$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/E6D8657E7EEA10982DC10335C8109731A067DDF4.mft File: E6D8657E7EEA10982DC10335C8109731A067DDF4.mft (raw, json) Hash identifier: oQyKjnO2sx6q9vZLCNFrv2hGCx3nBlYkuWvoJ+sXetk= Subject key identifier: 69:4C:DA:EF:F8:AC:C9:A0:58:FE:02:A1:36:2A:38:9D:5A:BC:92:7C Authority key identifier: E6:D8:65:7E:7E:EA:10:98:2D:C1:03:35:C8:10:97:31:A0:67:DD:F4 Certificate issuer: /CN=E6D8657E7EEA10982DC10335C8109731A067DDF4 Certificate serial: 11AD8B4567CAD01F9FA7D615112AF52E9248CE3D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E6D8657E7EEA10982DC10335C8109731A067DDF4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/E6D8657E7EEA10982DC10335C8109731A067DDF4.mft Manifest number: BE Signing time: Mon 21 Sep 2026 21:43:28 +0000 Manifest this update: Mon 21 Sep 2026 21:38:28 +0000 Manifest next update: Tue 22 Sep 2026 23:10:28 +0000 Files and hashes: 1: 3135372e36362e33342e302f32332d3234203d3e203535363838.roa (hash: Q0bQ3r6hiZxbkMHCrchZCQ8u853MF4yPWxTMqg5/h/A=) 2: E6D8657E7EEA10982DC10335C8109731A067DDF4.crl (hash: bCY4V+3cRhr59LEkGzKj6taJgcy50zhrrK842zLk1tw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/E6D8657E7EEA10982DC10335C8109731A067DDF4.crl rsync://rpki-rsync.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/E6D8657E7EEA10982DC10335C8109731A067DDF4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E6D8657E7EEA10982DC10335C8109731A067DDF4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 23:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:ad:8b:45:67:ca:d0:1f:9f:a7:d6:15:11:2a:f5:2e:92:48:ce:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E6D8657E7EEA10982DC10335C8109731A067DDF4 Validity Not Before: Sep 21 21:38:28 2026 GMT Not After : Sep 22 23:10:28 2026 GMT Subject: CN=694CDAEFF8ACC9A058FE02A1362A389D5ABC927C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4f:5e:80:78:29:f4:84:0e:31:68:bb:1e:8e: de:61:b9:dc:38:09:b4:ae:06:65:68:77:51:ec:a0: f3:bf:bd:66:ed:67:1e:18:2a:db:85:23:a7:9f:74: f9:50:c3:65:90:20:90:50:f8:64:6d:a5:bd:fe:78: 74:58:6f:18:ef:6f:0a:d3:ec:5e:74:ff:66:1a:e2: 27:48:f6:07:d7:e0:63:1f:d6:69:0d:7f:e1:e9:24: 4a:c6:1e:b8:d7:49:59:e7:45:a6:01:1a:88:8a:71: f3:20:9b:c3:7a:79:d1:e7:7e:7b:e9:95:4a:5c:f0: 2d:21:95:5d:b9:fb:2f:09:6b:d5:4d:af:b5:6e:67: 72:fa:4c:4b:71:01:c1:33:52:ef:2c:11:ae:17:42: 6f:b3:ea:5f:80:56:c9:bd:07:b8:fd:76:9a:91:70: e1:3c:0f:32:d0:0c:64:a6:94:a9:0d:87:e4:ba:9e: 90:f1:91:b0:ea:84:81:3e:e7:9a:3a:2f:aa:c5:ae: ce:ae:54:4a:90:3f:5a:35:66:12:d4:bc:a4:0f:38: ae:45:b3:22:e9:d0:3f:d8:ff:56:8e:88:05:55:31: 27:82:08:45:21:0c:e7:f7:0f:79:39:82:0c:78:c2: ea:60:8c:24:80:f9:2d:a3:b0:1d:ec:d7:6c:09:62: cb:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:4C:DA:EF:F8:AC:C9:A0:58:FE:02:A1:36:2A:38:9D:5A:BC:92:7C X509v3 Authority Key Identifier: keyid:E6:D8:65:7E:7E:EA:10:98:2D:C1:03:35:C8:10:97:31:A0:67:DD:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/E6D8657E7EEA10982DC10335C8109731A067DDF4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E6D8657E7EEA10982DC10335C8109731A067DDF4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/E6D8657E7EEA10982DC10335C8109731A067DDF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:eb:79:ee:4a:28:0e:f5:78:57:dc:62:8d:d8:bc:6c:07:b1: 35:03:c6:8e:f3:f8:23:7f:ee:99:6d:60:8e:cc:15:00:2f:0a: c8:7d:00:db:a3:3f:f6:fc:54:23:11:be:fc:e2:f7:a1:19:69: 3a:32:a6:c3:68:19:43:3c:51:a5:a6:1b:bd:46:0e:70:fb:81: 9a:3b:3c:b0:17:0d:80:a2:9d:f7:ca:4e:1f:ef:b9:12:90:24: cc:6a:ed:51:29:cc:e4:eb:59:5d:ad:78:4c:18:4d:f4:4f:bf: 6c:5f:d3:df:19:bd:dc:d6:6d:1e:e6:47:63:59:5d:ae:02:00: 5c:e4:dc:26:c8:92:eb:32:19:ef:f6:bd:8e:6d:6a:6d:f5:8c: 82:c0:de:7a:ad:c1:a7:3a:7f:16:dd:16:df:f7:ca:06:98:b5: 5f:b6:f1:55:54:8d:1b:5b:63:6b:a8:4e:47:f7:5f:ed:a0:76: d0:11:24:0c:a8:eb:2a:3e:e3:8f:fe:b4:f4:9f:2d:c7:2d:7b: 4e:f3:15:82:2c:c9:95:fe:96:c2:85:3d:7a:4c:71:2a:ea:c1: 32:17:4d:6a:2e:c5:06:96:3d:65:80:b2:35:02:35:11:39:33: 59:6e:7e:f6:17:6a:73:6e:81:f8:5d:d7:ea:46:48:8c:ca:d8: aa:16:3f:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEa2LRWfK0B+fp9YVESr1LpJIzj0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTZEODY1N0U3RUVBMTA5ODJEQzEwMzM1QzgxMDk3MzFB MDY3RERGNDAeFw0yNjA5MjEyMTM4MjhaFw0yNjA5MjIyMzEwMjhaMDMxMTAvBgNV BAMTKDY5NENEQUVGRjhBQ0M5QTA1OEZFMDJBMTM2MkEzODlENUFCQzkyN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcT16AeCn0hA4xaLsejt5hudw4 CbSuBmVod1HsoPO/vWbtZx4YKtuFI6efdPlQw2WQIJBQ+GRtpb3+eHRYbxjvbwrT 7F50/2Ya4idI9gfX4GMf1mkNf+HpJErGHrjXSVnnRaYBGoiKcfMgm8N6edHnfnvp lUpc8C0hlV25+y8Ja9VNr7VuZ3L6TEtxAcEzUu8sEa4XQm+z6l+AVsm9B7j9dpqR cOE8DzLQDGSmlKkNh+S6npDxkbDqhIE+55o6L6rFrs6uVEqQP1o1ZhLUvKQPOK5F syLp0D/Y/1aOiAVVMSeCCEUhDOf3D3k5ggx4wupgjCSA+S2jsB3s12wJYsvXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaUza7/isyaBY/gKhNio4nVq8knwwHwYDVR0j BBgwFoAU5thlfn7qEJgtwQM1yBCXMaBn3fQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2MzZTY4YmQtYjA0Yy00ZDM1LTgwMjAtMDI5MzYzNDJmYjFkLzAvRTZEODY1N0U3 RUVBMTA5ODJEQzEwMzM1QzgxMDk3MzFBMDY3RERGNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FNkQ4NjU3RTdFRUExMDk4MkRDMTAzMzVDODEwOTczMUEwNjdE REY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2MzZTY4YmQtYjA0Yy00ZDM1LTgw MjAtMDI5MzYzNDJmYjFkLzAvRTZEODY1N0U3RUVBMTA5ODJEQzEwMzM1QzgxMDk3 MzFBMDY3RERGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFHree5KKA71eFfcYo3YvGwHsTUDxo7z+CN/ 7pltYI7MFQAvCsh9ANujP/b8VCMRvvzi96EZaToypsNoGUM8UaWmG71GDnD7gZo7 PLAXDYCinffKTh/vuRKQJMxq7VEpzOTrWV2teEwYTfRPv2xf098ZvdzWbR7mR2NZ Xa4CAFzk3CbIkusyGe/2vY5tam31jILA3nqtwac6fxbdFt/3ygaYtV+28VVUjRtb Y2uoTkf3X+2gdtARJAyo6yo+44/+tPSfLccte07zFYIsyZX+lsKFPXpMcSrqwTIX TWouxQaWPWWAsjUCNRE5M1lufvYXanNugfhd1+pGSIzK2KoWP9E= -----END CERTIFICATE-----Generated at Tue Sep 22 05:38:19 2026 by rpki-client