$ rpki-client -vvvf rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.mft File: E88BC8A7F27D2A5B7520E87760889CD042853ADE.mft (raw, json) Hash identifier: hVgz5GFNLchRnXDbc5qdsVnyeDUkzBJZC3DnjLzOgck= Subject key identifier: F1:62:58:A1:F8:88:CA:A9:E9:C8:FA:5F:3E:50:CF:E7:FE:B5:57:43 Authority key identifier: E8:8B:C8:A7:F2:7D:2A:5B:75:20:E8:77:60:88:9C:D0:42:85:3A:DE Certificate issuer: /CN=E88BC8A7F27D2A5B7520E87760889CD042853ADE Certificate serial: 013FCF48703AB4CE19F75EED78A067E95DF96220 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E88BC8A7F27D2A5B7520E87760889CD042853ADE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 10:18:21 +0000 Manifest this update: Fri 25 Sep 2026 10:13:21 +0000 Manifest next update: Sat 26 Sep 2026 11:06:21 +0000 Files and hashes: 1: 3130332e3130352e37392e302f32342d3234203d3e20313336383734.roa (hash: gkAC5+StdnMaSqYuGVBT+3ErlRAaXIJGp1TwiVqa81g=) 2: 3130332e3130352e37362e302f32342d3234203d3e20313336383734.roa (hash: StV9pAMf1Ct261g28sLeCDLoQr5OW67xNFsrQ9jD6wc=) 3: 3130332e3130352e37382e302f32342d3234203d3e20313336383734.roa (hash: HjyzaNQUCQhEFQ4hKYw2ku34SqSG+Q21ZyHYmX0dpFM=) 4: 3130332e3130352e37362e302f32342d3234203d3e203535363736.roa (hash: Q3r0bAYb72ZQ2Fp1fAghigXkWh4LdobhrwQdO/opI/0=) 5: 3130332e3130352e37392e302f32342d3234203d3e203535363736.roa (hash: SHELRlR+bO1G1+56lQPkLv609BfDTEBVrD9A+nbY330=) 6: 323430323a326334303a3a2f34382d3438203d3e20313336383734.roa (hash: zi1G9BahVDm/M7Dcf6hyf4kk3uCGA92haLufy2kBDKs=) 7: 323430323a326334303a3a2f34382d3438203d3e203535363736.roa (hash: vki+XStGqNG/jPbkEYt4lyDUr4IU7G8v5buzOalFaw0=) 8: 3130332e3130352e37382e302f32342d3234203d3e203535363736.roa (hash: T79Acu3dFfSJnZwf5MfpW3ZPl2jn6Xl5KVc/Lh8xgf0=) 9: 3130332e3130352e37362e302f32332d3234203d3e20313336383734.roa (hash: cc/saxfe9KKXtfm7XzpNhS/kTpo6bsyBLZi4D549YFI=) 10: E88BC8A7F27D2A5B7520E87760889CD042853ADE.crl (hash: 0KZmR0AAaUypC9dybU3SYIYK094X1hdnwpLQI2MS4Ho=) 11: 3130332e3130352e37372e302f32342d3234203d3e203535363736.roa (hash: 89aIdO+EcaO2EgEgxRB/RqjR0BzQuTZKwEZg7t/EUN8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.crl rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E88BC8A7F27D2A5B7520E87760889CD042853ADE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 11:06:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:3f:cf:48:70:3a:b4:ce:19:f7:5e:ed:78:a0:67:e9:5d:f9:62:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E88BC8A7F27D2A5B7520E87760889CD042853ADE Validity Not Before: Sep 25 10:13:21 2026 GMT Not After : Sep 26 11:06:21 2026 GMT Subject: CN=F16258A1F888CAA9E9C8FA5F3E50CFE7FEB55743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:df:d7:de:30:b9:85:a9:90:de:d4:68:f9:7c: eb:ec:3f:79:81:19:28:f1:18:26:1c:96:26:57:34: f2:2e:51:ed:8f:56:8d:04:66:25:cd:95:5e:5a:62: 03:04:10:8d:d3:07:f1:d7:b7:71:f2:fe:7a:93:0c: d7:61:ed:5a:5e:c9:37:24:f7:a0:1e:93:1e:55:bd: e2:8d:a0:72:3d:b2:7a:68:0b:bd:bb:0d:fd:34:bd: c3:63:71:78:d6:0d:b7:82:5e:3a:49:c5:2e:22:61: c7:0e:15:1f:db:21:2a:2f:94:da:7f:90:f4:0d:74: bf:fd:0c:08:8d:3b:df:4e:1f:5b:70:21:c9:ed:e0: df:3b:32:9a:2e:bb:d4:5b:2f:0e:43:25:86:e2:47: f3:b3:e9:69:2a:91:f5:b6:0d:a8:ad:ec:31:4c:63: 73:5a:6d:a0:b0:ad:5c:be:9b:08:f1:0f:7c:28:7e: 76:74:22:b2:75:57:b8:13:3d:c4:64:b5:c6:ad:16: ec:84:b5:f6:b9:1e:64:f7:63:0a:88:16:38:a4:e5: 71:fb:9e:9b:ca:1b:77:ec:fe:de:44:ff:25:7c:cd: b1:c7:15:79:6e:61:ed:c7:34:c9:b8:da:e7:89:b6: 3b:c3:a1:1d:a2:2f:81:75:2d:a1:59:ba:06:e3:99: 95:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:62:58:A1:F8:88:CA:A9:E9:C8:FA:5F:3E:50:CF:E7:FE:B5:57:43 X509v3 Authority Key Identifier: keyid:E8:8B:C8:A7:F2:7D:2A:5B:75:20:E8:77:60:88:9C:D0:42:85:3A:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E88BC8A7F27D2A5B7520E87760889CD042853ADE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:e2:58:03:a7:89:0e:06:5c:66:3e:fa:e6:2a:cf:fc:37:fc: e1:4c:33:f6:82:c9:22:c1:71:48:cf:87:45:dd:a1:f3:43:9b: 7b:ac:01:22:63:d4:99:ad:13:04:ea:3c:60:7a:bc:79:f4:b7: 66:43:88:1f:11:4c:7d:5d:5c:08:85:55:ad:7e:93:7b:68:ac: 82:bf:74:50:40:fd:49:11:b3:e1:13:19:f3:cf:33:5e:26:01: 79:5f:2e:1a:f2:f3:c7:97:9c:02:c0:c8:54:30:3f:24:63:ce: cb:73:a6:74:8a:b8:5f:9d:09:71:a5:99:17:60:87:6b:ba:74: 90:c0:c1:b5:14:35:eb:28:1d:6e:50:2d:35:d6:d6:0f:91:6d: 90:79:da:93:4a:2a:a1:d1:56:26:15:88:99:b7:52:56:b2:a4: 7b:8b:99:ba:f2:3a:cb:ae:e2:bf:4d:22:19:a8:97:1e:e9:19: cb:73:b8:7e:0b:96:5b:ff:86:ba:bc:f1:6b:42:a1:ae:f0:8a: c0:8d:2e:b0:46:eb:51:ef:92:1c:cc:ce:50:47:5b:d3:b2:62: 31:dc:46:e9:c4:db:b0:98:05:da:56:a9:7a:97:eb:a0:d8:87: 4d:49:25:8d:1b:7d:23:e9:97:8a:fe:d3:5f:11:ab:4c:d9:66: 06:d9:70:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAT/PSHA6tM4Z917teKBn6V35YiAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg4QkM4QTdGMjdEMkE1Qjc1MjBFODc3NjA4ODlDRDA0 Mjg1M0FERTAeFw0yNjA5MjUxMDEzMjFaFw0yNjA5MjYxMTA2MjFaMDMxMTAvBgNV BAMTKEYxNjI1OEExRjg4OENBQTlFOUM4RkE1RjNFNTBDRkU3RkVCNTU3NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC739feMLmFqZDe1Gj5fOvsP3mB GSjxGCYcliZXNPIuUe2PVo0EZiXNlV5aYgMEEI3TB/HXt3Hy/nqTDNdh7VpeyTck 96Aekx5VveKNoHI9snpoC727Df00vcNjcXjWDbeCXjpJxS4iYccOFR/bISovlNp/ kPQNdL/9DAiNO99OH1twIcnt4N87Mpouu9RbLw5DJYbiR/Oz6WkqkfW2Dait7DFM Y3NabaCwrVy+mwjxD3wofnZ0IrJ1V7gTPcRktcatFuyEtfa5HmT3YwqIFjik5XH7 npvKG3fs/t5E/yV8zbHHFXluYe3HNMm42ueJtjvDoR2iL4F1LaFZugbjmZX9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8WJYofiIyqnpyPpfPlDP5/61V0MwHwYDVR0j BBgwFoAU6IvIp/J9Klt1IOh3YIic0EKFOt4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDc3YmMzZDItNGFiMy00Y2ZiLTkyMjItNjZjNmVhOTQ0N2UzLzAvRTg4QkM4QTdG MjdEMkE1Qjc1MjBFODc3NjA4ODlDRDA0Mjg1M0FERS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FODhCQzhBN0YyN0QyQTVCNzUyMEU4Nzc2MDg4OUNEMDQyODUz QURFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDc3YmMzZDItNGFiMy00Y2ZiLTky MjItNjZjNmVhOTQ0N2UzLzAvRTg4QkM4QTdGMjdEMkE1Qjc1MjBFODc3NjA4ODlD RDA0Mjg1M0FERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABLiWAOniQ4GXGY++uYqz/w3/OFMM/aCySLB cUjPh0XdofNDm3usASJj1JmtEwTqPGB6vHn0t2ZDiB8RTH1dXAiFVa1+k3torIK/ dFBA/UkRs+ETGfPPM14mAXlfLhry88eXnALAyFQwPyRjzstzpnSKuF+dCXGlmRdg h2u6dJDAwbUUNesoHW5QLTXW1g+RbZB52pNKKqHRViYViJm3UlaypHuLmbryOsuu 4r9NIhmolx7pGctzuH4Lllv/hrq88WtCoa7wisCNLrBG61HvkhzMzlBHW9OyYjHc RunE27CYBdpWqXqX66DYh01JJY0bfSPpl4r+018Rq0zZZgbZcCk= -----END CERTIFICATE-----Generated at Fri Sep 25 17:33:41 2026 by rpki-client