$ rpki-client -vvvf rpki-rsync.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/E4AC5A0B7B031CC8F4387521F896C49FC8165D46.mft File: E4AC5A0B7B031CC8F4387521F896C49FC8165D46.mft (raw, json) Hash identifier: 4OeZRedzf15RnaA/W+cUpSRMH6tjj1Abahbx0JXUabM= Subject key identifier: B2:8E:A4:6C:54:25:3F:04:7B:19:A7:DC:29:05:D7:A7:A0:78:60:5A Authority key identifier: E4:AC:5A:0B:7B:03:1C:C8:F4:38:75:21:F8:96:C4:9F:C8:16:5D:46 Certificate issuer: /CN=E4AC5A0B7B031CC8F4387521F896C49FC8165D46 Certificate serial: 3D621B1B5AED7998287AD5753BF1977DD8CB2C23 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4AC5A0B7B031CC8F4387521F896C49FC8165D46.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/E4AC5A0B7B031CC8F4387521F896C49FC8165D46.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 19:29:45 +0000 Manifest this update: Thu 24 Sep 2026 19:24:45 +0000 Manifest next update: Fri 25 Sep 2026 19:37:45 +0000 Files and hashes: 1: 3130332e3133392e3138382e302f32332d3233203d3e20313338393031.roa (hash: l0X0+poFCOAwI1du4qGF+veeFoCLhTMTvuXxlX7wlYc=) 2: 323030313a6466303a386438303a3a2f34382d3438203d3e20313338393031.roa (hash: Fw4ZShoY1ipa+BexcpJaYw89aApjuOYJwqsXze7oiwI=) 3: E4AC5A0B7B031CC8F4387521F896C49FC8165D46.crl (hash: O3G8+rgjt2zCrWWhO/mOeGpJgrEGbdK69aRWS31zQIM=) 4: 3130332e3133392e3138382e302f32332d3234203d3e20313338393031.roa (hash: nmYerSBoYz5ABQ7ABcFXpaJW56oTyB9j1y+H2x6EP3A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/E4AC5A0B7B031CC8F4387521F896C49FC8165D46.crl rsync://rpki-rsync.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/E4AC5A0B7B031CC8F4387521F896C49FC8165D46.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4AC5A0B7B031CC8F4387521F896C49FC8165D46.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:62:1b:1b:5a:ed:79:98:28:7a:d5:75:3b:f1:97:7d:d8:cb:2c:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4AC5A0B7B031CC8F4387521F896C49FC8165D46 Validity Not Before: Sep 24 19:24:45 2026 GMT Not After : Sep 25 19:37:45 2026 GMT Subject: CN=B28EA46C54253F047B19A7DC2905D7A7A078605A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:de:de:6d:33:1e:a5:83:46:20:b6:d7:4b:3b: 31:73:d5:76:6e:bf:e2:4b:71:3a:d3:35:86:2a:cb: b4:d3:bf:04:97:14:d3:90:03:d3:38:f6:62:88:29: 05:df:40:d9:7d:74:e1:b7:8a:c5:d6:ae:63:c1:a0: ec:1b:ed:34:83:c8:3e:ce:4d:12:9d:4a:0a:b5:b6: c7:06:9a:d6:01:33:df:b3:6f:1a:16:a4:1f:3a:48: 69:1f:9f:be:e4:a8:57:c2:bc:24:3d:7d:f0:d3:8c: db:a0:cb:6c:ee:c9:cd:60:aa:a4:6f:a4:83:d8:81: a1:8d:6c:37:60:c1:84:d5:2f:82:84:b9:c9:4d:bd: 5d:5c:99:67:9f:a0:fe:e1:3f:83:d6:3a:b8:cf:29: 28:76:21:21:63:32:40:cc:69:2f:77:15:53:d1:99: f5:6f:60:12:dc:32:8a:6c:ae:43:48:14:6b:cb:e0: 66:53:47:90:bc:52:d7:2e:19:71:c7:df:bd:ae:c0: 43:2e:06:b3:30:6f:1b:b6:5f:fa:51:a5:66:c8:9b: c0:81:a4:48:34:24:35:c0:f8:54:ce:3d:aa:16:75: cf:ca:06:16:20:7a:1c:ba:66:d2:d7:56:51:46:4d: 86:5d:40:ab:0d:d1:70:44:e9:4f:4a:23:37:a1:1c: 02:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:8E:A4:6C:54:25:3F:04:7B:19:A7:DC:29:05:D7:A7:A0:78:60:5A X509v3 Authority Key Identifier: keyid:E4:AC:5A:0B:7B:03:1C:C8:F4:38:75:21:F8:96:C4:9F:C8:16:5D:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/E4AC5A0B7B031CC8F4387521F896C49FC8165D46.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4AC5A0B7B031CC8F4387521F896C49FC8165D46.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/E4AC5A0B7B031CC8F4387521F896C49FC8165D46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:ae:05:e6:f6:ba:30:d7:2a:c0:4f:72:c3:cc:f5:24:82:a7: ca:f0:d7:3e:9a:e3:f2:87:05:4b:72:77:22:90:d9:53:5f:57: 52:30:71:e1:e8:79:7c:6e:70:4c:3d:6c:16:df:74:9f:d7:2a: 1b:16:2b:d7:ea:55:d4:ff:5c:1c:51:f9:2c:2d:06:34:6c:73: e5:f5:7a:e7:91:46:8d:b1:e8:63:51:f4:7d:18:03:3a:fb:97: 2f:5b:6a:05:d0:3c:c5:be:65:59:fa:be:9a:96:e6:ad:13:02: 32:de:2c:de:f1:b7:d6:79:bc:44:ad:b7:58:18:14:e8:f7:15: 32:3f:7e:34:e4:4d:72:2c:2a:2c:cd:f5:0c:ea:5d:71:1f:88: 04:df:8a:3c:6b:bb:9c:ff:e4:24:12:48:81:dc:74:12:1b:c5: e7:33:01:60:fa:df:70:cd:99:f6:c8:e1:81:79:83:69:10:02: 20:ee:2a:71:bc:aa:2c:f7:d2:4c:34:0f:ad:29:e2:5c:f7:c2: cc:3f:7f:3b:2f:18:4f:93:f2:3b:d2:40:79:89:38:ef:4e:ac: 13:22:cc:b6:47:bd:79:e7:41:47:56:53:d0:aa:93:7e:d9:fc: 40:bb:01:76:0a:0f:f6:94:c2:75:0a:e0:6d:b3:41:03:b7:cd: 9e:74:43:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPWIbG1rteZgoetV1O/GXfdjLLCMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTRBQzVBMEI3QjAzMUNDOEY0Mzg3NTIxRjg5NkM0OUZD ODE2NUQ0NjAeFw0yNjA5MjQxOTI0NDVaFw0yNjA5MjUxOTM3NDVaMDMxMTAvBgNV BAMTKEIyOEVBNDZDNTQyNTNGMDQ3QjE5QTdEQzI5MDVEN0E3QTA3ODYwNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC53t5tMx6lg0YgttdLOzFz1XZu v+JLcTrTNYYqy7TTvwSXFNOQA9M49mKIKQXfQNl9dOG3isXWrmPBoOwb7TSDyD7O TRKdSgq1tscGmtYBM9+zbxoWpB86SGkfn77kqFfCvCQ9ffDTjNugy2zuyc1gqqRv pIPYgaGNbDdgwYTVL4KEuclNvV1cmWefoP7hP4PWOrjPKSh2ISFjMkDMaS93FVPR mfVvYBLcMopsrkNIFGvL4GZTR5C8UtcuGXHH372uwEMuBrMwbxu2X/pRpWbIm8CB pEg0JDXA+FTOPaoWdc/KBhYgehy6ZtLXVlFGTYZdQKsN0XBE6U9KIzehHALvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUso6kbFQlPwR7GafcKQXXp6B4YFowHwYDVR0j BBgwFoAU5KxaC3sDHMj0OHUh+JbEn8gWXUYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWI3OTkwNjgtNGVjOC00YzM2LThmYTctM2U3MmFlYmNlZWI4LzAvRTRBQzVBMEI3 QjAzMUNDOEY0Mzg3NTIxRjg5NkM0OUZDODE2NUQ0Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNEFDNUEwQjdCMDMxQ0M4RjQzODc1MjFGODk2QzQ5RkM4MTY1 RDQ2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWI3OTkwNjgtNGVjOC00YzM2LThm YTctM2U3MmFlYmNlZWI4LzAvRTRBQzVBMEI3QjAzMUNDOEY0Mzg3NTIxRjg5NkM0 OUZDODE2NUQ0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFeuBeb2ujDXKsBPcsPM9SSCp8rw1z6a4/KH BUtydyKQ2VNfV1IwceHoeXxucEw9bBbfdJ/XKhsWK9fqVdT/XBxR+SwtBjRsc+X1 eueRRo2x6GNR9H0YAzr7ly9bagXQPMW+ZVn6vpqW5q0TAjLeLN7xt9Z5vEStt1gY FOj3FTI/fjTkTXIsKizN9QzqXXEfiATfijxru5z/5CQSSIHcdBIbxeczAWD633DN mfbI4YF5g2kQAiDuKnG8qiz30kw0D60p4lz3wsw/fzsvGE+T8jvSQHmJOO9OrBMi zLZHvXnnQUdWU9Cqk37Z/EC7AXYKD/aUwnUK4G2zQQO3zZ50Q4A= -----END CERTIFICATE-----Generated at Fri Sep 25 02:31:13 2026 by rpki-client