$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/E1AE51C8B4FB85A0C6F681266B78AEB4E206B05B.mft File: E1AE51C8B4FB85A0C6F681266B78AEB4E206B05B.mft (raw, json) Hash identifier: +4chtl8RzSkfYaWQCTvz+GHfzc0hLmem5mBNr0EYH/E= Subject key identifier: DA:CF:E2:99:62:86:87:EA:B2:24:61:81:A7:E5:E7:86:BA:C9:94:CD Authority key identifier: E1:AE:51:C8:B4:FB:85:A0:C6:F6:81:26:6B:78:AE:B4:E2:06:B0:5B Certificate issuer: /CN=E1AE51C8B4FB85A0C6F681266B78AEB4E206B05B Certificate serial: 1A6CB7C3EFFFFC8F7EFA552D617EFFFF9F6C3BF8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1AE51C8B4FB85A0C6F681266B78AEB4E206B05B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/E1AE51C8B4FB85A0C6F681266B78AEB4E206B05B.mft Manifest number: BE Signing time: Wed 23 Sep 2026 06:29:04 +0000 Manifest this update: Wed 23 Sep 2026 06:24:04 +0000 Manifest next update: Thu 24 Sep 2026 08:29:04 +0000 Files and hashes: 1: E1AE51C8B4FB85A0C6F681266B78AEB4E206B05B.crl (hash: WXZdU65srQXC1BC8qc7Uc6l1c/3ugJksmXeRWYhTFuA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/E1AE51C8B4FB85A0C6F681266B78AEB4E206B05B.crl rsync://rpki-rsync.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/E1AE51C8B4FB85A0C6F681266B78AEB4E206B05B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1AE51C8B4FB85A0C6F681266B78AEB4E206B05B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 08:29:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:6c:b7:c3:ef:ff:fc:8f:7e:fa:55:2d:61:7e:ff:ff:9f:6c:3b:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1AE51C8B4FB85A0C6F681266B78AEB4E206B05B Validity Not Before: Sep 23 06:24:04 2026 GMT Not After : Sep 24 08:29:04 2026 GMT Subject: CN=DACFE299628687EAB2246181A7E5E786BAC994CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a8:3c:97:bf:db:24:2b:89:c0:c2:52:12:77: 6b:ec:04:b6:2d:ec:57:4b:37:d4:9d:7a:76:c6:2a: 2a:5a:5b:1b:21:8e:97:2c:1f:ec:ef:a0:79:bb:bf: 4b:38:1a:5f:b2:c4:66:de:97:c9:65:9a:bf:2c:d2: 59:03:7d:f6:76:98:10:cb:b1:af:e4:57:60:6d:7c: 39:b8:60:f3:89:40:c9:4c:50:24:f3:1c:72:01:30: 70:fb:8c:66:ee:cd:a9:d5:14:c1:1d:26:29:67:c2: 6b:b0:d5:66:31:fd:7b:bb:04:f9:4a:03:41:b4:00: a6:3c:00:e4:b4:7f:ed:a1:32:0c:c8:d7:36:25:01: f0:95:e4:47:52:a7:a6:59:f0:f5:bb:0f:e3:5b:82: af:8d:34:00:ec:b0:75:9a:f6:07:2b:be:6f:73:40: ce:7d:11:8a:a3:ba:85:95:e0:30:9e:7e:95:9a:ae: a0:da:59:7a:09:77:b1:7d:f2:13:3a:01:d8:34:c1: 5a:3e:59:89:a6:90:b8:46:99:c1:72:a6:8c:43:47: e4:18:2c:03:53:68:96:88:42:6b:97:21:1f:a8:2d: 5c:a5:9a:6f:29:cc:a7:6b:01:26:18:18:4b:16:d1: 0c:fd:a6:b9:39:25:9b:6f:2e:f6:82:2a:b6:0e:df: d2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:CF:E2:99:62:86:87:EA:B2:24:61:81:A7:E5:E7:86:BA:C9:94:CD X509v3 Authority Key Identifier: keyid:E1:AE:51:C8:B4:FB:85:A0:C6:F6:81:26:6B:78:AE:B4:E2:06:B0:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/E1AE51C8B4FB85A0C6F681266B78AEB4E206B05B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1AE51C8B4FB85A0C6F681266B78AEB4E206B05B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/E1AE51C8B4FB85A0C6F681266B78AEB4E206B05B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:72:57:ad:ae:ef:16:e1:fc:db:d5:d9:09:66:e1:50:3d:f7: c5:2b:6f:64:d6:3d:17:76:84:64:c4:66:d6:f0:50:ea:78:32: 36:72:ac:cc:74:24:7a:08:45:ca:cd:13:c0:74:8f:54:7a:c9: d6:d8:f0:4e:19:9c:af:5b:71:37:18:c9:2c:b7:3f:32:34:cf: c4:e2:af:f2:77:b5:32:f1:32:85:80:77:fe:25:1d:e1:37:cd: fe:31:bd:f2:d0:49:8a:eb:b7:32:a4:57:09:ad:be:cc:61:f2: f5:46:1a:d1:0c:25:f0:13:17:3f:93:e4:3e:da:f4:38:83:2f: d1:43:46:59:e2:ad:4e:34:70:f2:95:8e:00:ff:5f:d4:2c:2c: ab:99:83:fa:9b:3a:54:5d:5a:f9:10:41:d4:f8:19:e2:ae:8d: 7a:83:2a:0a:3a:fb:b9:43:e7:11:48:e0:ef:2f:45:13:f5:28: 0e:db:bd:88:93:34:df:32:83:e1:d3:70:ee:53:d7:10:13:26: 99:ab:a5:df:04:d9:da:30:cb:2d:48:63:2f:5f:6f:eb:37:15: 2c:e1:fe:fe:bd:79:3f:99:cd:57:71:46:2e:72:26:b3:2f:ff: aa:ea:1c:d1:db:02:a7:6a:a6:99:c9:21:d9:82:41:a4:61:e6: ec:67:98:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGmy3w+///I9++lUtYX7//59sO/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFBRTUxQzhCNEZCODVBMEM2RjY4MTI2NkI3OEFFQjRF MjA2QjA1QjAeFw0yNjA5MjMwNjI0MDRaFw0yNjA5MjQwODI5MDRaMDMxMTAvBgNV BAMTKERBQ0ZFMjk5NjI4Njg3RUFCMjI0NjE4MUE3RTVFNzg2QkFDOTk0Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCqDyXv9skK4nAwlISd2vsBLYt 7FdLN9SdenbGKipaWxshjpcsH+zvoHm7v0s4Gl+yxGbel8llmr8s0lkDffZ2mBDL sa/kV2BtfDm4YPOJQMlMUCTzHHIBMHD7jGbuzanVFMEdJilnwmuw1WYx/Xu7BPlK A0G0AKY8AOS0f+2hMgzI1zYlAfCV5EdSp6ZZ8PW7D+Nbgq+NNADssHWa9gcrvm9z QM59EYqjuoWV4DCefpWarqDaWXoJd7F98hM6Adg0wVo+WYmmkLhGmcFypoxDR+QY LANTaJaIQmuXIR+oLVylmm8pzKdrASYYGEsW0Qz9prk5JZtvLvaCKrYO39KnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2s/imWKGh+qyJGGBp+XnhrrJlM0wHwYDVR0j BBgwFoAU4a5RyLT7haDG9oEma3iutOIGsFswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDgzNDljZDQtYzA3OS00MWZmLWFhOWUtMzZmM2Q0NDgyNjQ1LzAvRTFBRTUxQzhC NEZCODVBMEM2RjY4MTI2NkI3OEFFQjRFMjA2QjA1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMUFFNTFDOEI0RkI4NUEwQzZGNjgxMjY2Qjc4QUVCNEUyMDZC MDVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDgzNDljZDQtYzA3OS00MWZmLWFh OWUtMzZmM2Q0NDgyNjQ1LzAvRTFBRTUxQzhCNEZCODVBMEM2RjY4MTI2NkI3OEFF QjRFMjA2QjA1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADVyV62u7xbh/NvV2Qlm4VA998Urb2TWPRd2 hGTEZtbwUOp4MjZyrMx0JHoIRcrNE8B0j1R6ydbY8E4ZnK9bcTcYySy3PzI0z8Ti r/J3tTLxMoWAd/4lHeE3zf4xvfLQSYrrtzKkVwmtvsxh8vVGGtEMJfATFz+T5D7a 9DiDL9FDRlnirU40cPKVjgD/X9QsLKuZg/qbOlRdWvkQQdT4GeKujXqDKgo6+7lD 5xFI4O8vRRP1KA7bvYiTNN8yg+HTcO5T1xATJpmrpd8E2dowyy1IYy9fb+s3FSzh /v69eT+ZzVdxRi5yJrMv/6rqHNHbAqdqppnJIdmCQaRh5uxnmDY= -----END CERTIFICATE-----Generated at Thu Sep 24 00:32:18 2026 by rpki-client