$ rpki-client -vvvf rpki-rsync.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A.mft File: E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A.mft (raw, json) Hash identifier: Br0h8a0RBX+c6V1TKL3Rxy3BFoaDgPvsTV/s6sHZ7zE= Subject key identifier: 12:67:FF:03:78:BB:8A:01:81:9A:74:B6:81:81:0A:D1:BF:9A:1E:5C Authority key identifier: E6:EF:A0:C9:87:EB:7B:DE:DC:D6:52:0F:CF:EA:A6:C6:F7:BF:D4:7A Certificate issuer: /CN=E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A Certificate serial: 6C6A01CF8F2F11CBE0DDABF376C25E7520C9BFEC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A.mft Manifest number: BF Signing time: Mon 21 Sep 2026 11:05:11 +0000 Manifest this update: Mon 21 Sep 2026 11:00:11 +0000 Manifest next update: Tue 22 Sep 2026 13:14:11 +0000 Files and hashes: 1: 3130332e39312e3133372e302f32342d3234203d3e20313530323636.roa (hash: fEQ2RGA7SMjU1u5ivR067WU+IPRjxPNEFjBrW6SRr/A=) 2: E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A.crl (hash: /8zzDpFfLDtv1Crfy+e3fG9dGlv1CDBm2S4rgyGZSWA=) 3: 323030313a6466323a376234303a3a2f34382d3438203d3e20313530323636.roa (hash: VDHJo/qx9d4J355p/1MBoyGSP1OFutt76fTDKsTeD4I=) 4: 3130332e3231382e3138332e302f32342d3234203d3e20313530323636.roa (hash: xBjUpSUSZ8eUWIhz+cYXnDPEanv04sn2bLKLMW/gQsg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A.crl rsync://rpki-rsync.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:6a:01:cf:8f:2f:11:cb:e0:dd:ab:f3:76:c2:5e:75:20:c9:bf:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A Validity Not Before: Sep 21 11:00:11 2026 GMT Not After : Sep 22 13:14:11 2026 GMT Subject: CN=1267FF0378BB8A01819A74B681810AD1BF9A1E5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a6:fc:8f:ca:b7:68:10:76:52:77:0a:70:2f: a4:a6:fd:30:5c:77:dd:50:38:97:98:21:b0:da:af: 46:ad:98:ef:74:30:54:2d:d5:9b:78:d2:0d:b5:19: fd:5e:21:43:ee:7e:0d:3e:38:86:64:ec:85:42:fb: 1f:5b:22:67:e5:76:1a:1a:df:15:82:70:fd:9b:02: 8c:f8:5e:47:b3:5e:65:1e:cb:3f:c1:37:85:f4:33: 86:90:90:58:fa:67:9c:1d:53:b3:1d:73:a6:ad:86: 56:2c:5b:d4:d7:44:0a:34:fe:a9:ba:bf:a9:fb:4e: b3:15:b4:6d:83:dd:a2:96:de:6c:12:79:6c:3f:17: 78:e1:2d:12:63:8a:06:cf:0b:ec:f0:02:65:34:93: a9:a8:74:c8:5c:f9:55:36:46:73:d1:00:ce:a7:a2: 2e:bc:a5:df:b7:51:0b:f5:c6:0a:d3:0b:16:15:8d: 28:1b:4c:78:aa:f2:c1:60:07:e6:ba:2e:69:72:3b: 25:03:8e:28:6f:bf:f0:1b:fa:50:54:8b:73:9e:10: fd:e3:30:01:95:e7:72:98:db:bb:1d:c6:22:fd:5b: a3:af:5e:81:41:bb:f7:fa:1b:2c:22:ae:ab:a8:9a: ee:a7:dc:1f:d5:95:a7:e0:68:49:46:90:47:e9:6b: de:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:67:FF:03:78:BB:8A:01:81:9A:74:B6:81:81:0A:D1:BF:9A:1E:5C X509v3 Authority Key Identifier: keyid:E6:EF:A0:C9:87:EB:7B:DE:DC:D6:52:0F:CF:EA:A6:C6:F7:BF:D4:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:70:a1:f9:35:a3:15:5e:59:08:57:bd:24:19:6f:af:80:40: 0d:2e:97:d2:72:df:fc:eb:8c:a1:79:4b:86:5d:b9:ea:92:bc: 57:9d:d4:4d:89:0a:e6:6e:60:a6:43:a3:99:26:7d:33:14:0e: d1:65:04:d9:5f:4f:a5:e6:94:c8:e0:5a:f1:bf:c6:89:1c:c2: e8:ba:b9:c8:63:40:55:75:89:76:3e:0d:90:63:fe:2f:db:50: cf:8c:d7:cd:d4:44:2a:ff:34:f4:98:32:2d:29:28:96:59:b5: e3:e0:31:31:79:1b:86:c6:f0:48:f0:2e:30:88:ea:5d:c7:ba: 53:8a:7c:be:f6:d5:48:23:d8:36:10:c3:29:cc:7e:77:0e:f7: ac:84:92:9e:c6:13:70:25:27:07:2e:36:dc:73:47:6b:e1:ee: 07:04:95:db:01:af:cd:9b:b8:3f:f2:64:bb:3d:d3:a4:b5:dc: 72:45:04:93:e3:42:09:aa:be:44:d7:41:9e:91:4b:0e:39:50: f9:d4:f6:2f:20:8d:4d:71:1f:64:ec:53:70:e0:e2:c3:28:9d: 74:6c:5e:b4:2d:b1:fc:8b:22:e4:f2:40:9a:53:18:5c:3f:66: 5e:4e:7e:5b:22:f5:5c:7a:56:8b:65:00:21:d7:4d:ac:98:ea: d7:55:0c:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbGoBz48vEcvg3avzdsJedSDJv+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTZFRkEwQzk4N0VCN0JERURDRDY1MjBGQ0ZFQUE2QzZG N0JGRDQ3QTAeFw0yNjA5MjExMTAwMTFaFw0yNjA5MjIxMzE0MTFaMDMxMTAvBgNV BAMTKDEyNjdGRjAzNzhCQjhBMDE4MTlBNzRCNjgxODEwQUQxQkY5QTFFNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+pvyPyrdoEHZSdwpwL6Sm/TBc d91QOJeYIbDar0atmO90MFQt1Zt40g21Gf1eIUPufg0+OIZk7IVC+x9bImfldhoa 3xWCcP2bAoz4XkezXmUeyz/BN4X0M4aQkFj6Z5wdU7Mdc6athlYsW9TXRAo0/qm6 v6n7TrMVtG2D3aKW3mwSeWw/F3jhLRJjigbPC+zwAmU0k6modMhc+VU2RnPRAM6n oi68pd+3UQv1xgrTCxYVjSgbTHiq8sFgB+a6LmlyOyUDjihvv/Ab+lBUi3OeEP3j MAGV53KY27sdxiL9W6OvXoFBu/f6Gywirquomu6n3B/VlafgaElGkEfpa95XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEmf/A3i7igGBmnS2gYEK0b+aHlwwHwYDVR0j BBgwFoAU5u+gyYfre97c1lIPz+qmxve/1HowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTUyYmVhZTEtMzQ4MC00ZTkyLWEzYTktNWE1NGZiYmFjZDJkLzAvRTZFRkEwQzk4 N0VCN0JERURDRDY1MjBGQ0ZFQUE2QzZGN0JGRDQ3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNkVGQTBDOTg3RUI3QkRFRENENjUyMEZDRkVBQTZDNkY3QkZE NDdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTUyYmVhZTEtMzQ4MC00ZTkyLWEz YTktNWE1NGZiYmFjZDJkLzAvRTZFRkEwQzk4N0VCN0JERURDRDY1MjBGQ0ZFQUE2 QzZGN0JGRDQ3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIxwofk1oxVeWQhXvSQZb6+AQA0ul9Jy3/zr jKF5S4ZdueqSvFed1E2JCuZuYKZDo5kmfTMUDtFlBNlfT6XmlMjgWvG/xokcwui6 uchjQFV1iXY+DZBj/i/bUM+M183URCr/NPSYMi0pKJZZtePgMTF5G4bG8EjwLjCI 6l3HulOKfL721Ugj2DYQwynMfncO96yEkp7GE3AlJwcuNtxzR2vh7gcEldsBr82b uD/yZLs906S13HJFBJPjQgmqvkTXQZ6RSw45UPnU9i8gjU1xH2TsU3Dg4sMonXRs XrQtsfyLIuTyQJpTGFw/Zl5Oflsi9Vx6VotlACHXTayY6tdVDKg= -----END CERTIFICATE-----Generated at Mon Sep 21 16:16:43 2026 by rpki-client