$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.mft File: E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.mft (raw, json) Hash identifier: 2f54//Qth9RWaQEKdmmidCghJEUAag0koWaOD5prdJk= Subject key identifier: 12:76:1D:58:9B:14:D4:41:B7:18:A6:C1:F2:14:98:87:94:3A:D4:68 Authority key identifier: E4:02:A8:FE:9D:6E:6B:AD:DC:D9:41:4C:45:24:F9:F8:9F:C2:54:DB Certificate issuer: /CN=E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB Certificate serial: 6F99EDB13ADA3D76E501EF33264DE1FEC26D8555 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 20:35:55 +0000 Manifest this update: Thu 24 Sep 2026 20:30:55 +0000 Manifest next update: Fri 25 Sep 2026 21:03:55 +0000 Files and hashes: 1: 3130332e3232332e322e302f32342d3234203d3e20313335343435.roa (hash: 3GTJ9ASFLrepqsCMecKCsjwg26cUhjn00ThNjhDZtps=) 2: 3130332e3232332e302e302f32342d3234203d3e20313335343435.roa (hash: iYftcLRKhDFwawem+AQ5tjTifMhYvu82o/DYOa4xV1U=) 3: 3130332e3232332e312e302f32342d3234203d3e20313335343435.roa (hash: OK3H4Npcn6XOhpp51geVZ4Jq+X5gSteni67GraMNgZs=) 4: E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.crl (hash: OF9nZWi8Xt96cm6GUKzYXQNDKadvp4FxUVlT39yWO4k=) 5: 3130332e3232332e332e302f32342d3234203d3e20313335343435.roa (hash: QnST8vjK8bFCBoNsPJhM5VHBI9hMH1UeN2aqQjcNdSs=) 6: 3130332e3232332e322e302f32332d3233203d3e20313335343435.roa (hash: JI1QrINQKw3fjadw40FIbP+TVzkcpzaoVCD4jvQ/h04=) 7: 3130332e3232332e302e302f32322d3232203d3e20313335343435.roa (hash: ySpYECTdEpPiYQXcAvE+ScNUXGwRe6ThRPZGhAvNk2s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.crl rsync://rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:99:ed:b1:3a:da:3d:76:e5:01:ef:33:26:4d:e1:fe:c2:6d:85:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB Validity Not Before: Sep 24 20:30:55 2026 GMT Not After : Sep 25 21:03:55 2026 GMT Subject: CN=12761D589B14D441B718A6C1F2149887943AD468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:cc:66:ea:1c:8d:4f:0f:9f:25:6a:b3:30:ef: 9c:4d:f2:d3:49:1e:60:d2:0a:fa:a2:1d:1e:6f:ee: 72:1b:45:7f:09:e1:3a:76:ac:af:a5:29:e4:f9:89: 5f:49:b5:2c:d2:fe:2c:27:60:29:59:0e:02:cd:7c: 09:5e:6b:9a:73:e7:9a:6d:c7:60:ea:be:f7:13:b0: cc:ad:5d:2e:6d:27:87:ac:12:1d:00:6c:b3:64:24: 05:40:bb:6d:08:3c:f8:85:d3:5b:40:9f:a0:f8:f0: 58:16:8e:b4:e6:c5:5b:a0:29:49:72:84:85:1d:d1: bd:41:fb:41:fa:bf:9b:49:0c:b7:53:74:3c:3f:d3: 72:ee:dd:49:31:39:ae:3e:e0:ef:11:3d:01:22:80: ea:ed:28:9e:74:51:4b:c9:65:a7:ef:b3:52:89:7a: 6f:3c:86:18:71:6d:17:b9:bd:e9:e1:ec:d5:1b:68: 36:b4:55:bf:62:2c:09:ef:59:17:00:48:b9:92:d7: fc:da:fa:22:13:cf:7f:f7:5e:be:ee:7a:5c:fd:b1: d2:c5:62:2c:8e:96:5e:bb:48:ea:4d:37:53:87:f5: 4e:64:cc:48:6b:2c:41:0f:7a:e0:ad:1b:3b:ed:77: 25:cd:99:38:56:17:a4:31:82:6a:8e:e9:f7:68:22: 37:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:76:1D:58:9B:14:D4:41:B7:18:A6:C1:F2:14:98:87:94:3A:D4:68 X509v3 Authority Key Identifier: keyid:E4:02:A8:FE:9D:6E:6B:AD:DC:D9:41:4C:45:24:F9:F8:9F:C2:54:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:c3:c3:f2:b1:a8:be:2e:aa:89:f9:c2:b0:46:ee:67:1b:13: 86:49:e6:45:86:ee:51:60:a8:13:f2:db:c3:ed:1d:2a:79:6d: 74:19:78:ea:c1:3b:01:9a:bd:5e:81:7c:81:b2:ae:96:06:80: 65:4b:c0:ba:ef:26:cc:08:b9:82:7d:a8:51:e8:74:f9:85:da: b9:7a:aa:34:bd:a9:cb:8d:44:cc:4f:6c:8c:ef:7a:2c:ee:c5: 38:33:6b:92:69:56:4f:35:43:ce:51:8e:62:96:95:16:da:3d: 92:e3:92:c8:75:bc:fa:27:78:f6:5e:23:f2:a3:42:8c:8a:6d: 10:22:e2:00:23:be:b1:a8:b3:cf:e2:ac:4e:83:21:7c:1b:8d: ea:6b:4f:61:87:29:b1:81:61:30:46:a0:5a:68:64:af:84:b4: ca:56:e9:fe:ae:31:af:ee:f8:d8:80:39:64:04:28:74:78:47: 2e:c3:77:76:e7:07:b3:f4:81:28:40:f1:50:3d:53:8d:10:88: c8:0f:47:49:56:db:af:89:32:93:1c:0f:fd:12:34:ca:6b:26: 21:3f:fe:3c:2f:94:17:92:45:17:cb:ff:b3:b6:0e:7f:e0:d2: 7e:4a:1e:73:0f:db:66:41:3c:5b:96:02:aa:af:d0:af:00:57: a3:ad:b9:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb5ntsTraPXblAe8zJk3h/sJthVUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQwMkE4RkU5RDZFNkJBRERDRDk0MTRDNDUyNEY5Rjg5 RkMyNTREQjAeFw0yNjA5MjQyMDMwNTVaFw0yNjA5MjUyMTAzNTVaMDMxMTAvBgNV BAMTKDEyNzYxRDU4OUIxNEQ0NDFCNzE4QTZDMUYyMTQ5ODg3OTQzQUQ0NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCczGbqHI1PD58larMw75xN8tNJ HmDSCvqiHR5v7nIbRX8J4Tp2rK+lKeT5iV9JtSzS/iwnYClZDgLNfAlea5pz55pt x2DqvvcTsMytXS5tJ4esEh0AbLNkJAVAu20IPPiF01tAn6D48FgWjrTmxVugKUly hIUd0b1B+0H6v5tJDLdTdDw/03Lu3UkxOa4+4O8RPQEigOrtKJ50UUvJZafvs1KJ em88hhhxbRe5venh7NUbaDa0Vb9iLAnvWRcASLmS1/za+iITz3/3Xr7uelz9sdLF YiyOll67SOpNN1OH9U5kzEhrLEEPeuCtGzvtdyXNmThWF6QxgmqO6fdoIjdlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEnYdWJsU1EG3GKbB8hSYh5Q61GgwHwYDVR0j BBgwFoAU5AKo/p1ua63c2UFMRST5+J/CVNswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjc1NDViODUtOTI3NC00NzBhLWFkMjctMjQ2OWU5ZDE1NWJjLzAvRTQwMkE4RkU5 RDZFNkJBRERDRDk0MTRDNDUyNEY5Rjg5RkMyNTREQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNDAyQThGRTlENkU2QkFERENEOTQxNEM0NTI0RjlGODlGQzI1 NERCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjc1NDViODUtOTI3NC00NzBhLWFk MjctMjQ2OWU5ZDE1NWJjLzAvRTQwMkE4RkU5RDZFNkJBRERDRDk0MTRDNDUyNEY5 Rjg5RkMyNTREQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD7Dw/KxqL4uqon5wrBG7mcbE4ZJ5kWG7lFg qBPy28PtHSp5bXQZeOrBOwGavV6BfIGyrpYGgGVLwLrvJswIuYJ9qFHodPmF2rl6 qjS9qcuNRMxPbIzveizuxTgza5JpVk81Q85RjmKWlRbaPZLjksh1vPonePZeI/Kj QoyKbRAi4gAjvrGos8/irE6DIXwbjeprT2GHKbGBYTBGoFpoZK+EtMpW6f6uMa/u +NiAOWQEKHR4Ry7Dd3bnB7P0gShA8VA9U40QiMgPR0lW26+JMpMcD/0SNMprJiE/ /jwvlBeSRRfL/7O2Dn/g0n5KHnMP22ZBPFuWAqqv0K8AV6OtuY8= -----END CERTIFICATE-----Generated at Fri Sep 25 04:05:45 2026 by rpki-client