$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/E1476FC7E4095A3095E47FBC4834D7ECE111F313.mft File: E1476FC7E4095A3095E47FBC4834D7ECE111F313.mft (raw, json) Hash identifier: PYoCgjIxzdQOs9dUa6bmfa2ad7jBSzWfdpdlW8mWcy0= Subject key identifier: C6:E2:62:43:19:44:6F:80:E6:EB:81:19:72:15:12:FF:86:A9:BE:2D Authority key identifier: E1:47:6F:C7:E4:09:5A:30:95:E4:7F:BC:48:34:D7:EC:E1:11:F3:13 Certificate issuer: /CN=E1476FC7E4095A3095E47FBC4834D7ECE111F313 Certificate serial: 31DB155489038D1E055E69D424C3F0C7804AD199 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1476FC7E4095A3095E47FBC4834D7ECE111F313.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/E1476FC7E4095A3095E47FBC4834D7ECE111F313.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 08:06:20 +0000 Manifest this update: Wed 23 Sep 2026 08:01:20 +0000 Manifest next update: Thu 24 Sep 2026 10:36:20 +0000 Files and hashes: 1: 3130332e3233302e3234362e302f32342d3234203d3e20313331373735.roa (hash: /1MgccGZfskMTbGr8xqejz+aa0C1YMlfgjpiT2WdsBo=) 2: E1476FC7E4095A3095E47FBC4834D7ECE111F313.crl (hash: YXQ7SVgj3zqajPeH01nJoKopXb49ZnsZbqZ42qBl1Zs=) 3: 3130332e3138302e3136322e302f32342d3234203d3e20313439333737.roa (hash: +kRo7LiXN7GRQQL/5vawAMwmjkMc/A/ZykmCvCb8Chs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/E1476FC7E4095A3095E47FBC4834D7ECE111F313.crl rsync://rpki-rsync.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/E1476FC7E4095A3095E47FBC4834D7ECE111F313.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1476FC7E4095A3095E47FBC4834D7ECE111F313.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 10:36:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:db:15:54:89:03:8d:1e:05:5e:69:d4:24:c3:f0:c7:80:4a:d1:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1476FC7E4095A3095E47FBC4834D7ECE111F313 Validity Not Before: Sep 23 08:01:20 2026 GMT Not After : Sep 24 10:36:20 2026 GMT Subject: CN=C6E2624319446F80E6EB8119721512FF86A9BE2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4e:da:37:a9:7f:2f:2a:0b:63:9c:63:b7:49: 47:73:de:35:4b:8c:09:e9:31:c2:11:66:08:16:5a: 33:dc:87:51:cf:96:9a:d5:00:26:41:44:e2:51:2d: 81:ab:a0:44:a5:bb:1f:03:bf:aa:84:06:e1:8d:81: 4e:ba:16:69:54:58:fb:89:a2:63:33:82:4c:03:d5: 5f:f4:cf:bd:97:0d:5e:b7:e5:41:12:26:c0:8d:6e: 75:d8:36:1d:2d:69:49:0a:2d:44:47:70:be:bf:f5: fe:b9:80:22:56:c2:53:df:4a:eb:8e:80:fe:4e:cc: 10:0a:3b:61:86:02:6f:5e:7a:b9:f6:1f:b9:7b:15: 3f:b9:8d:e0:bf:13:8e:fc:c8:47:af:0e:81:3b:02: 13:56:d9:ef:af:11:43:6d:ba:1d:74:8e:6d:fc:e8: 74:33:08:e7:3a:57:5e:66:97:0e:27:4e:ec:88:c7: 2c:02:e9:1f:12:85:e3:45:d8:36:11:e3:6c:99:5e: b4:23:54:36:9b:c1:ea:4d:42:9b:68:b2:13:54:06: 20:4a:90:5a:c0:80:e2:6e:84:da:e7:09:9c:ed:0c: 20:39:b2:e0:67:5c:02:ca:94:91:be:51:6d:2e:fb: 29:3b:d3:7e:71:1a:90:ef:ed:13:ae:54:20:2b:e8: ac:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E2:62:43:19:44:6F:80:E6:EB:81:19:72:15:12:FF:86:A9:BE:2D X509v3 Authority Key Identifier: keyid:E1:47:6F:C7:E4:09:5A:30:95:E4:7F:BC:48:34:D7:EC:E1:11:F3:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/E1476FC7E4095A3095E47FBC4834D7ECE111F313.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1476FC7E4095A3095E47FBC4834D7ECE111F313.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/E1476FC7E4095A3095E47FBC4834D7ECE111F313.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:65:39:53:b9:bc:62:c5:2b:f0:84:c0:b4:c8:46:52:d5:c8: c4:5f:bc:77:45:cd:28:0a:9c:93:2b:ea:b9:6d:29:85:bd:6b: 60:04:a5:c2:7b:b9:25:16:7d:34:93:a4:f7:49:08:17:16:61: 03:d1:ad:7f:40:ff:ac:d4:4d:b5:79:ee:75:13:e4:5e:1b:37: 43:16:c9:fb:c3:2c:6f:e5:44:00:00:ae:68:d1:88:2d:72:25: 29:d8:4e:9b:27:b7:2c:73:a3:4c:70:7c:8b:85:d1:10:c5:66: 92:7c:4c:de:85:f8:7a:d1:ed:13:a3:6a:2d:ae:90:d8:21:ed: 39:c4:3f:a1:73:09:b5:67:b4:54:72:80:d2:72:d4:23:9c:d7: b9:2d:37:e0:4a:a0:b1:79:49:76:b6:aa:a5:72:36:61:d5:8d: 47:7d:e1:15:3e:62:4f:b5:fc:3d:9d:2d:88:b0:4d:03:aa:a6: 3b:4a:55:7a:74:a5:ee:0d:3f:e9:ba:64:34:5a:40:7e:48:ff: 34:32:fb:e5:e0:40:40:f3:09:4e:fb:ea:29:5e:de:0b:40:10: 41:5a:6e:8e:2a:37:3b:35:c6:7f:38:7a:5c:96:49:55:16:5a: c0:3d:2a:75:fc:1c:9e:84:5e:88:4b:6c:30:82:ea:a9:50:03: 82:a6:2f:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMdsVVIkDjR4FXmnUJMPwx4BK0ZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE0NzZGQzdFNDA5NUEzMDk1RTQ3RkJDNDgzNEQ3RUNF MTExRjMxMzAeFw0yNjA5MjMwODAxMjBaFw0yNjA5MjQxMDM2MjBaMDMxMTAvBgNV BAMTKEM2RTI2MjQzMTk0NDZGODBFNkVCODExOTcyMTUxMkZGODZBOUJFMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUTto3qX8vKgtjnGO3SUdz3jVL jAnpMcIRZggWWjPch1HPlprVACZBROJRLYGroESlux8Dv6qEBuGNgU66FmlUWPuJ omMzgkwD1V/0z72XDV635UESJsCNbnXYNh0taUkKLURHcL6/9f65gCJWwlPfSuuO gP5OzBAKO2GGAm9eern2H7l7FT+5jeC/E478yEevDoE7AhNW2e+vEUNtuh10jm38 6HQzCOc6V15mlw4nTuyIxywC6R8SheNF2DYR42yZXrQjVDabwepNQptoshNUBiBK kFrAgOJuhNrnCZztDCA5suBnXALKlJG+UW0u+yk7035xGpDv7ROuVCAr6KyzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxuJiQxlEb4Dm64EZchUS/4apvi0wHwYDVR0j BBgwFoAU4Udvx+QJWjCV5H+8SDTX7OER8xMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDcwZDYyOWEtOTZlZC00NTFhLTg3ODctMzQxMjIyODJhNzA2LzAvRTE0NzZGQzdF NDA5NUEzMDk1RTQ3RkJDNDgzNEQ3RUNFMTExRjMxMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMTQ3NkZDN0U0MDk1QTMwOTVFNDdGQkM0ODM0RDdFQ0UxMTFG MzEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDcwZDYyOWEtOTZlZC00NTFhLTg3 ODctMzQxMjIyODJhNzA2LzAvRTE0NzZGQzdFNDA5NUEzMDk1RTQ3RkJDNDgzNEQ3 RUNFMTExRjMxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANllOVO5vGLFK/CEwLTIRlLVyMRfvHdFzSgK nJMr6rltKYW9a2AEpcJ7uSUWfTSTpPdJCBcWYQPRrX9A/6zUTbV57nUT5F4bN0MW yfvDLG/lRAAArmjRiC1yJSnYTpsntyxzo0xwfIuF0RDFZpJ8TN6F+HrR7ROjai2u kNgh7TnEP6FzCbVntFRygNJy1COc17ktN+BKoLF5SXa2qqVyNmHVjUd94RU+Yk+1 /D2dLYiwTQOqpjtKVXp0pe4NP+m6ZDRaQH5I/zQy++XgQEDzCU776ile3gtAEEFa bo4qNzs1xn84elyWSVUWWsA9KnX8HJ6EXohLbDCC6qlQA4KmL2Y= -----END CERTIFICATE-----Generated at Thu Sep 24 02:54:06 2026 by rpki-client