$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.mft File: E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.mft (raw, json) Hash identifier: txSCxEYq8ZhSQXLHnwXGdc2tyuC3pZ/fBA7rjan7Mq8= Subject key identifier: 1A:71:EA:B6:7E:6F:4A:09:B8:0B:11:32:B9:8C:EB:EB:5F:81:58:90 Authority key identifier: E0:AE:9F:AD:9E:25:90:82:B0:6C:CB:B9:4A:F4:78:F6:B8:61:25:F9 Certificate issuer: /CN=E0AE9FAD9E259082B06CCBB94AF478F6B86125F9 Certificate serial: 68ED60FF18CF732389708587F1AC098C378364F1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.mft Manifest number: C6 Signing time: Sun 27 Sep 2026 21:40:55 +0000 Manifest this update: Sun 27 Sep 2026 21:35:55 +0000 Manifest next update: Mon 28 Sep 2026 22:15:55 +0000 Files and hashes: 1: E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.crl (hash: G5J0yGQ7V6mLO7hJw9MxmV3KhXr/iFQjO1Mxby5oMHw=) 2: 3130332e3133392e3230372e302f32342d3234203d3e20313530353133.roa (hash: PrnOvop5MQlI3Bsjow/Ci5R1laOpI/zKBTh7ZhHcVKA=) 3: 3130332e3139352e32382e302f32342d3234203d3e20313530353133.roa (hash: q+RRwqPLMgbRcU4CF8v6ceD8xY9lz0UrAi1vn0vplwA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.crl rsync://rpki-rsync.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 22:15:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:ed:60:ff:18:cf:73:23:89:70:85:87:f1:ac:09:8c:37:83:64:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0AE9FAD9E259082B06CCBB94AF478F6B86125F9 Validity Not Before: Sep 27 21:35:55 2026 GMT Not After : Sep 28 22:15:55 2026 GMT Subject: CN=1A71EAB67E6F4A09B80B1132B98CEBEB5F815890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1b:3d:2d:e1:98:23:e2:81:68:6e:cf:b4:64: 17:77:ff:b4:89:09:35:05:94:9f:fc:5d:1c:c1:b4: 2d:04:5b:e3:73:ed:19:1d:ca:a7:93:86:a4:ae:fc: 80:94:32:28:05:64:20:b3:9a:75:b0:2f:6c:bd:82: cb:c4:8e:3d:a2:d1:19:41:b5:7d:9e:1c:ca:68:bb: 90:74:9e:34:1e:16:eb:d5:c9:9d:84:6d:86:04:d7: 2c:e2:7b:e7:50:a4:77:88:ca:42:a3:ba:96:a7:d8: fa:c8:29:59:cf:bb:a6:d9:af:cc:57:89:cf:70:70: ee:6a:02:ee:dd:af:c9:fd:b2:47:23:e6:17:48:59: b1:9e:e0:7b:b3:65:35:44:13:8e:c8:a3:bb:b7:29: ec:8d:75:e9:3c:7b:a0:6d:6d:05:2e:b0:2e:db:58: c4:d0:b4:69:d2:6f:38:d3:ec:18:85:74:ec:07:f4: 4f:c6:5b:6e:96:6b:35:ea:10:09:14:ed:2c:8d:55: e3:89:94:95:7f:d1:06:78:50:99:53:39:fe:3e:43: f4:00:bd:76:5d:77:60:63:eb:a4:21:f3:2a:99:5e: 49:16:b6:11:0b:4f:b0:ee:b8:1f:f7:59:ff:a6:6d: 91:97:95:39:1d:66:6b:7a:ae:94:47:e0:87:62:6b: e9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:71:EA:B6:7E:6F:4A:09:B8:0B:11:32:B9:8C:EB:EB:5F:81:58:90 X509v3 Authority Key Identifier: keyid:E0:AE:9F:AD:9E:25:90:82:B0:6C:CB:B9:4A:F4:78:F6:B8:61:25:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:48:b2:b7:57:09:43:52:c2:1c:a5:f5:6e:0f:a2:9c:80:51: 5a:65:be:cf:cc:95:8c:a6:d7:a7:95:13:24:f7:10:23:a3:23: 27:64:40:1f:0e:6f:40:b5:c0:f4:60:8b:e9:dc:33:28:37:a0: 34:19:82:c6:7c:ec:85:f3:bd:26:9d:28:19:2a:83:a8:34:30: bf:f6:4f:1c:9f:f3:58:99:63:d2:38:d6:64:44:5f:ef:1b:5c: 37:38:5a:a8:49:05:0c:ab:c5:c5:69:ed:76:e3:b5:b2:69:e8: c3:26:2a:01:da:09:1b:ee:45:2a:ee:63:3b:ac:87:3c:26:19: 26:d4:c9:ad:60:40:49:8f:9f:dc:30:7c:8f:c6:db:1e:66:b7: 35:c9:c3:d1:fe:e7:77:27:8d:b4:84:cd:17:ce:a3:a3:63:0a: 47:74:59:d3:8d:b4:01:2d:f7:ee:ca:f3:8b:69:4a:2b:99:8f: 9a:82:70:82:e7:05:36:37:cf:e6:31:d8:e3:78:3e:dd:1c:33: 89:f0:77:05:a8:de:c7:9f:e0:e9:91:fe:30:d2:bf:7c:25:bc: 28:f9:64:d3:20:f4:0a:15:b1:a2:ec:83:00:a6:96:55:77:d6: 18:ae:47:d9:48:70:71:c5:34:c1:05:dd:ab:70:2d:5a:1c:bf: da:71:a5:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaO1g/xjPcyOJcIWH8awJjDeDZPEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBBRTlGQUQ5RTI1OTA4MkIwNkNDQkI5NEFGNDc4RjZC ODYxMjVGOTAeFw0yNjA5MjcyMTM1NTVaFw0yNjA5MjgyMjE1NTVaMDMxMTAvBgNV BAMTKDFBNzFFQUI2N0U2RjRBMDlCODBCMTEzMkI5OENFQkVCNUY4MTU4OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsGz0t4Zgj4oFobs+0ZBd3/7SJ CTUFlJ/8XRzBtC0EW+Nz7RkdyqeThqSu/ICUMigFZCCzmnWwL2y9gsvEjj2i0RlB tX2eHMpou5B0njQeFuvVyZ2EbYYE1yzie+dQpHeIykKjupan2PrIKVnPu6bZr8xX ic9wcO5qAu7dr8n9skcj5hdIWbGe4HuzZTVEE47Io7u3KeyNdek8e6BtbQUusC7b WMTQtGnSbzjT7BiFdOwH9E/GW26WazXqEAkU7SyNVeOJlJV/0QZ4UJlTOf4+Q/QA vXZdd2Bj66Qh8yqZXkkWthELT7DuuB/3Wf+mbZGXlTkdZmt6rpRH4Idia+lDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGnHqtn5vSgm4CxEyuYzr61+BWJAwHwYDVR0j BBgwFoAU4K6frZ4lkIKwbMu5SvR49rhhJfkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjQ5MTJjOWItZGNlNC00MGU2LTk1ODgtZDdjYThjMzdlZjRkLzAvRTBBRTlGQUQ5 RTI1OTA4MkIwNkNDQkI5NEFGNDc4RjZCODYxMjVGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMEFFOUZBRDlFMjU5MDgyQjA2Q0NCQjk0QUY0NzhGNkI4NjEy NUY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjQ5MTJjOWItZGNlNC00MGU2LTk1 ODgtZDdjYThjMzdlZjRkLzAvRTBBRTlGQUQ5RTI1OTA4MkIwNkNDQkI5NEFGNDc4 RjZCODYxMjVGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIxIsrdXCUNSwhyl9W4PopyAUVplvs/MlYym 16eVEyT3ECOjIydkQB8Ob0C1wPRgi+ncMyg3oDQZgsZ87IXzvSadKBkqg6g0ML/2 Txyf81iZY9I41mREX+8bXDc4WqhJBQyrxcVp7XbjtbJp6MMmKgHaCRvuRSruYzus hzwmGSbUya1gQEmPn9wwfI/G2x5mtzXJw9H+53cnjbSEzRfOo6NjCkd0WdONtAEt 9+7K84tpSiuZj5qCcILnBTY3z+Yx2ON4Pt0cM4nwdwWo3sef4OmR/jDSv3wlvCj5 ZNMg9AoVsaLsgwCmllV31hiuR9lIcHHFNMEF3atwLVocv9pxpfk= -----END CERTIFICATE-----Generated at Mon Sep 28 16:17:23 2026 by rpki-client