$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.mft File: E83F205BF306DAF53F99D7D0596E19991D122A75.mft (raw, json) Hash identifier: O5SYCHZWZXypmk31QnQexctjyS8AUKCq/1x0iy2Ruys= Subject key identifier: C6:53:A6:E9:35:43:64:9A:C4:93:49:D2:7C:7B:FB:7D:90:E2:68:FA Authority key identifier: E8:3F:20:5B:F3:06:DA:F5:3F:99:D7:D0:59:6E:19:99:1D:12:2A:75 Certificate issuer: /CN=E83F205BF306DAF53F99D7D0596E19991D122A75 Certificate serial: 3B3A43636CA947A0FDAF4B6A887DCCA6CD6EC8E5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E83F205BF306DAF53F99D7D0596E19991D122A75.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 10:54:37 +0000 Manifest this update: Wed 23 Sep 2026 10:49:37 +0000 Manifest next update: Thu 24 Sep 2026 13:28:37 +0000 Files and hashes: 1: 3130332e3137342e3131332e302f32342d3234203d3e20313339393532.roa (hash: qr0g5LVzrVb3dBi48fKGU2IZ+49TkkVc1Y82FpKn5Mk=) 2: E83F205BF306DAF53F99D7D0596E19991D122A75.crl (hash: YAMoR1JjBRavdA6TNN1cfyx3LyWIyH4ASeP6lHKr60E=) 3: 3130332e3137342e3131322e302f32342d3234203d3e20313339393532.roa (hash: hxtIKOBEaXvvEhPlm4EoLMj05xZmKO9tH3GRDWA9ERg=) 4: 3130332e3137342e3131322e302f32332d3233203d3e20313339393532.roa (hash: 4/4i0yLfh0SYWVvIB+ls28jcDhOwmL2zwW2k6ffDKik=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.crl rsync://rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E83F205BF306DAF53F99D7D0596E19991D122A75.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 13:28:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:3a:43:63:6c:a9:47:a0:fd:af:4b:6a:88:7d:cc:a6:cd:6e:c8:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E83F205BF306DAF53F99D7D0596E19991D122A75 Validity Not Before: Sep 23 10:49:37 2026 GMT Not After : Sep 24 13:28:37 2026 GMT Subject: CN=C653A6E93543649AC49349D27C7BFB7D90E268FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:17:13:cb:59:14:55:90:6f:92:3a:f6:0c:e6: 14:f9:88:8c:f3:21:34:6a:bb:35:39:b3:07:a4:8c: 0a:50:13:88:2b:b6:31:44:a8:47:51:ef:88:25:99: 3e:1e:8c:60:7c:2b:1c:18:9c:05:14:68:58:3a:42: 3c:6a:1e:83:c7:ee:21:3c:7a:a2:97:51:03:f3:2f: f5:d9:8d:16:02:de:7b:ed:51:fb:f1:ec:3a:ad:f6: 66:48:5d:fa:a1:d7:b6:7e:51:ae:86:56:a6:11:11: 6f:8b:0d:f1:55:7f:9e:42:38:57:02:8e:45:03:a7: 17:c0:6a:76:7a:fa:d4:c6:6b:6c:5a:a8:9b:c8:d3: 56:14:33:a7:87:cd:aa:f9:29:c8:4a:ed:4d:91:4c: a7:fc:19:e5:cc:25:7c:43:ec:e2:5f:04:6b:1e:3a: 99:94:de:7c:cb:c0:a6:de:67:c0:2d:71:7d:d9:e4: 31:3d:1e:5a:db:4f:d0:ce:25:c9:8a:58:d1:96:da: e5:b9:f5:51:f7:75:5f:8a:53:96:31:7f:e9:ec:28: cd:84:c4:51:37:ae:ad:a7:95:ff:42:e3:8a:a3:03: f7:0e:98:98:2f:c5:d4:70:ed:f3:cd:b0:f5:4f:69: dd:6e:c6:01:ea:4d:a3:67:24:3c:4f:73:1e:1e:91: e5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:53:A6:E9:35:43:64:9A:C4:93:49:D2:7C:7B:FB:7D:90:E2:68:FA X509v3 Authority Key Identifier: keyid:E8:3F:20:5B:F3:06:DA:F5:3F:99:D7:D0:59:6E:19:99:1D:12:2A:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E83F205BF306DAF53F99D7D0596E19991D122A75.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:1a:f9:eb:ec:8d:5d:79:6e:9e:d9:6b:74:0f:f3:18:86:8f: 23:43:01:e4:79:08:d6:bd:1e:1e:78:d7:19:24:0a:23:de:a1: 77:70:03:e6:dd:46:30:74:29:5f:78:95:14:6e:da:b6:94:83: eb:f2:48:84:9e:bb:72:b6:5e:38:bb:83:e2:e3:d5:c2:fb:cf: c2:9f:d8:f8:d9:9b:d9:7d:7e:7a:f8:60:4e:8f:ca:2d:23:3a: cf:2e:11:ef:e8:9b:03:f9:42:e0:b5:4c:76:56:cb:50:48:61: fd:81:5b:b6:04:c4:10:36:7c:bd:cf:55:a5:ba:bd:ea:69:92: 1b:71:3b:70:aa:5e:23:51:35:d8:24:0c:6c:0f:4e:5d:73:aa: 5c:24:38:53:74:df:0f:56:4c:f6:cb:cd:8d:7f:76:7c:22:f0: 7b:45:fd:ec:32:c7:30:2b:70:8d:ae:c7:6e:dc:e4:e2:17:5a: 91:c9:63:ba:1b:3f:e3:4f:64:1a:86:a2:27:bb:1b:43:17:d6: 36:21:d5:5f:33:a4:e5:3e:90:2f:ca:ad:93:8d:05:0e:b8:90: e3:d1:91:33:bc:eb:ba:d8:b3:da:cd:3b:54:76:ef:b9:3f:97: 41:2b:1d:50:07:db:b4:b6:d3:68:89:a8:78:52:9d:61:fe:fe: 70:f9:de:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOzpDY2ypR6D9r0tqiH3Mps1uyOUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTgzRjIwNUJGMzA2REFGNTNGOTlEN0QwNTk2RTE5OTkx RDEyMkE3NTAeFw0yNjA5MjMxMDQ5MzdaFw0yNjA5MjQxMzI4MzdaMDMxMTAvBgNV BAMTKEM2NTNBNkU5MzU0MzY0OUFDNDkzNDlEMjdDN0JGQjdEOTBFMjY4RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1FxPLWRRVkG+SOvYM5hT5iIzz ITRquzU5swekjApQE4grtjFEqEdR74glmT4ejGB8KxwYnAUUaFg6QjxqHoPH7iE8 eqKXUQPzL/XZjRYC3nvtUfvx7Dqt9mZIXfqh17Z+Ua6GVqYREW+LDfFVf55COFcC jkUDpxfAanZ6+tTGa2xaqJvI01YUM6eHzar5KchK7U2RTKf8GeXMJXxD7OJfBGse OpmU3nzLwKbeZ8AtcX3Z5DE9HlrbT9DOJcmKWNGW2uW59VH3dV+KU5Yxf+nsKM2E xFE3rq2nlf9C44qjA/cOmJgvxdRw7fPNsPVPad1uxgHqTaNnJDxPcx4ekeUBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxlOm6TVDZJrEk0nSfHv7fZDiaPowHwYDVR0j BBgwFoAU6D8gW/MG2vU/mdfQWW4ZmR0SKnUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmMzNjI0YzQtYmZkYy00ZTQ4LThlYTAtZWIwNTYwNWM2MjEzLzAvRTgzRjIwNUJG MzA2REFGNTNGOTlEN0QwNTk2RTE5OTkxRDEyMkE3NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FODNGMjA1QkYzMDZEQUY1M0Y5OUQ3RDA1OTZFMTk5OTFEMTIy QTc1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmMzNjI0YzQtYmZkYy00ZTQ4LThl YTAtZWIwNTYwNWM2MjEzLzAvRTgzRjIwNUJGMzA2REFGNTNGOTlEN0QwNTk2RTE5 OTkxRDEyMkE3NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHwa+evsjV15bp7Za3QP8xiGjyNDAeR5CNa9 Hh541xkkCiPeoXdwA+bdRjB0KV94lRRu2raUg+vySISeu3K2Xji7g+Lj1cL7z8Kf 2PjZm9l9fnr4YE6Pyi0jOs8uEe/omwP5QuC1THZWy1BIYf2BW7YExBA2fL3PVaW6 veppkhtxO3CqXiNRNdgkDGwPTl1zqlwkOFN03w9WTPbLzY1/dnwi8HtF/ewyxzAr cI2ux27c5OIXWpHJY7obP+NPZBqGoie7G0MX1jYh1V8zpOU+kC/KrZONBQ64kOPR kTO867rYs9rNO1R277k/l0ErHVAH27S202iJqHhSnWH+/nD53o8= -----END CERTIFICATE-----Generated at Wed Sep 23 23:14:36 2026 by rpki-client