$ rpki-client -vvvf rpki-rsync.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/E5E46B40DA4B39812590F66F8D9A48EB7BF80663.mft File: E5E46B40DA4B39812590F66F8D9A48EB7BF80663.mft (raw, json) Hash identifier: JUi3GetuHWD/Od9jVyqCd3nf0aRBh6z2SkUj5UqvQws= Subject key identifier: 21:AF:E2:55:BF:A7:B5:E9:5F:4B:17:95:87:FC:88:5E:3F:23:50:FD Authority key identifier: E5:E4:6B:40:DA:4B:39:81:25:90:F6:6F:8D:9A:48:EB:7B:F8:06:63 Certificate issuer: /CN=E5E46B40DA4B39812590F66F8D9A48EB7BF80663 Certificate serial: 7004B85D2531C6CC8AEC5073412C23F7E8AFA647 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5E46B40DA4B39812590F66F8D9A48EB7BF80663.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/E5E46B40DA4B39812590F66F8D9A48EB7BF80663.mft Manifest number: C7 Signing time: Mon 28 Sep 2026 19:08:34 +0000 Manifest this update: Mon 28 Sep 2026 19:03:34 +0000 Manifest next update: Tue 29 Sep 2026 22:48:34 +0000 Files and hashes: 1: 3230322e34332e3131362e302f32332d3234203d3e203435373037.roa (hash: x/aLbzvpFAKtjeU3rH0ALM/iYwbJRGNDYx6P3rrU1Q8=) 2: 3130332e382e35362e302f32322d3234203d3e203435373037.roa (hash: 7VYgmOP0YO7cH1VxALvRRKcOoHBx5YAjdZr3/vH5WcY=) 3: E5E46B40DA4B39812590F66F8D9A48EB7BF80663.crl (hash: r9+SF+z+qc5OzE5HOltbliQMO1S+fTYyg1OjE+J3peI=) 4: 3131302e39332e31322e302f32322d3234203d3e203435373037.roa (hash: qWYNgEcwRG0KPNqrROH2O3FctIU4/zQ2NKHO3/uikuo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/E5E46B40DA4B39812590F66F8D9A48EB7BF80663.crl rsync://rpki-rsync.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/E5E46B40DA4B39812590F66F8D9A48EB7BF80663.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5E46B40DA4B39812590F66F8D9A48EB7BF80663.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:04:b8:5d:25:31:c6:cc:8a:ec:50:73:41:2c:23:f7:e8:af:a6:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5E46B40DA4B39812590F66F8D9A48EB7BF80663 Validity Not Before: Sep 28 19:03:34 2026 GMT Not After : Sep 29 22:48:34 2026 GMT Subject: CN=21AFE255BFA7B5E95F4B179587FC885E3F2350FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ae:b4:82:2c:25:93:a1:b6:10:26:b3:01:48: 5c:f6:bd:ff:ed:09:93:44:cb:f5:08:1d:93:a6:c3: 02:20:81:a9:f3:8d:44:13:e3:ca:4f:43:ac:50:e7: f6:86:0f:71:19:78:3a:f0:26:00:69:20:03:70:b3: 0b:82:7b:48:66:91:00:79:2b:4d:af:f3:17:82:8d: 05:27:c7:93:60:96:1d:51:93:f7:87:5d:8f:91:af: 9e:86:a8:00:a3:09:0c:89:d2:bb:05:79:e5:b4:f9: c9:57:3c:65:8a:50:77:5e:b4:de:ce:43:7d:f6:ff: cb:e3:e0:ea:cf:44:82:bb:ad:e6:b7:c4:cf:b2:55: 60:7a:29:f1:a1:53:66:e4:14:df:0b:e4:14:02:c4: 35:12:fa:2c:7b:46:e9:e1:97:fd:35:6d:6f:c7:91: e5:0c:9a:dd:50:07:6b:ab:33:a2:35:fd:ce:fd:83: 71:49:8b:2e:8d:75:8c:c0:2e:4b:ec:34:4c:e8:2f: fc:19:72:be:3f:b4:71:47:4f:a8:d3:40:0c:d2:d8: cc:c8:e5:42:7d:0c:c0:40:69:52:ae:ad:dd:d5:71: 19:87:a1:15:ab:dc:1e:18:97:85:de:5f:5a:c7:8e: 7e:ac:a9:dd:99:6c:33:e7:8a:f2:6b:c4:50:a7:b7: 83:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:AF:E2:55:BF:A7:B5:E9:5F:4B:17:95:87:FC:88:5E:3F:23:50:FD X509v3 Authority Key Identifier: keyid:E5:E4:6B:40:DA:4B:39:81:25:90:F6:6F:8D:9A:48:EB:7B:F8:06:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/E5E46B40DA4B39812590F66F8D9A48EB7BF80663.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5E46B40DA4B39812590F66F8D9A48EB7BF80663.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/E5E46B40DA4B39812590F66F8D9A48EB7BF80663.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:89:bb:84:a5:90:4a:47:9b:67:81:ce:de:18:32:c5:38:bd: 03:5c:3a:c5:fc:d4:29:13:f9:3d:64:29:7d:6b:e6:54:d8:58: 0b:ed:20:12:df:ac:12:d7:cb:70:46:41:9c:0d:01:e7:4b:de: e3:5d:17:28:89:94:bb:15:d0:25:a9:15:67:8d:2e:08:29:5a: d8:77:7c:3a:ff:3a:28:cc:96:20:d1:01:96:dc:8d:40:62:33: b2:49:ec:f4:af:4c:a2:ef:31:e4:7e:e1:52:a1:4c:76:79:a0: 1f:16:9b:e4:5c:1f:65:d7:d0:d3:fb:03:33:36:bd:1d:67:ac: 63:e8:f3:de:4a:27:31:81:13:2a:15:e6:f6:65:b5:cf:c9:26: 02:01:b3:8e:7e:9f:20:12:c4:1f:79:18:88:95:76:f3:2f:2c: 5b:8c:10:78:37:d1:0e:f1:46:e1:15:d8:61:57:c1:f6:b1:2f: 83:93:b8:1c:67:d8:2a:42:54:84:7a:5e:b9:3a:d1:b6:1d:9d: 6c:4f:2c:a1:b6:a8:88:a3:b0:e2:95:eb:c7:dd:c0:09:ee:0c: 79:eb:fa:a1:fd:c9:68:16:13:6e:13:97:86:44:21:18:8c:7b: 12:84:11:ed:b5:7e:74:8c:db:4b:f8:d1:90:5d:3d:85:b6:08: 24:dd:66:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcAS4XSUxxsyK7FBzQSwj9+ivpkcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTVFNDZCNDBEQTRCMzk4MTI1OTBGNjZGOEQ5QTQ4RUI3 QkY4MDY2MzAeFw0yNjA5MjgxOTAzMzRaFw0yNjA5MjkyMjQ4MzRaMDMxMTAvBgNV BAMTKDIxQUZFMjU1QkZBN0I1RTk1RjRCMTc5NTg3RkM4ODVFM0YyMzUwRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJrrSCLCWTobYQJrMBSFz2vf/t CZNEy/UIHZOmwwIgganzjUQT48pPQ6xQ5/aGD3EZeDrwJgBpIANwswuCe0hmkQB5 K02v8xeCjQUnx5Nglh1Rk/eHXY+Rr56GqACjCQyJ0rsFeeW0+clXPGWKUHdetN7O Q332/8vj4OrPRIK7rea3xM+yVWB6KfGhU2bkFN8L5BQCxDUS+ix7Runhl/01bW/H keUMmt1QB2urM6I1/c79g3FJiy6NdYzALkvsNEzoL/wZcr4/tHFHT6jTQAzS2MzI 5UJ9DMBAaVKurd3VcRmHoRWr3B4Yl4XeX1rHjn6sqd2ZbDPnivJrxFCnt4PNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIa/iVb+ntelfSxeVh/yIXj8jUP0wHwYDVR0j BBgwFoAU5eRrQNpLOYElkPZvjZpI63v4BmMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjBkMmJkZTQtMDU2Yi00NWM2LTgwYmYtZjVkNGQyNzczMzZiLzAvRTVFNDZCNDBE QTRCMzk4MTI1OTBGNjZGOEQ5QTQ4RUI3QkY4MDY2My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNUU0NkI0MERBNEIzOTgxMjU5MEY2NkY4RDlBNDhFQjdCRjgw NjYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjBkMmJkZTQtMDU2Yi00NWM2LTgw YmYtZjVkNGQyNzczMzZiLzAvRTVFNDZCNDBEQTRCMzk4MTI1OTBGNjZGOEQ5QTQ4 RUI3QkY4MDY2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADyJu4SlkEpHm2eBzt4YMsU4vQNcOsX81CkT +T1kKX1r5lTYWAvtIBLfrBLXy3BGQZwNAedL3uNdFyiJlLsV0CWpFWeNLggpWth3 fDr/OijMliDRAZbcjUBiM7JJ7PSvTKLvMeR+4VKhTHZ5oB8Wm+RcH2XX0NP7AzM2 vR1nrGPo895KJzGBEyoV5vZltc/JJgIBs45+nyASxB95GIiVdvMvLFuMEHg30Q7x RuEV2GFXwfaxL4OTuBxn2CpCVIR6Xrk60bYdnWxPLKG2qIijsOKV68fdwAnuDHnr +qH9yWgWE24Tl4ZEIRiMexKEEe21fnSM20v40ZBdPYW2CCTdZho= -----END CERTIFICATE-----Generated at Mon Sep 28 23:26:42 2026 by rpki-client