$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.mft File: E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.mft (raw, json) Hash identifier: I6H/c8/WGcgWg2C9TvIw8zBLDRoDFVFx5ZT2c668I5Y= Subject key identifier: 3F:3B:42:4F:AD:46:9D:9A:F8:A5:43:90:6E:C5:26:64:BD:67:80:54 Authority key identifier: E5:F6:F9:E5:DD:9D:34:BD:A0:8C:45:31:BA:70:87:61:A3:5A:DE:60 Certificate issuer: /CN=E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60 Certificate serial: 2F931F152AA1C6FFE0738BB838A341BB0034E951 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 09:27:52 +0000 Manifest this update: Wed 23 Sep 2026 09:22:52 +0000 Manifest next update: Thu 24 Sep 2026 12:52:52 +0000 Files and hashes: 1: E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.crl (hash: Arw6IpUW7Nvh3t1J6EJkeIeLR6PvDfkawuAJt7l7uTs=) 2: 3130332e3137382e3137302e302f32342d3234203d3e20313339393532.roa (hash: Q+Zpu9s7FFAblJfI/9bq1CU9BNldDzB+MO83xGJv/O8=) 3: 3130332e3137382e3137312e302f32342d3234203d3e20313339393532.roa (hash: aDinqjPhgNq50kNy+lg2Iba0bDegBSFkr3DIakb0nTU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.crl rsync://rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 12:52:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:93:1f:15:2a:a1:c6:ff:e0:73:8b:b8:38:a3:41:bb:00:34:e9:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60 Validity Not Before: Sep 23 09:22:52 2026 GMT Not After : Sep 24 12:52:52 2026 GMT Subject: CN=3F3B424FAD469D9AF8A543906EC52664BD678054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:62:c3:37:6e:ad:fc:38:a3:83:e2:c6:7f:55: 31:0d:05:e5:04:d1:fc:91:58:80:c9:d3:b1:7c:75: ea:dd:92:ad:b4:94:95:10:96:46:98:1c:21:ab:7b: 99:13:ef:25:30:49:da:ef:9a:25:99:d9:25:95:f9: 1a:f9:79:ce:48:45:75:b8:fd:93:f9:ac:e7:d8:8a: b2:2b:cb:be:de:26:37:c8:00:87:aa:ab:86:5c:5b: 75:07:4f:1b:a0:fe:c2:3f:ef:28:80:64:36:62:ad: 05:6c:7d:44:6f:c0:71:00:aa:6e:b9:ca:55:90:43: 50:b1:11:53:68:b0:ca:aa:d5:3f:c9:bd:9f:e0:58: 93:e8:38:90:5c:59:84:2f:03:e1:a7:5b:ac:e1:d9: e1:8b:e3:cc:69:0c:04:1b:bf:54:94:63:9c:b8:19: 5d:60:fe:65:ac:b4:f9:03:77:46:8b:d2:df:c3:9a: 82:99:ea:cc:95:c1:8a:9d:a6:86:71:0c:a2:f0:48: 2d:5a:bd:12:bd:9d:21:34:f1:49:18:74:a6:00:5e: 7d:2c:67:51:1a:a1:23:ae:b8:61:57:41:14:a3:67: 40:de:88:a9:cc:19:5c:a5:43:f2:38:68:62:04:d9: 6d:37:7d:fa:d1:db:b6:a4:6e:a3:01:78:15:97:9b: 30:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:3B:42:4F:AD:46:9D:9A:F8:A5:43:90:6E:C5:26:64:BD:67:80:54 X509v3 Authority Key Identifier: keyid:E5:F6:F9:E5:DD:9D:34:BD:A0:8C:45:31:BA:70:87:61:A3:5A:DE:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:16:c3:76:00:2a:f1:aa:9f:61:3f:90:53:14:5d:25:dc:14: 66:1b:8e:cd:b9:eb:93:8c:0d:ea:7a:d6:f2:c4:02:ea:bd:5a: 3b:f5:3d:1d:89:be:2d:05:de:dd:ca:0c:7b:62:bd:17:74:25: e8:6d:95:11:bd:09:1f:66:44:83:f9:2f:37:0a:1f:26:0b:1f: d6:f4:db:e4:8d:e1:76:43:f3:b3:b7:cd:4d:37:8b:1f:2c:4e: 68:1d:55:22:b6:2b:9b:e3:73:f9:86:6e:9e:d0:83:cb:9b:6f: 0f:23:da:cf:b5:74:04:ce:4e:a6:2f:66:42:ac:a2:d6:43:af: e0:40:da:e8:63:f2:00:a6:a1:cf:90:16:c6:ff:51:ff:bc:74: 60:84:61:db:51:c7:af:cf:c9:63:8c:07:8f:bf:83:3d:b9:70: 51:67:b1:7f:6f:a1:21:9b:87:95:d8:ef:1c:03:7d:44:45:c3: 1e:64:e6:c8:f6:14:20:62:7b:7c:2a:f2:3b:ea:63:ae:61:3f: 84:01:68:36:78:68:22:81:94:c1:c8:d0:56:c0:30:1f:24:c1: 8c:a0:95:94:54:9f:9e:08:d8:e1:a2:f4:b5:03:b4:01:f7:6c: 0f:94:56:0e:33:74:63:7c:11:26:71:49:84:50:64:96:5a:73: d4:3e:fd:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL5MfFSqhxv/gc4u4OKNBuwA06VEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTVGNkY5RTVERDlEMzRCREEwOEM0NTMxQkE3MDg3NjFB MzVBREU2MDAeFw0yNjA5MjMwOTIyNTJaFw0yNjA5MjQxMjUyNTJaMDMxMTAvBgNV BAMTKDNGM0I0MjRGQUQ0NjlEOUFGOEE1NDM5MDZFQzUyNjY0QkQ2NzgwNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8YsM3bq38OKOD4sZ/VTENBeUE 0fyRWIDJ07F8derdkq20lJUQlkaYHCGre5kT7yUwSdrvmiWZ2SWV+Rr5ec5IRXW4 /ZP5rOfYirIry77eJjfIAIeqq4ZcW3UHTxug/sI/7yiAZDZirQVsfURvwHEAqm65 ylWQQ1CxEVNosMqq1T/JvZ/gWJPoOJBcWYQvA+GnW6zh2eGL48xpDAQbv1SUY5y4 GV1g/mWstPkDd0aL0t/DmoKZ6syVwYqdpoZxDKLwSC1avRK9nSE08UkYdKYAXn0s Z1EaoSOuuGFXQRSjZ0DeiKnMGVylQ/I4aGIE2W03ffrR27akbqMBeBWXmzA5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPztCT61GnZr4pUOQbsUmZL1ngFQwHwYDVR0j BBgwFoAU5fb55d2dNL2gjEUxunCHYaNa3mAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmMwMWZkNDQtOGNkNi00ZDlmLTliZDEtODM2N2FkOWNkOWVhLzAvRTVGNkY5RTVE RDlEMzRCREEwOEM0NTMxQkE3MDg3NjFBMzVBREU2MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNUY2RjlFNUREOUQzNEJEQTA4QzQ1MzFCQTcwODc2MUEzNUFE RTYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmMwMWZkNDQtOGNkNi00ZDlmLTli ZDEtODM2N2FkOWNkOWVhLzAvRTVGNkY5RTVERDlEMzRCREEwOEM0NTMxQkE3MDg3 NjFBMzVBREU2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAcWw3YAKvGqn2E/kFMUXSXcFGYbjs2565OM Dep61vLEAuq9Wjv1PR2Jvi0F3t3KDHtivRd0JehtlRG9CR9mRIP5LzcKHyYLH9b0 2+SN4XZD87O3zU03ix8sTmgdVSK2K5vjc/mGbp7Qg8ubbw8j2s+1dATOTqYvZkKs otZDr+BA2uhj8gCmoc+QFsb/Uf+8dGCEYdtRx6/PyWOMB4+/gz25cFFnsX9voSGb h5XY7xwDfURFwx5k5sj2FCBie3wq8jvqY65hP4QBaDZ4aCKBlMHI0FbAMB8kwYyg lZRUn54I2OGi9LUDtAH3bA+UVg4zdGN8ESZxSYRQZJZac9Q+/XY= -----END CERTIFICATE-----Generated at Wed Sep 23 23:06:28 2026 by rpki-client