$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.mft File: E029C9E3702797CC6083E1D4D891799F0F5AA144.mft (raw, json) Hash identifier: ULtWS92+eOszwaB4Kbz9+WdWcXWedoha87Em1pQ+MQM= Subject key identifier: 17:DF:0E:4D:55:51:C9:13:83:25:A4:C1:2E:61:C4:1D:6D:F2:ED:87 Authority key identifier: E0:29:C9:E3:70:27:97:CC:60:83:E1:D4:D8:91:79:9F:0F:5A:A1:44 Certificate issuer: /CN=E029C9E3702797CC6083E1D4D891799F0F5AA144 Certificate serial: 65605A5B0C4972A09A54FFC750B0A2BF44665D1E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E029C9E3702797CC6083E1D4D891799F0F5AA144.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 02:53:55 +0000 Manifest this update: Fri 25 Sep 2026 02:48:55 +0000 Manifest next update: Sat 26 Sep 2026 04:53:55 +0000 Files and hashes: 1: 3130332e3130392e3230362e302f32342d3234203d3e20313530393335.roa (hash: 8AqsSwbCPBkMa1bd8eWoyuIjrtuzrPJimjGA2fsl3AA=) 2: 3130332e3130392e3230372e302f32342d3234203d3e20313530393335.roa (hash: DY6/Cy+Nw1dnpzSyQJvKM4XZv0DQUdJYanxa6KJ+Sng=) 3: E029C9E3702797CC6083E1D4D891799F0F5AA144.crl (hash: o2fb7keHy3tpMWeyp+IkJFTCDWyqGvo0WtcCGQjsPpc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.crl rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E029C9E3702797CC6083E1D4D891799F0F5AA144.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 04:53:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:60:5a:5b:0c:49:72:a0:9a:54:ff:c7:50:b0:a2:bf:44:66:5d:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E029C9E3702797CC6083E1D4D891799F0F5AA144 Validity Not Before: Sep 25 02:48:55 2026 GMT Not After : Sep 26 04:53:55 2026 GMT Subject: CN=17DF0E4D5551C9138325A4C12E61C41D6DF2ED87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:81:5a:cd:ee:82:a2:2b:bd:e1:10:9d:4e:30: dd:f1:93:29:b2:31:8d:6a:49:20:f2:21:86:4a:1f: 59:36:99:90:83:c4:3b:51:a9:3f:f9:5b:7e:65:7c: 39:2b:3c:70:a7:6a:63:a9:30:99:b9:88:d1:a9:8d: 28:26:23:28:60:2c:ac:53:8d:b7:11:f1:16:45:d5: d4:70:c6:0f:bb:dc:17:e6:e2:83:5b:a4:ba:df:fc: f5:8f:2f:c6:ce:5b:50:23:c8:c6:36:39:58:2c:9d: ea:0b:3f:a5:e4:f8:52:42:bb:76:82:5b:b5:8a:3f: 06:d8:4f:dc:04:0f:8a:81:4f:da:d8:92:2b:79:a8: 04:2a:47:f6:23:90:5e:23:9a:f3:a9:59:cf:1d:a4: cb:76:68:18:50:3c:0d:be:a7:b0:5c:72:82:c6:3f: e1:de:04:12:06:51:5a:e1:07:c2:7f:1b:e5:a2:94: 55:e3:8d:59:02:04:c5:89:32:45:28:b1:8b:0b:7c: 46:8e:fb:46:56:83:d4:06:8c:73:03:74:1e:38:99: 72:cf:93:69:19:7a:72:a7:0b:a7:f7:c3:5d:58:0d: 1d:f1:1e:df:81:ec:fb:07:e7:ef:f4:d9:6f:13:c2: 31:95:73:9b:04:ed:62:e6:64:09:32:21:9f:21:45: c2:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:DF:0E:4D:55:51:C9:13:83:25:A4:C1:2E:61:C4:1D:6D:F2:ED:87 X509v3 Authority Key Identifier: keyid:E0:29:C9:E3:70:27:97:CC:60:83:E1:D4:D8:91:79:9F:0F:5A:A1:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E029C9E3702797CC6083E1D4D891799F0F5AA144.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:f2:30:6c:99:7c:17:0e:dd:93:4b:5d:d5:fb:b5:77:ed:46: bb:b8:c4:0a:e6:4d:3a:9e:20:af:a4:1a:2f:64:9a:84:47:c0: 89:17:5e:3d:aa:c2:5b:87:b7:5b:84:01:ea:37:f5:1c:45:fe: c1:b5:47:d0:ca:2d:27:92:72:48:fe:f6:e7:06:d5:50:77:f5: 43:58:af:bb:9f:6a:8d:93:2a:96:4d:48:d8:46:1f:8e:78:b4: 96:6b:bc:76:a5:4d:5e:ae:c9:ef:bc:f1:58:d3:c8:e7:35:dc: c4:32:72:c3:cc:00:5c:d3:f0:c5:f9:88:08:d7:55:6a:4f:c7: 40:59:48:11:45:4e:2d:ce:d4:cc:ad:df:6b:84:3c:67:d0:66: ef:e6:e3:46:83:f2:c8:80:45:c4:77:fa:79:cf:cb:a6:1f:f4: b9:62:48:bf:68:26:af:33:7f:96:d9:3d:60:a2:15:77:2f:69: 30:0d:8e:78:05:40:45:ee:34:35:51:d7:48:5e:2d:6c:b1:d8: 81:f3:8e:ae:dd:d1:bc:d8:e3:fb:e7:74:c1:0c:a8:ab:bb:6c: 3e:a7:bc:c2:46:b7:29:59:4e:a2:49:ba:41:2c:5e:06:0b:df: 68:79:9c:52:14:d5:2b:84:3b:d3:ab:f5:6f:89:dc:7d:ac:39: b9:c7:01:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZWBaWwxJcqCaVP/HULCiv0RmXR4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTAyOUM5RTM3MDI3OTdDQzYwODNFMUQ0RDg5MTc5OUYw RjVBQTE0NDAeFw0yNjA5MjUwMjQ4NTVaFw0yNjA5MjYwNDUzNTVaMDMxMTAvBgNV BAMTKDE3REYwRTRENTU1MUM5MTM4MzI1QTRDMTJFNjFDNDFENkRGMkVEODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcgVrN7oKiK73hEJ1OMN3xkymy MY1qSSDyIYZKH1k2mZCDxDtRqT/5W35lfDkrPHCnamOpMJm5iNGpjSgmIyhgLKxT jbcR8RZF1dRwxg+73Bfm4oNbpLrf/PWPL8bOW1AjyMY2OVgsneoLP6Xk+FJCu3aC W7WKPwbYT9wED4qBT9rYkit5qAQqR/YjkF4jmvOpWc8dpMt2aBhQPA2+p7BccoLG P+HeBBIGUVrhB8J/G+WilFXjjVkCBMWJMkUosYsLfEaO+0ZWg9QGjHMDdB44mXLP k2kZenKnC6f3w11YDR3xHt+B7PsH5+/02W8TwjGVc5sE7WLmZAkyIZ8hRcKjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF98OTVVRyRODJaTBLmHEHW3y7YcwHwYDVR0j BBgwFoAU4CnJ43Anl8xgg+HU2JF5nw9aoUQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWM4ODkyZWItZGRjMC00Y2I2LTk1N2MtYjY1M2YyOGJiZjM5LzAvRTAyOUM5RTM3 MDI3OTdDQzYwODNFMUQ0RDg5MTc5OUYwRjVBQTE0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMDI5QzlFMzcwMjc5N0NDNjA4M0UxRDREODkxNzk5RjBGNUFB MTQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWM4ODkyZWItZGRjMC00Y2I2LTk1 N2MtYjY1M2YyOGJiZjM5LzAvRTAyOUM5RTM3MDI3OTdDQzYwODNFMUQ0RDg5MTc5 OUYwRjVBQTE0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGjyMGyZfBcO3ZNLXdX7tXftRru4xArmTTqe IK+kGi9kmoRHwIkXXj2qwluHt1uEAeo39RxF/sG1R9DKLSeSckj+9ucG1VB39UNY r7ufao2TKpZNSNhGH454tJZrvHalTV6uye+88VjTyOc13MQycsPMAFzT8MX5iAjX VWpPx0BZSBFFTi3O1Myt32uEPGfQZu/m40aD8siARcR3+nnPy6Yf9LliSL9oJq8z f5bZPWCiFXcvaTANjngFQEXuNDVR10heLWyx2IHzjq7d0bzY4/vndMEMqKu7bD6n vMJGtylZTqJJukEsXgYL32h5nFIU1SuEO9Or9W+J3H2sObnHAfk= -----END CERTIFICATE-----Generated at Fri Sep 25 22:03:38 2026 by rpki-client