$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF.mft File: E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF.mft (raw, json) Hash identifier: ISxDy0RqZrWXadwJSuqQ/9+pbOJYVBhrp/YsxrBuh+w= Subject key identifier: 87:C8:62:92:A0:A9:2C:61:6C:71:7F:41:E7:AC:C1:88:8D:56:21:C6 Authority key identifier: E6:25:4E:6F:8E:3E:F1:F3:E2:83:D3:22:FC:37:D8:0F:E0:6C:FC:CF Certificate issuer: /CN=E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF Certificate serial: 0B192944A44C1C191E2EBA37795854E66C2B5D67 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 05:02:11 +0000 Manifest this update: Wed 23 Sep 2026 04:57:11 +0000 Manifest next update: Thu 24 Sep 2026 06:53:11 +0000 Files and hashes: 1: E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF.crl (hash: UbxSLt0sLGCNcWPMQSgIDW89uIiLEXIhonpHaaGjUMM=) 2: 3130332e3130312e39362e302f32342d3234203d3e20313530393430.roa (hash: yJtiSShonhAnbGvzDWyHd3hC3zai87d1b+TqGDBagOs=) 3: 3130332e3130312e39362e302f32332d3233203d3e20313530393430.roa (hash: oKwdl6Jbw0xgOvJgUIdnZaW+/Jj7haWqiuhnRZR2agc=) 4: 3130332e3130312e39372e302f32342d3234203d3e20313530393430.roa (hash: PujUY2/VrkQ5U7C51TkJPpWDbUx9tvrvxL32zD/gtc0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF.crl rsync://rpki-rsync.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 06:53:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:19:29:44:a4:4c:1c:19:1e:2e:ba:37:79:58:54:e6:6c:2b:5d:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF Validity Not Before: Sep 23 04:57:11 2026 GMT Not After : Sep 24 06:53:11 2026 GMT Subject: CN=87C86292A0A92C616C717F41E7ACC1888D5621C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:07:53:fe:58:4f:de:2a:41:a9:49:b5:44:b0: 33:50:bb:03:4a:eb:44:c2:18:ca:18:a7:22:6e:1d: 37:43:cf:15:30:a0:52:86:fc:c3:56:ef:7e:b8:5d: 18:b7:27:27:68:ff:6c:40:32:27:6a:d9:69:ee:f0: 7f:d1:4a:91:51:65:c6:a2:45:33:8b:d0:e8:1b:f4: aa:c0:c6:ed:a5:67:d5:5b:8f:11:54:6f:f5:65:3d: df:46:c2:bb:72:08:21:d1:18:61:3c:0b:c6:2b:6a: 81:e5:74:7e:c3:49:a9:fb:57:df:bb:fd:10:86:04: 14:5f:cc:9e:e4:d4:1d:1e:1a:13:07:ca:23:87:4d: 14:71:b8:01:5b:5b:cc:11:99:45:e0:34:73:29:6d: 93:8c:09:18:97:5e:2f:b9:e5:e0:f7:9d:cc:24:53: 72:6c:80:86:0d:cc:51:ba:9f:0e:50:6e:30:28:af: 51:2b:be:53:2f:62:f5:46:70:1b:66:82:dd:22:ff: 28:f0:04:ac:00:d7:e1:1d:9c:1a:f0:bc:26:ca:04: 8b:e3:65:0f:10:09:de:8c:64:2f:e8:95:b0:99:c0: 9e:7d:fd:ff:bb:e1:74:20:1d:a4:3b:92:85:89:e2: e6:4f:13:dd:91:b5:8c:bd:ca:a7:40:86:e1:c7:96: 49:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C8:62:92:A0:A9:2C:61:6C:71:7F:41:E7:AC:C1:88:8D:56:21:C6 X509v3 Authority Key Identifier: keyid:E6:25:4E:6F:8E:3E:F1:F3:E2:83:D3:22:FC:37:D8:0F:E0:6C:FC:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:cd:5d:1f:52:d8:9a:c5:55:aa:9a:57:61:81:21:33:cc:31: 6b:15:fe:34:a9:d5:2c:79:0e:89:1a:70:11:61:51:16:55:45: 43:32:ca:dc:a3:3e:13:74:08:a8:d2:a8:0a:88:32:f7:6b:70: 7e:86:e3:ef:0e:4e:20:0b:a1:44:03:36:75:50:80:a6:e2:5f: f8:13:ab:35:53:1f:bb:4d:20:e5:32:02:7f:f9:0c:7f:35:91: 51:08:61:a8:70:31:12:2e:87:77:9c:d8:d9:fb:d3:75:73:0c: 89:d0:ae:f4:52:b3:cc:69:e4:dd:a2:23:f4:c2:0c:bb:55:f4: 4a:40:a9:ed:ee:8f:b1:55:13:7d:47:d5:68:72:3a:02:c7:4f: ae:06:ea:61:2e:e3:b8:ba:95:cc:c4:c7:fd:ad:5b:8a:d0:cb: 75:60:bb:5d:45:a3:30:89:0a:5d:06:8f:33:46:62:75:a1:8b: 04:7a:79:59:5f:e0:70:ce:da:67:35:86:fc:5a:66:9e:d3:c5: 7c:f9:71:40:4e:0b:f1:8e:6f:82:f7:85:a3:7d:68:b3:e7:f2: 94:fb:0e:02:eb:ad:a5:68:5c:cf:86:db:19:5e:cd:58:ed:f6: 86:2e:af:48:3f:27:b4:d3:8f:0f:c3:7f:74:9d:06:15:94:00: af:5b:d4:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCxkpRKRMHBkeLro3eVhU5mwrXWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTYyNTRFNkY4RTNFRjFGM0UyODNEMzIyRkMzN0Q4MEZF MDZDRkNDRjAeFw0yNjA5MjMwNDU3MTFaFw0yNjA5MjQwNjUzMTFaMDMxMTAvBgNV BAMTKDg3Qzg2MjkyQTBBOTJDNjE2QzcxN0Y0MUU3QUNDMTg4OEQ1NjIxQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMB1P+WE/eKkGpSbVEsDNQuwNK 60TCGMoYpyJuHTdDzxUwoFKG/MNW7364XRi3Jydo/2xAMidq2Wnu8H/RSpFRZcai RTOL0Ogb9KrAxu2lZ9VbjxFUb/VlPd9GwrtyCCHRGGE8C8YraoHldH7DSan7V9+7 /RCGBBRfzJ7k1B0eGhMHyiOHTRRxuAFbW8wRmUXgNHMpbZOMCRiXXi+55eD3ncwk U3JsgIYNzFG6nw5QbjAor1ErvlMvYvVGcBtmgt0i/yjwBKwA1+EdnBrwvCbKBIvj ZQ8QCd6MZC/olbCZwJ59/f+74XQgHaQ7koWJ4uZPE92RtYy9yqdAhuHHlkkRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh8hikqCpLGFscX9B56zBiI1WIcYwHwYDVR0j BBgwFoAU5iVOb44+8fPig9Mi/DfYD+Bs/M8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDE1N2M5YWMtNTJkYi00ZGJhLWFjNzctODQ1ZTJkZGQ4ODc5LzAvRTYyNTRFNkY4 RTNFRjFGM0UyODNEMzIyRkMzN0Q4MEZFMDZDRkNDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNjI1NEU2RjhFM0VGMUYzRTI4M0QzMjJGQzM3RDgwRkUwNkNG Q0NGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDE1N2M5YWMtNTJkYi00ZGJhLWFj NzctODQ1ZTJkZGQ4ODc5LzAvRTYyNTRFNkY4RTNFRjFGM0UyODNEMzIyRkMzN0Q4 MEZFMDZDRkNDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIvNXR9S2JrFVaqaV2GBITPMMWsV/jSp1Sx5 DokacBFhURZVRUMyytyjPhN0CKjSqAqIMvdrcH6G4+8OTiALoUQDNnVQgKbiX/gT qzVTH7tNIOUyAn/5DH81kVEIYahwMRIuh3ec2Nn703VzDInQrvRSs8xp5N2iI/TC DLtV9EpAqe3uj7FVE31H1WhyOgLHT64G6mEu47i6lczEx/2tW4rQy3Vgu11FozCJ Cl0GjzNGYnWhiwR6eVlf4HDO2mc1hvxaZp7TxXz5cUBOC/GOb4L3haN9aLPn8pT7 DgLrraVoXM+G2xlezVjt9oYur0g/J7TTjw/Df3SdBhWUAK9b1DI= -----END CERTIFICATE-----Generated at Wed Sep 23 19:40:41 2026 by rpki-client