BE429C673244FFF886F14C5C423C3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:de:e7:02:7a:1a:cb:64:44:0f:37:84:1e:c7: 7c:ed:09:71:71:3d:3a:6b:69:5b:f9:5a:ca:a2:f5: 8a:82:45:31:1f:54:43:a2:9d:c9:87:87:43:be:c0: 0c:a2:52:c6:cf:be:94:25:98:af:2a:c1:1a:40:43: 5f:c8:48:97:03:4d:9a:d7:29:6d:b3:45:38:da:6e: 03:cf:34:da:4d:be:17:a4:24:ea:27:4f:13:ad:6f: b0:7a:43:07:89:b7:5b:25:d7:33:79:70:5e:62:54: 32:29:40:ac:14:3b:79:b9:5f:df:b5:4f:bf:d6:c4: f1:b0:97:97:fe:05:34:50:89:f9:a8:e4:53:f4:a1: 7b:18:c1:78:f2:94:1a:96:aa:45:67:f7:db:e4:ac: de:37:2a:e2:1d:e2:1a:c8:8c:7c:52:35:a0:c1:13: d4:7b:7f:6f:e8:f3:43:c0:c3:7a:fa:b9:fd:80:c1: 96:0a:f5:12:55:d7:90:49:e2:38:7d:18:4d:b0:7a: ea:1e:77:f8:b2:c8:30:5e:63:7c:7a:98:cd:fe:da: bb:81:66:16:19:0e:86:63:34:26:a3:6a:ff:17:83: 71:e5:ec:a9:b6:a5:c8:74:b3:ef:9c:04:22:56:61: b9:b6:2f:33:39:d3:49:ff:cd:41:7f:55:ec:7c:53: 1f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:36:CC:63:87:BE:42:9C:67:32:44:FF:F8:86:F1:4C:5C:42:3C:3D X509v3 Authority Key Identifier: keyid:E5:E4:6B:40:DA:4B:39:81:25:90:F6:6F:8D:9A:48:EB:7B:F8:06:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/E5E46B40DA4B39812590F66F8D9A48EB7BF80663.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5E46B40DA4B39812590F66F8D9A48EB7BF80663.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/E5E46B40DA4B39812590F66F8D9A48EB7BF80663.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:68:71:77:25:ae:26:4a:a4:e7:43:5e:4a:a0:0e:ab:f6:8d: 05:99:ec:27:03:00:35:db:b1:ed:42:53:bb:8b:08:a0:a4:c3: f9:3a:ac:b6:20:04:3a:84:d6:1e:cf:c7:14:ba:45:15:d6:f1: b9:eb:2c:c0:b9:b1:ab:e2:47:41:e8:f3:4a:0e:85:fe:30:8e: 06:2a:0b:45:95:4d:6f:4f:3c:98:36:25:8d:eb:37:08:ec:27: d1:d1:06:5d:48:78:f3:64:61:e2:c2:e9:94:df:f1:1f:5e:65: 51:2d:b7:9b:94:54:64:22:f9:ec:93:c3:5b:fd:f5:cb:73:11: 6c:6f:b7:c6:c1:27:61:ca:47:9f:34:cf:0b:86:99:ed:66:dc: bb:06:6a:21:e2:61:f9:c9:d3:3c:af:5d:8f:bd:8b:4e:4c:98: c2:b6:87:e6:87:b8:1f:77:ce:08:da:1a:7e:04:c1:49:d1:64: 48:dd:69:aa:c0:2b:2c:c8:1b:6d:03:dd:e8:8f:da:b3:36:04: 58:25:ab:49:02:e7:34:ce:04:47:02:c4:12:f2:d1:77:76:ca: d5:bc:6c:29:b0:9a:60:20:51:0a:84:65:d1:1d:fe:b0:ff:9e: 37:40:30:38:53:73:5c:e8:7e:7c:52:61:15:1f:42:16:f1:f1: 3e:b9:ec:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWl+tN1eNPuShIZ3fDvWy00bzBAcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTVFNDZCNDBEQTRCMzk4MTI1OTBGNjZGOEQ5QTQ4RUI3 QkY4MDY2MzAeFw0yNjA5MjUwMTE2NDlaFw0yNjA5MjYwMTMxNDlaMDMxMTAvBgNV BAMTKDFBMzZDQzYzODdCRTQyOUM2NzMyNDRGRkY4ODZGMTRDNUM0MjNDM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk3ucCehrLZEQPN4Qex3ztCXFx PTpraVv5Wsqi9YqCRTEfVEOincmHh0O+wAyiUsbPvpQlmK8qwRpAQ1/ISJcDTZrX KW2zRTjabgPPNNpNvhekJOonTxOtb7B6QweJt1sl1zN5cF5iVDIpQKwUO3m5X9+1 T7/WxPGwl5f+BTRQifmo5FP0oXsYwXjylBqWqkVn99vkrN43KuId4hrIjHxSNaDB E9R7f2/o80PAw3r6uf2AwZYK9RJV15BJ4jh9GE2weuoed/iyyDBeY3x6mM3+2ruB ZhYZDoZjNCajav8Xg3Hl7Km2pch0s++cBCJWYbm2LzM500n/zUF/Vex8Ux+VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGjbMY4e+QpxnMkT/+IbxTFxCPD0wHwYDVR0j BBgwFoAU5eRrQNpLOYElkPZvjZpI63v4BmMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjBkMmJkZTQtMDU2Yi00NWM2LTgwYmYtZjVkNGQyNzczMzZiLzAvRTVFNDZCNDBE QTRCMzk4MTI1OTBGNjZGOEQ5QTQ4RUI3QkY4MDY2My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNUU0NkI0MERBNEIzOTgxMjU5MEY2NkY4RDlBNDhFQjdCRjgw NjYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjBkMmJkZTQtMDU2Yi00NWM2LTgw YmYtZjVkNGQyNzczMzZiLzAvRTVFNDZCNDBEQTRCMzk4MTI1OTBGNjZGOEQ5QTQ4 RUI3QkY4MDY2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKxocXclriZKpOdDXkqgDqv2jQWZ7CcDADXb se1CU7uLCKCkw/k6rLYgBDqE1h7PxxS6RRXW8bnrLMC5saviR0Ho80oOhf4wjgYq C0WVTW9PPJg2JY3rNwjsJ9HRBl1IePNkYeLC6ZTf8R9eZVEtt5uUVGQi+eyTw1v9 9ctzEWxvt8bBJ2HKR580zwuGme1m3LsGaiHiYfnJ0zyvXY+9i05MmMK2h+aHuB93 zgjaGn4EwUnRZEjdaarAKyzIG20D3eiP2rM2BFglq0kC5zTOBEcCxBLy0Xd2ytW8 bCmwmmAgUQqEZdEd/rD/njdAMDhTc1zofnxSYRUfQhbx8T657KA= -----END CERTIFICATE-----Generated at Fri Sep 25 19:42:09 2026 by rpki-client