$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/E3D6C125B35E67510271310D928E4578404A3A46.mft File: E3D6C125B35E67510271310D928E4578404A3A46.mft (raw, json) Hash identifier: XFWRRRuNVS9rXnqWlBt9nVenCEshviRAlNiZDylpskk= Subject key identifier: 49:A7:9E:09:E4:6F:C0:F5:E8:BE:7B:B2:15:2B:97:D8:64:E4:03:D7 Authority key identifier: E3:D6:C1:25:B3:5E:67:51:02:71:31:0D:92:8E:45:78:40:4A:3A:46 Certificate issuer: /CN=E3D6C125B35E67510271310D928E4578404A3A46 Certificate serial: 43444B0ABDFA2908C71B001156BDFDD7C443CBB4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3D6C125B35E67510271310D928E4578404A3A46.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/E3D6C125B35E67510271310D928E4578404A3A46.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 12:00:31 +0000 Manifest this update: Thu 24 Sep 2026 11:55:31 +0000 Manifest next update: Fri 25 Sep 2026 14:56:31 +0000 Files and hashes: 1: 3130332e3137362e3139392e302f32342d3234203d3e20313437313334.roa (hash: T5uRj9PC/T10VKks3wi10c2uBNec4FkHRnP0vvfYiOk=) 2: 3130332e3137362e3139382e302f32342d3234203d3e20313437313334.roa (hash: 8qQMC3EFOK3yCgkVj+C7FEr6qF+CfYoBtbfTyKhcjE4=) 3: E3D6C125B35E67510271310D928E4578404A3A46.crl (hash: lLFNYbBINBSr3V6i/JRu3w7UdyM/dJE3tmKpMfnkix8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/E3D6C125B35E67510271310D928E4578404A3A46.crl rsync://rpki-rsync.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/E3D6C125B35E67510271310D928E4578404A3A46.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3D6C125B35E67510271310D928E4578404A3A46.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:44:4b:0a:bd:fa:29:08:c7:1b:00:11:56:bd:fd:d7:c4:43:cb:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3D6C125B35E67510271310D928E4578404A3A46 Validity Not Before: Sep 24 11:55:31 2026 GMT Not After : Sep 25 14:56:31 2026 GMT Subject: CN=49A79E09E46FC0F5E8BE7BB2152B97D864E403D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:9e:da:0d:1b:a8:1f:ab:df:65:b2:52:6c:9a: 75:19:9a:58:2c:75:cb:7c:4d:5e:7d:e3:e0:b0:2e: 47:2b:50:91:80:65:1a:6a:3b:14:20:ce:65:f1:10: d2:9c:a5:db:2c:7f:3b:c9:ab:4e:96:ac:de:1f:36: 59:ed:9d:2d:1d:c4:e1:e3:11:1f:72:2d:7f:53:39: e0:06:a9:d0:e7:9a:f7:3d:49:a3:45:8f:9b:da:01: 00:eb:9c:f6:49:3b:40:48:ee:c0:0a:03:cf:5d:91: 88:89:97:0a:63:2f:8f:dc:f9:08:e6:52:ef:c5:3f: 3b:57:ee:72:14:7d:73:59:e2:15:dc:b7:1e:1a:1f: fe:3d:e9:01:a7:31:4a:e9:f6:56:5f:16:ca:f5:dd: bf:51:32:8f:95:e5:97:2e:3f:39:1a:e8:f8:99:16: 7f:49:ac:cf:c2:08:2c:20:f1:1c:03:c6:b4:72:d6: 5d:10:3d:47:59:ce:dc:3d:e7:39:1c:6a:5b:33:fe: f8:98:74:c9:52:77:62:8c:48:26:62:16:66:fc:be: b2:1a:76:d9:4c:d6:84:8e:dd:cc:34:9c:69:71:51: ef:09:fa:cb:80:66:b4:7a:e0:65:54:17:45:47:e0: b8:2d:c0:5c:11:7a:04:e5:5c:49:aa:31:b8:dd:a3: f7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:A7:9E:09:E4:6F:C0:F5:E8:BE:7B:B2:15:2B:97:D8:64:E4:03:D7 X509v3 Authority Key Identifier: keyid:E3:D6:C1:25:B3:5E:67:51:02:71:31:0D:92:8E:45:78:40:4A:3A:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/E3D6C125B35E67510271310D928E4578404A3A46.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3D6C125B35E67510271310D928E4578404A3A46.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/E3D6C125B35E67510271310D928E4578404A3A46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:29:b8:23:04:c0:7d:22:95:d2:4d:ed:94:44:fb:99:e6:fc: fb:9b:cb:f4:a6:4f:67:67:90:0b:8a:fe:2f:85:fa:78:09:85: 76:27:72:c7:54:f3:ef:28:be:ef:a9:8e:d8:12:91:97:09:97: 2d:5b:45:0d:ea:3f:5c:a2:e2:a8:37:cd:29:df:82:4f:e3:16: fd:d5:63:1f:08:d7:39:fb:ae:54:16:38:fc:c5:7c:f6:9e:4f: 3e:40:12:32:78:89:61:5b:15:2f:92:d2:6a:21:15:96:3a:38: c6:a2:eb:49:cf:79:b7:12:5f:15:6b:33:41:a2:9a:49:fc:63: e2:c5:59:23:2e:54:37:2b:23:d3:18:26:a8:ff:3e:da:ab:8a: 40:2f:6a:3e:e1:0d:3a:c0:c1:08:b1:91:07:21:ef:10:0e:95: 85:9e:fc:25:07:0e:a2:fc:62:3f:e5:46:6d:77:a1:2f:32:a3: 90:cc:43:92:2c:ff:4f:1e:78:2b:d6:72:b0:a8:11:db:0c:4b: d8:e8:e9:f8:20:ce:97:83:17:7a:f6:1c:21:eb:f9:29:23:11: 50:e3:61:a6:9d:4f:60:28:98:84:c6:5c:4a:bf:fa:c0:9c:45: 03:6e:96:69:2e:42:bc:49:a2:ee:15:95:7c:00:b4:89:17:cf: ac:d5:ee:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ0RLCr36KQjHGwARVr3918RDy7QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTNENkMxMjVCMzVFNjc1MTAyNzEzMTBEOTI4RTQ1Nzg0 MDRBM0E0NjAeFw0yNjA5MjQxMTU1MzFaFw0yNjA5MjUxNDU2MzFaMDMxMTAvBgNV BAMTKDQ5QTc5RTA5RTQ2RkMwRjVFOEJFN0JCMjE1MkI5N0Q4NjRFNDAzRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDintoNG6gfq99lslJsmnUZmlgs dct8TV594+CwLkcrUJGAZRpqOxQgzmXxENKcpdssfzvJq06WrN4fNlntnS0dxOHj ER9yLX9TOeAGqdDnmvc9SaNFj5vaAQDrnPZJO0BI7sAKA89dkYiJlwpjL4/c+Qjm Uu/FPztX7nIUfXNZ4hXctx4aH/496QGnMUrp9lZfFsr13b9RMo+V5ZcuPzka6PiZ Fn9JrM/CCCwg8RwDxrRy1l0QPUdZztw95zkcalsz/viYdMlSd2KMSCZiFmb8vrIa dtlM1oSO3cw0nGlxUe8J+suAZrR64GVUF0VH4LgtwFwRegTlXEmqMbjdo/fbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSaeeCeRvwPXovnuyFSuX2GTkA9cwHwYDVR0j BBgwFoAU49bBJbNeZ1ECcTENko5FeEBKOkYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGI5ZTZkYTQtZGM0Ni00NzBmLWIwZTktMTZlNmU1N2Q0NzlhLzAvRTNENkMxMjVC MzVFNjc1MTAyNzEzMTBEOTI4RTQ1Nzg0MDRBM0E0Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FM0Q2QzEyNUIzNUU2NzUxMDI3MTMxMEQ5MjhFNDU3ODQwNEEz QTQ2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGI5ZTZkYTQtZGM0Ni00NzBmLWIw ZTktMTZlNmU1N2Q0NzlhLzAvRTNENkMxMjVCMzVFNjc1MTAyNzEzMTBEOTI4RTQ1 Nzg0MDRBM0E0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANIpuCMEwH0ildJN7ZRE+5nm/Puby/SmT2dn kAuK/i+F+ngJhXYncsdU8+8ovu+pjtgSkZcJly1bRQ3qP1yi4qg3zSnfgk/jFv3V Yx8I1zn7rlQWOPzFfPaeTz5AEjJ4iWFbFS+S0mohFZY6OMai60nPebcSXxVrM0Gi mkn8Y+LFWSMuVDcrI9MYJqj/PtqrikAvaj7hDTrAwQixkQch7xAOlYWe/CUHDqL8 Yj/lRm13oS8yo5DMQ5Is/08eeCvWcrCoEdsMS9jo6fggzpeDF3r2HCHr+SkjEVDj YaadT2AomITGXEq/+sCcRQNulmkuQrxJou4VlXwAtIkXz6zV7lM= -----END CERTIFICATE-----Generated at Thu Sep 24 18:34:23 2026 by rpki-client