$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.mft File: E97B01E9B103A0595C106FBDB4EA9635F3812B44.mft (raw, json) Hash identifier: Wj0Fr2A0Fr3x0Wtycf33t1aOiZA6Zgw50241CHQu7nU= Subject key identifier: 28:5B:5D:10:D7:78:12:D9:94:33:C1:46:D1:6F:9C:DD:05:C2:E1:11 Authority key identifier: E9:7B:01:E9:B1:03:A0:59:5C:10:6F:BD:B4:EA:96:35:F3:81:2B:44 Certificate issuer: /CN=E97B01E9B103A0595C106FBDB4EA9635F3812B44 Certificate serial: 3669F3195702E6F47E8E18D21ABABCE2FB8A45B7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97B01E9B103A0595C106FBDB4EA9635F3812B44.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.mft Manifest number: C4 Signing time: Thu 24 Sep 2026 14:59:25 +0000 Manifest this update: Thu 24 Sep 2026 14:54:25 +0000 Manifest next update: Fri 25 Sep 2026 17:59:25 +0000 Files and hashes: 1: 3130332e3134382e38382e302f32342d3234203d3e20313430343231.roa (hash: 17JZlywqEJeGYZvXZ5p1XRwbIJcNG0ARBxLeQExtlUI=) 2: E97B01E9B103A0595C106FBDB4EA9635F3812B44.crl (hash: EtJoIPAeukfxb49gVss827ZF177I1dUDWY2Jvm+mt6o=) 3: 3130332e3134382e38382e302f32332d3233203d3e20313430343231.roa (hash: 3u4SqpMZHOiN005smob5L/czZ7TrAkEBbioYuGaCo6o=) 4: 3130332e3134382e38392e302f32342d3234203d3e20313430343231.roa (hash: vqX/mtnN0W8RLZb7l8bNIZx8LnJh0g2gbraFilNseKo=) 5: 323030313a6466323a633938303a3a2f34382d3438203d3e20313430343231.roa (hash: eE2EjWF5JyFRMHUXcgYuX1KiOGjP1McRgQBH4Ci3bis=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.crl rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97B01E9B103A0595C106FBDB4EA9635F3812B44.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:69:f3:19:57:02:e6:f4:7e:8e:18:d2:1a:ba:bc:e2:fb:8a:45:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E97B01E9B103A0595C106FBDB4EA9635F3812B44 Validity Not Before: Sep 24 14:54:25 2026 GMT Not After : Sep 25 17:59:25 2026 GMT Subject: CN=285B5D10D77812D99433C146D16F9CDD05C2E111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c1:b4:0a:84:3b:03:ab:07:e8:92:79:52:a0: dd:9d:74:7a:bf:c0:86:cb:07:f7:d1:cc:4f:cb:d7: e3:46:21:9c:f3:24:3b:e4:34:28:79:fd:1f:a1:78: 7a:d3:71:3e:d4:8b:94:62:41:10:72:00:02:3e:d2: b1:4f:6f:0e:52:4c:f6:74:8f:52:57:ea:02:86:28: 31:8d:78:5d:c0:79:9e:94:e6:f4:89:ba:92:0f:90: c2:ef:10:0b:8e:65:95:c3:d3:bb:3c:e3:2b:6e:f5: 65:2b:4e:d9:da:c8:a1:fc:bd:fc:5c:b9:26:b3:7f: 72:cf:97:5b:98:1b:4f:25:8b:ae:b4:22:0c:3b:fd: 94:9e:ec:d3:1e:5a:19:12:85:d0:c7:11:63:15:e0: 95:ad:40:4b:4f:e5:ad:b7:a9:02:db:28:8a:93:c0: c2:dd:d9:e2:b9:15:b6:ef:0d:89:51:d1:17:ef:03: fa:e6:51:40:f0:7f:95:12:d6:6b:97:c2:11:31:33: 2d:f3:c2:75:a6:b6:82:91:df:d6:12:e8:78:32:3e: 8d:b2:5f:31:3c:c4:58:3b:ff:67:2f:e7:d6:41:b1: 6b:3e:7a:12:eb:64:8b:55:1a:73:18:7b:e2:e4:a5: 4a:0e:6a:f8:b4:46:d5:90:d5:ed:0f:00:77:6f:f3: 26:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:5B:5D:10:D7:78:12:D9:94:33:C1:46:D1:6F:9C:DD:05:C2:E1:11 X509v3 Authority Key Identifier: keyid:E9:7B:01:E9:B1:03:A0:59:5C:10:6F:BD:B4:EA:96:35:F3:81:2B:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97B01E9B103A0595C106FBDB4EA9635F3812B44.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:98:8e:3d:95:7f:4f:28:9f:3b:14:65:4e:e1:30:6b:61:8e: bf:70:08:40:a8:5f:ee:3a:35:2c:93:37:90:3c:18:1b:8d:07: b4:97:ad:82:e8:f3:21:6d:99:bc:a2:56:da:71:6e:06:79:f8: ea:52:91:4a:20:f0:94:11:f6:a4:f8:81:05:15:20:16:58:a3: 52:d1:4b:37:f4:16:b6:59:6c:21:21:2e:73:6f:14:ec:97:8c: cf:df:02:2e:7e:c8:45:bb:ea:d8:05:83:8c:30:6e:19:5b:10: 23:92:f1:fa:c6:3f:d2:e7:3b:8b:10:cf:2a:fb:18:52:04:9d: 1b:25:ac:af:9d:08:e2:20:9b:4d:c4:ae:81:6a:9d:ba:ca:98: 1e:16:95:b4:c1:0c:fb:f0:00:29:d8:6d:8a:a2:e8:92:14:55: 2e:03:7a:bd:b0:e4:2d:62:ed:63:b3:40:67:cf:24:ca:f7:4a: 1e:67:1c:18:7b:d0:7d:61:c1:f4:ab:6d:df:6b:c3:0e:d2:ee: 87:30:8a:8f:44:27:40:f2:56:53:fd:fe:45:07:23:e9:65:bd: 4f:51:f0:76:2e:0e:d9:c7:1d:12:62:6f:c5:65:c6:35:7f:3a: 34:d5:24:5d:d4:00:6f:80:be:19:6c:bb:56:19:41:ed:bc:88: c3:33:9d:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNmnzGVcC5vR+jhjSGrq84vuKRbcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk3QjAxRTlCMTAzQTA1OTVDMTA2RkJEQjRFQTk2MzVG MzgxMkI0NDAeFw0yNjA5MjQxNDU0MjVaFw0yNjA5MjUxNzU5MjVaMDMxMTAvBgNV BAMTKDI4NUI1RDEwRDc3ODEyRDk5NDMzQzE0NkQxNkY5Q0REMDVDMkUxMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYwbQKhDsDqwfoknlSoN2ddHq/ wIbLB/fRzE/L1+NGIZzzJDvkNCh5/R+heHrTcT7Ui5RiQRByAAI+0rFPbw5STPZ0 j1JX6gKGKDGNeF3AeZ6U5vSJupIPkMLvEAuOZZXD07s84ytu9WUrTtnayKH8vfxc uSazf3LPl1uYG08li660Igw7/ZSe7NMeWhkShdDHEWMV4JWtQEtP5a23qQLbKIqT wMLd2eK5FbbvDYlR0RfvA/rmUUDwf5US1muXwhExMy3zwnWmtoKR39YS6HgyPo2y XzE8xFg7/2cv59ZBsWs+ehLrZItVGnMYe+LkpUoOavi0RtWQ1e0PAHdv8yYnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKFtdENd4EtmUM8FG0W+c3QXC4REwHwYDVR0j BBgwFoAU6XsB6bEDoFlcEG+9tOqWNfOBK0QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGI3MmVjYTQtNzNhZC00ZTBiLWE2YTYtN2E2NTY5OGI3M2JlLzAvRTk3QjAxRTlC MTAzQTA1OTVDMTA2RkJEQjRFQTk2MzVGMzgxMkI0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOTdCMDFFOUIxMDNBMDU5NUMxMDZGQkRCNEVBOTYzNUYzODEy QjQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGI3MmVjYTQtNzNhZC00ZTBiLWE2 YTYtN2E2NTY5OGI3M2JlLzAvRTk3QjAxRTlCMTAzQTA1OTVDMTA2RkJEQjRFQTk2 MzVGMzgxMkI0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIeYjj2Vf08onzsUZU7hMGthjr9wCECoX+46 NSyTN5A8GBuNB7SXrYLo8yFtmbyiVtpxbgZ5+OpSkUog8JQR9qT4gQUVIBZYo1LR Szf0FrZZbCEhLnNvFOyXjM/fAi5+yEW76tgFg4wwbhlbECOS8frGP9LnO4sQzyr7 GFIEnRslrK+dCOIgm03EroFqnbrKmB4WlbTBDPvwACnYbYqi6JIUVS4Der2w5C1i 7WOzQGfPJMr3Sh5nHBh70H1hwfSrbd9rww7S7ocwio9EJ0DyVlP9/kUHI+llvU9R 8HYuDtnHHRJib8VlxjV/OjTVJF3UAG+Avhlsu1YZQe28iMMznTg= -----END CERTIFICATE-----Generated at Thu Sep 24 17:13:30 2026 by rpki-client