$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.mft File: E09CA942BC63A46AC14108FB56751F1D3DB2B40D.mft (raw, json) Hash identifier: QCc/OoMeB8LMBwpnll5Y86T36k0Gp/zIhf/1kKvZq9E= Subject key identifier: 35:B0:9A:B9:01:30:1E:4C:97:87:FE:31:E6:0D:4E:BA:D4:FE:D5:47 Authority key identifier: E0:9C:A9:42:BC:63:A4:6A:C1:41:08:FB:56:75:1F:1D:3D:B2:B4:0D Certificate issuer: /CN=E09CA942BC63A46AC14108FB56751F1D3DB2B40D Certificate serial: 5CE50404D67C9D88AC552430AEFC0A852BA6AC73 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.mft Manifest number: C0 Signing time: Mon 21 Sep 2026 23:56:29 +0000 Manifest this update: Mon 21 Sep 2026 23:51:29 +0000 Manifest next update: Wed 23 Sep 2026 01:09:29 +0000 Files and hashes: 1: E09CA942BC63A46AC14108FB56751F1D3DB2B40D.crl (hash: n/8CR+25Gf2qD+pRAksvPyDHtBU20lnjzaQcOLnMKRo=) 2: 3130332e31302e3235332e302f32342d3234203d3e203536323539.roa (hash: RVVP//q3vuwKuV+Q10lzaWaVgGwp0nEvsOc4ZWyOH5o=) 3: 3130332e32382e3136332e302f32342d3234203d3e203536323539.roa (hash: f3/5ZWIk2JVAliu7yKS60dOELpXPYdbw36ijNFDWyYM=) 4: 3130332e36352e39362e302f32332d3234203d3e203536323539.roa (hash: AhptuUeczIXxYrYpEUFqYLa6JweMv5oyItdy1/amU/c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.crl rsync://rpki-rsync.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 01:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:e5:04:04:d6:7c:9d:88:ac:55:24:30:ae:fc:0a:85:2b:a6:ac:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E09CA942BC63A46AC14108FB56751F1D3DB2B40D Validity Not Before: Sep 21 23:51:29 2026 GMT Not After : Sep 23 01:09:29 2026 GMT Subject: CN=35B09AB901301E4C9787FE31E60D4EBAD4FED547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:db:1a:30:61:fc:d6:e7:e1:ae:35:04:00:c3: 5b:1d:61:6b:ac:71:a5:fc:be:b6:9d:04:93:42:52: 5e:82:16:a0:12:14:59:69:cc:da:08:84:cb:40:ad: 66:0f:37:ee:18:eb:37:81:04:76:b4:77:68:50:c7: 37:53:10:98:94:37:0f:96:12:bf:02:25:0d:cb:61: 27:f8:cf:8e:44:b5:28:14:4b:7e:32:ff:77:21:1e: 15:ea:7a:e0:4b:f8:73:a8:78:00:2d:ef:1d:29:03: 2d:fb:57:1a:aa:d6:7b:b3:8d:01:3e:84:86:a7:2a: 75:cb:3a:38:39:eb:28:32:be:fc:3b:5e:98:17:67: d1:31:ad:5f:87:dc:3e:35:66:d1:a0:58:c2:b5:75: bc:f2:ef:fd:be:14:90:10:e7:48:60:4c:df:1e:da: 68:d8:2c:00:96:f1:15:37:64:7f:11:4b:22:3c:e2: 80:e0:c6:89:b4:2d:18:fd:0b:08:14:8a:5b:f2:fc: e5:04:74:e1:3d:ef:6d:dc:02:14:95:e6:29:19:99: 31:3c:8f:28:a3:f4:6a:fb:cc:96:68:6e:cb:d3:13: 83:21:7d:0a:56:1e:5e:1c:62:dc:f3:9f:7d:43:34: 10:95:68:ac:c5:82:fe:24:4b:c0:97:fa:c2:aa:e1: 59:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B0:9A:B9:01:30:1E:4C:97:87:FE:31:E6:0D:4E:BA:D4:FE:D5:47 X509v3 Authority Key Identifier: keyid:E0:9C:A9:42:BC:63:A4:6A:C1:41:08:FB:56:75:1F:1D:3D:B2:B4:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:24:5f:0a:97:d7:e1:14:cf:25:d1:59:90:fd:f1:8b:53:0a: ea:c2:4d:69:31:35:50:26:ce:74:70:9a:47:80:49:0c:43:37: a7:4b:a8:bb:78:61:e3:c1:e7:e5:47:c9:9e:8a:ce:06:0d:c4: 77:e9:83:2f:3c:a1:01:a7:c2:f4:f3:71:e1:b3:00:68:c5:8e: 9a:bf:da:7d:de:77:64:a7:b5:41:95:5f:6c:9c:a8:45:0f:af: 05:cb:d9:6d:74:f0:fd:91:85:26:a1:73:03:71:9b:33:60:56: f7:7e:91:6d:ed:28:44:ee:3f:b2:1c:49:f8:7d:65:1e:e2:41: ed:d6:c7:f0:18:7d:6e:88:75:0c:28:5b:35:48:b1:35:19:4b: fc:2a:37:c2:d0:13:8a:22:16:0c:37:2a:16:ed:24:47:86:a0: 8c:53:64:44:46:68:83:f4:92:f8:a6:78:e6:38:85:35:66:d5: 41:a3:76:10:3e:31:03:24:60:71:ac:a8:72:10:17:aa:60:6f: 9a:f2:b1:97:61:70:dd:62:05:c0:6f:46:33:e8:06:66:e4:eb: 25:e3:0c:c2:a8:59:db:2b:23:08:fc:3b:67:e1:1c:26:8d:f5: ff:fc:70:ab:12:87:94:ca:bf:dc:24:05:4d:4c:db:b6:bb:12: 34:e5:bc:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXOUEBNZ8nYisVSQwrvwKhSumrHMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTA5Q0E5NDJCQzYzQTQ2QUMxNDEwOEZCNTY3NTFGMUQz REIyQjQwRDAeFw0yNjA5MjEyMzUxMjlaFw0yNjA5MjMwMTA5MjlaMDMxMTAvBgNV BAMTKDM1QjA5QUI5MDEzMDFFNEM5Nzg3RkUzMUU2MEQ0RUJBRDRGRUQ1NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa2xowYfzW5+GuNQQAw1sdYWus caX8vradBJNCUl6CFqASFFlpzNoIhMtArWYPN+4Y6zeBBHa0d2hQxzdTEJiUNw+W Er8CJQ3LYSf4z45EtSgUS34y/3chHhXqeuBL+HOoeAAt7x0pAy37Vxqq1nuzjQE+ hIanKnXLOjg56ygyvvw7XpgXZ9ExrV+H3D41ZtGgWMK1dbzy7/2+FJAQ50hgTN8e 2mjYLACW8RU3ZH8RSyI84oDgxom0LRj9CwgUilvy/OUEdOE9723cAhSV5ikZmTE8 jyij9Gr7zJZobsvTE4MhfQpWHl4cYtzzn31DNBCVaKzFgv4kS8CX+sKq4VmNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNbCauQEwHkyXh/4x5g1OutT+1UcwHwYDVR0j BBgwFoAU4JypQrxjpGrBQQj7VnUfHT2ytA0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGQ5NzAwMzItMDhlYS00ODkwLWJkYmEtNjMwOWE0OTc5MTdkLzAvRTA5Q0E5NDJC QzYzQTQ2QUMxNDEwOEZCNTY3NTFGMUQzREIyQjQwRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMDlDQTk0MkJDNjNBNDZBQzE0MTA4RkI1Njc1MUYxRDNEQjJC NDBELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGQ5NzAwMzItMDhlYS00ODkwLWJk YmEtNjMwOWE0OTc5MTdkLzAvRTA5Q0E5NDJCQzYzQTQ2QUMxNDEwOEZCNTY3NTFG MUQzREIyQjQwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABEkXwqX1+EUzyXRWZD98YtTCurCTWkxNVAm znRwmkeASQxDN6dLqLt4YePB5+VHyZ6KzgYNxHfpgy88oQGnwvTzceGzAGjFjpq/ 2n3ed2SntUGVX2ycqEUPrwXL2W108P2RhSahcwNxmzNgVvd+kW3tKETuP7IcSfh9 ZR7iQe3Wx/AYfW6IdQwoWzVIsTUZS/wqN8LQE4oiFgw3KhbtJEeGoIxTZERGaIP0 kvimeOY4hTVm1UGjdhA+MQMkYHGsqHIQF6pgb5rysZdhcN1iBcBvRjPoBmbk6yXj DMKoWdsrIwj8O2fhHCaN9f/8cKsSh5TKv9wkBU1M27a7EjTlvPg= -----END CERTIFICATE-----Generated at Tue Sep 22 17:03:50 2026 by rpki-client