$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft File: E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft (raw, json) Hash identifier: hI6fI7/IpPhogWf/Lvt4XNgveCtL9uwKWc5nAwn+f/o= Subject key identifier: AB:0B:F4:83:65:79:3E:0F:FF:9B:A5:76:71:85:0C:58:F4:20:C5:5C Authority key identifier: E5:04:3A:05:3B:BA:5B:BD:65:F1:17:C3:80:A8:E5:ED:BB:FB:E9:6A Certificate issuer: /CN=E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A Certificate serial: 63C3DB7A60EE296516F074DCCE30EEE13AF1BCFC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 08:10:43 +0000 Manifest this update: Thu 24 Sep 2026 08:05:43 +0000 Manifest next update: Fri 25 Sep 2026 11:52:43 +0000 Files and hashes: 1: E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.crl (hash: X+Qj70j+z6+fZk0IfDza1uvqTNAltA3M+DKNJlfZqg4=) 2: 3136302e3138372e3133392e302f32342d3234203d3e20313533313232.roa (hash: mmr69bHLezkQuiDZandeSB0qYXcAYeWx1GHP/ifPRTA=) 3: 3136302e3138372e3133382e302f32342d3234203d3e20313533313232.roa (hash: is5WdfvUY1KRmUVaEDtXvqlI2WCzItjy85jNK7qc29s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.crl rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 11:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:c3:db:7a:60:ee:29:65:16:f0:74:dc:ce:30:ee:e1:3a:f1:bc:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A Validity Not Before: Sep 24 08:05:43 2026 GMT Not After : Sep 25 11:52:43 2026 GMT Subject: CN=AB0BF48365793E0FFF9BA57671850C58F420C55C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:56:ff:41:f3:8e:01:a9:88:04:2d:76:91:70: aa:1c:3a:82:c9:47:4e:9f:89:87:9f:d3:f1:c8:4b: 7b:ba:3f:5f:9d:93:95:18:af:dd:6a:6f:34:7b:7a: c2:73:99:ff:b4:01:7b:c5:24:7b:b3:df:2b:57:8b: 5e:79:e3:7d:da:d1:08:eb:f4:72:40:23:f6:53:93: 6c:3c:f4:c9:64:56:1a:02:b4:63:01:4f:d5:70:4c: 53:4b:66:42:26:f9:a9:68:07:f8:2e:7e:de:2a:02: 22:77:19:82:08:89:c4:f8:9f:b5:7d:19:f2:48:c6: 29:f6:8b:2d:d4:c0:8c:b5:1e:75:16:bd:16:fa:ab: d8:ef:37:c8:7e:6d:20:c1:19:b9:e1:b7:29:7b:86: dd:6a:19:ba:a9:70:33:50:e3:0f:d7:60:d8:38:06: 30:69:22:a4:b8:70:31:41:ae:4b:c1:a0:ea:04:cc: f8:66:2e:7b:c4:d7:83:de:39:6f:e7:99:62:99:8a: 24:47:28:ea:c5:6e:15:31:db:81:a3:72:8f:33:b9: 41:0b:2d:7d:a9:1f:47:87:fe:15:ae:45:42:20:cc: 8e:ed:a1:4c:96:1e:78:e4:27:65:44:f4:cd:a6:34: f0:3e:77:99:03:87:fe:88:11:dc:e7:b2:ef:20:79: 90:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:0B:F4:83:65:79:3E:0F:FF:9B:A5:76:71:85:0C:58:F4:20:C5:5C X509v3 Authority Key Identifier: keyid:E5:04:3A:05:3B:BA:5B:BD:65:F1:17:C3:80:A8:E5:ED:BB:FB:E9:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:1f:d2:b2:d7:3d:9f:fd:b9:33:39:11:64:5e:59:3a:30:7f: d7:63:21:c4:6e:bf:c0:20:58:93:86:f6:d6:1b:0d:a0:f9:b6: 35:2c:b0:35:f4:57:b9:7d:f8:d3:d8:20:fe:e9:3b:67:b9:81: a2:6d:18:09:91:15:fc:62:ae:dd:9b:0c:f7:d3:63:9a:30:fd: 7d:e3:36:d7:6c:ed:27:74:6e:65:27:f5:7a:e9:ac:36:3e:ae: c7:7d:53:c1:10:a3:d6:30:cd:50:d0:84:06:f3:7f:77:78:ab: 0b:f8:c7:17:9b:73:7e:81:bc:1b:b4:08:4a:d0:43:36:d8:62: 7c:bd:ca:a1:49:00:27:2e:ee:61:18:30:9e:2c:68:ad:0e:9b: 72:fd:ce:de:40:b2:43:e1:e0:7e:72:8f:3b:21:70:06:d8:0a: aa:a8:44:71:6c:90:92:66:7c:06:83:25:46:25:16:71:9a:a5: 57:a2:16:a7:23:9e:45:78:af:5d:7c:4d:47:99:39:69:db:06: 8e:0c:a6:59:6a:cb:d4:4b:0f:94:63:c7:35:92:85:0b:31:13: 2f:2e:3d:d5:01:dd:94:b2:64:93:c2:e7:c5:b1:94:62:2c:c3: 5d:f5:5a:4f:ab:a6:d3:73:9b:1f:4d:d6:5b:e9:a8:58:b3:b1: 1a:3f:9e:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY8PbemDuKWUW8HTczjDu4TrxvPwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTUwNDNBMDUzQkJBNUJCRDY1RjExN0MzODBBOEU1RURC QkZCRTk2QTAeFw0yNjA5MjQwODA1NDNaFw0yNjA5MjUxMTUyNDNaMDMxMTAvBgNV BAMTKEFCMEJGNDgzNjU3OTNFMEZGRjlCQTU3NjcxODUwQzU4RjQyMEM1NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvVv9B844BqYgELXaRcKocOoLJ R06fiYef0/HIS3u6P1+dk5UYr91qbzR7esJzmf+0AXvFJHuz3ytXi155433a0Qjr 9HJAI/ZTk2w89MlkVhoCtGMBT9VwTFNLZkIm+aloB/guft4qAiJ3GYIIicT4n7V9 GfJIxin2iy3UwIy1HnUWvRb6q9jvN8h+bSDBGbnhtyl7ht1qGbqpcDNQ4w/XYNg4 BjBpIqS4cDFBrkvBoOoEzPhmLnvE14PeOW/nmWKZiiRHKOrFbhUx24Gjco8zuUEL LX2pH0eH/hWuRUIgzI7toUyWHnjkJ2VE9M2mNPA+d5kDh/6IEdznsu8geZCrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqwv0g2V5Pg//m6V2cYUMWPQgxVwwHwYDVR0j BBgwFoAU5QQ6BTu6W71l8RfDgKjl7bv76WowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQyMmY2NDktOTk2OC00OTVkLWJkZjEtN2Q3NjI1NmRhYWQ1LzAvRTUwNDNBMDUz QkJBNUJCRDY1RjExN0MzODBBOEU1RURCQkZCRTk2QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FNTA0M0EwNTNCQkE1QkJENjVGMTE3QzM4MEE4RTVFREJCRkJF OTZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQyMmY2NDktOTk2OC00OTVkLWJk ZjEtN2Q3NjI1NmRhYWQ1LzAvRTUwNDNBMDUzQkJBNUJCRDY1RjExN0MzODBBOEU1 RURCQkZCRTk2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADQf0rLXPZ/9uTM5EWReWTowf9djIcRuv8Ag WJOG9tYbDaD5tjUssDX0V7l9+NPYIP7pO2e5gaJtGAmRFfxirt2bDPfTY5ow/X3j Ntds7Sd0bmUn9XrprDY+rsd9U8EQo9YwzVDQhAbzf3d4qwv4xxebc36BvBu0CErQ QzbYYny9yqFJACcu7mEYMJ4saK0Om3L9zt5AskPh4H5yjzshcAbYCqqoRHFskJJm fAaDJUYlFnGapVeiFqcjnkV4r118TUeZOWnbBo4Mpllqy9RLD5RjxzWShQsxEy8u PdUB3ZSyZJPC58WxlGIsw131Wk+rptNzmx9N1lvpqFizsRo/ntA= -----END CERTIFICATE-----Generated at Thu Sep 24 12:53:37 2026 by rpki-client