$ rpki-client -vvvf rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/E9ED07059EB01F61BF6A902EB0D95F92D005672C.mft File: E9ED07059EB01F61BF6A902EB0D95F92D005672C.mft (raw, json) Hash identifier: 4NjPnmk5qvAVcjFl1NWNwPlC0oCjDks234T5iRCKzJ4= Subject key identifier: A9:37:77:8F:DA:3B:84:CD:86:8C:9A:AF:CB:5A:4B:DC:0B:5E:08:83 Authority key identifier: E9:ED:07:05:9E:B0:1F:61:BF:6A:90:2E:B0:D9:5F:92:D0:05:67:2C Certificate issuer: /CN=E9ED07059EB01F61BF6A902EB0D95F92D005672C Certificate serial: 654C2E79CC3EC5A0E54C8F8BC9D059EB8642824C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9ED07059EB01F61BF6A902EB0D95F92D005672C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/E9ED07059EB01F61BF6A902EB0D95F92D005672C.mft Manifest number: BD Signing time: Mon 21 Sep 2026 05:53:55 +0000 Manifest this update: Mon 21 Sep 2026 05:48:55 +0000 Manifest next update: Tue 22 Sep 2026 09:42:55 +0000 Files and hashes: 1: 3130332e3133362e31352e302f32342d3234203d3e20313338383231.roa (hash: fB2Vl1cIcPoBjN5rs9Ik+Eab2HMgRuDFWdtvrKSJoVw=) 2: 3130332e3133362e31332e302f32342d3234203d3e20313338383231.roa (hash: O71Jl4mqVIKRIDU7d2ujmnsBUwDFC83l2q24DcsCcFA=) 3: 3130332e3133362e31322e302f32322d3234203d3e20313338383231.roa (hash: adRerI3tyaAoAsC9J+hV/5/qxos6XlWsLUCLBDHVCkI=) 4: 3130332e3133362e31342e302f32342d3234203d3e20313338383231.roa (hash: j+y6AXj1f3E3oHmAFOLhkBlzYepk37VPnp6D6mtPQkY=) 5: E9ED07059EB01F61BF6A902EB0D95F92D005672C.crl (hash: ZutOU7PK3PSVnO5KMwFY7U6x3PT/L07zPpLJ/z3yi+Y=) 6: 3130332e3133362e31322e302f32342d3234203d3e20313338383231.roa (hash: O/24bYRJHwn8lGm4x/5IsjKHiRZPSA0Jbap1Vz4bsHo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/E9ED07059EB01F61BF6A902EB0D95F92D005672C.crl rsync://rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/E9ED07059EB01F61BF6A902EB0D95F92D005672C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9ED07059EB01F61BF6A902EB0D95F92D005672C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:4c:2e:79:cc:3e:c5:a0:e5:4c:8f:8b:c9:d0:59:eb:86:42:82:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9ED07059EB01F61BF6A902EB0D95F92D005672C Validity Not Before: Sep 21 05:48:55 2026 GMT Not After : Sep 22 09:42:55 2026 GMT Subject: CN=A937778FDA3B84CD868C9AAFCB5A4BDC0B5E0883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:db:f0:ee:60:2b:a2:9f:62:46:5b:fd:44:dd: a9:4a:24:6c:6a:68:6e:8c:38:3e:a0:d6:7e:dc:d7: 3e:38:6f:3b:37:f9:00:21:76:d5:ee:fd:56:79:02: 15:2d:ff:a0:ea:43:4a:32:7b:7b:a5:3e:5e:b3:1b: 78:d4:2f:be:c3:89:17:d4:6d:b2:50:31:84:84:3c: 00:80:21:49:3e:73:b1:9d:d8:72:c4:f2:15:be:05: e9:69:dd:41:39:17:47:09:3d:6c:91:17:d0:54:2a: ea:8c:3e:d7:ce:94:19:b2:c3:dd:d6:f7:95:19:34: c7:86:0c:45:d6:f2:af:a0:7e:ac:c2:e6:56:d7:5e: 6e:e1:0e:ce:7c:fa:9f:3c:fd:8c:90:e6:35:47:90: c8:d6:2f:d0:a6:cb:64:99:58:d9:03:8f:43:1f:8a: 28:7a:be:f8:6b:89:62:c1:62:60:0b:b8:65:68:80: ca:35:97:99:98:84:65:86:16:d7:3b:4a:8c:03:42: f8:4d:ce:ca:4c:cf:a1:40:51:4d:a6:ca:ac:67:55: e1:56:cc:d5:e2:3d:c2:cd:8d:36:fc:aa:07:ba:ca: 85:c9:0e:a5:ce:3d:10:33:46:47:17:4c:aa:ba:f1: d6:2e:4d:0c:eb:f2:df:58:e5:d9:80:0b:66:a4:54: 28:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:37:77:8F:DA:3B:84:CD:86:8C:9A:AF:CB:5A:4B:DC:0B:5E:08:83 X509v3 Authority Key Identifier: keyid:E9:ED:07:05:9E:B0:1F:61:BF:6A:90:2E:B0:D9:5F:92:D0:05:67:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/E9ED07059EB01F61BF6A902EB0D95F92D005672C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9ED07059EB01F61BF6A902EB0D95F92D005672C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/E9ED07059EB01F61BF6A902EB0D95F92D005672C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:60:87:1b:5e:ee:ae:b6:e4:6e:4b:de:bc:f2:2c:5b:e6:46: 04:8b:3e:3e:eb:4f:ef:dc:c9:bf:5c:84:66:ee:80:d6:6f:2e: ce:3a:f8:87:9e:aa:87:e3:5d:b0:8f:2e:ba:1c:9b:ef:b5:45: d1:ab:4c:8b:3a:a0:80:05:93:d3:80:8a:28:58:5e:1f:91:cf: 74:2d:ce:a5:70:df:24:59:89:fa:08:52:6a:61:8d:d4:2f:5c: a2:f3:13:46:ab:d0:71:0c:c5:87:4f:d9:ae:49:e1:57:3f:36: 43:40:b1:43:75:17:b4:c3:37:fe:5f:93:2c:49:03:2b:8e:56: 23:79:06:57:3d:00:68:91:3c:b7:91:8a:20:45:00:d4:7a:e3: b7:71:22:44:37:e7:7e:b3:0b:cc:5d:43:6e:20:3f:d7:27:75: 6f:1b:cf:07:b3:ff:d4:26:19:ba:29:d1:3c:7e:64:77:ac:8f: a4:96:7b:fe:0e:40:52:ef:20:e0:a9:4a:2c:bd:81:40:0e:91: cb:44:81:2d:3f:4a:68:09:85:84:84:a2:54:1e:3a:56:54:76: 6b:95:45:a9:93:b4:cb:2a:a9:52:be:97:c6:73:6d:b4:0c:94: 14:39:1b:72:94:e2:c3:33:83:41:61:b4:56:e9:a0:12:0c:a4: 4d:cf:f7:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZUwuecw+xaDlTI+LydBZ64ZCgkwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlFRDA3MDU5RUIwMUY2MUJGNkE5MDJFQjBEOTVGOTJE MDA1NjcyQzAeFw0yNjA5MjEwNTQ4NTVaFw0yNjA5MjIwOTQyNTVaMDMxMTAvBgNV BAMTKEE5Mzc3NzhGREEzQjg0Q0Q4NjhDOUFBRkNCNUE0QkRDMEI1RTA4ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCK2/DuYCuin2JGW/1E3alKJGxq aG6MOD6g1n7c1z44bzs3+QAhdtXu/VZ5AhUt/6DqQ0oye3ulPl6zG3jUL77DiRfU bbJQMYSEPACAIUk+c7Gd2HLE8hW+Belp3UE5F0cJPWyRF9BUKuqMPtfOlBmyw93W 95UZNMeGDEXW8q+gfqzC5lbXXm7hDs58+p88/YyQ5jVHkMjWL9Cmy2SZWNkDj0Mf iih6vvhriWLBYmALuGVogMo1l5mYhGWGFtc7SowDQvhNzspMz6FAUU2myqxnVeFW zNXiPcLNjTb8qge6yoXJDqXOPRAzRkcXTKq68dYuTQzr8t9Y5dmAC2akVCjrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqTd3j9o7hM2GjJqvy1pL3AteCIMwHwYDVR0j BBgwFoAU6e0HBZ6wH2G/apAusNlfktAFZywwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDAxYjFjMWItNjU2Yy00ODlkLTllZDMtY2NjNzdjODMwMThkLzAvRTlFRDA3MDU5 RUIwMUY2MUJGNkE5MDJFQjBEOTVGOTJEMDA1NjcyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOUVEMDcwNTlFQjAxRjYxQkY2QTkwMkVCMEQ5NUY5MkQwMDU2 NzJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDAxYjFjMWItNjU2Yy00ODlkLTll ZDMtY2NjNzdjODMwMThkLzAvRTlFRDA3MDU5RUIwMUY2MUJGNkE5MDJFQjBEOTVG OTJEMDA1NjcyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACpghxte7q625G5L3rzyLFvmRgSLPj7rT+/c yb9chGbugNZvLs46+IeeqofjXbCPLrocm++1RdGrTIs6oIAFk9OAiihYXh+Rz3Qt zqVw3yRZifoIUmphjdQvXKLzE0ar0HEMxYdP2a5J4Vc/NkNAsUN1F7TDN/5fkyxJ AyuOViN5Blc9AGiRPLeRiiBFANR647dxIkQ3536zC8xdQ24gP9cndW8bzwez/9Qm Gbop0Tx+ZHesj6SWe/4OQFLvIOCpSiy9gUAOkctEgS0/SmgJhYSEolQeOlZUdmuV RamTtMsqqVK+l8ZzbbQMlBQ5G3KU4sMzg0FhtFbpoBIMpE3P99s= -----END CERTIFICATE-----Generated at Mon Sep 21 17:28:12 2026 by rpki-client