$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.mft File: E0DE22F577B4244ECB332B87B5831D4AD7DA8007.mft (raw, json) Hash identifier: aa/EzviK/VeRn5NYHTim4tqInSLlyAm3T65s9FNqk/E= Subject key identifier: 37:49:DE:3D:4F:38:9F:13:D9:34:8D:13:1D:F3:4C:E3:96:E1:35:B2 Authority key identifier: E0:DE:22:F5:77:B4:24:4E:CB:33:2B:87:B5:83:1D:4A:D7:DA:80:07 Certificate issuer: /CN=E0DE22F577B4244ECB332B87B5831D4AD7DA8007 Certificate serial: 2B673A94CA655DD6F59326472372E3F2E5B216FE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 03:55:31 +0000 Manifest this update: Thu 24 Sep 2026 03:50:31 +0000 Manifest next update: Fri 25 Sep 2026 07:28:31 +0000 Files and hashes: 1: 3130332e3135332e322e302f32342d3234203d3e20313430333839.roa (hash: 3fZAI9UVM7/UZBavMAQaA62u0fyHX83Z/pKamnkzV24=) 2: E0DE22F577B4244ECB332B87B5831D4AD7DA8007.crl (hash: 0cPd5Dvk3nP8ZZ6a/9xFbdJrBhiIDKWVS0oNITUk3i4=) 3: 3130332e3135332e322e302f32332d3233203d3e20313430333839.roa (hash: zvVBOICq5pKD2ig8o0wI4pJml9B5+zqomhS6S0vqWcI=) 4: 3130332e3135332e332e302f32342d3234203d3e20313430333839.roa (hash: h7oJXK+AgIlPZVwTrPckQLETitJhhEg1pMAjxm6/Vyw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.crl rsync://rpki-rsync.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 07:28:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:67:3a:94:ca:65:5d:d6:f5:93:26:47:23:72:e3:f2:e5:b2:16:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0DE22F577B4244ECB332B87B5831D4AD7DA8007 Validity Not Before: Sep 24 03:50:31 2026 GMT Not After : Sep 25 07:28:31 2026 GMT Subject: CN=3749DE3D4F389F13D9348D131DF34CE396E135B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:03:8a:82:81:4c:ed:e8:d9:ac:fb:15:85:3c: f7:8b:02:37:7a:03:0f:d2:93:7c:8c:94:60:48:8f: ae:23:7c:8c:aa:cd:a3:a6:80:b0:64:f1:09:15:8f: 35:79:3c:f5:4b:0f:4f:72:f3:ad:5d:d5:15:bb:95: 76:2c:e7:af:70:bc:74:6e:92:42:a9:0b:27:ea:7b: 8e:af:a6:a9:86:a9:89:01:3e:e3:dd:98:61:67:7a: 69:c6:e2:1e:89:39:16:fa:7b:5d:85:51:c7:19:e7: bd:52:c5:49:df:aa:50:ea:be:fe:64:c4:7a:e1:81: 8e:53:8b:17:06:8a:64:ea:98:72:f2:55:37:f8:3e: d9:6f:b7:b3:3c:e6:f1:7c:4f:1d:70:24:8b:d2:32: c5:af:e0:db:0d:ec:07:84:36:fc:bf:bb:ca:4a:af: 46:72:f2:1d:6a:53:ed:31:e9:fe:ce:4e:99:46:77: 88:1c:da:30:f5:03:bc:36:39:32:88:ec:a8:9f:e7: 9d:d2:2b:68:37:99:d5:2f:b7:44:6d:f4:06:48:9c: 88:83:70:0c:31:10:a8:46:4d:e4:b1:8d:73:55:c4: 85:0e:81:29:02:ad:2b:93:15:d1:f5:2b:eb:a9:26: 51:01:52:12:45:66:b9:4d:b8:70:4b:25:ee:67:ee: 37:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:49:DE:3D:4F:38:9F:13:D9:34:8D:13:1D:F3:4C:E3:96:E1:35:B2 X509v3 Authority Key Identifier: keyid:E0:DE:22:F5:77:B4:24:4E:CB:33:2B:87:B5:83:1D:4A:D7:DA:80:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:54:02:e7:cf:b5:79:a5:da:45:5d:52:5f:6f:6e:7f:f3:f5: bd:85:da:1c:de:02:33:b8:cc:cb:09:3a:75:18:47:19:55:f5: fe:e1:43:02:83:c8:97:66:d5:ba:fb:c9:dd:f4:58:62:50:6e: 76:c7:8b:65:e6:39:6d:29:d6:f9:23:b7:34:46:6f:36:37:34: b3:17:b0:ec:e9:2e:58:87:1d:94:e0:dd:aa:84:00:05:bd:54: 28:7d:a4:57:d5:ca:cd:3f:71:70:7f:56:11:c1:11:8f:5d:7f: 7a:8e:ef:5c:f6:ff:2d:41:1d:42:cb:d9:c8:b8:61:08:f5:9e: 94:1f:07:9a:a0:5f:ab:72:fe:8d:09:42:5f:d4:f9:8b:d3:b5: a0:4b:5f:50:a7:84:41:fc:a5:5c:e0:53:60:ae:d8:ec:93:30: 4b:e9:ae:b5:ef:23:08:78:aa:8d:37:1c:4f:af:47:a9:ba:89: 6a:0b:1a:49:34:08:a7:27:3b:1d:b1:9b:f2:2b:05:11:7e:e7: cb:28:21:e4:99:04:d1:93:6f:2b:fd:e8:fe:45:3a:02:09:2c: 9d:b7:62:8b:c7:00:a7:60:c9:5b:9f:6a:fe:a2:54:11:52:06: 50:63:5f:8c:b7:ef:d9:08:97:52:a7:b9:76:39:f6:27:60:9b: f4:46:3d:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK2c6lMplXdb1kyZHI3Lj8uWyFv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBERTIyRjU3N0I0MjQ0RUNCMzMyQjg3QjU4MzFENEFE N0RBODAwNzAeFw0yNjA5MjQwMzUwMzFaFw0yNjA5MjUwNzI4MzFaMDMxMTAvBgNV BAMTKDM3NDlERTNENEYzODlGMTNEOTM0OEQxMzFERjM0Q0UzOTZFMTM1QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3A4qCgUzt6Nms+xWFPPeLAjd6 Aw/Sk3yMlGBIj64jfIyqzaOmgLBk8QkVjzV5PPVLD09y861d1RW7lXYs569wvHRu kkKpCyfqe46vpqmGqYkBPuPdmGFnemnG4h6JORb6e12FUccZ571SxUnfqlDqvv5k xHrhgY5TixcGimTqmHLyVTf4Ptlvt7M85vF8Tx1wJIvSMsWv4NsN7AeENvy/u8pK r0Zy8h1qU+0x6f7OTplGd4gc2jD1A7w2OTKI7Kif553SK2g3mdUvt0Rt9AZInIiD cAwxEKhGTeSxjXNVxIUOgSkCrSuTFdH1K+upJlEBUhJFZrlNuHBLJe5n7jelAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN0nePU84nxPZNI0THfNM45bhNbIwHwYDVR0j BBgwFoAU4N4i9Xe0JE7LMyuHtYMdStfagAcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWJjMWFiNzEtOTFkMC00ZjBiLWJiMjktY2JiN2QzNWU3NGJhLzAvRTBERTIyRjU3 N0I0MjQ0RUNCMzMyQjg3QjU4MzFENEFEN0RBODAwNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMERFMjJGNTc3QjQyNDRFQ0IzMzJCODdCNTgzMUQ0QUQ3REE4 MDA3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWJjMWFiNzEtOTFkMC00ZjBiLWJi MjktY2JiN2QzNWU3NGJhLzAvRTBERTIyRjU3N0I0MjQ0RUNCMzMyQjg3QjU4MzFE NEFEN0RBODAwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGJUAufPtXml2kVdUl9vbn/z9b2F2hzeAjO4 zMsJOnUYRxlV9f7hQwKDyJdm1br7yd30WGJQbnbHi2XmOW0p1vkjtzRGbzY3NLMX sOzpLliHHZTg3aqEAAW9VCh9pFfVys0/cXB/VhHBEY9df3qO71z2/y1BHULL2ci4 YQj1npQfB5qgX6ty/o0JQl/U+YvTtaBLX1CnhEH8pVzgU2Cu2OyTMEvprrXvIwh4 qo03HE+vR6m6iWoLGkk0CKcnOx2xm/IrBRF+58soIeSZBNGTbyv96P5FOgIJLJ23 YovHAKdgyVufav6iVBFSBlBjX4y379kIl1KnuXY59idgm/RGPdM= -----END CERTIFICATE-----Generated at Thu Sep 24 15:08:52 2026 by rpki-client