$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/E205BAF9253BD3679578372318D2263D430F4D99.mft File: E205BAF9253BD3679578372318D2263D430F4D99.mft (raw, json) Hash identifier: 253LIQvcsD+/dRJVEdp00+iGCu2GLiBSTvcBaIosVYM= Subject key identifier: 73:B8:D9:27:4C:A1:8A:ED:63:50:C5:2C:4C:0F:33:31:E2:A2:15:B0 Authority key identifier: E2:05:BA:F9:25:3B:D3:67:95:78:37:23:18:D2:26:3D:43:0F:4D:99 Certificate issuer: /CN=E205BAF9253BD3679578372318D2263D430F4D99 Certificate serial: 1FE98CB7E22216F6316ACC00B6AB1CFFBDD811AC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E205BAF9253BD3679578372318D2263D430F4D99.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/E205BAF9253BD3679578372318D2263D430F4D99.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 16:00:54 +0000 Manifest this update: Wed 23 Sep 2026 15:55:54 +0000 Manifest next update: Thu 24 Sep 2026 16:27:54 +0000 Files and hashes: 1: 3130332e3136342e3133362e302f32332d3234203d3e203137393935.roa (hash: HZWp6s4pZWF/5Jmtyb043W9PpmxxelaQFAtDR552/AM=) 2: E205BAF9253BD3679578372318D2263D430F4D99.crl (hash: owhdddxSjYsQiTJRv1y/mfqpTrlOgWzWz0VMuiQYawA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/E205BAF9253BD3679578372318D2263D430F4D99.crl rsync://rpki-rsync.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/E205BAF9253BD3679578372318D2263D430F4D99.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E205BAF9253BD3679578372318D2263D430F4D99.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 16:27:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:e9:8c:b7:e2:22:16:f6:31:6a:cc:00:b6:ab:1c:ff:bd:d8:11:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E205BAF9253BD3679578372318D2263D430F4D99 Validity Not Before: Sep 23 15:55:54 2026 GMT Not After : Sep 24 16:27:54 2026 GMT Subject: CN=73B8D9274CA18AED6350C52C4C0F3331E2A215B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8e:df:c8:50:11:80:92:d7:71:29:85:d7:15: fd:bd:ed:76:68:41:28:73:d1:f9:84:82:72:c0:77: 1e:4a:dc:2a:3c:23:95:cc:b6:fd:eb:8b:15:67:68: 5d:6a:28:40:7b:af:25:6e:e8:cd:db:fd:f3:d3:68: c2:82:37:9f:31:80:a2:a4:ee:8f:03:71:09:88:d1: 6f:84:69:9c:7d:7a:3a:d8:0f:2a:e6:c5:09:2e:64: 05:32:af:09:1b:e5:48:24:7e:59:7e:8f:fa:a9:11: ba:35:88:8c:4a:5c:a6:d9:7e:d7:eb:13:4d:23:d5: 55:46:8f:62:09:30:52:93:e5:9f:0f:fc:e2:9a:11: 6f:49:62:e7:c1:75:4f:b0:f4:ff:0d:ab:76:c4:f0: 3c:f9:90:34:bc:d0:85:d7:bb:77:62:e6:00:5b:3b: ff:58:2c:33:e6:cc:f2:c9:7f:5c:bd:61:d9:4d:bb: fa:4f:49:a4:0c:f6:8e:a3:94:85:7a:ee:f1:13:28: b2:36:f7:c2:ab:b9:26:eb:f5:ae:d9:ab:0b:5a:99: 05:60:79:4a:92:44:d2:20:b9:fe:b6:23:2d:ee:80: af:28:40:a8:ca:82:a5:86:e8:38:f3:20:59:62:3f: 6a:53:c5:77:81:96:7f:05:d2:70:07:09:0b:23:e5: a3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:B8:D9:27:4C:A1:8A:ED:63:50:C5:2C:4C:0F:33:31:E2:A2:15:B0 X509v3 Authority Key Identifier: keyid:E2:05:BA:F9:25:3B:D3:67:95:78:37:23:18:D2:26:3D:43:0F:4D:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/E205BAF9253BD3679578372318D2263D430F4D99.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E205BAF9253BD3679578372318D2263D430F4D99.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/E205BAF9253BD3679578372318D2263D430F4D99.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:c2:c0:fb:5f:3a:68:4f:59:e1:21:b4:3e:87:65:e1:6d:e1: 3e:bc:39:3c:1a:54:ab:6b:03:04:0c:1e:ad:5a:82:ab:59:24: 15:3f:8e:ae:2d:7f:87:61:76:24:94:d5:f9:0d:f4:93:3c:6d: 80:63:9e:5e:c4:67:e7:31:23:66:59:26:15:b2:cf:f6:b2:ae: 1e:34:49:83:b6:20:fe:cb:e7:0a:f4:cb:21:96:c9:0e:1a:ce: 44:49:9c:0e:f8:22:cd:3a:6a:19:41:f7:4a:52:1b:ca:c5:f3: 55:00:98:26:bc:bf:f0:03:cd:89:b6:29:d0:9d:fe:ba:d0:c8: 81:87:df:bf:40:96:a7:5b:14:11:ef:90:04:8e:52:ac:8d:10: d7:a8:42:69:88:c3:1a:82:23:ce:f9:ea:34:01:2f:19:76:ec: ae:ed:7c:40:1a:31:cf:66:74:49:71:b4:5e:26:e3:17:67:a7: 58:6c:f5:40:0b:0a:5c:44:bb:5b:9c:2d:6f:b0:6d:e2:fe:bc: 55:8d:a4:5f:f9:cd:b9:7b:00:f3:7f:78:96:76:51:54:35:0a: 8a:4a:f9:7a:be:55:62:c5:60:2b:39:65:79:76:b8:1f:52:e0: 19:1d:5b:37:fa:fd:0d:71:c4:0c:4f:48:07:68:cb:8b:98:73: 21:80:75:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH+mMt+IiFvYxaswAtqsc/73YEawwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTIwNUJBRjkyNTNCRDM2Nzk1NzgzNzIzMThEMjI2M0Q0 MzBGNEQ5OTAeFw0yNjA5MjMxNTU1NTRaFw0yNjA5MjQxNjI3NTRaMDMxMTAvBgNV BAMTKDczQjhEOTI3NENBMThBRUQ2MzUwQzUyQzRDMEYzMzMxRTJBMjE1QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQjt/IUBGAktdxKYXXFf297XZo QShz0fmEgnLAdx5K3Co8I5XMtv3rixVnaF1qKEB7ryVu6M3b/fPTaMKCN58xgKKk 7o8DcQmI0W+EaZx9ejrYDyrmxQkuZAUyrwkb5Ugkfll+j/qpEbo1iIxKXKbZftfr E00j1VVGj2IJMFKT5Z8P/OKaEW9JYufBdU+w9P8Nq3bE8Dz5kDS80IXXu3di5gBb O/9YLDPmzPLJf1y9YdlNu/pPSaQM9o6jlIV67vETKLI298KruSbr9a7ZqwtamQVg eUqSRNIguf62Iy3ugK8oQKjKgqWG6DjzIFliP2pTxXeBln8F0nAHCQsj5aMfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc7jZJ0yhiu1jUMUsTA8zMeKiFbAwHwYDVR0j BBgwFoAU4gW6+SU702eVeDcjGNImPUMPTZkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDA0ZDY0MjctM2YwMy00ZDIxLWI4Y2MtYmJmZDJhM2Y4YzMzLzAvRTIwNUJBRjky NTNCRDM2Nzk1NzgzNzIzMThEMjI2M0Q0MzBGNEQ5OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMjA1QkFGOTI1M0JEMzY3OTU3ODM3MjMxOEQyMjYzRDQzMEY0 RDk5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDA0ZDY0MjctM2YwMy00ZDIxLWI4 Y2MtYmJmZDJhM2Y4YzMzLzAvRTIwNUJBRjkyNTNCRDM2Nzk1NzgzNzIzMThEMjI2 M0Q0MzBGNEQ5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHjCwPtfOmhPWeEhtD6HZeFt4T68OTwaVKtr AwQMHq1agqtZJBU/jq4tf4dhdiSU1fkN9JM8bYBjnl7EZ+cxI2ZZJhWyz/ayrh40 SYO2IP7L5wr0yyGWyQ4azkRJnA74Is06ahlB90pSG8rF81UAmCa8v/ADzYm2KdCd /rrQyIGH379AlqdbFBHvkASOUqyNENeoQmmIwxqCI8756jQBLxl27K7tfEAaMc9m dElxtF4m4xdnp1hs9UALClxEu1ucLW+wbeL+vFWNpF/5zbl7APN/eJZ2UVQ1CopK +Xq+VWLFYCs5ZXl2uB9S4BkdWzf6/Q1xxAxPSAdoy4uYcyGAdZY= -----END CERTIFICATE-----Generated at Thu Sep 24 00:52:16 2026 by rpki-client