$ rpki-client -vvvf rpki-rsync.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/E4E77812E2CFA75939A641BB7F633F97582E6792.mft File: E4E77812E2CFA75939A641BB7F633F97582E6792.mft (raw, json) Hash identifier: GTVm9/ELPZ7kQQQ333xD6V2GlgkDpIkkFILJrRRsZI8= Subject key identifier: 39:B8:C6:F2:1B:09:89:98:2D:B7:B9:B1:8E:9D:BA:F5:40:A9:9A:D6 Authority key identifier: E4:E7:78:12:E2:CF:A7:59:39:A6:41:BB:7F:63:3F:97:58:2E:67:92 Certificate issuer: /CN=E4E77812E2CFA75939A641BB7F633F97582E6792 Certificate serial: 358788BAB4C9496CF3AAE148426F2C7D9CCD0D38 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4E77812E2CFA75939A641BB7F633F97582E6792.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/E4E77812E2CFA75939A641BB7F633F97582E6792.mft Manifest number: BC Signing time: Sun 20 Sep 2026 07:00:47 +0000 Manifest this update: Sun 20 Sep 2026 06:55:47 +0000 Manifest next update: Mon 21 Sep 2026 10:43:47 +0000 Files and hashes: 1: E4E77812E2CFA75939A641BB7F633F97582E6792.crl (hash: CSo2ZzT5D1p6AeLLvYo026br8UuTN7+ydxHnjmdeEDE=) 2: 3130332e3133342e3234342e302f32322d3232203d3e20313331373733.roa (hash: f8JrpNxiYhxoygVD3PVaDm7C9vGL2+TBxJgVjDXpyoQ=) 3: 3130332e3133342e3234352e302f32342d3234203d3e20313331373733.roa (hash: 6/36/UcdQ2V1pYXsPSMgRUu2w8k+qUDvro5dHxk58tQ=) 4: 3130332e3133342e3234362e302f32342d3234203d3e20313331373733.roa (hash: u9JlmtwFnIY99dq5rQ8a+yuZuvWYaV5aieCQMyyf0yI=) 5: 3130332e3133342e3234342e302f32342d3234203d3e20313331373733.roa (hash: FfhEpyiIA9Zvturja6+USFcLN/+BV2bB6cgYWMdWgys=) 6: 3130332e3133342e3234372e302f32342d3234203d3e20313331373733.roa (hash: RMWvBSrs1/gqkTI+LRT35D4lLhWEW+vN5lI9hn43Pek=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/E4E77812E2CFA75939A641BB7F633F97582E6792.crl rsync://rpki-rsync.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/E4E77812E2CFA75939A641BB7F633F97582E6792.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4E77812E2CFA75939A641BB7F633F97582E6792.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 10:43:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:87:88:ba:b4:c9:49:6c:f3:aa:e1:48:42:6f:2c:7d:9c:cd:0d:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4E77812E2CFA75939A641BB7F633F97582E6792 Validity Not Before: Sep 20 06:55:47 2026 GMT Not After : Sep 21 10:43:47 2026 GMT Subject: CN=39B8C6F21B0989982DB7B9B18E9DBAF540A99AD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a3:69:9e:08:af:b2:f5:dd:75:4f:a9:14:e1: 76:85:dd:e3:f1:f6:fd:9b:65:f4:86:1a:fb:a8:92: 92:bf:6b:fb:a4:70:b9:fa:81:bd:b2:48:5e:bd:c9: 3f:a0:d4:12:72:6a:ba:8b:5f:d9:62:6d:94:ac:89: b4:ab:27:b6:4c:8f:fd:cf:45:be:bd:39:8e:f4:28: fb:86:5a:aa:6c:4a:4c:9d:c0:c6:84:a0:d0:68:98: b1:bb:f3:a8:6f:70:2d:44:50:6d:84:85:5b:18:06: 92:96:25:44:47:cf:af:31:ee:cc:b8:8f:7e:70:61: 2c:1a:d3:96:a1:95:bc:dd:eb:dd:93:f4:7e:ac:26: 09:02:a7:47:3c:20:e7:dc:8c:f8:bc:ed:47:77:a6: 7b:8c:06:73:a9:29:d7:7c:75:3c:8e:dd:e8:04:70: 2b:64:61:15:e1:af:52:64:78:17:46:f3:6d:dd:3a: 81:34:82:dc:2c:ae:50:13:4f:17:98:9f:02:71:dd: e7:c0:51:d1:93:8e:64:da:1e:58:a5:1b:5b:00:1f: 0c:d3:bf:ed:fd:d3:4a:26:01:f8:30:f5:95:b7:03: 5b:b8:e5:c1:3e:f8:c2:e0:1f:fa:ad:ba:80:fb:62: 80:ed:1f:dd:fd:b2:fc:ce:bb:c2:1d:01:cc:c6:a2: 20:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B8:C6:F2:1B:09:89:98:2D:B7:B9:B1:8E:9D:BA:F5:40:A9:9A:D6 X509v3 Authority Key Identifier: keyid:E4:E7:78:12:E2:CF:A7:59:39:A6:41:BB:7F:63:3F:97:58:2E:67:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/E4E77812E2CFA75939A641BB7F633F97582E6792.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4E77812E2CFA75939A641BB7F633F97582E6792.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/E4E77812E2CFA75939A641BB7F633F97582E6792.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:b3:62:3b:7d:43:4d:7f:72:ef:76:75:a5:3d:43:97:be:93: 7d:25:09:17:e7:73:7e:28:dd:a5:97:06:c0:66:70:f8:28:30: b0:41:53:c4:51:55:4b:66:7a:56:73:76:aa:f9:4b:96:c6:7d: ed:71:19:37:73:5f:63:f1:52:6b:ab:18:7f:ae:0b:a1:db:ce: d0:f5:75:f0:0e:92:5b:16:5f:32:ab:fe:b4:02:b9:47:0a:7f: 69:cf:13:3d:13:f3:b9:d0:a0:2d:f9:ba:0d:16:a6:37:1d:d2: c6:3d:21:96:ce:2f:d6:fa:f2:08:6b:36:eb:a1:ff:03:a9:4d: 52:1a:7c:55:7f:d1:cc:02:38:a5:86:4c:e8:7e:35:a3:77:20: 45:42:74:d0:59:37:2b:97:47:56:c0:11:12:9b:8c:04:11:33: 81:25:c4:f9:9f:8c:b6:81:98:19:7c:83:1c:99:db:91:bb:a6: 25:bc:8c:10:15:5d:01:67:fc:d3:e9:45:dd:91:ee:f5:fb:05: da:96:99:f1:4b:bc:3f:c7:65:e9:7b:1a:89:4b:b4:b4:33:73: 49:01:76:54:0d:73:2f:a7:3b:58:db:dd:5f:ab:59:60:ec:c3: bb:89:dc:ae:fd:c5:60:7b:27:a5:aa:55:55:9d:a2:2a:7d:ee: cb:78:1a:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNYeIurTJSWzzquFIQm8sfZzNDTgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTRFNzc4MTJFMkNGQTc1OTM5QTY0MUJCN0Y2MzNGOTc1 ODJFNjc5MjAeFw0yNjA5MjAwNjU1NDdaFw0yNjA5MjExMDQzNDdaMDMxMTAvBgNV BAMTKDM5QjhDNkYyMUIwOTg5OTgyREI3QjlCMThFOURCQUY1NDBBOTlBRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0o2meCK+y9d11T6kU4XaF3ePx 9v2bZfSGGvuokpK/a/ukcLn6gb2ySF69yT+g1BJyarqLX9libZSsibSrJ7ZMj/3P Rb69OY70KPuGWqpsSkydwMaEoNBomLG786hvcC1EUG2EhVsYBpKWJURHz68x7sy4 j35wYSwa05ahlbzd692T9H6sJgkCp0c8IOfcjPi87Ud3pnuMBnOpKdd8dTyO3egE cCtkYRXhr1JkeBdG823dOoE0gtwsrlATTxeYnwJx3efAUdGTjmTaHlilG1sAHwzT v+3900omAfgw9ZW3A1u45cE++MLgH/qtuoD7YoDtH939svzOu8IdAczGoiDPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUObjG8hsJiZgtt7mxjp269UCpmtYwHwYDVR0j BBgwFoAU5Od4EuLPp1k5pkG7f2M/l1guZ5IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjI3ZGUwNzEtM2FhYS00ZTJlLTk3NGUtYTc4YzgxNzI5ZjA2LzAvRTRFNzc4MTJF MkNGQTc1OTM5QTY0MUJCN0Y2MzNGOTc1ODJFNjc5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNEU3NzgxMkUyQ0ZBNzU5MzlBNjQxQkI3RjYzM0Y5NzU4MkU2 NzkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjI3ZGUwNzEtM2FhYS00ZTJlLTk3 NGUtYTc4YzgxNzI5ZjA2LzAvRTRFNzc4MTJFMkNGQTc1OTM5QTY0MUJCN0Y2MzNG OTc1ODJFNjc5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAOzYjt9Q01/cu92daU9Q5e+k30lCRfnc34o 3aWXBsBmcPgoMLBBU8RRVUtmelZzdqr5S5bGfe1xGTdzX2PxUmurGH+uC6HbztD1 dfAOklsWXzKr/rQCuUcKf2nPEz0T87nQoC35ug0Wpjcd0sY9IZbOL9b68ghrNuuh /wOpTVIafFV/0cwCOKWGTOh+NaN3IEVCdNBZNyuXR1bAERKbjAQRM4ElxPmfjLaB mBl8gxyZ25G7piW8jBAVXQFn/NPpRd2R7vX7BdqWmfFLvD/HZel7GolLtLQzc0kB dlQNcy+nO1jb3V+rWWDsw7uJ3K79xWB7J6WqVVWdoip97st4Gs0= -----END CERTIFICATE-----Generated at Sun Sep 20 22:19:05 2026 by rpki-client