$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.mft File: E4FD11A334BDCA34C2EAB964DCA226B6942B929D.mft (raw, json) Hash identifier: p21Dh1RYH71o5dInYuQ9/MsKZ4zGWIAyWP37M0IuYdE= Subject key identifier: 12:00:6E:3D:3C:99:13:73:0D:25:12:AE:32:0F:38:4E:43:2D:0D:29 Authority key identifier: E4:FD:11:A3:34:BD:CA:34:C2:EA:B9:64:DC:A2:26:B6:94:2B:92:9D Certificate issuer: /CN=E4FD11A334BDCA34C2EAB964DCA226B6942B929D Certificate serial: 63701FD285E1F0779CF6841B03B6A422A8D89080 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 05:06:45 +0000 Manifest this update: Fri 25 Sep 2026 05:01:45 +0000 Manifest next update: Sat 26 Sep 2026 08:36:45 +0000 Files and hashes: 1: 3130332e32392e3137312e302f32342d3234203d3e203538333738.roa (hash: Bo3J9bvJrG5KvK6zISNrunddpueB7wbNcCGt/02SR80=) 2: 3130332e32392e3137302e302f32342d3234203d3e203536323631.roa (hash: O1jacwkaM82L67sDrz7lXelPyRl9Rz1j5J3jiVwgpPw=) 3: E4FD11A334BDCA34C2EAB964DCA226B6942B929D.crl (hash: Db7mPmpeoQrxTSGYdNpqXGiW3t1g68mmB9omp5qDlOE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.crl rsync://rpki-rsync.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 08:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:70:1f:d2:85:e1:f0:77:9c:f6:84:1b:03:b6:a4:22:a8:d8:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4FD11A334BDCA34C2EAB964DCA226B6942B929D Validity Not Before: Sep 25 05:01:45 2026 GMT Not After : Sep 26 08:36:45 2026 GMT Subject: CN=12006E3D3C9913730D2512AE320F384E432D0D29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:16:80:e7:21:b3:10:59:3f:8c:01:09:08:b3: ed:c2:2e:42:87:a8:86:e6:e4:9b:0f:b9:b4:3b:ff: 2e:4b:48:ee:9b:4d:19:db:55:36:aa:89:bd:e4:fb: b2:fd:0d:36:b7:7a:87:fc:fa:ee:2d:1b:9f:86:0c: e1:ae:47:46:82:b0:ed:e8:94:2d:80:02:36:fa:43: db:e7:86:c5:af:36:6d:18:51:25:24:ca:45:41:cc: 6a:27:23:37:0d:a5:1b:e1:6e:76:f2:19:ab:90:6e: 46:aa:4a:61:fe:1b:22:a8:8c:5c:22:e0:7e:6b:0f: 52:75:ae:2a:27:14:73:8c:4d:e5:bd:c8:1e:15:7c: b4:95:7d:f9:05:fa:2c:a7:cd:97:4f:f7:8e:43:b4: 76:f5:e1:37:5f:2c:b2:5c:e8:9a:3c:38:68:8e:56: 61:d0:e1:70:5e:4c:a2:7f:7f:6e:a0:01:ab:e5:d3: af:07:39:5e:79:75:5e:15:96:c7:37:9d:70:30:a8: b9:98:43:8e:8b:60:f3:13:f7:c1:f0:c4:8d:ac:50: 91:0d:66:90:e5:c5:59:32:3e:9d:97:11:4b:a2:57: be:ac:c1:c3:77:31:61:b8:05:06:f6:39:72:35:e0: 38:4f:8e:69:93:8b:4b:86:22:62:39:7c:d3:6b:a5: 16:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:00:6E:3D:3C:99:13:73:0D:25:12:AE:32:0F:38:4E:43:2D:0D:29 X509v3 Authority Key Identifier: keyid:E4:FD:11:A3:34:BD:CA:34:C2:EA:B9:64:DC:A2:26:B6:94:2B:92:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:39:68:fc:ac:a5:be:7b:43:ab:30:dd:9d:09:86:d3:90:10: a8:4b:d0:7d:60:df:b6:83:3f:48:34:46:f7:1e:35:a7:67:a2: dc:75:c1:27:24:4e:5b:f9:17:71:9d:a4:8b:dc:2a:df:62:20: cc:29:1a:f2:54:f3:6d:33:bf:92:47:14:41:eb:c9:af:a0:b9: bf:10:69:9f:a2:af:30:18:7e:eb:bb:94:47:39:1c:a8:3f:76: 9d:98:c1:b8:56:19:fb:68:7c:cb:55:b0:9f:d5:07:15:ac:27: 1f:7b:65:19:3e:4c:73:41:02:6a:b1:31:8f:f3:cc:5b:8a:30: fb:de:a7:c7:78:67:76:02:71:2c:63:17:60:33:c4:a8:b2:36: 41:86:fd:a3:18:ce:3f:aa:4c:a6:2a:cd:ed:64:9b:45:d5:5a: 3a:5e:67:25:1e:80:c1:4f:bd:74:89:c5:9d:1f:8e:3f:cd:6d: fc:f9:cc:05:ae:a1:a0:d5:e9:01:b5:15:fa:42:9b:47:44:66: 30:5d:0d:76:98:de:80:98:d4:27:1e:d6:7e:8d:73:fd:b9:c7: cc:ab:8f:73:96:78:59:f5:58:53:00:dd:0d:83:af:98:fe:d6: 73:a6:fa:a8:cd:f8:63:d3:c9:b5:a3:73:5c:17:d0:76:99:0b: 7d:c1:68:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY3Af0oXh8Hec9oQbA7akIqjYkIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTRGRDExQTMzNEJEQ0EzNEMyRUFCOTY0RENBMjI2QjY5 NDJCOTI5RDAeFw0yNjA5MjUwNTAxNDVaFw0yNjA5MjYwODM2NDVaMDMxMTAvBgNV BAMTKDEyMDA2RTNEM0M5OTEzNzMwRDI1MTJBRTMyMEYzODRFNDMyRDBEMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNFoDnIbMQWT+MAQkIs+3CLkKH qIbm5JsPubQ7/y5LSO6bTRnbVTaqib3k+7L9DTa3eof8+u4tG5+GDOGuR0aCsO3o lC2AAjb6Q9vnhsWvNm0YUSUkykVBzGonIzcNpRvhbnbyGauQbkaqSmH+GyKojFwi 4H5rD1J1rionFHOMTeW9yB4VfLSVffkF+iynzZdP945DtHb14TdfLLJc6Jo8OGiO VmHQ4XBeTKJ/f26gAavl068HOV55dV4Vlsc3nXAwqLmYQ46LYPMT98HwxI2sUJEN ZpDlxVkyPp2XEUuiV76swcN3MWG4BQb2OXI14DhPjmmTi0uGImI5fNNrpRYrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEgBuPTyZE3MNJRKuMg84TkMtDSkwHwYDVR0j BBgwFoAU5P0RozS9yjTC6rlk3KImtpQrkp0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTM4MDkzODQtOWIxYy00ZjVhLWFhNmItOWRlM2I1MmE5YzA1LzAvRTRGRDExQTMz NEJEQ0EzNEMyRUFCOTY0RENBMjI2QjY5NDJCOTI5RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNEZEMTFBMzM0QkRDQTM0QzJFQUI5NjREQ0EyMjZCNjk0MkI5 MjlELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTM4MDkzODQtOWIxYy00ZjVhLWFh NmItOWRlM2I1MmE5YzA1LzAvRTRGRDExQTMzNEJEQ0EzNEMyRUFCOTY0RENBMjI2 QjY5NDJCOTI5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIw5aPyspb57Q6sw3Z0JhtOQEKhL0H1g37aD P0g0RvceNadnotx1wSckTlv5F3GdpIvcKt9iIMwpGvJU820zv5JHFEHrya+gub8Q aZ+irzAYfuu7lEc5HKg/dp2YwbhWGftofMtVsJ/VBxWsJx97ZRk+THNBAmqxMY/z zFuKMPvep8d4Z3YCcSxjF2AzxKiyNkGG/aMYzj+qTKYqze1km0XVWjpeZyUegMFP vXSJxZ0fjj/Nbfz5zAWuoaDV6QG1FfpCm0dEZjBdDXaY3oCY1Cce1n6Nc/25x8yr j3OWeFn1WFMA3Q2Dr5j+1nOm+qjN+GPTybWjc1wX0HaZC33BaAc= -----END CERTIFICATE-----Generated at Fri Sep 25 13:02:29 2026 by rpki-client