$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.mft File: E83F205BF306DAF53F99D7D0596E19991D122A75.mft (raw, json) Hash identifier: WnACa9IgUbEqI2abDmDBz4DyHPDjPqaVWr/eClVmEo8= Subject key identifier: CF:36:6C:65:8A:05:FC:04:0C:AF:E5:CA:F5:79:E6:AD:B3:8C:D8:CF Authority key identifier: E8:3F:20:5B:F3:06:DA:F5:3F:99:D7:D0:59:6E:19:99:1D:12:2A:75 Certificate issuer: /CN=E83F205BF306DAF53F99D7D0596E19991D122A75 Certificate serial: 127F772DA2C4840E10FACB1C2A97AFF904C5180D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E83F205BF306DAF53F99D7D0596E19991D122A75.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.mft Manifest number: BE Signing time: Mon 21 Sep 2026 03:25:46 +0000 Manifest this update: Mon 21 Sep 2026 03:20:46 +0000 Manifest next update: Tue 22 Sep 2026 06:48:46 +0000 Files and hashes: 1: 3130332e3137342e3131332e302f32342d3234203d3e20313339393532.roa (hash: qr0g5LVzrVb3dBi48fKGU2IZ+49TkkVc1Y82FpKn5Mk=) 2: 3130332e3137342e3131322e302f32342d3234203d3e20313339393532.roa (hash: hxtIKOBEaXvvEhPlm4EoLMj05xZmKO9tH3GRDWA9ERg=) 3: E83F205BF306DAF53F99D7D0596E19991D122A75.crl (hash: TlO1SGX5aEWyOjNhZlBVh9kejzGpeEeuoojYh9Ugj8c=) 4: 3130332e3137342e3131322e302f32332d3233203d3e20313339393532.roa (hash: 4/4i0yLfh0SYWVvIB+ls28jcDhOwmL2zwW2k6ffDKik=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.crl rsync://rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E83F205BF306DAF53F99D7D0596E19991D122A75.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:7f:77:2d:a2:c4:84:0e:10:fa:cb:1c:2a:97:af:f9:04:c5:18:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E83F205BF306DAF53F99D7D0596E19991D122A75 Validity Not Before: Sep 21 03:20:46 2026 GMT Not After : Sep 22 06:48:46 2026 GMT Subject: CN=CF366C658A05FC040CAFE5CAF579E6ADB38CD8CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:25:d0:dc:3c:83:de:8a:1c:71:30:8c:37:6d: 98:62:75:aa:12:2a:16:14:38:0b:d2:78:7a:0d:fc: 95:23:10:e3:1f:70:73:7f:a2:b9:8d:93:32:18:a9: 5c:84:af:9e:88:72:38:6a:99:13:4a:7d:3c:35:f3: 02:7a:04:ed:8d:9f:c1:53:7d:1c:7d:f5:bb:01:d5: 92:93:46:4b:80:0e:30:b7:03:f5:1a:0a:28:0a:4e: d0:45:3b:9f:d6:d0:18:47:24:35:73:13:88:20:94: d9:dc:ab:94:23:d2:3e:18:d3:d8:46:d0:b3:8a:f3: 8c:c7:8d:2d:64:ba:f1:bc:81:01:78:fb:08:00:e1: 2c:7b:84:39:7e:fd:ea:b0:6a:b7:f6:7c:97:3b:0d: 54:4e:29:f0:30:4f:3a:a0:f9:b1:22:9c:c1:21:7b: 60:22:45:0b:23:cd:33:b8:62:d8:27:15:a6:15:01: f2:11:3b:e8:32:a1:4c:33:47:26:05:93:e1:44:3f: 8e:94:42:3f:6e:19:e5:1b:67:09:1c:1d:38:d7:88: 0e:ef:0c:51:92:a4:d3:9d:9c:43:c6:a8:23:99:e4: af:6a:de:f6:9e:c3:9d:98:71:c9:1e:eb:c2:5f:6a: 68:90:ca:a4:ff:db:2a:57:02:ec:13:47:1f:de:a0: 44:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:36:6C:65:8A:05:FC:04:0C:AF:E5:CA:F5:79:E6:AD:B3:8C:D8:CF X509v3 Authority Key Identifier: keyid:E8:3F:20:5B:F3:06:DA:F5:3F:99:D7:D0:59:6E:19:99:1D:12:2A:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E83F205BF306DAF53F99D7D0596E19991D122A75.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:28:d1:6c:af:99:81:1d:fe:84:b4:65:8c:26:9e:28:53:8a: e2:a4:8c:64:d7:27:84:54:aa:9b:69:74:da:56:2e:e4:8f:8b: d0:75:90:91:c5:f3:cc:4e:99:cc:e8:5e:55:ed:d4:60:df:9a: 29:27:26:9c:bd:2e:a1:be:53:14:a5:d4:ba:36:5a:42:09:4e: ea:dc:f0:2a:44:4d:6a:5a:0b:3c:0f:2d:71:e2:bb:ec:ac:32: 13:49:db:b6:a9:5a:19:ac:8d:b4:45:aa:2c:4e:34:93:27:0a: 21:e3:66:ce:6c:5f:5a:f1:61:88:fa:95:a5:44:94:8f:12:44: 1a:f9:be:1a:53:7e:90:a6:c6:7f:5a:c6:ac:fd:f8:d8:15:be: e0:06:a3:e2:e5:aa:26:fa:9b:ed:86:0c:89:7e:cd:3a:40:a2: e8:27:3b:de:69:d2:5b:99:c7:b9:ad:f2:d2:91:85:cf:09:9e: 92:c2:61:de:d0:33:32:12:e5:ca:8e:39:d2:45:1d:41:86:ab: b6:a7:d2:3f:66:4f:21:c0:99:24:cf:8c:dc:e5:c6:bb:cc:ae: c5:c4:5b:d8:8e:13:b1:0f:3c:9f:4d:8a:3d:dd:5c:dc:1c:b2: c8:1e:d4:28:f5:79:75:44:08:c8:bc:b8:4b:64:90:75:96:0d: 63:ae:93:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEn93LaLEhA4Q+sscKpev+QTFGA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTgzRjIwNUJGMzA2REFGNTNGOTlEN0QwNTk2RTE5OTkx RDEyMkE3NTAeFw0yNjA5MjEwMzIwNDZaFw0yNjA5MjIwNjQ4NDZaMDMxMTAvBgNV BAMTKENGMzY2QzY1OEEwNUZDMDQwQ0FGRTVDQUY1NzlFNkFEQjM4Q0Q4Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtJdDcPIPeihxxMIw3bZhidaoS KhYUOAvSeHoN/JUjEOMfcHN/ormNkzIYqVyEr56IcjhqmRNKfTw18wJ6BO2Nn8FT fRx99bsB1ZKTRkuADjC3A/UaCigKTtBFO5/W0BhHJDVzE4gglNncq5Qj0j4Y09hG 0LOK84zHjS1kuvG8gQF4+wgA4Sx7hDl+/eqwarf2fJc7DVROKfAwTzqg+bEinMEh e2AiRQsjzTO4YtgnFaYVAfIRO+gyoUwzRyYFk+FEP46UQj9uGeUbZwkcHTjXiA7v DFGSpNOdnEPGqCOZ5K9q3vaew52Yccke68JfamiQyqT/2ypXAuwTRx/eoEQRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzzZsZYoF/AQMr+XK9XnmrbOM2M8wHwYDVR0j BBgwFoAU6D8gW/MG2vU/mdfQWW4ZmR0SKnUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmMzNjI0YzQtYmZkYy00ZTQ4LThlYTAtZWIwNTYwNWM2MjEzLzAvRTgzRjIwNUJG MzA2REFGNTNGOTlEN0QwNTk2RTE5OTkxRDEyMkE3NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FODNGMjA1QkYzMDZEQUY1M0Y5OUQ3RDA1OTZFMTk5OTFEMTIy QTc1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmMzNjI0YzQtYmZkYy00ZTQ4LThl YTAtZWIwNTYwNWM2MjEzLzAvRTgzRjIwNUJGMzA2REFGNTNGOTlEN0QwNTk2RTE5 OTkxRDEyMkE3NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFQo0WyvmYEd/oS0ZYwmnihTiuKkjGTXJ4RU qptpdNpWLuSPi9B1kJHF88xOmczoXlXt1GDfmiknJpy9LqG+UxSl1Lo2WkIJTurc 8CpETWpaCzwPLXHiu+ysMhNJ27apWhmsjbRFqixONJMnCiHjZs5sX1rxYYj6laVE lI8SRBr5vhpTfpCmxn9axqz9+NgVvuAGo+Llqib6m+2GDIl+zTpAougnO95p0luZ x7mt8tKRhc8JnpLCYd7QMzIS5cqOOdJFHUGGq7an0j9mTyHAmSTPjNzlxrvMrsXE W9iOE7EPPJ9Nij3dXNwcssge1Cj1eXVECMi8uEtkkHWWDWOuk9k= -----END CERTIFICATE-----Generated at Mon Sep 21 17:39:50 2026 by rpki-client