$ rpki-client -vvvf rpki-rsync.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/E035D5F5D70206748D3C087B30BFBCD15ECF196D.mft File: E035D5F5D70206748D3C087B30BFBCD15ECF196D.mft (raw, json) Hash identifier: OxDRapclKLhR4RHSZkWG5NDHuGeQ2b0qjnR2oYVMETk= Subject key identifier: E5:4D:58:A3:AB:77:BC:34:DF:1F:59:21:2D:10:63:4C:ED:E5:C6:9B Authority key identifier: E0:35:D5:F5:D7:02:06:74:8D:3C:08:7B:30:BF:BC:D1:5E:CF:19:6D Certificate issuer: /CN=E035D5F5D70206748D3C087B30BFBCD15ECF196D Certificate serial: 311B4BA719E82E53CA69225E5C1DD89C204DED4B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E035D5F5D70206748D3C087B30BFBCD15ECF196D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/E035D5F5D70206748D3C087B30BFBCD15ECF196D.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 21:27:43 +0000 Manifest this update: Wed 23 Sep 2026 21:22:43 +0000 Manifest next update: Fri 25 Sep 2026 00:37:43 +0000 Files and hashes: 1: 3130332e3137342e3132302e302f32332d3234203d3e20313437303937.roa (hash: Tts8f+N485CFXeqo33btYWO7LgUOuaCh8Px0kKwHoiY=) 2: 3130332e3137342e3132312e302f32342d3234203d3e20313437303937.roa (hash: alqTQlTJJckhtW2N9aw/g6aRbRRoD+/QvIdNlTJVbT8=) 3: 3130332e3137342e3132302e302f32342d3234203d3e20313437303937.roa (hash: 2NfEf/tbZtwHV+2PFzn79NkNRnQSkFLyDYFjiAxOlwQ=) 4: E035D5F5D70206748D3C087B30BFBCD15ECF196D.crl (hash: ZbXg5xeFTsgbUuV37ph1h+UF36mLgKIY18UX5wfK/5s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/E035D5F5D70206748D3C087B30BFBCD15ECF196D.crl rsync://rpki-rsync.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/E035D5F5D70206748D3C087B30BFBCD15ECF196D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E035D5F5D70206748D3C087B30BFBCD15ECF196D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:1b:4b:a7:19:e8:2e:53:ca:69:22:5e:5c:1d:d8:9c:20:4d:ed:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E035D5F5D70206748D3C087B30BFBCD15ECF196D Validity Not Before: Sep 23 21:22:43 2026 GMT Not After : Sep 25 00:37:43 2026 GMT Subject: CN=E54D58A3AB77BC34DF1F59212D10634CEDE5C69B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:46:dc:94:36:0d:13:d2:0f:1d:f1:10:94:b3: 17:cd:01:fe:f1:1e:94:58:8d:f3:09:80:3b:4b:34: 95:ef:85:49:78:b0:b4:10:ec:88:ff:ee:8d:e5:c3: 59:48:2d:b4:54:18:6a:75:76:2e:a4:f8:fd:14:c4: 97:20:46:7f:88:62:32:82:50:33:ab:87:50:95:aa: d6:55:56:76:9a:e1:10:6b:8d:2c:32:da:7c:af:c9: ca:9c:46:c7:38:9c:a6:a7:00:35:1d:ab:a1:af:fc: 7b:60:4f:62:0d:e7:33:af:77:25:20:f4:18:8a:01: 3e:97:1e:af:5c:29:02:a9:12:d8:61:47:ad:05:d9: 6b:88:a5:ca:13:e7:76:fe:3c:8e:a1:de:99:b8:45: a9:58:2e:76:57:8d:14:f1:de:a9:76:dd:d2:2f:5c: 85:5b:c9:7e:b5:3b:64:05:50:ae:7b:cb:fc:57:49: 74:1e:ef:52:83:25:50:65:3d:68:d4:5a:45:04:94: 8f:01:3b:21:e2:c6:73:27:1f:9d:b4:f2:6e:4c:6f: 3b:16:27:29:33:ac:7d:86:46:e7:5a:be:c3:86:41: d6:3f:84:98:f9:61:27:73:48:6a:b0:fd:23:90:34: 8a:cd:8e:2a:a4:50:2d:01:70:32:66:38:c8:37:d8: 84:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:4D:58:A3:AB:77:BC:34:DF:1F:59:21:2D:10:63:4C:ED:E5:C6:9B X509v3 Authority Key Identifier: keyid:E0:35:D5:F5:D7:02:06:74:8D:3C:08:7B:30:BF:BC:D1:5E:CF:19:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/E035D5F5D70206748D3C087B30BFBCD15ECF196D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E035D5F5D70206748D3C087B30BFBCD15ECF196D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/E035D5F5D70206748D3C087B30BFBCD15ECF196D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:d2:6d:f1:02:17:02:00:65:8e:9d:9e:55:b9:c2:ab:19:c4: 45:74:12:c4:79:01:24:8e:a0:f6:8e:61:37:c7:02:44:78:f3: 73:fe:58:a5:54:45:35:47:d9:24:71:2c:ef:32:6b:d8:31:ef: f1:c3:00:66:ea:12:a5:13:6e:78:d9:61:9a:5b:29:08:37:4d: 7a:29:54:8b:b9:c2:c1:f9:00:83:9a:fb:f4:7b:f3:33:fa:0a: a0:60:d8:84:62:1e:ef:e4:4f:0d:a0:31:12:b4:54:a0:37:f9: d7:04:c8:08:e8:1a:60:44:dd:f8:07:11:e2:f9:d4:c8:b9:49: 94:4c:08:0f:d5:ae:a8:ff:1f:1a:2c:60:3a:67:77:23:dc:03: 2f:e6:f3:86:e8:cb:29:2d:cf:09:72:a8:3d:cc:bd:65:fa:f2: a9:c2:01:10:f0:27:83:d9:4f:7d:89:f0:1d:3f:94:80:ec:b1: 24:2f:8c:93:8b:0a:f7:d8:80:5b:ba:50:9b:52:1c:e4:1c:7c: f3:27:67:68:e5:dc:fd:11:bb:ba:08:d9:08:92:3f:2d:21:9c: 73:f2:ba:d7:5b:5e:82:e1:9d:29:ec:60:ef:c5:61:80:71:44: 01:33:20:ea:6c:74:ff:9d:c7:ad:30:91:e9:d1:45:23:11:d7: e7:1f:1b:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMRtLpxnoLlPKaSJeXB3YnCBN7UswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTAzNUQ1RjVENzAyMDY3NDhEM0MwODdCMzBCRkJDRDE1 RUNGMTk2RDAeFw0yNjA5MjMyMTIyNDNaFw0yNjA5MjUwMDM3NDNaMDMxMTAvBgNV BAMTKEU1NEQ1OEEzQUI3N0JDMzRERjFGNTkyMTJEMTA2MzRDRURFNUM2OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2RtyUNg0T0g8d8RCUsxfNAf7x HpRYjfMJgDtLNJXvhUl4sLQQ7Ij/7o3lw1lILbRUGGp1di6k+P0UxJcgRn+IYjKC UDOrh1CVqtZVVnaa4RBrjSwy2nyvycqcRsc4nKanADUdq6Gv/HtgT2IN5zOvdyUg 9BiKAT6XHq9cKQKpEthhR60F2WuIpcoT53b+PI6h3pm4RalYLnZXjRTx3ql23dIv XIVbyX61O2QFUK57y/xXSXQe71KDJVBlPWjUWkUElI8BOyHixnMnH5208m5MbzsW JykzrH2GRudavsOGQdY/hJj5YSdzSGqw/SOQNIrNjiqkUC0BcDJmOMg32ISNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5U1Yo6t3vDTfH1khLRBjTO3lxpswHwYDVR0j BBgwFoAU4DXV9dcCBnSNPAh7ML+80V7PGW0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODZiMjA1MTUtOGQ3Yy00NDVjLWJmZjctYmFiZDUyNjU3ODBmLzAvRTAzNUQ1RjVE NzAyMDY3NDhEM0MwODdCMzBCRkJDRDE1RUNGMTk2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMDM1RDVGNUQ3MDIwNjc0OEQzQzA4N0IzMEJGQkNEMTVFQ0Yx OTZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODZiMjA1MTUtOGQ3Yy00NDVjLWJm ZjctYmFiZDUyNjU3ODBmLzAvRTAzNUQ1RjVENzAyMDY3NDhEM0MwODdCMzBCRkJD RDE1RUNGMTk2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFrSbfECFwIAZY6dnlW5wqsZxEV0EsR5ASSO oPaOYTfHAkR483P+WKVURTVH2SRxLO8ya9gx7/HDAGbqEqUTbnjZYZpbKQg3TXop VIu5wsH5AIOa+/R78zP6CqBg2IRiHu/kTw2gMRK0VKA3+dcEyAjoGmBE3fgHEeL5 1Mi5SZRMCA/Vrqj/HxosYDpndyPcAy/m84boyyktzwlyqD3MvWX68qnCARDwJ4PZ T32J8B0/lIDssSQvjJOLCvfYgFu6UJtSHOQcfPMnZ2jl3P0Ru7oI2QiSPy0hnHPy utdbXoLhnSnsYO/FYYBxRAEzIOpsdP+dx60wkenRRSMR1+cfG/U= -----END CERTIFICATE-----Generated at Thu Sep 24 02:42:52 2026 by rpki-client