$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/E8A934268F45DA8A6A43329681F0D4FEAECFF5BC.mft File: E8A934268F45DA8A6A43329681F0D4FEAECFF5BC.mft (raw, json) Hash identifier: pt1V0rsbexEAY6nx3Wlhr2qppjajAel6BIMVBbWdW44= Subject key identifier: 8B:02:80:E8:55:F4:84:6B:B7:F8:E1:23:5C:4C:2A:07:70:AC:AC:94 Authority key identifier: E8:A9:34:26:8F:45:DA:8A:6A:43:32:96:81:F0:D4:FE:AE:CF:F5:BC Certificate issuer: /CN=E8A934268F45DA8A6A43329681F0D4FEAECFF5BC Certificate serial: 4D1CF1ACCEC3160237C75B17BBAE6DDACEBA94FC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8A934268F45DA8A6A43329681F0D4FEAECFF5BC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/E8A934268F45DA8A6A43329681F0D4FEAECFF5BC.mft Manifest number: C1 Signing time: Tue 22 Sep 2026 21:53:27 +0000 Manifest this update: Tue 22 Sep 2026 21:48:27 +0000 Manifest next update: Thu 24 Sep 2026 00:54:27 +0000 Files and hashes: 1: E8A934268F45DA8A6A43329681F0D4FEAECFF5BC.crl (hash: e9BlAWvd0Hs3kvtRSt4T47cxPWTSBJ2d7rj/xOCrO/E=) 2: 3130332e37382e35312e302f32342d3234203d3e20313530323536.roa (hash: PIufH5O182sP9pVKKuDwELYzvTT1F4q43CMzZkbvVHc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/E8A934268F45DA8A6A43329681F0D4FEAECFF5BC.crl rsync://rpki-rsync.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/E8A934268F45DA8A6A43329681F0D4FEAECFF5BC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8A934268F45DA8A6A43329681F0D4FEAECFF5BC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 00:54:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:1c:f1:ac:ce:c3:16:02:37:c7:5b:17:bb:ae:6d:da:ce:ba:94:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E8A934268F45DA8A6A43329681F0D4FEAECFF5BC Validity Not Before: Sep 22 21:48:27 2026 GMT Not After : Sep 24 00:54:27 2026 GMT Subject: CN=8B0280E855F4846BB7F8E1235C4C2A0770ACAC94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:1c:63:4f:27:60:83:75:0d:08:77:62:c7:da: 21:57:2d:2e:57:e2:67:94:c3:6a:d9:e1:66:99:32: 82:30:95:94:02:d0:cc:ef:b4:c1:f3:16:91:c1:0b: 1e:56:df:96:39:38:8b:ea:a8:8b:32:e5:58:68:5a: 46:77:17:cd:ff:d7:a1:11:6e:a9:23:03:c5:97:70: 19:bc:1d:a2:0d:9b:f1:43:c0:a8:d3:28:7b:54:b5: 05:b5:95:3e:65:87:83:cb:8d:db:31:4e:35:e9:f5: 9a:31:e3:3e:45:2e:6a:b5:65:4b:c6:e9:24:ba:12: b5:db:35:68:54:e9:27:8f:3f:d2:22:d7:57:23:30: 6e:76:39:4a:c3:85:db:79:2e:e6:5e:bf:36:29:b5: b4:45:c6:a8:ef:b4:f8:6d:86:d4:dd:5c:45:ca:31: ab:04:53:ec:c7:8d:6d:08:ca:ea:2f:33:d9:78:99: 71:be:38:1b:6c:17:9b:74:76:71:14:22:11:dd:6a: 02:1e:07:f8:a0:f1:33:3e:51:9a:3b:7f:2b:64:28: 23:8d:a8:37:82:4b:e6:c0:87:73:b0:ed:ae:9d:96: d8:69:34:5f:f8:29:84:85:c4:ea:dd:91:ae:ae:b5: 90:1f:40:74:a8:86:98:d0:9c:37:31:72:dc:82:d7: 04:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:02:80:E8:55:F4:84:6B:B7:F8:E1:23:5C:4C:2A:07:70:AC:AC:94 X509v3 Authority Key Identifier: keyid:E8:A9:34:26:8F:45:DA:8A:6A:43:32:96:81:F0:D4:FE:AE:CF:F5:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/E8A934268F45DA8A6A43329681F0D4FEAECFF5BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8A934268F45DA8A6A43329681F0D4FEAECFF5BC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/E8A934268F45DA8A6A43329681F0D4FEAECFF5BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:45:8e:db:57:f8:18:33:e6:6a:dc:7f:8f:aa:cd:18:19:38: 30:62:d2:18:7f:e5:75:15:d7:a9:12:e0:31:61:50:e4:8e:18: 3b:ed:64:9c:91:8e:e9:aa:96:73:e5:c0:5f:ec:6f:ea:df:71: a2:a5:63:0f:f7:ca:05:47:0a:0f:a7:06:0c:50:c4:a2:8e:b5: 00:a1:42:71:e7:58:a7:4e:9e:72:db:e7:9e:8e:7a:da:63:c3: 7c:f7:17:25:0b:05:55:9d:80:92:cf:f9:42:86:92:4d:0e:cd: 5f:b8:57:76:9e:60:d3:da:2a:8c:f2:a6:69:10:71:a7:30:2f: 75:d5:22:f3:47:d0:c0:8a:71:c9:9e:cd:12:2c:a3:23:91:9c: 0b:40:a0:5e:c2:1a:f7:83:56:28:e9:89:47:bf:46:b3:1b:57: 8e:3d:0e:32:d8:8a:68:6e:53:98:93:1c:6b:2f:85:19:8c:5c: 86:a7:97:2e:8c:de:9d:d6:2f:2d:94:34:b2:e6:ff:cc:e1:4f: a6:1a:2c:50:10:90:9a:49:fc:32:8f:65:6d:b4:07:7f:2c:b3: 09:46:0e:d8:ef:97:b6:bd:82:12:0e:98:71:7b:eb:f1:6d:80: 21:6a:cc:5e:fb:6b:6c:81:8e:a4:e1:c2:45:f5:b3:65:bd:0d: 13:c5:d0:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTRzxrM7DFgI3x1sXu65t2s66lPwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRThBOTM0MjY4RjQ1REE4QTZBNDMzMjk2ODFGMEQ0RkVB RUNGRjVCQzAeFw0yNjA5MjIyMTQ4MjdaFw0yNjA5MjQwMDU0MjdaMDMxMTAvBgNV BAMTKDhCMDI4MEU4NTVGNDg0NkJCN0Y4RTEyMzVDNEMyQTA3NzBBQ0FDOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0HGNPJ2CDdQ0Id2LH2iFXLS5X 4meUw2rZ4WaZMoIwlZQC0MzvtMHzFpHBCx5W35Y5OIvqqIsy5VhoWkZ3F83/16ER bqkjA8WXcBm8HaINm/FDwKjTKHtUtQW1lT5lh4PLjdsxTjXp9Zox4z5FLmq1ZUvG 6SS6ErXbNWhU6SePP9Ii11cjMG52OUrDhdt5LuZevzYptbRFxqjvtPhthtTdXEXK MasEU+zHjW0IyuovM9l4mXG+OBtsF5t0dnEUIhHdagIeB/ig8TM+UZo7fytkKCON qDeCS+bAh3Ow7a6dlthpNF/4KYSFxOrdka6utZAfQHSohpjQnDcxctyC1wT5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiwKA6FX0hGu3+OEjXEwqB3CsrJQwHwYDVR0j BBgwFoAU6Kk0Jo9F2opqQzKWgfDU/q7P9bwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWI1MjFiZDEtMWRhMi00YjgwLTg0MTYtZjA1ZGUyOTIyMTZlLzAvRThBOTM0MjY4 RjQ1REE4QTZBNDMzMjk2ODFGMEQ0RkVBRUNGRjVCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOEE5MzQyNjhGNDVEQThBNkE0MzMyOTY4MUYwRDRGRUFFQ0ZG NUJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWI1MjFiZDEtMWRhMi00YjgwLTg0 MTYtZjA1ZGUyOTIyMTZlLzAvRThBOTM0MjY4RjQ1REE4QTZBNDMzMjk2ODFGMEQ0 RkVBRUNGRjVCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE5FjttX+Bgz5mrcf4+qzRgZODBi0hh/5XUV 16kS4DFhUOSOGDvtZJyRjumqlnPlwF/sb+rfcaKlYw/3ygVHCg+nBgxQxKKOtQCh QnHnWKdOnnLb556Oetpjw3z3FyULBVWdgJLP+UKGkk0OzV+4V3aeYNPaKozypmkQ cacwL3XVIvNH0MCKccmezRIsoyORnAtAoF7CGveDVijpiUe/RrMbV449DjLYimhu U5iTHGsvhRmMXIanly6M3p3WLy2UNLLm/8zhT6YaLFAQkJpJ/DKPZW20B38sswlG Dtjvl7a9ghIOmHF76/FtgCFqzF77a2yBjqThwkX1s2W9DRPF0Pw= -----END CERTIFICATE-----Generated at Wed Sep 23 07:49:05 2026 by rpki-client