$ rpki-client -vvf rpki-rsync.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.mft File: E4FD11A334BDCA34C2EAB964DCA226B6942B929D.mft (raw, json) Hash identifier: 4Y03oadfVUfZmuQcv7f5ZLcu/NI0C8eUOp+pmNSWiA0= Subject key identifier: E2:23:F2:45:8E:45:E3:36:3D:08:35:58:D3:68:17:50:A7:5D:27:3E Authority key identifier: E4:FD:11:A3:34:BD:CA:34:C2:EA:B9:64:DC:A2:26:B6:94:2B:92:9D Certificate issuer: /CN=E4FD11A334BDCA34C2EAB964DCA226B6942B929D Certificate serial: 676B5D61E62301568B6580CAD31972CB95AF3620 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 19:59:30 +0000 Manifest this update: Thu 23 Jul 2026 19:54:30 +0000 Manifest next update: Fri 24 Jul 2026 22:07:30 +0000 Files and hashes: 1: 3130332e32392e3137302e302f32342d3234203d3e203536323631.roa (hash: O1jacwkaM82L67sDrz7lXelPyRl9Rz1j5J3jiVwgpPw=) 2: 3130332e32392e3137312e302f32342d3234203d3e203538333738.roa (hash: Bo3J9bvJrG5KvK6zISNrunddpueB7wbNcCGt/02SR80=) 3: E4FD11A334BDCA34C2EAB964DCA226B6942B929D.crl (hash: VYGr+TsYta6oVRArMRpMI33PHkR5V1BSvYE66IqDAVI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.crl rsync://rpki-rsync.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:07:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:6b:5d:61:e6:23:01:56:8b:65:80:ca:d3:19:72:cb:95:af:36:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4FD11A334BDCA34C2EAB964DCA226B6942B929D Validity Not Before: Jul 23 19:54:30 2026 GMT Not After : Jul 24 22:07:30 2026 GMT Subject: CN=E223F2458E45E3363D083558D3681750A75D273E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:52:92:c8:9e:d6:e3:0c:a5:a3:c8:d0:05:c5: 42:db:f0:71:3d:91:d5:27:da:23:a7:3c:a1:e9:0b: d6:bd:96:31:86:ce:89:68:45:b8:76:f7:6d:39:e0: 20:9e:ed:a6:f8:99:10:b1:ac:28:9a:96:20:78:a4: 3b:e5:41:d3:d9:41:ef:a5:9f:08:8d:d2:f0:2d:38: 24:45:a8:5f:cf:6e:e1:8f:28:ce:6a:53:52:35:a8: ef:3b:14:49:71:a4:90:c7:83:34:a2:15:5c:c1:6e: 71:10:16:13:84:56:71:ea:5c:8d:7b:a9:6f:91:d6: 7e:1a:b8:41:42:6d:ff:f5:19:e0:86:07:d6:1d:8e: 97:dc:18:44:a3:bc:de:1d:b1:ed:aa:b1:e1:c7:8e: ec:61:fe:66:93:ae:7f:b7:d1:f6:bd:f8:cf:83:c9: 55:fa:5a:10:75:98:f4:a6:5e:13:e4:58:16:03:bd: ed:a5:24:db:9b:bc:33:79:28:a5:c4:be:ee:86:6a: f4:e0:6e:3d:20:65:af:44:6c:87:41:1e:73:df:d6: 0e:e5:74:c5:ec:97:ea:64:c4:9d:03:3d:2e:9e:71: 17:3c:db:c8:ec:2f:a3:42:31:b6:73:0d:c9:54:1f: 86:ff:d0:55:fe:72:cc:74:21:b0:89:5a:59:87:8c: d0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:23:F2:45:8E:45:E3:36:3D:08:35:58:D3:68:17:50:A7:5D:27:3E X509v3 Authority Key Identifier: keyid:E4:FD:11:A3:34:BD:CA:34:C2:EA:B9:64:DC:A2:26:B6:94:2B:92:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:4c:d8:62:9d:c4:fb:9a:19:34:4b:50:df:c9:a7:5a:ea:40: 10:d0:9b:00:c7:73:80:53:aa:71:43:b6:67:2a:fb:f7:a2:15: 5a:77:3b:c5:01:f1:25:4b:70:96:15:e6:e6:d6:76:8e:96:d5: ca:2c:a2:57:3b:46:8d:ee:33:a5:10:76:cb:be:a1:73:dc:08: 12:05:64:69:b0:be:fc:89:cc:f2:71:15:55:b0:a3:e8:eb:f9: 3d:85:71:83:36:42:b9:b9:b3:26:bb:5b:42:df:98:94:9a:b3: 8f:19:61:1e:84:58:c4:e5:13:0b:15:3d:fe:4f:bf:ce:7d:6e: 75:79:82:aa:a8:28:3d:d0:b3:8d:d2:ac:45:f3:e3:8e:ba:7a: 21:e6:a0:f3:e9:c1:f1:e4:25:76:c2:cd:f8:33:ce:d9:3e:bf: 72:04:b2:f8:23:a2:48:a0:69:4a:8e:c7:99:b1:4f:ef:ae:7e: 3a:4f:2b:39:ce:e9:cb:a0:1b:85:44:d2:ae:45:d6:41:76:f3: 22:74:19:4c:eb:74:1b:96:f8:1e:d2:42:b8:66:60:32:f6:a0: 47:d8:8c:86:e1:e1:15:8a:bd:ae:e4:48:2b:59:03:1c:a0:8b: 17:30:df:9d:24:24:dd:9e:db:93:be:ef:fe:2a:62:86:28:bb: 16:58:1a:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ2tdYeYjAVaLZYDK0xlyy5WvNiAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTRGRDExQTMzNEJEQ0EzNEMyRUFCOTY0RENBMjI2QjY5 NDJCOTI5RDAeFw0yNjA3MjMxOTU0MzBaFw0yNjA3MjQyMjA3MzBaMDMxMTAvBgNV BAMTKEUyMjNGMjQ1OEU0NUUzMzYzRDA4MzU1OEQzNjgxNzUwQTc1RDI3M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjUpLIntbjDKWjyNAFxULb8HE9 kdUn2iOnPKHpC9a9ljGGzoloRbh292054CCe7ab4mRCxrCialiB4pDvlQdPZQe+l nwiN0vAtOCRFqF/PbuGPKM5qU1I1qO87FElxpJDHgzSiFVzBbnEQFhOEVnHqXI17 qW+R1n4auEFCbf/1GeCGB9YdjpfcGESjvN4dse2qseHHjuxh/maTrn+30fa9+M+D yVX6WhB1mPSmXhPkWBYDve2lJNubvDN5KKXEvu6GavTgbj0gZa9EbIdBHnPf1g7l dMXsl+pkxJ0DPS6ecRc828jsL6NCMbZzDclUH4b/0FX+csx0IbCJWlmHjNDtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4iPyRY5F4zY9CDVY02gXUKddJz4wHwYDVR0j BBgwFoAU5P0RozS9yjTC6rlk3KImtpQrkp0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTM4MDkzODQtOWIxYy00ZjVhLWFhNmItOWRlM2I1MmE5YzA1LzAvRTRGRDExQTMz NEJEQ0EzNEMyRUFCOTY0RENBMjI2QjY5NDJCOTI5RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNEZEMTFBMzM0QkRDQTM0QzJFQUI5NjREQ0EyMjZCNjk0MkI5 MjlELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTM4MDkzODQtOWIxYy00ZjVhLWFh NmItOWRlM2I1MmE5YzA1LzAvRTRGRDExQTMzNEJEQ0EzNEMyRUFCOTY0RENBMjI2 QjY5NDJCOTI5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKJM2GKdxPuaGTRLUN/Jp1rqQBDQmwDHc4BT qnFDtmcq+/eiFVp3O8UB8SVLcJYV5ubWdo6W1cosolc7Ro3uM6UQdsu+oXPcCBIF ZGmwvvyJzPJxFVWwo+jr+T2FcYM2Qrm5sya7W0LfmJSas48ZYR6EWMTlEwsVPf5P v859bnV5gqqoKD3Qs43SrEXz4466eiHmoPPpwfHkJXbCzfgzztk+v3IEsvgjokig aUqOx5mxT++ufjpPKznO6cugG4VE0q5F1kF28yJ0GUzrdBuW+B7SQrhmYDL2oEfY jIbh4RWKva7kSCtZAxygixcw350kJN2e25O+7/4qYoYouxZYGh0= -----END CERTIFICATE-----Generated at Fri Jul 24 07:04:54 2026 by rpki-client