$ rpki-client -vvf rpki-rsync.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.mft File: E9A8A6B9E08D026673630DC1A26DBE73DFA16132.mft (raw, json) Hash identifier: KkLWEOmNL8x+R9p6vGOSMqITD+2IbokxB2z1W7vvzIM= Subject key identifier: 9A:3C:95:0E:2D:FE:4C:DC:2E:AF:5A:B5:78:6A:63:D2:31:BA:CC:A0 Authority key identifier: E9:A8:A6:B9:E0:8D:02:66:73:63:0D:C1:A2:6D:BE:73:DF:A1:61:32 Certificate issuer: /CN=E9A8A6B9E08D026673630DC1A26DBE73DFA16132 Certificate serial: 232ACA3BB4955079F73E8A8196E0C3D61397DA95 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:56:42 +0000 Manifest this update: Tue 12 May 2026 22:51:42 +0000 Manifest next update: Thu 14 May 2026 01:25:42 +0000 Files and hashes: 1: E9A8A6B9E08D026673630DC1A26DBE73DFA16132.crl (hash: CQ2y4nDcN73ZIP41/BOGXhyE34rMIM/tuJ7JWfNLjQU=) 2: 3130332e3136302e33372e302f32342d3234203d3e20313431353834.roa (hash: 5XEDOOrbyLaQ3rvBerNKeMoDupncLVY5Kqo+4A1sTYY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.crl rsync://rpki-rsync.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:2a:ca:3b:b4:95:50:79:f7:3e:8a:81:96:e0:c3:d6:13:97:da:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9A8A6B9E08D026673630DC1A26DBE73DFA16132 Validity Not Before: May 12 22:51:42 2026 GMT Not After : May 14 01:25:42 2026 GMT Subject: CN=9A3C950E2DFE4CDC2EAF5AB5786A63D231BACCA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:16:8c:77:5c:29:ef:d2:a1:a9:4d:75:f5:50: 5f:e8:cd:da:a3:d0:c2:1e:2b:c7:8b:50:8b:95:4a: 06:0c:11:a7:0b:7b:f3:1f:a8:9b:19:53:e6:74:96: 87:bd:de:c6:42:81:62:1f:40:ab:19:9d:80:f3:f8: bc:0d:7d:7d:02:ed:9c:24:8e:dc:50:3d:84:85:ea: 83:ae:3b:a9:d3:bf:9f:b5:f0:9f:cb:49:7f:09:6c: d0:6d:12:cf:37:39:0a:97:ef:f2:7c:2f:da:14:c8: 75:4d:af:c3:94:fc:33:da:59:61:14:91:8a:a2:76: e2:ef:ac:66:fb:9f:bc:e4:90:77:50:1d:18:01:4c: cb:93:5b:c6:21:81:0e:a8:0b:8a:18:76:7f:da:5f: fd:e8:2d:a6:5a:db:a1:55:dd:85:b4:0e:57:f2:7e: ee:ec:74:6d:f3:c5:be:b2:43:4b:c9:8f:fe:27:15: bd:76:49:53:f3:df:ed:72:fa:93:d2:11:b8:ec:8d: 4d:fd:e9:04:bb:17:31:28:ed:d7:66:2c:3c:92:d9: 59:83:bd:35:66:9f:97:4a:8b:ec:49:e4:46:12:f0: 4b:c4:27:6c:73:93:be:fa:4b:63:c9:f4:45:fb:d1: 74:db:47:20:0f:d9:c8:ed:64:aa:af:c8:bb:29:46: d2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:3C:95:0E:2D:FE:4C:DC:2E:AF:5A:B5:78:6A:63:D2:31:BA:CC:A0 X509v3 Authority Key Identifier: keyid:E9:A8:A6:B9:E0:8D:02:66:73:63:0D:C1:A2:6D:BE:73:DF:A1:61:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:a8:27:40:bb:14:ed:1b:b9:d2:35:e4:1a:7d:30:7b:37:8b: a4:1c:25:ae:64:b2:d7:20:b4:71:b0:44:70:50:f9:86:87:b9: d6:b3:b3:e3:54:77:98:c6:55:b0:92:39:98:18:c6:75:3a:67: 56:55:01:18:61:11:33:86:fa:c3:25:f1:3f:46:ae:3e:0d:94: a0:07:81:64:9f:88:81:2e:2e:0d:c1:02:36:ad:58:09:8b:71: 6d:31:7c:87:76:8b:cf:66:d7:37:6c:e4:e7:74:6b:fe:ac:63: 89:48:ae:b7:65:f3:2c:92:52:29:fe:59:26:ea:cf:90:9a:0b: 30:d7:46:2c:d4:8e:7c:ca:e4:76:47:02:00:ff:40:dc:22:ed: 7f:75:a7:77:ac:e8:16:87:64:c8:d8:b8:23:0f:b7:dc:cc:56: a4:c8:94:a1:21:31:37:cf:ed:9c:f7:d9:89:20:29:90:79:7c: a2:b1:d0:2e:d8:d3:af:5d:bf:1e:7a:c0:ea:3f:60:43:d0:ee: 02:ff:3f:6f:80:09:a9:13:ca:b1:c7:6f:14:5b:27:29:33:05: 24:02:71:77:fd:47:f9:2b:23:42:dc:24:2f:7a:a1:69:63:61: f5:2c:56:72:ab:99:3e:c7:49:65:99:00:2a:52:78:b0:3b:d2: 6a:d1:f1:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIyrKO7SVUHn3PoqBluDD1hOX2pUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlBOEE2QjlFMDhEMDI2NjczNjMwREMxQTI2REJFNzNE RkExNjEzMjAeFw0yNjA1MTIyMjUxNDJaFw0yNjA1MTQwMTI1NDJaMDMxMTAvBgNV BAMTKDlBM0M5NTBFMkRGRTRDREMyRUFGNUFCNTc4NkE2M0QyMzFCQUNDQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNFox3XCnv0qGpTXX1UF/ozdqj 0MIeK8eLUIuVSgYMEacLe/MfqJsZU+Z0loe93sZCgWIfQKsZnYDz+LwNfX0C7Zwk jtxQPYSF6oOuO6nTv5+18J/LSX8JbNBtEs83OQqX7/J8L9oUyHVNr8OU/DPaWWEU kYqiduLvrGb7n7zkkHdQHRgBTMuTW8YhgQ6oC4oYdn/aX/3oLaZa26FV3YW0Dlfy fu7sdG3zxb6yQ0vJj/4nFb12SVPz3+1y+pPSEbjsjU396QS7FzEo7ddmLDyS2VmD vTVmn5dKi+xJ5EYS8EvEJ2xzk776S2PJ9EX70XTbRyAP2cjtZKqvyLspRtJvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmjyVDi3+TNwur1q1eGpj0jG6zKAwHwYDVR0j BBgwFoAU6aimueCNAmZzYw3Bom2+c9+hYTIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzg0NmZlZDctZjg4ZS00OGVhLWE2ZDEtNmY3NTZiY2Y4ZGI2LzAvRTlBOEE2QjlF MDhEMDI2NjczNjMwREMxQTI2REJFNzNERkExNjEzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOUE4QTZCOUUwOEQwMjY2NzM2MzBEQzFBMjZEQkU3M0RGQTE2 MTMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzg0NmZlZDctZjg4ZS00OGVhLWE2 ZDEtNmY3NTZiY2Y4ZGI2LzAvRTlBOEE2QjlFMDhEMDI2NjczNjMwREMxQTI2REJF NzNERkExNjEzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG2oJ0C7FO0budI15Bp9MHs3i6QcJa5kstcg tHGwRHBQ+YaHudazs+NUd5jGVbCSOZgYxnU6Z1ZVARhhETOG+sMl8T9Grj4NlKAH gWSfiIEuLg3BAjatWAmLcW0xfId2i89m1zds5Od0a/6sY4lIrrdl8yySUin+WSbq z5CaCzDXRizUjnzK5HZHAgD/QNwi7X91p3es6BaHZMjYuCMPt9zMVqTIlKEhMTfP 7Zz32YkgKZB5fKKx0C7Y069dvx56wOo/YEPQ7gL/P2+ACakTyrHHbxRbJykzBSQC cXf9R/krI0LcJC96oWljYfUsVnKrmT7HSWWZACpSeLA70mrR8aM= -----END CERTIFICATE-----Generated at Wed May 13 04:53:32 2026 by rpki-client