$ rpki-client -vvf rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.mft File: E9F2A418990B480D204FA0D037A5ABB3AEC360E9.mft (raw, json) Hash identifier: mn3CUZB3f2Q0d2lup75mP8PtAKjiowCi+NO3pSAsaUw= Subject key identifier: 00:35:CD:D6:8E:0D:D1:7A:DF:89:87:D3:FF:F2:78:78:2E:42:C6:9F Authority key identifier: E9:F2:A4:18:99:0B:48:0D:20:4F:A0:D0:37:A5:AB:B3:AE:C3:60:E9 Certificate issuer: /CN=E9F2A418990B480D204FA0D037A5ABB3AEC360E9 Certificate serial: 14A87559E0D9D8351F7B31A72D9BAE1164AE5452 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.mft Manifest number: 71 Signing time: Fri 24 Jul 2026 08:04:25 +0000 Manifest this update: Fri 24 Jul 2026 07:59:25 +0000 Manifest next update: Sat 25 Jul 2026 10:21:25 +0000 Files and hashes: 1: E9F2A418990B480D204FA0D037A5ABB3AEC360E9.crl (hash: bQ31DL29zK8L8JiiW3pgjnkVAn88mmomUbcloL2tg8A=) 2: 3130332e3139312e3131372e302f32342d3234203d3e20313439393137.roa (hash: lAAUV9z8f3t9czOX/VqnympJr8MrNtNyhxmHLT5vnzY=) 3: 3130332e3139312e3131362e302f32342d3234203d3e20313439393137.roa (hash: 27oObCgWzykb6CFKZyK6/jDYuaqop/FIGkUT/qI+p/Q=) 4: 3130332e3139312e3131362e302f32332d3233203d3e20313439393137.roa (hash: bL7nWexv3dr33uLwywkImAJrJWec+y7OgTN8pZ5ywaw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.crl rsync://rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:a8:75:59:e0:d9:d8:35:1f:7b:31:a7:2d:9b:ae:11:64:ae:54:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9F2A418990B480D204FA0D037A5ABB3AEC360E9 Validity Not Before: Jul 24 07:59:25 2026 GMT Not After : Jul 25 10:21:25 2026 GMT Subject: CN=0035CDD68E0DD17ADF8987D3FFF278782E42C69F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ed:30:c1:3b:b4:c8:e0:43:93:84:cf:ea:1f: 9e:56:5b:11:48:5b:ea:71:fb:b8:44:6e:3d:4c:19: 09:af:43:63:d8:4d:df:df:5b:87:c3:d1:ac:19:01: 44:db:2b:97:89:ea:6f:78:b0:20:1c:fe:ae:0b:52: 1a:39:63:81:00:5b:e2:bf:ee:1b:c7:65:5f:5f:e4: 3b:25:4d:9b:36:dc:de:40:42:f6:89:14:35:28:c7: 0c:94:ab:f3:ee:11:87:12:60:39:bb:8f:92:42:2f: be:5d:4d:4f:de:46:52:bd:6e:79:53:c4:fe:75:1f: f4:1e:3e:23:c7:39:5b:69:1f:4c:2b:ae:57:11:63: 94:07:d1:a9:25:f9:bf:97:f3:f8:b9:9c:d9:98:58: 73:dd:26:8d:8f:b5:06:48:26:4e:8a:38:1a:d0:1b: 4f:cb:0d:05:07:09:cc:5b:d2:41:2a:61:1b:77:28: 20:43:74:4f:e5:47:ed:ad:1b:49:b3:f6:ab:46:ad: a3:1d:28:4a:14:a0:1e:22:63:dc:90:1a:b3:7b:4f: c2:52:74:f8:33:56:a1:5e:66:44:6b:99:1e:77:81: 38:3a:7c:0a:39:1c:26:c5:2f:9a:db:6b:1d:10:48: 46:52:fe:b3:b0:29:4d:cf:4b:c3:fb:70:7f:b7:67: 3e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:35:CD:D6:8E:0D:D1:7A:DF:89:87:D3:FF:F2:78:78:2E:42:C6:9F X509v3 Authority Key Identifier: keyid:E9:F2:A4:18:99:0B:48:0D:20:4F:A0:D0:37:A5:AB:B3:AE:C3:60:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:e2:77:e7:4a:d2:e8:43:3b:2e:64:e4:da:a1:25:79:7b:cb: e5:8b:5e:75:65:35:80:8a:42:ad:ec:d5:a2:1b:ae:13:6c:a5: 54:6e:6d:54:af:47:89:d8:9c:3c:b4:04:01:92:09:4c:ac:9d: 52:11:35:a0:e5:21:4e:47:61:2d:e0:9e:14:4e:ea:37:8d:f3: 3a:c8:16:13:42:90:47:db:40:0f:2e:4b:de:ca:df:72:72:12: 35:7c:8a:7b:89:72:b0:4b:35:2d:98:ad:c2:7c:db:5b:1c:08: 73:6a:e1:d3:c6:51:7b:0f:d7:5d:c3:b1:88:d6:e9:4c:1c:b8: 7c:e8:66:8b:1e:b5:b0:86:4a:86:1a:76:95:f0:44:fd:5a:77: 4f:dd:3a:72:ca:d9:8e:84:59:1b:23:12:23:c7:e3:5f:2d:ef: 9a:e7:64:60:6a:38:d3:31:6c:f5:4a:ee:46:31:ac:a7:34:76: b8:30:04:b8:10:32:e0:56:46:6c:83:80:b5:5b:fc:00:e1:6a: 39:ce:03:71:bc:06:5d:98:a2:ec:ac:d7:44:a6:1a:de:24:97: 04:59:af:0a:07:d4:fb:5e:da:41:a8:49:56:07:82:8d:98:9b: 16:5f:f1:e7:74:10:8c:bd:66:2f:57:de:d1:89:d5:4e:32:cd: 13:7b:2f:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFKh1WeDZ2DUfezGnLZuuEWSuVFIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlGMkE0MTg5OTBCNDgwRDIwNEZBMEQwMzdBNUFCQjNB RUMzNjBFOTAeFw0yNjA3MjQwNzU5MjVaFw0yNjA3MjUxMDIxMjVaMDMxMTAvBgNV BAMTKDAwMzVDREQ2OEUwREQxN0FERjg5ODdEM0ZGRjI3ODc4MkU0MkM2OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh7TDBO7TI4EOThM/qH55WWxFI W+px+7hEbj1MGQmvQ2PYTd/fW4fD0awZAUTbK5eJ6m94sCAc/q4LUho5Y4EAW+K/ 7hvHZV9f5DslTZs23N5AQvaJFDUoxwyUq/PuEYcSYDm7j5JCL75dTU/eRlK9bnlT xP51H/QePiPHOVtpH0wrrlcRY5QH0akl+b+X8/i5nNmYWHPdJo2PtQZIJk6KOBrQ G0/LDQUHCcxb0kEqYRt3KCBDdE/lR+2tG0mz9qtGraMdKEoUoB4iY9yQGrN7T8JS dPgzVqFeZkRrmR53gTg6fAo5HCbFL5rbax0QSEZS/rOwKU3PS8P7cH+3Zz73AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUADXN1o4N0XrfiYfT//J4eC5Cxp8wHwYDVR0j BBgwFoAU6fKkGJkLSA0gT6DQN6Wrs67DYOkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTZhZGFlMmEtNDdiNi00YWU1LTljM2YtM2U4Y2I5MmEzOTg3LzAvRTlGMkE0MTg5 OTBCNDgwRDIwNEZBMEQwMzdBNUFCQjNBRUMzNjBFOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOUYyQTQxODk5MEI0ODBEMjA0RkEwRDAzN0E1QUJCM0FFQzM2 MEU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTZhZGFlMmEtNDdiNi00YWU1LTlj M2YtM2U4Y2I5MmEzOTg3LzAvRTlGMkE0MTg5OTBCNDgwRDIwNEZBMEQwMzdBNUFC QjNBRUMzNjBFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEzid+dK0uhDOy5k5NqhJXl7y+WLXnVlNYCK Qq3s1aIbrhNspVRubVSvR4nYnDy0BAGSCUysnVIRNaDlIU5HYS3gnhRO6jeN8zrI FhNCkEfbQA8uS97K33JyEjV8inuJcrBLNS2YrcJ821scCHNq4dPGUXsP113DsYjW 6UwcuHzoZosetbCGSoYadpXwRP1ad0/dOnLK2Y6EWRsjEiPH418t75rnZGBqONMx bPVK7kYxrKc0drgwBLgQMuBWRmyDgLVb/ADhajnOA3G8Bl2Youys10SmGt4klwRZ rwoH1Pte2kGoSVYHgo2YmxZf8ed0EIy9Zi9X3tGJ1U4yzRN7L+A= -----END CERTIFICATE-----Generated at Fri Jul 24 11:18:46 2026 by rpki-client