$ rpki-client -vvf rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.mft File: E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.mft (raw, json) Hash identifier: kUbHNfNhiH6euOLAXizVVTqv54cEFGUVtTZISWu3Prs= Subject key identifier: 58:63:80:73:B4:07:FC:89:C0:0F:35:1B:16:AA:AA:02:23:D2:6B:3C Authority key identifier: E9:7D:24:06:2E:3E:80:91:38:8E:0E:26:DF:E8:25:A3:AE:0F:5E:C1 Certificate issuer: /CN=E97D24062E3E8091388E0E26DFE825A3AE0F5EC1 Certificate serial: 4FCE995AE29D207F8F389D73A75A97A1B123C58F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 22:01:53 +0000 Manifest this update: Thu 23 Jul 2026 21:56:53 +0000 Manifest next update: Sat 25 Jul 2026 00:11:53 +0000 Files and hashes: 1: 3130332e36382e3133362e302f32332d3233203d3e203338353131.roa (hash: mf3IPyVMZfES2LPj/qKW1uxRQxXFsgdbVk4fq7bhazg=) 2: 323030313a6466333a313230303a3a2f34382d3438203d3e20313335343535.roa (hash: R27uG9wLK3XnlCddZVxdbbwrtPpS8ZSeb7rGWZG6Ph4=) 3: 3130332e36382e3133362e302f32332d3234203d3e20313335343535.roa (hash: a9SdeOZSphcGVgljZg1tnbLWdBiFIVD0GygHfLT2ZLs=) 4: 3130332e36382e3133362e302f32342d3234203d3e203338353131.roa (hash: GFz+TTDbnW2nztXcZjgib7laNHpvzTT0hcf+2L3G+7o=) 5: 3130332e36382e3133362e302f32342d3234203d3e20313335343535.roa (hash: EhQ7R7hv9ww9SVAVibUO5OafRSJMymQa0QNdea7zNE0=) 6: 3130332e36382e3133372e302f32342d3234203d3e203338353131.roa (hash: IBqjxLNXqSTykZaxJEDmSDLPjTO+m3MiFe7W+kVNa1Q=) 7: 3130332e36382e3133372e302f32342d3234203d3e20313335343535.roa (hash: 2Vf+pTFqJv7XrQMn75awWPNpommC6ezf5Mi4NO6m5ug=) 8: E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.crl (hash: 1fys2/gnMe10c/avdCZiCQjWHHZZyH+GfSSyRRM6zPU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.crl rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:11:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:ce:99:5a:e2:9d:20:7f:8f:38:9d:73:a7:5a:97:a1:b1:23:c5:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E97D24062E3E8091388E0E26DFE825A3AE0F5EC1 Validity Not Before: Jul 23 21:56:53 2026 GMT Not After : Jul 25 00:11:53 2026 GMT Subject: CN=58638073B407FC89C00F351B16AAAA0223D26B3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:49:b6:c8:a8:8b:1f:85:05:b7:8e:65:b7:c2: c5:b1:96:dd:77:1f:92:a6:34:46:05:0e:4c:9b:b5: 2d:36:ef:cd:bb:49:3d:65:29:fb:da:2d:b5:55:a6: f3:7b:36:f3:e0:70:d3:ab:67:fc:b3:c7:31:95:2e: a2:f4:80:36:c9:08:83:8d:67:ff:bd:3e:61:5d:91: 71:27:86:e6:95:9a:10:9c:1d:5d:49:4f:31:8e:a3: e5:6b:d3:e5:66:a8:f8:f7:eb:d9:d2:6b:cd:39:11: 07:9f:60:22:4b:b5:42:45:24:c7:3c:fc:e4:b0:51: d8:c1:98:33:cb:45:7a:2a:40:3c:96:7c:fa:23:47: 18:e0:11:85:0e:b4:48:03:f2:ac:d8:cd:f8:0d:1d: 12:07:2a:94:4d:43:bf:fe:ee:25:56:63:b7:a6:cf: 07:37:f1:93:44:8d:b8:e0:89:77:84:f0:1b:fd:34: f5:3c:66:8a:4f:43:b5:f8:1c:a9:06:e7:b7:48:ef: f8:6c:d9:3c:23:df:65:f7:d6:d6:fc:61:3b:74:cc: 4e:27:2f:35:dc:69:1d:02:db:6c:ea:c2:fd:27:98: c9:fa:9c:13:6c:21:43:48:c0:51:29:b0:29:9a:02: d8:1c:28:0c:3a:58:27:f0:e5:75:88:73:53:26:94: 81:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:63:80:73:B4:07:FC:89:C0:0F:35:1B:16:AA:AA:02:23:D2:6B:3C X509v3 Authority Key Identifier: keyid:E9:7D:24:06:2E:3E:80:91:38:8E:0E:26:DF:E8:25:A3:AE:0F:5E:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:dc:8d:8c:c7:28:44:6c:e6:bc:4b:5a:f7:1c:c5:5e:0e:23: bd:2f:71:07:02:65:0f:e3:18:3e:ad:46:0c:43:4f:28:54:d3: c0:93:47:31:f7:36:64:ea:b8:0f:26:2e:b2:df:04:0f:14:9c: 4a:e2:b3:3b:34:62:59:c4:8d:60:9f:26:b5:06:da:16:aa:e8: d1:ed:a8:92:ff:37:ed:7f:7e:86:b3:11:bc:f6:b0:11:04:a8: d7:aa:d9:94:4f:c2:d2:48:32:df:79:f9:bb:78:a7:17:c0:02: 6b:d5:e4:f4:b7:28:76:ac:df:60:d6:41:e5:fe:41:43:8e:f1: 67:eb:95:7f:2c:af:95:5a:f9:53:12:fc:e5:24:de:07:da:ea: ad:ab:7c:b1:6d:be:f1:28:e3:40:7a:34:df:df:8c:62:7a:fa: 00:de:62:2a:88:ea:ef:b6:de:09:a0:fc:7c:19:13:0f:28:cb: ae:1a:57:d8:ff:64:f2:d0:21:cc:cd:cb:1e:06:ad:53:a7:33: 02:00:8b:05:cc:b3:ec:79:a4:8c:04:59:f5:f7:32:a3:9d:f1: fc:d7:5e:b9:ed:c4:b0:7a:80:88:97:ad:df:f9:f2:83:43:21: 16:ec:98:d7:f9:54:cb:76:94:ab:88:e0:82:d5:ef:bc:33:42: e0:0d:67:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT86ZWuKdIH+POJ1zp1qXobEjxY8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk3RDI0MDYyRTNFODA5MTM4OEUwRTI2REZFODI1QTNB RTBGNUVDMTAeFw0yNjA3MjMyMTU2NTNaFw0yNjA3MjUwMDExNTNaMDMxMTAvBgNV BAMTKDU4NjM4MDczQjQwN0ZDODlDMDBGMzUxQjE2QUFBQTAyMjNEMjZCM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1SbbIqIsfhQW3jmW3wsWxlt13 H5KmNEYFDkybtS027827ST1lKfvaLbVVpvN7NvPgcNOrZ/yzxzGVLqL0gDbJCION Z/+9PmFdkXEnhuaVmhCcHV1JTzGOo+Vr0+VmqPj369nSa805EQefYCJLtUJFJMc8 /OSwUdjBmDPLRXoqQDyWfPojRxjgEYUOtEgD8qzYzfgNHRIHKpRNQ7/+7iVWY7em zwc38ZNEjbjgiXeE8Bv9NPU8ZopPQ7X4HKkG57dI7/hs2Twj32X31tb8YTt0zE4n LzXcaR0C22zqwv0nmMn6nBNsIUNIwFEpsCmaAtgcKAw6WCfw5XWIc1MmlIGFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWGOAc7QH/InADzUbFqqqAiPSazwwHwYDVR0j BBgwFoAU6X0kBi4+gJE4jg4m3+glo64PXsEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTNkYzFiMDUtMmE2OS00NWIwLThjNDQtNjI2NzcyMjc2YmQ5LzAvRTk3RDI0MDYy RTNFODA5MTM4OEUwRTI2REZFODI1QTNBRTBGNUVDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOTdEMjQwNjJFM0U4MDkxMzg4RTBFMjZERkU4MjVBM0FFMEY1 RUMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTNkYzFiMDUtMmE2OS00NWIwLThj NDQtNjI2NzcyMjc2YmQ5LzAvRTk3RDI0MDYyRTNFODA5MTM4OEUwRTI2REZFODI1 QTNBRTBGNUVDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK/cjYzHKERs5rxLWvccxV4OI70vcQcCZQ/j GD6tRgxDTyhU08CTRzH3NmTquA8mLrLfBA8UnEriszs0YlnEjWCfJrUG2haq6NHt qJL/N+1/foazEbz2sBEEqNeq2ZRPwtJIMt95+bt4pxfAAmvV5PS3KHas32DWQeX+ QUOO8WfrlX8sr5Va+VMS/OUk3gfa6q2rfLFtvvEo40B6NN/fjGJ6+gDeYiqI6u+2 3gmg/HwZEw8oy64aV9j/ZPLQIczNyx4GrVOnMwIAiwXMs+x5pIwEWfX3MqOd8fzX XrntxLB6gIiXrd/58oNDIRbsmNf5VMt2lKuI4ILV77wzQuANZzo= -----END CERTIFICATE-----Generated at Fri Jul 24 07:44:56 2026 by rpki-client