$ rpki-client -vvvf rpki-rsync.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.mft File: E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.mft (raw, json) Hash identifier: Pxo8r4asEqTjMR/dCkQ4E0AkZT/RY/vNlRzg8qkI2Pk= Subject key identifier: 23:C7:77:4C:B4:1C:FA:47:F8:30:B1:B7:7F:76:B9:7C:A9:47:D9:B2 Authority key identifier: E5:DA:21:DB:76:CE:91:D6:EF:72:48:2F:FD:FE:02:16:9A:6C:C8:08 Certificate issuer: /CN=E5DA21DB76CE91D6EF72482FFDFE02169A6CC808 Certificate serial: 4921D2D7ABD9101689D9D9187BCCD6E380A40691 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.mft Manifest number: C3 Signing time: Wed 23 Sep 2026 22:49:16 +0000 Manifest this update: Wed 23 Sep 2026 22:44:16 +0000 Manifest next update: Fri 25 Sep 2026 02:39:16 +0000 Files and hashes: 1: E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.crl (hash: H9bHFrA7jLuGdhIPu41scqZszqejBClCGLYboFMMULQ=) 2: 3130332e3136362e3235352e302f32342d3234203d3e20313431393636.roa (hash: lQVIlc5Ok7o6clRzLcj2IsYBHTzNzicGxWqDtjOXTeQ=) 3: 3130332e3136362e3235342e302f32342d3234203d3e20313431393636.roa (hash: oYW4sdySDReabIUJh8DtwbQ7r9wux6oX5lpHgcktZMY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.crl rsync://rpki-rsync.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 02:39:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:21:d2:d7:ab:d9:10:16:89:d9:d9:18:7b:cc:d6:e3:80:a4:06:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5DA21DB76CE91D6EF72482FFDFE02169A6CC808 Validity Not Before: Sep 23 22:44:16 2026 GMT Not After : Sep 25 02:39:16 2026 GMT Subject: CN=23C7774CB41CFA47F830B1B77F76B97CA947D9B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0b:2c:d9:f1:4d:6b:cf:ad:57:c3:6c:f3:b4: ae:d4:07:d6:59:27:6f:22:c8:be:b6:1b:d0:2c:84: 37:d5:1f:13:37:1e:cf:a9:58:af:cd:1b:ed:0a:da: 6e:bd:a0:af:22:fd:a3:9f:a3:a1:26:a2:fa:eb:b6: de:58:9c:34:a3:42:88:e1:31:f2:c6:ad:c7:9d:de: d6:e5:5c:d7:f6:6b:80:de:d9:af:e0:6e:e1:aa:85: 98:5d:b7:91:6c:e1:ff:6f:a4:a1:f9:7b:db:1f:01: 28:13:09:4a:e7:3c:1b:b9:90:07:94:2e:69:df:d5: 40:50:83:83:60:4d:a0:f4:f7:ae:de:e0:a3:64:30: 7e:41:72:fd:ac:69:58:ea:04:c6:6a:ad:08:8b:ad: f6:41:77:b4:93:7a:e7:35:ce:82:42:48:ed:98:3f: b8:fd:af:73:d4:06:ac:98:fe:e9:6a:b3:c5:2a:85: 64:d5:e1:d7:67:ee:0c:14:a9:fc:99:14:48:78:47: 57:64:90:eb:e7:d3:8e:32:69:01:85:80:3d:1f:77: ff:34:51:4c:3c:c7:b2:76:02:42:7b:6d:02:02:38: 4f:c1:f8:50:c1:56:ff:0c:f5:93:c2:31:0c:dd:d6: bb:b1:db:b1:9b:6d:11:4f:52:34:03:34:95:63:53: 96:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C7:77:4C:B4:1C:FA:47:F8:30:B1:B7:7F:76:B9:7C:A9:47:D9:B2 X509v3 Authority Key Identifier: keyid:E5:DA:21:DB:76:CE:91:D6:EF:72:48:2F:FD:FE:02:16:9A:6C:C8:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:24:42:c4:7f:bb:6a:33:37:af:82:fd:40:45:c3:0e:d5:a6: 24:f6:fe:41:18:2d:e7:ba:f0:62:a5:66:28:00:ed:8e:b9:86: 40:29:b1:54:1d:a3:39:27:6d:ae:06:9f:47:0c:f7:7b:d0:25: 94:69:a8:87:75:0c:4b:59:99:f6:9a:84:25:b7:3b:a8:af:ba: 76:85:ee:22:02:33:71:aa:45:12:cc:e7:b6:d8:80:22:5f:50: e2:ed:65:de:99:aa:b5:3f:c7:a6:cd:33:dd:40:d0:87:33:9c: 0f:bd:d1:b0:77:80:8e:f0:5c:5a:10:e0:10:1c:55:8e:67:1b: 63:ae:db:ed:0f:93:2a:d0:4a:3a:1b:f1:10:2f:f9:3a:f0:fc: 84:2b:d6:2f:87:1f:7d:e0:42:43:4b:65:44:ad:e1:16:aa:73: 8c:eb:9d:b6:11:39:3d:6f:7d:bf:1c:cc:c9:1b:d0:5e:b6:4c: 9c:f2:30:44:a5:93:29:ed:a1:94:72:62:11:d3:57:07:2b:5c: 52:71:b9:4c:d6:94:05:1b:6d:2e:43:af:53:cc:05:ef:3f:4e: 73:39:10:7d:6d:78:cd:9e:84:38:6d:1c:e4:c3:4d:bb:03:37: 5e:84:ba:dd:e0:79:58:80:04:cf:19:3e:72:e5:38:7e:5d:f8: 88:2d:3f:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSSHS16vZEBaJ2dkYe8zW44CkBpEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTVEQTIxREI3NkNFOTFENkVGNzI0ODJGRkRGRTAyMTY5 QTZDQzgwODAeFw0yNjA5MjMyMjQ0MTZaFw0yNjA5MjUwMjM5MTZaMDMxMTAvBgNV BAMTKDIzQzc3NzRDQjQxQ0ZBNDdGODMwQjFCNzdGNzZCOTdDQTk0N0Q5QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5CyzZ8U1rz61Xw2zztK7UB9ZZ J28iyL62G9AshDfVHxM3Hs+pWK/NG+0K2m69oK8i/aOfo6Emovrrtt5YnDSjQojh MfLGrced3tblXNf2a4De2a/gbuGqhZhdt5Fs4f9vpKH5e9sfASgTCUrnPBu5kAeU Lmnf1UBQg4NgTaD0967e4KNkMH5Bcv2saVjqBMZqrQiLrfZBd7STeuc1zoJCSO2Y P7j9r3PUBqyY/ulqs8UqhWTV4ddn7gwUqfyZFEh4R1dkkOvn044yaQGFgD0fd/80 UUw8x7J2AkJ7bQICOE/B+FDBVv8M9ZPCMQzd1rux27GbbRFPUjQDNJVjU5bnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI8d3TLQc+kf4MLG3f3a5fKlH2bIwHwYDVR0j BBgwFoAU5doh23bOkdbvckgv/f4CFppsyAgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDI5Zjg5MDItMWEwNi00NWE4LWE5OTgtNzJlNDZhYWFlOGZjLzAvRTVEQTIxREI3 NkNFOTFENkVGNzI0ODJGRkRGRTAyMTY5QTZDQzgwOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNURBMjFEQjc2Q0U5MUQ2RUY3MjQ4MkZGREZFMDIxNjlBNkND ODA4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDI5Zjg5MDItMWEwNi00NWE4LWE5 OTgtNzJlNDZhYWFlOGZjLzAvRTVEQTIxREI3NkNFOTFENkVGNzI0ODJGRkRGRTAy MTY5QTZDQzgwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEkkQsR/u2ozN6+C/UBFww7VpiT2/kEYLee6 8GKlZigA7Y65hkApsVQdozknba4Gn0cM93vQJZRpqId1DEtZmfaahCW3O6ivunaF 7iICM3GqRRLM57bYgCJfUOLtZd6ZqrU/x6bNM91A0IcznA+90bB3gI7wXFoQ4BAc VY5nG2Ou2+0PkyrQSjob8RAv+Trw/IQr1i+HH33gQkNLZUSt4Raqc4zrnbYROT1v fb8czMkb0F62TJzyMESlkyntoZRyYhHTVwcrXFJxuUzWlAUbbS5Dr1PMBe8/TnM5 EH1teM2ehDhtHOTDTbsDN16Eut3geViABM8ZPnLlOH5d+IgtP0o= -----END CERTIFICATE-----Generated at Thu Sep 24 08:34:58 2026 by rpki-client