$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/E4082D8524B052029D62D695437D63F939A1F80E.mft File: E4082D8524B052029D62D695437D63F939A1F80E.mft (raw, json) Hash identifier: V/9FNWRpxSoCkhcjhTNZKZmaq60HLsR1lYyNujWktPk= Subject key identifier: AB:18:99:8B:99:04:19:8C:98:13:9C:74:4F:C5:79:8E:5A:3A:65:FE Authority key identifier: E4:08:2D:85:24:B0:52:02:9D:62:D6:95:43:7D:63:F9:39:A1:F8:0E Certificate issuer: /CN=E4082D8524B052029D62D695437D63F939A1F80E Certificate serial: 1A29E9B55E27B148D14569CDE5C99E389DFE6C64 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4082D8524B052029D62D695437D63F939A1F80E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/E4082D8524B052029D62D695437D63F939A1F80E.mft Manifest number: BE Signing time: Tue 22 Sep 2026 05:13:00 +0000 Manifest this update: Tue 22 Sep 2026 05:08:00 +0000 Manifest next update: Wed 23 Sep 2026 06:43:00 +0000 Files and hashes: 1: E4082D8524B052029D62D695437D63F939A1F80E.crl (hash: bEMEZNsO7pk2ELi5ibCmesj2NiFAWD9AqtjaOk1ivN4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/E4082D8524B052029D62D695437D63F939A1F80E.crl rsync://rpki-rsync.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/E4082D8524B052029D62D695437D63F939A1F80E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4082D8524B052029D62D695437D63F939A1F80E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 03:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:29:e9:b5:5e:27:b1:48:d1:45:69:cd:e5:c9:9e:38:9d:fe:6c:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4082D8524B052029D62D695437D63F939A1F80E Validity Not Before: Sep 22 05:08:00 2026 GMT Not After : Sep 23 06:43:00 2026 GMT Subject: CN=AB18998B9904198C98139C744FC5798E5A3A65FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:96:cf:94:37:a7:14:c2:13:83:10:00:d0:8d: 52:9b:a9:1c:0e:f6:4b:8b:e5:18:66:1c:bd:6b:8c: 8d:1f:51:06:cb:5e:d2:82:25:c4:ad:5c:7f:11:d0: ab:6d:06:71:e2:61:55:f6:02:6c:9e:16:b7:da:08: 15:7f:e8:c2:f5:df:3a:62:51:bd:97:b0:9b:e6:e2: e9:52:a8:e8:e9:22:ff:7f:aa:8b:60:74:2b:32:dd: 24:95:24:20:77:3a:fc:32:82:14:15:65:84:a1:84: 8a:c4:13:dc:6d:dc:73:f1:ee:68:63:d0:f0:8c:71: 7c:6d:da:ef:6e:8e:0c:b3:2a:df:48:6a:75:87:b3: 84:b8:f0:3c:40:75:1f:e4:44:c3:70:37:ff:0d:9f: d5:36:67:5c:d1:38:60:7d:5a:4e:9a:b6:ba:68:62: 71:40:eb:33:6d:9d:0e:56:dd:06:34:2c:19:3e:43: 93:22:c7:c0:89:8c:13:24:54:5e:2a:f2:18:44:aa: 87:5b:ec:8a:cb:fc:48:d4:2e:57:1c:f1:7c:40:6d: dc:05:f7:00:9c:b8:c7:87:04:62:f8:d7:75:c5:67: f7:ea:77:3c:96:2a:cb:d9:b2:fa:e2:5c:5a:87:15: e0:47:11:2d:5f:07:ac:a0:21:72:0d:25:dd:ad:66: af:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:18:99:8B:99:04:19:8C:98:13:9C:74:4F:C5:79:8E:5A:3A:65:FE X509v3 Authority Key Identifier: keyid:E4:08:2D:85:24:B0:52:02:9D:62:D6:95:43:7D:63:F9:39:A1:F8:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/E4082D8524B052029D62D695437D63F939A1F80E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4082D8524B052029D62D695437D63F939A1F80E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/E4082D8524B052029D62D695437D63F939A1F80E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:d9:72:b9:9c:1a:f4:e3:c4:be:b0:94:52:63:e5:8d:9a:a6: ff:3f:3c:67:32:e5:85:a9:8b:d7:0e:45:b4:3e:38:63:f9:f6: 67:cd:60:fb:10:77:1a:d1:3f:8e:69:b5:2b:20:28:14:7f:63: 51:51:99:21:7a:a8:93:e7:25:7e:15:3d:c4:a5:06:41:7d:64: ff:4c:9d:5e:c2:7d:1b:f1:51:77:9d:da:fc:9a:0a:f7:86:e2: 9b:ba:74:52:7e:fa:ae:f3:e5:0c:d9:b8:27:7e:b0:ed:d1:79: e8:a2:1b:55:59:05:84:0d:cf:80:26:31:51:cf:12:82:23:81: 37:9d:72:80:fa:8c:b6:a4:38:7a:9f:dc:bb:4a:78:42:78:1a: d3:85:c9:79:bc:8a:69:1e:2b:e0:ec:35:a9:5a:1d:da:9c:c0: b6:94:31:fe:ec:75:83:fb:ba:92:7c:32:76:f0:d5:4f:e1:d9: fe:be:67:39:0e:da:2f:4c:50:bf:a3:03:66:0f:e4:83:35:2a: ed:ff:4e:32:62:56:2d:61:d4:b0:bd:8c:36:55:68:e4:b4:fa: ec:3f:1c:14:02:22:99:36:c6:5b:ca:2c:15:5f:8e:44:c1:7c: 21:84:ad:ac:76:6e:a0:f6:af:b5:59:35:50:73:8c:78:de:ed: c3:a4:97:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGinptV4nsUjRRWnN5cmeOJ3+bGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQwODJEODUyNEIwNTIwMjlENjJENjk1NDM3RDYzRjkz OUExRjgwRTAeFw0yNjA5MjIwNTA4MDBaFw0yNjA5MjMwNjQzMDBaMDMxMTAvBgNV BAMTKEFCMTg5OThCOTkwNDE5OEM5ODEzOUM3NDRGQzU3OThFNUEzQTY1RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8ls+UN6cUwhODEADQjVKbqRwO 9kuL5RhmHL1rjI0fUQbLXtKCJcStXH8R0KttBnHiYVX2AmyeFrfaCBV/6ML13zpi Ub2XsJvm4ulSqOjpIv9/qotgdCsy3SSVJCB3OvwyghQVZYShhIrEE9xt3HPx7mhj 0PCMcXxt2u9ujgyzKt9IanWHs4S48DxAdR/kRMNwN/8Nn9U2Z1zROGB9Wk6atrpo YnFA6zNtnQ5W3QY0LBk+Q5Mix8CJjBMkVF4q8hhEqodb7IrL/EjULlcc8XxAbdwF 9wCcuMeHBGL413XFZ/fqdzyWKsvZsvriXFqHFeBHES1fB6ygIXINJd2tZq8HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqxiZi5kEGYyYE5x0T8V5jlo6Zf4wHwYDVR0j BBgwFoAU5AgthSSwUgKdYtaVQ31j+Tmh+A4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWUzYjY3ZTgtYTk3My00MGZlLWJhMDMtZjk1ZTg2Y2JkYTlmLzAvRTQwODJEODUy NEIwNTIwMjlENjJENjk1NDM3RDYzRjkzOUExRjgwRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNDA4MkQ4NTI0QjA1MjAyOUQ2MkQ2OTU0MzdENjNGOTM5QTFG ODBFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWUzYjY3ZTgtYTk3My00MGZlLWJh MDMtZjk1ZTg2Y2JkYTlmLzAvRTQwODJEODUyNEIwNTIwMjlENjJENjk1NDM3RDYz RjkzOUExRjgwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD/ZcrmcGvTjxL6wlFJj5Y2apv8/PGcy5YWp i9cORbQ+OGP59mfNYPsQdxrRP45ptSsgKBR/Y1FRmSF6qJPnJX4VPcSlBkF9ZP9M nV7CfRvxUXed2vyaCveG4pu6dFJ++q7z5QzZuCd+sO3ReeiiG1VZBYQNz4AmMVHP EoIjgTedcoD6jLakOHqf3LtKeEJ4GtOFyXm8imkeK+DsNalaHdqcwLaUMf7sdYP7 upJ8Mnbw1U/h2f6+ZzkO2i9MUL+jA2YP5IM1Ku3/TjJiVi1h1LC9jDZVaOS0+uw/ HBQCIpk2xlvKLBVfjkTBfCGErax2bqD2r7VZNVBzjHje7cOklwg= -----END CERTIFICATE-----Generated at Tue Sep 22 10:30:37 2026 by rpki-client