$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829.mft File: E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829.mft (raw, json) Hash identifier: ktk3DLLEo9dkZQEYz2xyD4rPTEVvA/qkDCDzgyrEDsY= Subject key identifier: 36:08:A3:EB:BD:EE:5A:A1:38:77:D3:8E:AE:67:1C:9D:6D:9C:8E:F2 Authority key identifier: E2:C4:DF:A7:C9:AC:CF:0D:5E:35:50:84:6B:4F:D7:64:8A:F5:98:29 Certificate issuer: /CN=E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829 Certificate serial: 778875731B559318293DFB9FC1648F832713E40D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 11:15:01 +0000 Manifest this update: Wed 23 Sep 2026 11:10:01 +0000 Manifest next update: Thu 24 Sep 2026 11:45:01 +0000 Files and hashes: 1: 3130332e3139312e3135342e302f32342d3234203d3e20313439393236.roa (hash: B9vjSD4xlqQG0P6W1yM2st0HnliY/J6hgpX93qj/1sg=) 2: 3130332e3139312e3135352e302f32342d3234203d3e20313439393236.roa (hash: cYom1MPHQVGdhZnlRacbk/Al2JcVJhr0BqbkjsZoDkI=) 3: E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829.crl (hash: 57oYrgrv6EGmPrOqX5Ohzy6qrrRW5LwVwchYNQCXD5A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829.crl rsync://rpki-rsync.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 11:45:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:88:75:73:1b:55:93:18:29:3d:fb:9f:c1:64:8f:83:27:13:e4:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829 Validity Not Before: Sep 23 11:10:01 2026 GMT Not After : Sep 24 11:45:01 2026 GMT Subject: CN=3608A3EBBDEE5AA13877D38EAE671C9D6D9C8EF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:78:c5:97:64:02:7b:68:74:38:1d:2c:b8:29: 67:6a:3b:e7:31:9c:f1:64:ce:12:44:26:09:03:37: 6f:3d:68:52:f7:71:46:85:fd:5e:45:d9:9f:12:fe: f9:ab:3e:98:fa:85:ed:b6:f3:ef:d0:9d:93:bf:bf: ca:50:d2:c0:86:19:91:3f:64:71:0c:30:e9:32:94: 53:fb:66:bd:97:2b:e8:13:a3:3d:09:a4:1f:97:f6: 3f:02:17:66:94:b5:58:56:91:ec:53:41:40:49:71: 95:ae:b4:a2:62:8a:21:40:ac:ec:be:aa:47:93:fc: 41:72:11:2e:0b:64:49:87:6c:7b:c3:be:0d:36:a3: b2:20:32:b5:1d:58:b0:d0:48:4b:74:5b:9a:3b:e0: 0f:10:69:4e:bc:ea:1d:06:2e:fc:37:fb:d8:5d:0a: 5e:c7:28:81:af:64:6f:75:76:45:21:49:19:d9:c7: 69:27:de:b0:99:2a:ee:c3:bc:1c:f8:6a:9e:74:ac: 12:82:58:88:93:22:8b:9d:e0:77:81:2d:92:14:90: 51:1d:69:c4:8f:0b:06:9d:37:89:20:62:34:94:1f: f9:57:c2:80:ae:f2:76:84:b2:28:e8:b1:55:13:be: 1b:cf:8f:70:91:b6:83:51:3e:bd:46:99:61:59:15: 65:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:08:A3:EB:BD:EE:5A:A1:38:77:D3:8E:AE:67:1C:9D:6D:9C:8E:F2 X509v3 Authority Key Identifier: keyid:E2:C4:DF:A7:C9:AC:CF:0D:5E:35:50:84:6B:4F:D7:64:8A:F5:98:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:4f:82:b8:52:f2:d9:c7:88:91:00:80:d6:60:37:04:af:94: fd:51:46:f8:f7:2d:70:1a:df:87:86:d4:55:dd:8b:04:fe:af: ef:10:09:b4:5c:08:1f:bf:4f:ee:a1:b8:e0:48:40:5e:e5:cc: 31:4c:e8:6a:9e:cc:51:31:7a:9d:3b:8f:62:77:db:cd:8f:78: 43:6a:26:ff:30:b7:3c:a2:60:c9:51:99:d9:be:cf:f8:6c:e8: fb:9b:47:42:d6:17:bf:b4:9c:75:4d:f3:d8:51:79:66:39:76: 66:eb:e3:c1:6b:52:a5:8d:37:ac:77:98:5f:9b:ec:b7:64:f8: 87:8a:7a:c1:f4:55:2d:42:40:9d:a6:ed:f2:8f:a1:98:7f:14: 90:c0:a0:6b:0e:69:de:f1:c1:d8:44:ab:ba:67:60:93:a3:45: 96:8c:a5:06:d0:00:db:03:4c:8b:ee:0b:89:29:71:7a:b7:1e: 9e:d8:9f:12:09:84:c4:65:cc:86:08:e5:65:4a:d6:37:37:94: 16:25:87:1d:95:5c:d1:7c:cf:22:33:37:de:a1:96:a7:6c:87: 9b:47:dd:7c:be:40:83:0a:1c:d8:d9:b6:fe:4c:df:5b:c1:36: 31:63:8d:a6:c3:03:27:89:0d:2f:26:2e:30:ee:d5:43:0b:3e: 2e:98:dd:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd4h1cxtVkxgpPfufwWSPgycT5A0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTJDNERGQTdDOUFDQ0YwRDVFMzU1MDg0NkI0RkQ3NjQ4 QUY1OTgyOTAeFw0yNjA5MjMxMTEwMDFaFw0yNjA5MjQxMTQ1MDFaMDMxMTAvBgNV BAMTKDM2MDhBM0VCQkRFRTVBQTEzODc3RDM4RUFFNjcxQzlENkQ5QzhFRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNeMWXZAJ7aHQ4HSy4KWdqO+cx nPFkzhJEJgkDN289aFL3cUaF/V5F2Z8S/vmrPpj6he228+/QnZO/v8pQ0sCGGZE/ ZHEMMOkylFP7Zr2XK+gToz0JpB+X9j8CF2aUtVhWkexTQUBJcZWutKJiiiFArOy+ qkeT/EFyES4LZEmHbHvDvg02o7IgMrUdWLDQSEt0W5o74A8QaU686h0GLvw3+9hd Cl7HKIGvZG91dkUhSRnZx2kn3rCZKu7DvBz4ap50rBKCWIiTIoud4HeBLZIUkFEd acSPCwadN4kgYjSUH/lXwoCu8naEsijosVUTvhvPj3CRtoNRPr1GmWFZFWUNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNgij673uWqE4d9OOrmccnW2cjvIwHwYDVR0j BBgwFoAU4sTfp8mszw1eNVCEa0/XZIr1mCkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjVlYWJhY2QtMjhlYi00Yjk2LTg2MTAtZGJiNGIwNmZjOGJkLzAvRTJDNERGQTdD OUFDQ0YwRDVFMzU1MDg0NkI0RkQ3NjQ4QUY1OTgyOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMkM0REZBN0M5QUNDRjBENUUzNTUwODQ2QjRGRDc2NDhBRjU5 ODI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjVlYWJhY2QtMjhlYi00Yjk2LTg2 MTAtZGJiNGIwNmZjOGJkLzAvRTJDNERGQTdDOUFDQ0YwRDVFMzU1MDg0NkI0RkQ3 NjQ4QUY1OTgyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAENPgrhS8tnHiJEAgNZgNwSvlP1RRvj3LXAa 34eG1FXdiwT+r+8QCbRcCB+/T+6huOBIQF7lzDFM6GqezFExep07j2J3282PeENq Jv8wtzyiYMlRmdm+z/hs6PubR0LWF7+0nHVN89hReWY5dmbr48FrUqWNN6x3mF+b 7Ldk+IeKesH0VS1CQJ2m7fKPoZh/FJDAoGsOad7xwdhEq7pnYJOjRZaMpQbQANsD TIvuC4kpcXq3Hp7YnxIJhMRlzIYI5WVK1jc3lBYlhx2VXNF8zyIzN96hlqdsh5tH 3Xy+QIMKHNjZtv5M31vBNjFjjabDAyeJDS8mLjDu1UMLPi6Y3ew= -----END CERTIFICATE-----Generated at Thu Sep 24 02:33:58 2026 by rpki-client