$ rpki-client -vvvf rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/E86D81600C2E0C408A83A10FE1734F7CB80049B5.mft File: E86D81600C2E0C408A83A10FE1734F7CB80049B5.mft (raw, json) Hash identifier: RtjxI7MkOHaroWyXD5lMDvFZPxcZhyLPPV02KsJ3CVg= Subject key identifier: 59:FF:15:79:52:BB:A8:F9:FC:FA:A4:E7:2C:FF:E8:AB:7D:95:78:5C Authority key identifier: E8:6D:81:60:0C:2E:0C:40:8A:83:A1:0F:E1:73:4F:7C:B8:00:49:B5 Certificate issuer: /CN=E86D81600C2E0C408A83A10FE1734F7CB80049B5 Certificate serial: 0BE0EBE6E17EE4B45331532546CDED149D92BF8E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E86D81600C2E0C408A83A10FE1734F7CB80049B5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/E86D81600C2E0C408A83A10FE1734F7CB80049B5.mft Manifest number: C4 Signing time: Sat 26 Sep 2026 01:06:31 +0000 Manifest this update: Sat 26 Sep 2026 01:01:31 +0000 Manifest next update: Sun 27 Sep 2026 05:04:31 +0000 Files and hashes: 1: E86D81600C2E0C408A83A10FE1734F7CB80049B5.crl (hash: DRV7yErpYwNOrF63Ce+EcfwDqBl/zLgRkRzcLJ1EJH8=) 2: 3130332e3132372e3134352e302f32342d3234203d3e203633383732.roa (hash: IjEzO4J4/DAGMp7yw/Fv4jYmilXWlJ5CggUFR3MkMwg=) 3: 3130332e3132372e3134342e302f32342d3234203d3e203633383732.roa (hash: b2H2J9oU1FTem9NxnIqJBxJ6q92fSr/bX1QAdywuSTE=) 4: 323030313a6466333a6330303a3a2f34382d3438203d3e203633383732.roa (hash: z3UTfjn7LsK1eLHAQE8Fe9WFM0g5YMcTUPNSeasibaA=) 5: 3130332e35322e3137312e302f32342d3234203d3e203633383732.roa (hash: b/Ogd32BhDs9RrIQse7X4kUyjngtFlmzyV/u5hkoU2o=) 6: 3130332e35322e3137302e302f32332d3233203d3e203633383732.roa (hash: MQJVRwYJnTX2QpJhcgqI//Yd9f8cE6OV9xHlB/+R9PA=) 7: 3130332e3132372e3134342e302f32332d3233203d3e203633383732.roa (hash: YESQQe584DxGo0SLuNik4wkwCQuVf9tDli0g7fG2mUQ=) 8: 3130332e35322e3137302e302f32342d3234203d3e203633383732.roa (hash: BkJTNl2EaGlXKx/0oxL6MDW8bV/3huXeq9qOcksMrJo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/E86D81600C2E0C408A83A10FE1734F7CB80049B5.crl rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/E86D81600C2E0C408A83A10FE1734F7CB80049B5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E86D81600C2E0C408A83A10FE1734F7CB80049B5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:e0:eb:e6:e1:7e:e4:b4:53:31:53:25:46:cd:ed:14:9d:92:bf:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E86D81600C2E0C408A83A10FE1734F7CB80049B5 Validity Not Before: Sep 26 01:01:31 2026 GMT Not After : Sep 27 05:04:31 2026 GMT Subject: CN=59FF157952BBA8F9FCFAA4E72CFFE8AB7D95785C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:09:24:ab:02:bf:49:23:95:75:5a:e0:7c:e5: 26:66:25:5d:da:29:54:ff:dd:33:bd:53:60:bd:2c: 1b:5d:b3:62:ea:b6:b7:54:52:60:15:73:6a:06:2f: 57:92:8a:fc:f1:be:65:97:fd:67:f8:e9:b7:9d:1e: 9b:1c:f3:7c:18:85:00:82:a1:29:d4:8b:61:a5:d7: fe:d1:47:70:46:57:84:f7:74:0e:5f:a7:5b:b1:38: a3:39:2e:5c:d2:a1:9e:de:62:28:b6:41:f2:4e:b8: 31:af:20:cc:4d:a3:5e:c8:79:df:27:f5:c6:8e:3e: ee:fc:90:78:ca:2d:36:8d:8c:d0:f5:ac:b1:99:49: a0:e3:74:97:d6:58:c8:23:74:30:b7:9b:f9:e6:f1: 68:fd:a8:e6:e5:f0:9d:ef:72:89:a8:78:63:2c:24: f5:6d:1b:7b:7b:2e:30:19:76:23:eb:1a:e3:e0:33: 3f:97:2e:83:9f:10:cd:6d:18:ab:83:d1:08:10:e5: 7a:8f:22:14:e4:0d:4b:43:03:65:fc:2b:dc:22:95: 61:36:0b:05:bf:9e:ab:a7:4b:b6:55:98:ef:cb:92: 82:43:67:7a:c2:95:84:e4:bb:8f:a8:30:1c:94:3e: 8a:f8:ed:89:96:b1:9e:81:70:a9:25:67:42:43:a5: 21:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:FF:15:79:52:BB:A8:F9:FC:FA:A4:E7:2C:FF:E8:AB:7D:95:78:5C X509v3 Authority Key Identifier: keyid:E8:6D:81:60:0C:2E:0C:40:8A:83:A1:0F:E1:73:4F:7C:B8:00:49:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/E86D81600C2E0C408A83A10FE1734F7CB80049B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E86D81600C2E0C408A83A10FE1734F7CB80049B5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/E86D81600C2E0C408A83A10FE1734F7CB80049B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:a5:2a:d7:bd:c8:9a:89:58:d9:c8:b7:bc:4b:be:69:8d:83: aa:70:34:c6:77:db:1d:df:b2:db:a2:c1:46:85:89:4f:7f:15: b6:ce:bb:51:75:ab:35:34:77:32:51:45:ac:96:ca:aa:1a:70: 5b:96:cf:8d:12:bf:a1:59:ef:ea:5d:53:4c:60:c2:14:53:44: 65:26:73:a1:a2:43:9f:1e:2f:63:ae:7e:d6:e6:8d:b0:1b:1b: 9f:69:b1:5b:0f:04:0f:9b:4f:ed:73:c9:14:65:8f:dc:f2:68: d8:91:92:17:e8:3a:4b:8b:e6:a0:fd:9b:91:fa:8c:c8:17:81: 9b:40:6a:9c:29:57:3a:91:80:e8:5d:60:77:a2:49:b4:a2:ce: 98:4f:41:b9:ac:e4:c2:e5:55:74:7d:9a:8a:f2:19:b6:30:50: 6b:d9:94:f5:4b:fb:ba:34:12:61:00:f6:b1:c2:8f:04:02:60: bd:cc:bb:cc:19:34:e5:ca:9d:af:d0:31:c4:fb:10:15:5c:75: 37:f5:b0:da:b9:cf:cf:51:cb:51:2c:9a:36:44:24:37:df:65: cf:9c:0b:61:3e:b3:75:77:0f:2d:b1:9b:f2:58:96:8c:4e:7c: ba:70:9c:d2:80:c5:ea:17:0c:9f:17:5a:5d:eb:c2:38:bb:4f: a4:f9:1b:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC+Dr5uF+5LRTMVMlRs3tFJ2Sv44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg2RDgxNjAwQzJFMEM0MDhBODNBMTBGRTE3MzRGN0NC ODAwNDlCNTAeFw0yNjA5MjYwMTAxMzFaFw0yNjA5MjcwNTA0MzFaMDMxMTAvBgNV BAMTKDU5RkYxNTc5NTJCQkE4RjlGQ0ZBQTRFNzJDRkZFOEFCN0Q5NTc4NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsCSSrAr9JI5V1WuB85SZmJV3a KVT/3TO9U2C9LBtds2LqtrdUUmAVc2oGL1eSivzxvmWX/Wf46bedHpsc83wYhQCC oSnUi2Gl1/7RR3BGV4T3dA5fp1uxOKM5LlzSoZ7eYii2QfJOuDGvIMxNo17Ied8n 9caOPu78kHjKLTaNjND1rLGZSaDjdJfWWMgjdDC3m/nm8Wj9qObl8J3vcomoeGMs JPVtG3t7LjAZdiPrGuPgMz+XLoOfEM1tGKuD0QgQ5XqPIhTkDUtDA2X8K9wilWE2 CwW/nqunS7ZVmO/LkoJDZ3rClYTku4+oMByUPor47YmWsZ6BcKklZ0JDpSF/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWf8VeVK7qPn8+qTnLP/oq32VeFwwHwYDVR0j BBgwFoAU6G2BYAwuDECKg6EP4XNPfLgASbUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTZiYjMzM2MtOTgyYi00ZmNlLWFjODEtYmMwNjkyMjllMjQzLzAvRTg2RDgxNjAw QzJFMEM0MDhBODNBMTBGRTE3MzRGN0NCODAwNDlCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FODZEODE2MDBDMkUwQzQwOEE4M0ExMEZFMTczNEY3Q0I4MDA0 OUI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTZiYjMzM2MtOTgyYi00ZmNlLWFj ODEtYmMwNjkyMjllMjQzLzAvRTg2RDgxNjAwQzJFMEM0MDhBODNBMTBGRTE3MzRG N0NCODAwNDlCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH+lKte9yJqJWNnIt7xLvmmNg6pwNMZ32x3f stuiwUaFiU9/FbbOu1F1qzU0dzJRRayWyqoacFuWz40Sv6FZ7+pdU0xgwhRTRGUm c6GiQ58eL2OuftbmjbAbG59psVsPBA+bT+1zyRRlj9zyaNiRkhfoOkuL5qD9m5H6 jMgXgZtAapwpVzqRgOhdYHeiSbSizphPQbms5MLlVXR9moryGbYwUGvZlPVL+7o0 EmEA9rHCjwQCYL3Mu8wZNOXKna/QMcT7EBVcdTf1sNq5z89Ry1EsmjZEJDffZc+c C2E+s3V3Dy2xm/JYloxOfLpwnNKAxeoXDJ8XWl3rwji7T6T5G80= -----END CERTIFICATE-----Generated at Sat Sep 26 05:03:31 2026 by rpki-client