$ rpki-client -vvf rpki-rsync.idnic.net/repo/99104c50-40ff-4aaf-a209-be31ceda679b/0/E87EEEAA35D76955AEB555F946ED794035B56B72.mft File: E87EEEAA35D76955AEB555F946ED794035B56B72.mft (raw, json) Hash identifier: kJXa1idHqpynXcy2eAlU/V0Ac6yDn4nCverSFHa4ui8= Subject key identifier: 54:72:60:9F:20:CB:76:21:6A:E7:8C:8E:C3:45:A9:3A:BC:05:08:6E Authority key identifier: E8:7E:EE:AA:35:D7:69:55:AE:B5:55:F9:46:ED:79:40:35:B5:6B:72 Certificate issuer: /CN=E87EEEAA35D76955AEB555F946ED794035B56B72 Certificate serial: 0DBDBEF55D5AE6AF263EDBEA4F1A04C360A15CA1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E87EEEAA35D76955AEB555F946ED794035B56B72.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/99104c50-40ff-4aaf-a209-be31ceda679b/0/E87EEEAA35D76955AEB555F946ED794035B56B72.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 03:23:22 +0000 Manifest this update: Fri 24 Jul 2026 03:18:22 +0000 Manifest next update: Sat 25 Jul 2026 06:46:22 +0000 Files and hashes: 1: E87EEEAA35D76955AEB555F946ED794035B56B72.crl (hash: l/2Mbcg0jNOSPuadnUMJWAjQDWgLgIkIrXEeafWzYvc=) 2: 3130332e3234392e31382e302f32332d3234203d3e20313530323036.roa (hash: 23cNk898TX6KCtmP7qTej4qkKvszzgnklZmFVcKo/dk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/99104c50-40ff-4aaf-a209-be31ceda679b/0/E87EEEAA35D76955AEB555F946ED794035B56B72.crl rsync://rpki-rsync.idnic.net/repo/99104c50-40ff-4aaf-a209-be31ceda679b/0/E87EEEAA35D76955AEB555F946ED794035B56B72.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E87EEEAA35D76955AEB555F946ED794035B56B72.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 06:46:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:bd:be:f5:5d:5a:e6:af:26:3e:db:ea:4f:1a:04:c3:60:a1:5c:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E87EEEAA35D76955AEB555F946ED794035B56B72 Validity Not Before: Jul 24 03:18:22 2026 GMT Not After : Jul 25 06:46:22 2026 GMT Subject: CN=5472609F20CB76216AE78C8EC345A93ABC05086E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e4:e1:10:d1:47:91:ec:a7:15:5b:79:2b:e8: 77:ae:99:df:2b:1c:d3:c8:c0:58:ac:3c:d0:ab:87: a5:40:cd:51:71:d0:f7:0a:a9:1d:2c:b1:72:a3:51: f9:4b:20:8b:ff:d1:ef:76:2f:80:ff:40:de:e6:97: a1:38:2e:67:85:d6:51:6f:75:95:3d:d0:c8:f5:1e: da:73:50:88:cb:11:eb:ac:02:0c:a4:2e:69:2a:12: 04:da:e9:9e:03:f4:44:2b:66:89:42:d8:ac:2d:41: a2:0c:e9:8f:fb:f9:bc:a3:27:87:ee:b9:a8:f5:5f: 61:73:7f:e1:d1:0e:9a:6e:f1:1b:de:40:b1:5f:99: 6a:77:57:83:a9:4e:a4:01:96:4f:36:7f:aa:47:79: 94:ae:79:eb:4b:09:b1:53:0c:22:75:56:14:e4:0a: 0d:9f:fd:e2:f9:6a:28:81:1d:88:cf:da:0b:5b:c4: 15:93:70:9b:9e:33:59:94:92:41:4c:e9:6b:25:a8: c6:1f:9c:c0:15:b4:94:13:e4:66:45:fd:55:c2:8e: 70:95:c9:3a:11:30:f6:b6:41:08:33:25:4c:1d:47: 5a:65:7f:4f:04:87:36:0f:1a:37:0f:07:fa:49:6d: f5:85:32:6c:21:9f:5d:c2:3c:d5:30:75:78:f4:54: 20:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:72:60:9F:20:CB:76:21:6A:E7:8C:8E:C3:45:A9:3A:BC:05:08:6E X509v3 Authority Key Identifier: keyid:E8:7E:EE:AA:35:D7:69:55:AE:B5:55:F9:46:ED:79:40:35:B5:6B:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/99104c50-40ff-4aaf-a209-be31ceda679b/0/E87EEEAA35D76955AEB555F946ED794035B56B72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E87EEEAA35D76955AEB555F946ED794035B56B72.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/99104c50-40ff-4aaf-a209-be31ceda679b/0/E87EEEAA35D76955AEB555F946ED794035B56B72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:39:1a:9b:bb:12:3b:0e:b3:66:0a:a4:2c:9e:af:f9:55:2b: f1:ab:02:27:45:93:32:29:cb:bd:30:a6:93:e0:5a:54:0f:0a: cb:7d:0d:da:aa:97:f4:ff:ba:f2:60:fd:c2:26:0b:67:87:0a: 0f:0d:49:c5:d8:9b:f0:c8:25:67:85:52:dc:99:f5:5e:b3:03: 9a:20:00:ab:bb:e6:a6:9f:5e:b7:d9:af:ed:93:2f:f1:22:75: ed:a8:93:8b:cc:95:3c:ee:a0:f1:11:64:bb:f3:38:9d:3f:4e: 34:ed:e1:b3:37:f1:a9:26:27:3b:72:37:41:41:ef:32:e7:9e: 17:2a:95:4a:37:d0:a0:72:82:18:a3:d6:f1:8b:e7:8d:f4:76: b2:52:4a:bd:c8:54:e4:05:74:d6:b0:70:07:d8:41:22:79:cd: cf:5c:c7:dd:28:9c:e2:1f:db:ea:da:69:f0:0f:f4:47:79:17: b0:54:bf:84:df:00:ee:7e:f8:84:ce:01:ca:da:5e:f9:ca:c1: a6:cc:59:01:f2:c4:f4:62:95:67:47:8d:ca:41:bb:9c:fb:64: 56:20:1c:13:f6:54:f2:00:6d:a0:87:75:76:c3:bd:34:99:e8: 82:0e:dc:36:b9:97:e4:bc:33:24:fa:9b:0e:ea:57:2a:37:d0: f7:52:0b:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDb2+9V1a5q8mPtvqTxoEw2ChXKEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg3RUVFQUEzNUQ3Njk1NUFFQjU1NUY5NDZFRDc5NDAz NUI1NkI3MjAeFw0yNjA3MjQwMzE4MjJaFw0yNjA3MjUwNjQ2MjJaMDMxMTAvBgNV BAMTKDU0NzI2MDlGMjBDQjc2MjE2QUU3OEM4RUMzNDVBOTNBQkMwNTA4NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe5OEQ0UeR7KcVW3kr6Heumd8r HNPIwFisPNCrh6VAzVFx0PcKqR0ssXKjUflLIIv/0e92L4D/QN7ml6E4LmeF1lFv dZU90Mj1HtpzUIjLEeusAgykLmkqEgTa6Z4D9EQrZolC2KwtQaIM6Y/7+byjJ4fu uaj1X2Fzf+HRDppu8RveQLFfmWp3V4OpTqQBlk82f6pHeZSueetLCbFTDCJ1VhTk Cg2f/eL5aiiBHYjP2gtbxBWTcJueM1mUkkFM6WslqMYfnMAVtJQT5GZF/VXCjnCV yToRMPa2QQgzJUwdR1plf08EhzYPGjcPB/pJbfWFMmwhn13CPNUwdXj0VCB9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVHJgnyDLdiFq54yOw0WpOrwFCG4wHwYDVR0j BBgwFoAU6H7uqjXXaVWutVX5Ru15QDW1a3IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTkxMDRjNTAtNDBmZi00YWFmLWEyMDktYmUzMWNlZGE2NzliLzAvRTg3RUVFQUEz NUQ3Njk1NUFFQjU1NUY5NDZFRDc5NDAzNUI1NkI3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FODdFRUVBQTM1RDc2OTU1QUVCNTU1Rjk0NkVENzk0MDM1QjU2 QjcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTkxMDRjNTAtNDBmZi00YWFmLWEy MDktYmUzMWNlZGE2NzliLzAvRTg3RUVFQUEzNUQ3Njk1NUFFQjU1NUY5NDZFRDc5 NDAzNUI1NkI3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAA5Gpu7EjsOs2YKpCyer/lVK/GrAidFkzIp y70wppPgWlQPCst9Ddqql/T/uvJg/cImC2eHCg8NScXYm/DIJWeFUtyZ9V6zA5og AKu75qafXrfZr+2TL/Eide2ok4vMlTzuoPERZLvzOJ0/TjTt4bM38akmJztyN0FB 7zLnnhcqlUo30KByghij1vGL5430drJSSr3IVOQFdNawcAfYQSJ5zc9cx90onOIf 2+raafAP9Ed5F7BUv4TfAO5++ITOAcraXvnKwabMWQHyxPRilWdHjcpBu5z7ZFYg HBP2VPIAbaCHdXbDvTSZ6IIO3Da5l+S8MyT6mw7qVyo30PdSC6g= -----END CERTIFICATE-----Generated at Fri Jul 24 10:14:28 2026 by rpki-client