$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.mft File: E83F205BF306DAF53F99D7D0596E19991D122A75.mft (raw, json) Hash identifier: 1UGvkygSKNiNx5TQrNxZivjcpi3ZU4mtrG7pPNHiCjY= Subject key identifier: 68:5D:06:AF:5F:59:53:C0:AF:2D:CC:39:E7:9C:4F:35:EB:C2:8F:5A Authority key identifier: E8:3F:20:5B:F3:06:DA:F5:3F:99:D7:D0:59:6E:19:99:1D:12:2A:75 Certificate issuer: /CN=E83F205BF306DAF53F99D7D0596E19991D122A75 Certificate serial: 4BB328CEE13FBB1B0277FF37A07F50538C24034E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E83F205BF306DAF53F99D7D0596E19991D122A75.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.mft Manifest number: BD Signing time: Sun 20 Sep 2026 08:42:54 +0000 Manifest this update: Sun 20 Sep 2026 08:37:54 +0000 Manifest next update: Mon 21 Sep 2026 11:22:54 +0000 Files and hashes: 1: 3130332e3137342e3131322e302f32342d3234203d3e20313339393532.roa (hash: hxtIKOBEaXvvEhPlm4EoLMj05xZmKO9tH3GRDWA9ERg=) 2: 3130332e3137342e3131322e302f32332d3233203d3e20313339393532.roa (hash: 4/4i0yLfh0SYWVvIB+ls28jcDhOwmL2zwW2k6ffDKik=) 3: 3130332e3137342e3131332e302f32342d3234203d3e20313339393532.roa (hash: qr0g5LVzrVb3dBi48fKGU2IZ+49TkkVc1Y82FpKn5Mk=) 4: E83F205BF306DAF53F99D7D0596E19991D122A75.crl (hash: 2kTmpKXihV+l4LxITuydibMDo8axXamvf2rVJ2XQl/s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.crl rsync://rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E83F205BF306DAF53F99D7D0596E19991D122A75.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 11:22:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:b3:28:ce:e1:3f:bb:1b:02:77:ff:37:a0:7f:50:53:8c:24:03:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E83F205BF306DAF53F99D7D0596E19991D122A75 Validity Not Before: Sep 20 08:37:54 2026 GMT Not After : Sep 21 11:22:54 2026 GMT Subject: CN=685D06AF5F5953C0AF2DCC39E79C4F35EBC28F5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c4:7e:80:2a:26:37:b8:2e:40:6e:e6:f5:4f: 05:ee:af:da:96:4b:6b:f7:47:70:71:d5:6b:94:5d: be:b2:20:a5:3f:78:30:bf:92:17:f7:cf:d3:03:2a: 2c:3a:31:e4:85:52:61:37:e9:0e:36:6c:17:c6:62: 19:98:e5:28:9e:ac:a5:91:8d:10:f9:b0:d2:5a:b9: 1b:94:50:49:4a:78:73:8b:d6:07:bf:51:d2:36:d4: bd:99:67:3b:a7:ad:7c:d9:f5:0a:57:d4:ab:ee:a7: 5d:4f:a6:6b:71:3b:c8:69:46:e3:dd:85:19:66:93: 13:85:97:9a:a8:88:28:0f:e7:1f:85:5b:49:0c:f5: eb:e2:54:0e:a8:91:8f:7e:cc:01:b8:ca:21:3c:70: ce:07:2f:be:c5:ea:5d:44:e4:b0:6d:20:48:2e:b9: eb:12:54:a1:22:cb:b0:8e:d8:f3:f7:d9:06:b0:03: bf:58:19:95:5b:fe:ce:32:75:66:f2:65:db:11:53: ea:42:a0:fb:5b:58:df:14:46:30:c4:74:d2:12:ce: 90:4a:79:f8:8c:61:73:17:ac:26:76:61:e3:bd:a3: 7d:85:11:1c:2f:d0:a8:fd:a9:92:41:56:22:d5:fd: 8c:7b:10:da:01:fd:1e:b8:f4:77:bf:7b:86:38:54: 62:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:5D:06:AF:5F:59:53:C0:AF:2D:CC:39:E7:9C:4F:35:EB:C2:8F:5A X509v3 Authority Key Identifier: keyid:E8:3F:20:5B:F3:06:DA:F5:3F:99:D7:D0:59:6E:19:99:1D:12:2A:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E83F205BF306DAF53F99D7D0596E19991D122A75.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:45:6e:18:9b:a7:d9:36:14:8b:dc:3f:bf:b5:0c:c7:2b:dc: 9b:f5:51:45:63:eb:94:55:ee:26:36:13:a0:52:3a:39:25:19: 42:b4:f6:50:ba:8b:a4:e5:89:5e:8f:50:03:38:59:41:ea:20: ab:43:96:62:a4:dd:bc:87:05:3c:56:54:35:3b:a0:b2:3f:ce: 7c:a8:86:2b:1e:2b:6c:c7:03:1e:cf:f9:25:a9:b3:69:db:c6: ca:d6:16:87:60:d6:e3:52:6e:01:59:10:bd:d3:bc:44:c2:89: 0f:77:7d:86:39:4e:43:d9:dd:98:11:5b:8c:4b:6d:23:d9:90: a3:63:ee:49:12:0f:f0:78:49:73:09:42:ab:b4:c9:4d:b2:a1: 74:41:27:09:fd:5a:62:c4:57:5a:2c:02:91:54:4d:97:41:57: 7e:2b:ab:9d:2a:64:fa:54:fb:ad:e1:10:08:b5:67:2d:06:f2: 8f:28:ea:f6:70:89:3c:96:e4:e2:f8:da:bb:58:0e:62:be:02: ba:5e:1d:1c:6b:ac:15:93:8a:72:17:73:ff:a8:50:03:45:62: 68:46:96:a4:95:40:2f:dc:f4:7f:a6:38:34:60:53:53:62:2b: 72:3b:05:7d:8d:e3:13:f2:cc:3c:81:42:f3:2b:4b:66:ee:c4: 93:06:74:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS7MozuE/uxsCd/83oH9QU4wkA04wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTgzRjIwNUJGMzA2REFGNTNGOTlEN0QwNTk2RTE5OTkx RDEyMkE3NTAeFw0yNjA5MjAwODM3NTRaFw0yNjA5MjExMTIyNTRaMDMxMTAvBgNV BAMTKDY4NUQwNkFGNUY1OTUzQzBBRjJEQ0MzOUU3OUM0RjM1RUJDMjhGNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoxH6AKiY3uC5Abub1TwXur9qW S2v3R3Bx1WuUXb6yIKU/eDC/khf3z9MDKiw6MeSFUmE36Q42bBfGYhmY5SierKWR jRD5sNJauRuUUElKeHOL1ge/UdI21L2ZZzunrXzZ9QpX1Kvup11PpmtxO8hpRuPd hRlmkxOFl5qoiCgP5x+FW0kM9eviVA6okY9+zAG4yiE8cM4HL77F6l1E5LBtIEgu uesSVKEiy7CO2PP32QawA79YGZVb/s4ydWbyZdsRU+pCoPtbWN8URjDEdNISzpBK efiMYXMXrCZ2YeO9o32FERwv0Kj9qZJBViLV/Yx7ENoB/R649He/e4Y4VGKTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaF0Gr19ZU8CvLcw555xPNevCj1owHwYDVR0j BBgwFoAU6D8gW/MG2vU/mdfQWW4ZmR0SKnUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmMzNjI0YzQtYmZkYy00ZTQ4LThlYTAtZWIwNTYwNWM2MjEzLzAvRTgzRjIwNUJG MzA2REFGNTNGOTlEN0QwNTk2RTE5OTkxRDEyMkE3NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FODNGMjA1QkYzMDZEQUY1M0Y5OUQ3RDA1OTZFMTk5OTFEMTIy QTc1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmMzNjI0YzQtYmZkYy00ZTQ4LThl YTAtZWIwNTYwNWM2MjEzLzAvRTgzRjIwNUJGMzA2REFGNTNGOTlEN0QwNTk2RTE5 OTkxRDEyMkE3NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAINFbhibp9k2FIvcP7+1DMcr3Jv1UUVj65RV 7iY2E6BSOjklGUK09lC6i6TliV6PUAM4WUHqIKtDlmKk3byHBTxWVDU7oLI/znyo hiseK2zHAx7P+SWps2nbxsrWFodg1uNSbgFZEL3TvETCiQ93fYY5TkPZ3ZgRW4xL bSPZkKNj7kkSD/B4SXMJQqu0yU2yoXRBJwn9WmLEV1osApFUTZdBV34rq50qZPpU +63hEAi1Zy0G8o8o6vZwiTyW5OL42rtYDmK+ArpeHRxrrBWTinIXc/+oUANFYmhG lqSVQC/c9H+mODRgU1NiK3I7BX2N4xPyzDyBQvMrS2buxJMGdAM= -----END CERTIFICATE-----Generated at Sun Sep 20 21:28:24 2026 by rpki-client