$ rpki-client -vvvf rpki-rsync.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/E57A1275BA6338436B9AC4AE519D143B5747116B.mft File: E57A1275BA6338436B9AC4AE519D143B5747116B.mft (raw, json) Hash identifier: UDcalhHFUqKb/Pwqo5N6oUALGtQlP7e3pdgpdva1Vf0= Subject key identifier: 05:16:17:8E:0A:17:93:5D:0F:61:1A:09:B4:61:92:C1:20:04:FB:35 Authority key identifier: E5:7A:12:75:BA:63:38:43:6B:9A:C4:AE:51:9D:14:3B:57:47:11:6B Certificate issuer: /CN=E57A1275BA6338436B9AC4AE519D143B5747116B Certificate serial: 5B9B8E4EEF1D09453AB84AC22ADDE69B0590E12C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E57A1275BA6338436B9AC4AE519D143B5747116B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/E57A1275BA6338436B9AC4AE519D143B5747116B.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 10:33:43 +0000 Manifest this update: Thu 24 Sep 2026 10:28:43 +0000 Manifest next update: Fri 25 Sep 2026 12:51:43 +0000 Files and hashes: 1: 3130332e3138342e3132382e302f32342d3234203d3e20313439363830.roa (hash: hnn33VKD9efbhB9XD33L1BjuaAJltz7STiP/0n5gC5M=) 2: E57A1275BA6338436B9AC4AE519D143B5747116B.crl (hash: P18f3f3XX8wyk5KXlX2pn1C2FIqIu7WnEGl1K4tegQA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/E57A1275BA6338436B9AC4AE519D143B5747116B.crl rsync://rpki-rsync.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/E57A1275BA6338436B9AC4AE519D143B5747116B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E57A1275BA6338436B9AC4AE519D143B5747116B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:9b:8e:4e:ef:1d:09:45:3a:b8:4a:c2:2a:dd:e6:9b:05:90:e1:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E57A1275BA6338436B9AC4AE519D143B5747116B Validity Not Before: Sep 24 10:28:43 2026 GMT Not After : Sep 25 12:51:43 2026 GMT Subject: CN=0516178E0A17935D0F611A09B46192C12004FB35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b3:e7:4d:78:5f:c4:f3:a4:64:9d:a7:37:8d: 90:a4:5d:c7:92:3b:a6:ac:bf:58:7c:38:d7:2a:5e: e1:da:3d:43:9d:e2:cc:e1:00:32:fb:36:3c:c2:3c: e7:2c:8b:28:08:b7:19:8e:4b:ba:09:1d:99:93:23: 2d:29:7c:5d:f1:36:42:2d:04:68:8b:4e:5b:3f:bd: 6e:7a:95:0d:1f:16:f7:2f:8a:92:e9:9d:c6:ac:a7: 9d:c3:e9:1c:1e:65:35:a2:86:8c:b4:e0:de:bd:f6: 88:f8:c6:76:69:45:48:f3:62:90:98:dd:37:af:b5: f6:90:7c:2c:8d:a4:ec:d0:9c:33:32:66:a2:73:a0: c2:77:1f:e4:25:30:57:04:69:49:27:c4:71:20:da: dc:94:4b:d3:f6:d1:b1:09:f6:b3:a3:26:06:74:c1: ce:1b:e1:fb:ca:e9:51:a3:42:0e:6b:c2:b4:56:3b: fd:31:fc:3c:1d:54:bc:a0:dd:7e:77:04:72:65:5c: 0d:95:56:6c:e5:6f:d4:a1:bb:8a:3e:10:dc:cb:5e: f4:a0:d5:92:21:7c:4f:f5:b8:17:4f:41:53:c2:38: e7:bb:9a:e4:27:7e:fa:c1:f3:a4:d7:34:d3:16:fa: cc:9c:0d:a8:8e:6e:8a:be:a2:6f:52:72:b9:d2:00: 8b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:16:17:8E:0A:17:93:5D:0F:61:1A:09:B4:61:92:C1:20:04:FB:35 X509v3 Authority Key Identifier: keyid:E5:7A:12:75:BA:63:38:43:6B:9A:C4:AE:51:9D:14:3B:57:47:11:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/E57A1275BA6338436B9AC4AE519D143B5747116B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E57A1275BA6338436B9AC4AE519D143B5747116B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/E57A1275BA6338436B9AC4AE519D143B5747116B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:13:4c:f0:9e:3e:9c:ab:b5:0e:43:be:ad:8c:3d:15:a4:df: f6:7b:87:8f:e5:35:51:e9:41:e5:9d:c9:02:f8:54:c6:e5:13: a6:76:00:69:48:53:f7:49:29:eb:f7:ba:b7:0c:56:b3:ff:e3: 75:49:99:65:d5:a7:ef:dc:29:3a:93:72:be:0b:44:3e:96:04: 52:69:76:fa:23:5d:2d:bf:27:1a:a7:d9:b3:3d:61:79:df:0e: 91:0d:8d:f7:77:8a:89:2f:57:77:d8:2d:47:06:1c:da:9c:cc: 4c:80:a8:94:a4:60:07:ec:4d:9c:5f:76:6b:f8:ab:4e:97:2e: 1e:a5:c7:b2:6e:56:24:0f:c9:f0:46:38:aa:d9:d3:85:19:59: 26:ae:af:3f:33:0e:27:08:c0:4a:c8:79:2d:36:8f:85:40:f9: c7:23:29:c1:ff:5d:d0:be:ff:9d:37:23:98:36:88:07:f1:5b: bf:d1:9f:17:d7:ab:d0:b1:8c:12:36:db:44:1b:1a:6c:cc:90: f9:d5:9d:0c:07:ac:ac:ae:68:64:ed:b4:c7:8c:65:50:a4:f7: 6f:fa:6c:c4:29:3b:55:0c:b4:0b:63:91:05:74:f0:dc:3e:ef: 2c:58:5c:2d:e1:bb:d3:ed:60:46:1d:2b:d6:45:d0:d0:36:2d: fd:e5:5a:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW5uOTu8dCUU6uErCKt3mmwWQ4SwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTU3QTEyNzVCQTYzMzg0MzZCOUFDNEFFNTE5RDE0M0I1 NzQ3MTE2QjAeFw0yNjA5MjQxMDI4NDNaFw0yNjA5MjUxMjUxNDNaMDMxMTAvBgNV BAMTKDA1MTYxNzhFMEExNzkzNUQwRjYxMUEwOUI0NjE5MkMxMjAwNEZCMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPs+dNeF/E86Rknac3jZCkXceS O6asv1h8ONcqXuHaPUOd4szhADL7NjzCPOcsiygItxmOS7oJHZmTIy0pfF3xNkIt BGiLTls/vW56lQ0fFvcvipLpncasp53D6RweZTWihoy04N699oj4xnZpRUjzYpCY 3TevtfaQfCyNpOzQnDMyZqJzoMJ3H+QlMFcEaUknxHEg2tyUS9P20bEJ9rOjJgZ0 wc4b4fvK6VGjQg5rwrRWO/0x/DwdVLyg3X53BHJlXA2VVmzlb9Shu4o+ENzLXvSg 1ZIhfE/1uBdPQVPCOOe7muQnfvrB86TXNNMW+sycDaiOboq+om9ScrnSAIvPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBRYXjgoXk10PYRoJtGGSwSAE+zUwHwYDVR0j BBgwFoAU5XoSdbpjOENrmsSuUZ0UO1dHEWswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTkzZTNkMjYtNGFhZi00ZTk2LWFkNDktNTI3M2YwYTRlNmVkLzAvRTU3QTEyNzVC QTYzMzg0MzZCOUFDNEFFNTE5RDE0M0I1NzQ3MTE2Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNTdBMTI3NUJBNjMzODQzNkI5QUM0QUU1MTlEMTQzQjU3NDcx MTZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTkzZTNkMjYtNGFhZi00ZTk2LWFk NDktNTI3M2YwYTRlNmVkLzAvRTU3QTEyNzVCQTYzMzg0MzZCOUFDNEFFNTE5RDE0 M0I1NzQ3MTE2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJoTTPCePpyrtQ5Dvq2MPRWk3/Z7h4/lNVHp QeWdyQL4VMblE6Z2AGlIU/dJKev3urcMVrP/43VJmWXVp+/cKTqTcr4LRD6WBFJp dvojXS2/Jxqn2bM9YXnfDpENjfd3iokvV3fYLUcGHNqczEyAqJSkYAfsTZxfdmv4 q06XLh6lx7JuViQPyfBGOKrZ04UZWSaurz8zDicIwErIeS02j4VA+ccjKcH/XdC+ /503I5g2iAfxW7/RnxfXq9CxjBI220QbGmzMkPnVnQwHrKyuaGTttMeMZVCk92/6 bMQpO1UMtAtjkQV08Nw+7yxYXC3hu9PtYEYdK9ZF0NA2Lf3lWhE= -----END CERTIFICATE-----Generated at Thu Sep 24 17:20:45 2026 by rpki-client