$ rpki-client -vvvf rpki-rsync.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.mft File: E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.mft (raw, json) Hash identifier: STFmoVHt6nDVg3k/ccFPjtXNSflz6Sf7xBTEdrUZQ7U= Subject key identifier: 41:66:5F:C1:D2:13:58:F5:47:C6:83:97:F9:FA:D1:84:D1:2F:3B:50 Authority key identifier: E3:0A:78:29:4D:1A:6B:6A:63:D2:7E:37:DD:6F:C6:E7:B8:0F:9E:D2 Certificate issuer: /CN=E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2 Certificate serial: 3E0EA129984F3C4E7BD146F00019C07D8BFB8611 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.mft Manifest number: C7 Signing time: Sat 26 Sep 2026 07:18:49 +0000 Manifest this update: Sat 26 Sep 2026 07:13:49 +0000 Manifest next update: Sun 27 Sep 2026 08:09:49 +0000 Files and hashes: 1: 3130332e3137302e3130302e302f32332d3234203d3e20313432333634.roa (hash: OU9KpCVaFyFqRPmbCa6ZHBE8msf8iFpD0/BG/bOi1fc=) 2: 323430373a633663303a3a2f33322d3438203d3e20313432333634.roa (hash: PIAfDzknn9MyXCe2w271kJi6m07dYGdxpQ/h99WENdo=) 3: 3130332e3137302e3130312e302f32342d3234203d3e20313432333634.roa (hash: SLypnwrf3BxVH5EVMKZIAtA3FLjbxPQy2OlEBbQP8b8=) 4: E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.crl (hash: f0kpAKHZ0prKJ7hHY7xcSxKUG4wWOXfWn8Wu/YR+TP0=) 5: 3130332e3137302e3130302e302f32342d3234203d3e20313432333634.roa (hash: G9l0N/5Yff3x6/dE83tqKmpystb7dUXqvchJKY01Vfc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.crl rsync://rpki-rsync.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 08:09:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:0e:a1:29:98:4f:3c:4e:7b:d1:46:f0:00:19:c0:7d:8b:fb:86:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2 Validity Not Before: Sep 26 07:13:49 2026 GMT Not After : Sep 27 08:09:49 2026 GMT Subject: CN=41665FC1D21358F547C68397F9FAD184D12F3B50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:84:7d:dc:22:97:b2:ff:a5:5f:ba:1f:dc:56: 4d:33:29:8b:1f:ee:33:c0:d2:f2:91:4a:8c:c9:85: 27:9a:5d:ae:77:1a:35:bf:5f:58:5c:b9:bf:03:9d: a8:3c:6e:21:b4:c3:9d:25:9c:ef:19:bd:d7:2e:b8: d5:47:13:89:dc:10:56:0f:9d:27:ba:3e:d9:2f:34: 8a:1c:a9:96:54:a5:4b:58:e1:88:2c:b7:13:65:1a: 38:8c:26:f8:32:dd:da:43:11:2f:e6:bf:04:fb:69: dc:23:4a:23:c1:77:48:f8:b6:35:fe:bf:d8:27:0d: dc:eb:1e:72:e6:1b:5c:48:0c:31:5f:13:5a:a5:f5: 27:de:53:df:d0:eb:5d:cb:21:9a:6e:c4:a4:1e:f0: c3:93:4c:5c:19:7b:9c:bd:23:76:6f:a1:80:2a:a3: f3:6b:84:cd:02:55:bd:40:3e:aa:7f:d6:07:28:27: 2b:db:33:af:be:bf:3d:6e:6d:87:d1:e4:d6:3e:d8: 49:31:43:93:ed:3b:30:74:53:12:8f:3a:ce:c1:3c: 89:14:4d:bf:57:64:b7:33:3e:85:ac:14:bd:23:7c: e1:49:5d:71:be:68:e9:c2:a8:9f:0f:63:8d:c1:bf: 5f:9a:b7:9a:07:5c:02:20:1a:54:0c:56:68:40:3f: ee:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:66:5F:C1:D2:13:58:F5:47:C6:83:97:F9:FA:D1:84:D1:2F:3B:50 X509v3 Authority Key Identifier: keyid:E3:0A:78:29:4D:1A:6B:6A:63:D2:7E:37:DD:6F:C6:E7:B8:0F:9E:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:e6:0c:e1:4f:ea:3a:87:4e:43:a5:86:5b:78:53:d0:f9:44: cf:16:56:da:80:1b:4d:a6:6a:02:3c:75:68:3b:14:4d:40:70: 51:67:6d:bc:f8:5c:2a:20:d2:cc:d2:ea:f5:21:d3:05:e0:7a: eb:9d:45:44:fc:ea:3b:3e:52:73:95:6d:53:6e:e9:a9:df:35: 2c:cd:2f:ff:31:6d:0b:65:09:8a:ee:32:17:51:b4:3a:6d:9c: 1a:59:44:13:73:6c:6f:e2:8f:0b:8d:2f:11:ba:ba:8f:ec:c1: 97:a4:a4:54:cc:bc:9d:6d:42:01:2c:90:93:57:35:26:f6:42: ce:42:25:25:15:63:6b:5f:17:0c:a6:0e:d3:26:ea:75:99:32: 83:2c:98:ea:44:23:9a:c5:ac:2a:af:d3:4d:e1:b4:b5:a0:a8: 0e:7f:84:20:35:e5:57:60:09:18:36:ea:df:f8:6b:f7:57:e6: d9:f3:48:42:48:ee:36:4c:7c:09:64:95:76:d5:a2:f0:08:cf: da:27:9a:c8:d8:95:7c:67:03:71:3f:12:25:ec:4a:01:0e:4d: 77:1c:8e:4f:9c:18:c4:f8:1e:60:a1:09:32:10:78:3f:98:f6: e3:a8:0a:49:1c:79:08:3d:00:3f:65:ed:e0:fc:45:a5:23:55: 9b:11:ef:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPg6hKZhPPE570UbwABnAfYv7hhEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTMwQTc4Mjk0RDFBNkI2QTYzRDI3RTM3REQ2RkM2RTdC ODBGOUVEMjAeFw0yNjA5MjYwNzEzNDlaFw0yNjA5MjcwODA5NDlaMDMxMTAvBgNV BAMTKDQxNjY1RkMxRDIxMzU4RjU0N0M2ODM5N0Y5RkFEMTg0RDEyRjNCNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjhH3cIpey/6Vfuh/cVk0zKYsf 7jPA0vKRSozJhSeaXa53GjW/X1hcub8Dnag8biG0w50lnO8ZvdcuuNVHE4ncEFYP nSe6PtkvNIocqZZUpUtY4YgstxNlGjiMJvgy3dpDES/mvwT7adwjSiPBd0j4tjX+ v9gnDdzrHnLmG1xIDDFfE1ql9SfeU9/Q613LIZpuxKQe8MOTTFwZe5y9I3ZvoYAq o/NrhM0CVb1APqp/1gcoJyvbM6++vz1ubYfR5NY+2EkxQ5PtOzB0UxKPOs7BPIkU Tb9XZLczPoWsFL0jfOFJXXG+aOnCqJ8PY43Bv1+at5oHXAIgGlQMVmhAP+69AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQWZfwdITWPVHxoOX+frRhNEvO1AwHwYDVR0j BBgwFoAU4wp4KU0aa2pj0n433W/G57gPntIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTYxY2Y3NzctOGFkZi00ZWYxLThkNmYtOTg2MmM1NTYyMGVhLzAvRTMwQTc4Mjk0 RDFBNkI2QTYzRDI3RTM3REQ2RkM2RTdCODBGOUVEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMzBBNzgyOTREMUE2QjZBNjNEMjdFMzdERDZGQzZFN0I4MEY5 RUQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTYxY2Y3NzctOGFkZi00ZWYxLThk NmYtOTg2MmM1NTYyMGVhLzAvRTMwQTc4Mjk0RDFBNkI2QTYzRDI3RTM3REQ2RkM2 RTdCODBGOUVEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACXmDOFP6jqHTkOlhlt4U9D5RM8WVtqAG02m agI8dWg7FE1AcFFnbbz4XCog0szS6vUh0wXgeuudRUT86js+UnOVbVNu6anfNSzN L/8xbQtlCYruMhdRtDptnBpZRBNzbG/ijwuNLxG6uo/swZekpFTMvJ1tQgEskJNX NSb2Qs5CJSUVY2tfFwymDtMm6nWZMoMsmOpEI5rFrCqv003htLWgqA5/hCA15Vdg CRg26t/4a/dX5tnzSEJI7jZMfAlklXbVovAIz9onmsjYlXxnA3E/EiXsSgEOTXcc jk+cGMT4HmChCTIQeD+Y9uOoCkkceQg9AD9l7eD8RaUjVZsR77c= -----END CERTIFICATE-----Generated at Sat Sep 26 18:33:41 2026 by rpki-client