$ rpki-client -vvvf rpki-rsync.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.mft File: E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.mft (raw, json) Hash identifier: vTLto9+ST49DtRaSbxm1TvsU22t+19RO+tZ4NrtL0H8= Subject key identifier: 8F:BE:E0:4C:1D:13:D4:92:05:37:A9:73:BC:79:06:19:EE:0A:EC:61 Authority key identifier: E5:DA:21:DB:76:CE:91:D6:EF:72:48:2F:FD:FE:02:16:9A:6C:C8:08 Certificate issuer: /CN=E5DA21DB76CE91D6EF72482FFDFE02169A6CC808 Certificate serial: 1366AF009B5FBC0C62CD7905F3EF328846C6EFB8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.mft Manifest number: BF Signing time: Sun 20 Sep 2026 23:20:45 +0000 Manifest this update: Sun 20 Sep 2026 23:15:45 +0000 Manifest next update: Tue 22 Sep 2026 01:26:45 +0000 Files and hashes: 1: 3130332e3136362e3235342e302f32342d3234203d3e20313431393636.roa (hash: oYW4sdySDReabIUJh8DtwbQ7r9wux6oX5lpHgcktZMY=) 2: 3130332e3136362e3235352e302f32342d3234203d3e20313431393636.roa (hash: lQVIlc5Ok7o6clRzLcj2IsYBHTzNzicGxWqDtjOXTeQ=) 3: E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.crl (hash: DFeJS3zPSOTJ8f5GWC0bQMnN1H2i1yrY8/0/MfZS14Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.crl rsync://rpki-rsync.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:66:af:00:9b:5f:bc:0c:62:cd:79:05:f3:ef:32:88:46:c6:ef:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5DA21DB76CE91D6EF72482FFDFE02169A6CC808 Validity Not Before: Sep 20 23:15:45 2026 GMT Not After : Sep 22 01:26:45 2026 GMT Subject: CN=8FBEE04C1D13D4920537A973BC790619EE0AEC61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:42:1a:44:fe:4a:7d:13:79:89:78:3d:aa:e7: a6:89:08:f8:a6:cf:2d:82:e4:af:ca:56:cd:9f:1e: 84:0e:6c:19:d1:1c:fd:e0:d1:f1:a8:cd:3d:0d:48: ac:dd:36:da:6d:9a:f6:cc:89:a4:0d:47:77:4f:75: 36:fe:93:44:9e:ac:7f:33:f0:fa:9b:5a:c9:95:5e: b6:18:20:d1:85:2a:91:e4:ad:4c:21:9f:7b:d5:94: 87:04:5e:0b:35:b8:f5:67:61:3b:18:8e:ea:51:ec: 62:65:13:a8:d1:37:73:dc:05:f2:6e:bf:28:2a:4a: 18:87:21:63:58:ee:cd:e2:1f:57:c3:b4:1a:b7:bb: ff:b6:fd:ba:90:4c:c8:a0:81:6c:3a:53:2f:b5:80: b0:af:fd:10:0e:38:78:76:83:d7:60:6a:d2:49:90: c7:14:c3:b5:36:17:9e:ba:c4:e3:ab:ec:59:f9:29: 3a:32:9e:f2:a6:4c:c4:a5:59:ca:e2:92:1f:0d:71: e2:bc:b5:d5:f4:e7:a3:06:e5:22:bf:46:be:59:d2: b2:eb:79:6c:2b:2f:72:6e:79:07:21:7c:38:a9:22: 4d:bf:6b:19:03:4a:ee:30:df:70:82:5d:c8:75:b2: fd:f9:0a:13:a8:cd:83:dd:6d:9a:fe:7e:c3:24:06: f4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:BE:E0:4C:1D:13:D4:92:05:37:A9:73:BC:79:06:19:EE:0A:EC:61 X509v3 Authority Key Identifier: keyid:E5:DA:21:DB:76:CE:91:D6:EF:72:48:2F:FD:FE:02:16:9A:6C:C8:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:e9:35:fe:8f:50:fc:a0:2b:4f:b0:8c:da:c4:2c:ff:f1:55: 46:ba:2c:7b:7d:46:0c:c8:21:71:5c:e9:af:37:aa:44:3d:cb: f1:28:91:49:05:f2:d6:f7:f1:f8:19:ea:ca:54:b7:38:44:74: 74:aa:e6:69:f3:07:2d:d7:d7:a4:35:00:e1:cc:09:d5:ef:52: 40:c0:0e:c7:d5:11:1e:81:64:81:06:5e:a4:67:8f:01:6b:77: 8b:2c:68:f9:46:13:a8:cb:23:cc:97:22:42:6a:67:2c:94:9e: 97:ec:6f:e9:5a:61:ec:29:d9:6d:d2:32:54:9a:3d:bb:a1:96: 74:5e:58:26:cb:1b:a9:0b:36:2b:13:92:78:5c:43:87:06:70: ca:3e:42:15:b0:7c:20:4b:aa:10:9f:c6:7d:01:be:e2:2b:9d: bd:7f:16:39:f7:71:54:b0:ba:e2:9c:df:3f:e3:14:31:e4:a2: 03:c1:94:df:6c:15:63:75:5b:a5:8b:28:7d:5e:fa:93:1e:37: 98:4f:16:21:c6:a3:81:76:74:2e:8d:6e:37:c6:cc:86:9b:c9: ea:a5:81:32:6f:98:17:38:0c:c9:85:98:29:d1:d3:c5:17:e4: a9:77:26:bc:80:68:06:5c:aa:44:5b:64:81:7c:ae:be:37:8a: 8a:bf:5b:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE2avAJtfvAxizXkF8+8yiEbG77gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTVEQTIxREI3NkNFOTFENkVGNzI0ODJGRkRGRTAyMTY5 QTZDQzgwODAeFw0yNjA5MjAyMzE1NDVaFw0yNjA5MjIwMTI2NDVaMDMxMTAvBgNV BAMTKDhGQkVFMDRDMUQxM0Q0OTIwNTM3QTk3M0JDNzkwNjE5RUUwQUVDNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkQhpE/kp9E3mJeD2q56aJCPim zy2C5K/KVs2fHoQObBnRHP3g0fGozT0NSKzdNtptmvbMiaQNR3dPdTb+k0SerH8z 8PqbWsmVXrYYINGFKpHkrUwhn3vVlIcEXgs1uPVnYTsYjupR7GJlE6jRN3PcBfJu vygqShiHIWNY7s3iH1fDtBq3u/+2/bqQTMiggWw6Uy+1gLCv/RAOOHh2g9dgatJJ kMcUw7U2F566xOOr7Fn5KToynvKmTMSlWcrikh8NceK8tdX056MG5SK/Rr5Z0rLr eWwrL3JueQchfDipIk2/axkDSu4w33CCXch1sv35ChOozYPdbZr+fsMkBvRdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj77gTB0T1JIFN6lzvHkGGe4K7GEwHwYDVR0j BBgwFoAU5doh23bOkdbvckgv/f4CFppsyAgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDI5Zjg5MDItMWEwNi00NWE4LWE5OTgtNzJlNDZhYWFlOGZjLzAvRTVEQTIxREI3 NkNFOTFENkVGNzI0ODJGRkRGRTAyMTY5QTZDQzgwOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNURBMjFEQjc2Q0U5MUQ2RUY3MjQ4MkZGREZFMDIxNjlBNkND ODA4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDI5Zjg5MDItMWEwNi00NWE4LWE5 OTgtNzJlNDZhYWFlOGZjLzAvRTVEQTIxREI3NkNFOTFENkVGNzI0ODJGRkRGRTAy MTY5QTZDQzgwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIjpNf6PUPygK0+wjNrELP/xVUa6LHt9RgzI IXFc6a83qkQ9y/EokUkF8tb38fgZ6spUtzhEdHSq5mnzBy3X16Q1AOHMCdXvUkDA DsfVER6BZIEGXqRnjwFrd4ssaPlGE6jLI8yXIkJqZyyUnpfsb+laYewp2W3SMlSa PbuhlnReWCbLG6kLNisTknhcQ4cGcMo+QhWwfCBLqhCfxn0BvuIrnb1/Fjn3cVSw uuKc3z/jFDHkogPBlN9sFWN1W6WLKH1e+pMeN5hPFiHGo4F2dC6NbjfGzIabyeql gTJvmBc4DMmFmCnR08UX5Kl3JryAaAZcqkRbZIF8rr43ioq/Ww8= -----END CERTIFICATE-----Generated at Mon Sep 21 05:42:59 2026 by rpki-client