$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.mft File: E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.mft (raw, json) Hash identifier: aoxi+fHBgxFs0+sWuFNQYxKlbMLtgnY2oHOPTAC7XD8= Subject key identifier: 95:2B:B0:86:00:86:EC:BD:0C:64:0A:5F:E6:8A:82:74:3E:D8:8D:39 Authority key identifier: E5:F6:F9:E5:DD:9D:34:BD:A0:8C:45:31:BA:70:87:61:A3:5A:DE:60 Certificate issuer: /CN=E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60 Certificate serial: 2958D7C9DC9D487905D6F327B322935D760905 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.mft Manifest number: BE Signing time: Sun 20 Sep 2026 10:40:21 +0000 Manifest this update: Sun 20 Sep 2026 10:35:21 +0000 Manifest next update: Mon 21 Sep 2026 12:17:21 +0000 Files and hashes: 1: E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.crl (hash: v2rcHk/GiZM3l8hqf01ceX3NmACKQ7NAJuSeu18FAh4=) 2: 3130332e3137382e3137312e302f32342d3234203d3e20313339393532.roa (hash: aDinqjPhgNq50kNy+lg2Iba0bDegBSFkr3DIakb0nTU=) 3: 3130332e3137382e3137302e302f32342d3234203d3e20313339393532.roa (hash: Q+Zpu9s7FFAblJfI/9bq1CU9BNldDzB+MO83xGJv/O8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.crl rsync://rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 12:17:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:58:d7:c9:dc:9d:48:79:05:d6:f3:27:b3:22:93:5d:76:09:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60 Validity Not Before: Sep 20 10:35:21 2026 GMT Not After : Sep 21 12:17:21 2026 GMT Subject: CN=952BB0860086ECBD0C640A5FE68A82743ED88D39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:1c:57:44:f5:1f:3d:f6:29:31:fb:ed:75:fe: 4e:4a:72:11:37:6a:15:90:18:bd:c3:91:53:24:0b: c1:91:b7:ef:58:4d:66:6e:41:4c:7d:90:5b:5b:d8: bb:c5:12:3f:2b:89:c1:92:8e:04:20:51:60:9b:aa: 68:2d:ca:75:0d:d7:e9:6e:6e:51:05:b6:88:78:53: e7:01:33:a9:45:55:5d:b0:51:52:44:95:9a:df:73: 12:b8:85:ef:dc:84:3c:6a:95:5a:5c:29:42:6a:6c: b8:d6:b1:35:5c:4a:d0:69:70:cc:8a:9b:7d:cc:63: 4c:76:e8:f8:2f:3c:6f:ad:c2:6c:5a:a9:92:11:0e: 0c:e5:e3:4b:2f:91:95:36:0c:09:d2:c8:60:d6:f9: f9:1e:7f:34:89:77:bb:74:26:d4:1e:ac:31:7d:c0: e8:54:23:29:c4:2c:96:f9:ae:8a:62:67:e8:73:3a: 4e:c6:9e:be:bf:75:00:8d:5b:51:ad:87:5e:66:30: 0b:22:cf:2d:a2:35:2e:ce:6b:f0:22:b3:18:6f:2f: f2:fb:b8:78:c4:bf:83:d2:1f:04:85:37:8a:f2:b2: f1:5d:3f:46:1e:e5:50:12:3a:c2:ac:50:ae:b0:7d: 5b:7a:c5:aa:8c:05:20:77:02:dc:41:e0:8c:44:38: b2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:2B:B0:86:00:86:EC:BD:0C:64:0A:5F:E6:8A:82:74:3E:D8:8D:39 X509v3 Authority Key Identifier: keyid:E5:F6:F9:E5:DD:9D:34:BD:A0:8C:45:31:BA:70:87:61:A3:5A:DE:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:e1:6a:ec:dc:85:6b:6b:e3:2e:3c:4a:4b:c1:a3:33:82:fe: 3e:af:6e:2c:c9:e7:a1:c7:59:01:03:ae:a5:6e:b7:23:b2:74: 12:58:e1:dc:c9:cf:8e:44:ef:fc:cb:20:fe:d1:83:a3:f0:07: 0a:51:13:83:2c:56:9c:bb:cd:05:ab:7e:dc:56:50:91:74:9f: be:b0:00:18:42:f7:69:70:db:3f:9b:24:79:02:98:f0:54:cf: cf:cd:4d:6a:4b:d4:2e:82:b1:aa:51:5c:4d:d8:38:53:95:61: 4c:32:f6:e6:63:78:52:0f:95:c3:43:aa:ed:39:8c:22:04:8c: fc:22:d2:b9:c2:ff:f9:da:e6:0f:af:f2:59:79:9d:89:12:05: 51:f9:af:33:2a:c5:89:eb:21:50:e1:78:a0:77:04:e3:43:3e: 92:7a:4e:81:06:e3:d1:c6:f9:a5:4e:16:af:05:f5:f7:f4:c8: 36:24:a3:d7:bb:35:1a:bb:db:d3:a1:7f:b3:e2:5f:04:d1:e5: fe:fb:09:0a:d1:cf:f4:7a:a2:a8:19:cf:9f:39:b7:0f:cc:0f: 63:65:79:a6:8f:52:20:c7:2d:34:07:da:de:89:12:86:e2:3e: 59:a7:e9:8e:a6:d6:e7:98:ee:40:a1:b1:d0:53:66:6a:04:0e: c4:38:63:f6 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITKVjXydydSHkF1vMnsyKTXXYJBTANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhFNUY2RjlFNUREOUQzNEJEQTA4QzQ1MzFCQTcwODc2MUEz NUFERTYwMB4XDTI2MDkyMDEwMzUyMVoXDTI2MDkyMTEyMTcyMVowMzExMC8GA1UE AxMoOTUyQkIwODYwMDg2RUNCRDBDNjQwQTVGRTY4QTgyNzQzRUQ4OEQzOTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIscV0T1Hz32KTH77XX+TkpyETdq FZAYvcORUyQLwZG371hNZm5BTH2QW1vYu8USPyuJwZKOBCBRYJuqaC3KdQ3X6W5u UQW2iHhT5wEzqUVVXbBRUkSVmt9zEriF79yEPGqVWlwpQmpsuNaxNVxK0GlwzIqb fcxjTHbo+C88b63CbFqpkhEODOXjSy+RlTYMCdLIYNb5+R5/NIl3u3Qm1B6sMX3A 6FQjKcQslvmuimJn6HM6Tsaevr91AI1bUa2HXmYwCyLPLaI1Ls5r8CKzGG8v8vu4 eMS/g9IfBIU3ivKy8V0/Rh7lUBI6wqxQrrB9W3rFqowFIHcC3EHgjEQ4sqECAwEA AaOCAjwwggI4MB0GA1UdDgQWBBSVK7CGAIbsvQxkCl/mioJ0PtiNOTAfBgNVHSME GDAWgBTl9vnl3Z00vaCMRTG6cIdho1reYDAOBgNVHQ8BAf8EBAMCB4AwgYYGA1Ud HwR/MH0we6B5oHeGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8y YzAxZmQ0NC04Y2Q2LTRkOWYtOWJkMS04MzY3YWQ5Y2Q5ZWEvMC9FNUY2RjlFNURE OUQzNEJEQTA4QzQ1MzFCQTcwODc2MUEzNUFERTYwLmNybDByBggrBgEFBQcBAQRm MGQwYgYIKwYBBQUHMAKGVnJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVw by9JRE5JQy8xL0U1RjZGOUU1REQ5RDM0QkRBMDhDNDUzMUJBNzA4NzYxQTM1QURF NjAuY2VyMIGUBggrBgEFBQcBCwSBhzCBhDCBgQYIKwYBBQUHMAuGdXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yYzAxZmQ0NC04Y2Q2LTRkOWYtOWJk MS04MzY3YWQ5Y2Q5ZWEvMC9FNUY2RjlFNUREOUQzNEJEQTA4QzQ1MzFCQTcwODc2 MUEzNUFERTYwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAFuFq7NyFa2vjLjxKS8GjM4L+Pq9uLMnnocdZ AQOupW63I7J0Eljh3MnPjkTv/Msg/tGDo/AHClETgyxWnLvNBat+3FZQkXSfvrAA GEL3aXDbP5skeQKY8FTPz81NakvULoKxqlFcTdg4U5VhTDL25mN4Ug+Vw0Oq7TmM IgSM/CLSucL/+drmD6/yWXmdiRIFUfmvMyrFieshUOF4oHcE40M+knpOgQbj0cb5 pU4WrwX19/TINiSj17s1Grvb06F/s+JfBNHl/vsJCtHP9HqiqBnPnzm3D8wPY2V5 po9SIMctNAfa3okShuI+WafpjqbW55juQKGx0FNmagQOxDhj9g== -----END CERTIFICATE-----Generated at Sun Sep 20 22:32:55 2026 by rpki-client