$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.mft File: E1CBE571A9B35E54880250F3C035E3A2C5EA3688.mft (raw, json) Hash identifier: ixUQr+G2coLNHt0BTz0zD9N/LNI0Sjx/K1bZS5jKLgc= Subject key identifier: 25:F8:04:2C:20:FD:1A:80:DC:EA:7F:88:1E:20:7F:E9:6A:25:CF:97 Authority key identifier: E1:CB:E5:71:A9:B3:5E:54:88:02:50:F3:C0:35:E3:A2:C5:EA:36:88 Certificate issuer: /CN=E1CBE571A9B35E54880250F3C035E3A2C5EA3688 Certificate serial: 4F092A7A01E5440330CEEA0BA90E14E606B1FCDB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 07:24:54 +0000 Manifest this update: Fri 25 Sep 2026 07:19:54 +0000 Manifest next update: Sat 26 Sep 2026 08:10:54 +0000 Files and hashes: 1: 3130332e3130362e3131322e302f32322d3234203d3e20313336383830.roa (hash: sb2b0BvTmrzj1UZrNAjcbapczR2THwPhTn7rFLIGhwc=) 2: 323430323a343234303a3a2f33322d3332203d3e20313336383830.roa (hash: P320z9KUFpWQ3fuDHhMBAn5wP+R8TtjEv0OQMaUZbt0=) 3: E1CBE571A9B35E54880250F3C035E3A2C5EA3688.crl (hash: HqzsUFgelFID5X1PBXpfuWkAZimU8zKERgLDxrifxHQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.crl rsync://rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 08:10:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:09:2a:7a:01:e5:44:03:30:ce:ea:0b:a9:0e:14:e6:06:b1:fc:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1CBE571A9B35E54880250F3C035E3A2C5EA3688 Validity Not Before: Sep 25 07:19:54 2026 GMT Not After : Sep 26 08:10:54 2026 GMT Subject: CN=25F8042C20FD1A80DCEA7F881E207FE96A25CF97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:dc:9e:99:ac:dc:61:b6:ba:2a:4f:bc:cf:1a: 58:e5:1d:9b:77:01:31:47:3d:9a:50:44:61:b2:5b: 19:2e:96:69:49:98:7d:b2:52:7d:3c:e6:27:dc:a2: a3:86:c2:3c:d0:09:0f:9d:1b:f7:bc:c2:74:3f:6b: eb:11:22:ec:d3:53:60:9e:26:cf:ec:ea:c7:57:84: 63:b0:24:2d:ae:df:1a:2b:ec:88:5f:76:5d:b6:2a: 50:a9:33:7e:72:d2:6b:5f:44:d4:2b:fa:21:22:f7: bb:35:35:dd:47:f8:90:57:0e:ff:ae:8d:f9:cf:09: f0:a9:8d:30:88:ef:e9:20:02:91:6e:47:82:8d:50: 83:75:82:59:03:21:91:94:c0:00:c9:b9:df:fe:09: 04:7b:59:f9:9e:f6:2e:0e:e7:11:65:dc:2e:66:2b: 89:ef:12:e4:da:21:a4:1e:bb:39:6e:45:bb:55:e2: 78:8f:f2:95:4e:4c:6a:c5:79:e3:66:a8:fc:89:0b: dc:bb:f0:54:4e:de:f8:12:2f:9b:47:b9:31:99:88: 1e:d5:13:e0:e5:63:15:06:ab:ef:52:60:57:a7:16: 0b:71:7a:44:80:ce:09:63:34:ee:3d:42:c4:01:41: 32:b8:29:40:2a:97:ec:d4:8f:c0:73:bc:b3:70:97: 86:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F8:04:2C:20:FD:1A:80:DC:EA:7F:88:1E:20:7F:E9:6A:25:CF:97 X509v3 Authority Key Identifier: keyid:E1:CB:E5:71:A9:B3:5E:54:88:02:50:F3:C0:35:E3:A2:C5:EA:36:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:8e:1f:08:be:af:2b:3d:fc:ee:b2:4e:3e:85:0a:42:a8:27: c6:a4:6f:84:11:60:1a:9a:f6:60:ee:4f:7b:03:40:e5:16:58: 86:8a:41:67:61:25:29:d0:21:ec:1c:5a:55:77:cf:52:38:38: f6:d4:ba:9c:5c:78:f0:f4:04:30:c0:d4:26:73:6b:de:93:15: bb:f9:6b:21:ea:0e:2d:04:d3:a5:34:5a:f7:af:ee:c5:0e:3b: 05:f0:eb:79:93:d2:78:e8:a9:b8:c0:4f:b4:2a:2f:2d:cf:62: 1b:0f:6d:b3:ef:b7:79:e6:e9:bf:ec:b2:44:ff:a7:4d:a6:d0: 6f:24:22:54:f2:97:66:48:ee:23:b6:a5:e0:91:09:e0:5a:46: 04:35:ce:0d:76:30:6a:9c:84:3c:7f:b8:bb:d6:c0:d4:15:82: a5:13:87:4b:cc:77:74:7d:b3:40:ca:a5:e0:26:d9:61:d4:8f: f8:9a:45:91:31:b1:1a:e8:9d:d7:26:91:e4:23:eb:e4:09:5e: 51:57:8a:68:e9:f3:f9:13:f3:a3:03:fa:47:f6:3e:56:07:c6: cf:92:c6:01:f4:76:66:ea:99:13:be:14:42:e9:d0:25:c9:16: 26:1c:87:f4:c5:31:68:43:7f:b8:02:c8:8d:75:33:41:e2:57: 47:9f:19:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTwkqegHlRAMwzuoLqQ4U5gax/NswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFDQkU1NzFBOUIzNUU1NDg4MDI1MEYzQzAzNUUzQTJD NUVBMzY4ODAeFw0yNjA5MjUwNzE5NTRaFw0yNjA5MjYwODEwNTRaMDMxMTAvBgNV BAMTKDI1RjgwNDJDMjBGRDFBODBEQ0VBN0Y4ODFFMjA3RkU5NkEyNUNGOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg3J6ZrNxhtroqT7zPGljlHZt3 ATFHPZpQRGGyWxkulmlJmH2yUn085ifcoqOGwjzQCQ+dG/e8wnQ/a+sRIuzTU2Ce Js/s6sdXhGOwJC2u3xor7Ihfdl22KlCpM35y0mtfRNQr+iEi97s1Nd1H+JBXDv+u jfnPCfCpjTCI7+kgApFuR4KNUIN1glkDIZGUwADJud/+CQR7Wfme9i4O5xFl3C5m K4nvEuTaIaQeuzluRbtV4niP8pVOTGrFeeNmqPyJC9y78FRO3vgSL5tHuTGZiB7V E+DlYxUGq+9SYFenFgtxekSAzgljNO49QsQBQTK4KUAql+zUj8BzvLNwl4bfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJfgELCD9GoDc6n+IHiB/6Wolz5cwHwYDVR0j BBgwFoAU4cvlcamzXlSIAlDzwDXjosXqNogwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmIwN2IzN2MtMDUwNy00OTEzLTgzMjktM2YxNjFiNmFmZjU2LzAvRTFDQkU1NzFB OUIzNUU1NDg4MDI1MEYzQzAzNUUzQTJDNUVBMzY4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMUNCRTU3MUE5QjM1RTU0ODgwMjUwRjNDMDM1RTNBMkM1RUEz Njg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmIwN2IzN2MtMDUwNy00OTEzLTgz MjktM2YxNjFiNmFmZjU2LzAvRTFDQkU1NzFBOUIzNUU1NDg4MDI1MEYzQzAzNUUz QTJDNUVBMzY4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADOOHwi+rys9/O6yTj6FCkKoJ8akb4QRYBqa 9mDuT3sDQOUWWIaKQWdhJSnQIewcWlV3z1I4OPbUupxcePD0BDDA1CZza96TFbv5 ayHqDi0E06U0Wvev7sUOOwXw63mT0njoqbjAT7QqLy3PYhsPbbPvt3nm6b/sskT/ p02m0G8kIlTyl2ZI7iO2peCRCeBaRgQ1zg12MGqchDx/uLvWwNQVgqUTh0vMd3R9 s0DKpeAm2WHUj/iaRZExsRrondcmkeQj6+QJXlFXimjp8/kT86MD+kf2PlYHxs+S xgH0dmbqmRO+FELp0CXJFiYch/TFMWhDf7gCyI11M0HiV0efGSM= -----END CERTIFICATE-----Generated at Fri Sep 25 13:47:10 2026 by rpki-client