$ rpki-client -vvvf rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/E9ED07059EB01F61BF6A902EB0D95F92D005672C.mft File: E9ED07059EB01F61BF6A902EB0D95F92D005672C.mft (raw, json) Hash identifier: vucsACTNrsbC5UPzvOy3Ta8TxASbVcgEcf9gEYVvzRs= Subject key identifier: 50:A1:9C:58:E3:EE:D4:C0:2E:35:89:9F:77:92:16:E3:A5:E1:06:99 Authority key identifier: E9:ED:07:05:9E:B0:1F:61:BF:6A:90:2E:B0:D9:5F:92:D0:05:67:2C Certificate issuer: /CN=E9ED07059EB01F61BF6A902EB0D95F92D005672C Certificate serial: 74A0C18092595F2EFD4C00DB2C25B7A9FE449971 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9ED07059EB01F61BF6A902EB0D95F92D005672C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/E9ED07059EB01F61BF6A902EB0D95F92D005672C.mft Manifest number: FE Signing time: Mon 09 Nov 2026 11:45:21 +0000 Manifest this update: Mon 09 Nov 2026 11:40:21 +0000 Manifest next update: Tue 10 Nov 2026 14:41:21 +0000 Files and hashes: 1: 3130332e3133362e31342e302f32342d3234203d3e20313338383231.roa (hash: j+y6AXj1f3E3oHmAFOLhkBlzYepk37VPnp6D6mtPQkY=) 2: E9ED07059EB01F61BF6A902EB0D95F92D005672C.crl (hash: 8sTw7ulg4mDYdPnSqC8wSB4Yi4lT/s0Aobdwlo8xKbw=) 3: 3130332e3133362e31322e302f32322d3234203d3e20313338383231.roa (hash: adRerI3tyaAoAsC9J+hV/5/qxos6XlWsLUCLBDHVCkI=) 4: 3130332e3133362e31332e302f32342d3234203d3e20313338383231.roa (hash: O71Jl4mqVIKRIDU7d2ujmnsBUwDFC83l2q24DcsCcFA=) 5: 3130332e3133362e31352e302f32342d3234203d3e20313338383231.roa (hash: fB2Vl1cIcPoBjN5rs9Ik+Eab2HMgRuDFWdtvrKSJoVw=) 6: 3130332e3133362e31322e302f32342d3234203d3e20313338383231.roa (hash: O/24bYRJHwn8lGm4x/5IsjKHiRZPSA0Jbap1Vz4bsHo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/E9ED07059EB01F61BF6A902EB0D95F92D005672C.crl rsync://rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/E9ED07059EB01F61BF6A902EB0D95F92D005672C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9ED07059EB01F61BF6A902EB0D95F92D005672C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 14:41:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:a0:c1:80:92:59:5f:2e:fd:4c:00:db:2c:25:b7:a9:fe:44:99:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9ED07059EB01F61BF6A902EB0D95F92D005672C Validity Not Before: Nov 9 11:40:21 2026 GMT Not After : Nov 10 14:41:21 2026 GMT Subject: CN=50A19C58E3EED4C02E35899F779216E3A5E10699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b1:b1:68:a0:df:87:77:64:7c:b9:19:9b:dc: 60:d6:99:11:13:1c:90:0c:ec:25:c3:e1:45:d6:0b: ac:9f:c3:2d:b5:0d:ac:46:40:f9:93:06:84:f3:e4: ef:0e:a7:5d:a7:5b:b8:1e:67:44:ba:83:51:de:67: a0:fb:18:6f:28:05:20:cc:7b:3f:02:74:1e:33:74: 6f:36:3a:f3:34:d5:f1:9d:e6:85:37:5f:5f:e4:ee: 64:64:b9:78:d9:4e:38:a7:33:c5:eb:76:dd:6b:73: 3a:dc:9c:32:9e:f7:8f:6c:70:6f:bd:fd:ca:be:95: b8:25:d8:a8:97:4e:a0:77:04:19:f9:f1:40:59:36: 6f:d3:f7:fb:7c:13:47:b8:15:20:f0:45:40:02:87: e6:cb:7d:2b:ff:fd:cd:a8:5d:29:70:df:4c:78:be: b9:2c:98:0c:e1:6f:da:eb:bb:30:82:a9:66:ec:e3: 5e:9b:4e:cf:c3:ca:f7:06:fd:e9:5f:4f:4c:65:72: 3e:5f:54:01:89:37:c6:72:85:f0:40:6e:0a:70:69: 81:bb:9a:b0:8d:b9:51:15:5a:e3:04:e6:a6:96:8a: c3:63:22:5d:45:4f:74:a4:ff:de:b8:4d:b3:71:bd: 79:20:b5:7e:41:e1:79:b6:8f:b3:35:7a:f2:cb:46: bf:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:A1:9C:58:E3:EE:D4:C0:2E:35:89:9F:77:92:16:E3:A5:E1:06:99 X509v3 Authority Key Identifier: keyid:E9:ED:07:05:9E:B0:1F:61:BF:6A:90:2E:B0:D9:5F:92:D0:05:67:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/E9ED07059EB01F61BF6A902EB0D95F92D005672C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9ED07059EB01F61BF6A902EB0D95F92D005672C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/E9ED07059EB01F61BF6A902EB0D95F92D005672C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:ba:15:fb:12:99:46:61:c2:18:68:8a:13:5e:33:71:e7:98: af:62:1d:16:ec:4f:5a:93:76:5c:65:be:c8:a2:79:5d:c1:fe: 6d:8a:68:5c:f2:9f:72:41:6f:8b:17:37:2f:18:89:cd:27:0c: cd:47:a2:d5:e7:31:e3:5a:9f:ea:55:7c:c8:05:f9:c1:67:9f: 87:f0:10:34:0d:83:70:aa:f5:a6:55:da:4a:7e:47:cc:d8:4a: 24:fa:53:be:bb:cd:bf:8d:b1:11:76:c7:b1:b6:f4:90:ba:85: 43:c9:df:e0:e5:13:af:09:92:c8:58:cc:92:b7:8c:4a:33:4f: fa:fc:fb:b1:7a:30:a0:0d:7e:cb:12:39:32:5f:ee:8f:fe:6d: 30:1b:e3:d8:bf:75:43:56:3a:cd:ea:90:05:44:53:58:30:bd: 49:c1:c6:09:38:df:7c:8b:88:8f:e6:62:5a:82:29:2b:8a:b4: 87:7b:0a:a5:d3:c9:f3:ed:06:39:b7:0c:d3:4a:20:7d:a5:d3: d9:a5:8c:0e:1b:55:0c:38:05:cb:ef:be:83:dd:be:0a:ba:1f: 31:15:d4:69:70:38:b0:bb:cf:8f:3e:b5:e6:94:1c:24:a1:ab: 50:9a:4a:30:a3:9b:7b:c8:79:be:b1:51:fc:37:57:bc:d9:51: 3e:d5:9c:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdKDBgJJZXy79TADbLCW3qf5EmXEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlFRDA3MDU5RUIwMUY2MUJGNkE5MDJFQjBEOTVGOTJE MDA1NjcyQzAeFw0yNjExMDkxMTQwMjFaFw0yNjExMTAxNDQxMjFaMDMxMTAvBgNV BAMTKDUwQTE5QzU4RTNFRUQ0QzAyRTM1ODk5Rjc3OTIxNkUzQTVFMTA2OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAsbFooN+Hd2R8uRmb3GDWmRET HJAM7CXD4UXWC6yfwy21DaxGQPmTBoTz5O8Op12nW7geZ0S6g1HeZ6D7GG8oBSDM ez8CdB4zdG82OvM01fGd5oU3X1/k7mRkuXjZTjinM8Xrdt1rczrcnDKe949scG+9 /cq+lbgl2KiXTqB3BBn58UBZNm/T9/t8E0e4FSDwRUACh+bLfSv//c2oXSlw30x4 vrksmAzhb9rruzCCqWbs416bTs/DyvcG/elfT0xlcj5fVAGJN8ZyhfBAbgpwaYG7 mrCNuVEVWuME5qaWisNjIl1FT3Sk/964TbNxvXkgtX5B4Xm2j7M1evLLRr91AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUKGcWOPu1MAuNYmfd5IW46XhBpkwHwYDVR0j BBgwFoAU6e0HBZ6wH2G/apAusNlfktAFZywwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDAxYjFjMWItNjU2Yy00ODlkLTllZDMtY2NjNzdjODMwMThkLzAvRTlFRDA3MDU5 RUIwMUY2MUJGNkE5MDJFQjBEOTVGOTJEMDA1NjcyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOUVEMDcwNTlFQjAxRjYxQkY2QTkwMkVCMEQ5NUY5MkQwMDU2 NzJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDAxYjFjMWItNjU2Yy00ODlkLTll ZDMtY2NjNzdjODMwMThkLzAvRTlFRDA3MDU5RUIwMUY2MUJGNkE5MDJFQjBEOTVG OTJEMDA1NjcyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG66FfsSmUZhwhhoihNeM3HnmK9iHRbsT1qT dlxlvsiieV3B/m2KaFzyn3JBb4sXNy8Yic0nDM1HotXnMeNan+pVfMgF+cFnn4fw EDQNg3Cq9aZV2kp+R8zYSiT6U767zb+NsRF2x7G29JC6hUPJ3+DlE68JkshYzJK3 jEozT/r8+7F6MKANfssSOTJf7o/+bTAb49i/dUNWOs3qkAVEU1gwvUnBxgk433yL iI/mYlqCKSuKtId7CqXTyfPtBjm3DNNKIH2l09mljA4bVQw4BcvvvoPdvgq6HzEV 1GlwOLC7z48+teaUHCShq1CaSjCjm3vIeb6xUfw3V7zZUT7VnDY= -----END CERTIFICATE-----Generated at Tue Nov 10 06:13:04 2026 by rpki-client