$ rpki-client -vvvf rpki-rsync.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A.mft File: E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A.mft (raw, json) Hash identifier: nsu/8qnde4v7cySdZmIviZNBBnP7Ykf8p8fKjZ0ou38= Subject key identifier: C3:BC:82:53:24:BC:C9:CB:5D:5D:B9:54:7A:88:55:D7:C1:56:2A:FE Authority key identifier: E6:EF:A0:C9:87:EB:7B:DE:DC:D6:52:0F:CF:EA:A6:C6:F7:BF:D4:7A Certificate issuer: /CN=E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A Certificate serial: 58DA5EEEE4DDA59882C7A92F989F554A5C6C19DF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 17:37:48 +0000 Manifest this update: Wed 23 Sep 2026 17:32:48 +0000 Manifest next update: Thu 24 Sep 2026 19:27:48 +0000 Files and hashes: 1: 3130332e39312e3133372e302f32342d3234203d3e20313530323636.roa (hash: fEQ2RGA7SMjU1u5ivR067WU+IPRjxPNEFjBrW6SRr/A=) 2: 3130332e3231382e3138332e302f32342d3234203d3e20313530323636.roa (hash: xBjUpSUSZ8eUWIhz+cYXnDPEanv04sn2bLKLMW/gQsg=) 3: E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A.crl (hash: usJ9Si1jfpJazz4yWGij/8YgV/H3ZlXJ69XpA1+C7RE=) 4: 323030313a6466323a376234303a3a2f34382d3438203d3e20313530323636.roa (hash: VDHJo/qx9d4J355p/1MBoyGSP1OFutt76fTDKsTeD4I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A.crl rsync://rpki-rsync.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 19:27:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:da:5e:ee:e4:dd:a5:98:82:c7:a9:2f:98:9f:55:4a:5c:6c:19:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A Validity Not Before: Sep 23 17:32:48 2026 GMT Not After : Sep 24 19:27:48 2026 GMT Subject: CN=C3BC825324BCC9CB5D5DB9547A8855D7C1562AFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:db:25:c2:c1:bc:f9:1f:74:67:46:f5:02:cf: f5:9b:5f:40:1b:50:f6:d7:17:80:da:3c:aa:69:1f: c7:8c:58:e4:2e:15:52:f1:b1:bd:f7:86:53:0f:01: 75:c9:5f:b3:1b:c1:85:b5:1c:f3:a5:c3:5b:5f:61: a5:fd:51:cd:71:4c:61:bf:21:cf:1e:67:7c:56:f8: 16:94:7b:98:26:09:7b:e2:17:f1:b5:69:c4:e4:44: 2f:51:7c:2b:1c:e4:8b:1f:4e:7f:72:b7:0c:91:f7: f1:65:d5:16:ec:f6:2a:d2:44:7d:06:40:85:35:06: c2:51:cf:fb:18:2b:8b:41:e7:74:95:ee:dd:64:6f: be:28:73:04:94:08:65:92:a3:bc:f8:d4:ca:e8:c3: 0f:37:56:53:cd:35:c7:01:47:6c:c7:92:ef:f3:6a: 9e:70:4d:f8:b3:b5:45:11:db:f1:90:4d:8c:1d:d3: 1b:ec:68:d3:91:d2:db:c8:eb:1e:12:21:59:f5:e4: 3d:ba:65:1f:93:f3:30:6f:c1:7c:cc:88:a5:eb:a9: 9c:c7:38:e8:a6:8f:c1:47:72:ef:e9:ea:78:89:c5: 1c:0d:66:17:fd:23:ef:65:d1:e3:9a:07:44:16:97: 3a:ad:28:13:1e:42:25:cf:7d:84:43:ae:91:3d:83: df:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:BC:82:53:24:BC:C9:CB:5D:5D:B9:54:7A:88:55:D7:C1:56:2A:FE X509v3 Authority Key Identifier: keyid:E6:EF:A0:C9:87:EB:7B:DE:DC:D6:52:0F:CF:EA:A6:C6:F7:BF:D4:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:97:ec:dc:18:10:3a:1c:4f:e0:8d:cb:10:86:65:90:e1:d0: 6b:62:82:18:6f:16:39:64:55:4c:e2:26:e8:3f:a9:e3:38:52: 92:92:39:ee:dd:c3:1f:02:7f:55:e5:06:54:ab:23:9c:cd:8c: 9b:c6:fa:85:b7:6e:3d:ba:53:79:64:dc:34:c8:3c:6a:0e:69: 06:2f:c8:c4:d1:be:c8:ec:5e:b4:16:fc:63:ab:b9:83:58:f2: ee:b0:c6:d3:6f:7c:dc:a1:e5:e8:47:e1:21:e2:a2:39:74:b5: 6a:a4:cc:51:79:f3:3a:dd:63:fc:3d:99:9f:9f:03:41:19:e1: 15:47:53:02:15:1c:03:49:bd:9a:18:44:f0:64:5b:a7:55:f7: 9f:93:bc:f0:c2:86:3e:b0:4e:a7:f3:10:63:d1:16:5a:95:f9: 89:56:10:ba:c8:82:67:1c:bc:be:fb:9a:99:46:2c:93:ae:a1: 99:76:4f:f7:02:0b:92:d5:a4:55:f3:03:6b:34:7d:d2:aa:2b: 28:39:df:3e:b6:41:1f:3e:4c:39:1a:5c:b1:23:55:ae:14:db: 27:7e:43:bf:5e:7d:8f:e2:c3:89:36:c9:a5:7f:26:73:97:21: a5:f9:ab:11:81:d4:a0:4d:f1:cb:81:bc:c1:35:5b:26:d9:33: ce:10:4c:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWNpe7uTdpZiCx6kvmJ9VSlxsGd8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTZFRkEwQzk4N0VCN0JERURDRDY1MjBGQ0ZFQUE2QzZG N0JGRDQ3QTAeFw0yNjA5MjMxNzMyNDhaFw0yNjA5MjQxOTI3NDhaMDMxMTAvBgNV BAMTKEMzQkM4MjUzMjRCQ0M5Q0I1RDVEQjk1NDdBODg1NUQ3QzE1NjJBRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu2yXCwbz5H3RnRvUCz/WbX0Ab UPbXF4DaPKppH8eMWOQuFVLxsb33hlMPAXXJX7MbwYW1HPOlw1tfYaX9Uc1xTGG/ Ic8eZ3xW+BaUe5gmCXviF/G1acTkRC9RfCsc5IsfTn9ytwyR9/Fl1Rbs9irSRH0G QIU1BsJRz/sYK4tB53SV7t1kb74ocwSUCGWSo7z41Mroww83VlPNNccBR2zHku/z ap5wTfiztUUR2/GQTYwd0xvsaNOR0tvI6x4SIVn15D26ZR+T8zBvwXzMiKXrqZzH OOimj8FHcu/p6niJxRwNZhf9I+9l0eOaB0QWlzqtKBMeQiXPfYRDrpE9g99TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw7yCUyS8yctdXblUeohV18FWKv4wHwYDVR0j BBgwFoAU5u+gyYfre97c1lIPz+qmxve/1HowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTUyYmVhZTEtMzQ4MC00ZTkyLWEzYTktNWE1NGZiYmFjZDJkLzAvRTZFRkEwQzk4 N0VCN0JERURDRDY1MjBGQ0ZFQUE2QzZGN0JGRDQ3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNkVGQTBDOTg3RUI3QkRFRENENjUyMEZDRkVBQTZDNkY3QkZE NDdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTUyYmVhZTEtMzQ4MC00ZTkyLWEz YTktNWE1NGZiYmFjZDJkLzAvRTZFRkEwQzk4N0VCN0JERURDRDY1MjBGQ0ZFQUE2 QzZGN0JGRDQ3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABqX7NwYEDocT+CNyxCGZZDh0GtighhvFjlk VUziJug/qeM4UpKSOe7dwx8Cf1XlBlSrI5zNjJvG+oW3bj26U3lk3DTIPGoOaQYv yMTRvsjsXrQW/GOruYNY8u6wxtNvfNyh5ehH4SHiojl0tWqkzFF58zrdY/w9mZ+f A0EZ4RVHUwIVHANJvZoYRPBkW6dV95+TvPDChj6wTqfzEGPRFlqV+YlWELrIgmcc vL77mplGLJOuoZl2T/cCC5LVpFXzA2s0fdKqKyg53z62QR8+TDkaXLEjVa4U2yd+ Q79efY/iw4k2yaV/JnOXIaX5qxGB1KBN8cuBvME1WybZM84QTNA= -----END CERTIFICATE-----Generated at Wed Sep 23 23:04:23 2026 by rpki-client