$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.mft File: E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.mft (raw, json) Hash identifier: ixkw8I+boXpU69aVvx+I4O9yR+uE/O2qDFJJp8HH4l8= Subject key identifier: FB:9A:49:53:87:DC:4B:E8:70:F6:04:2E:DD:0B:23:E4:84:59:18:60 Authority key identifier: E9:8D:6B:64:1E:94:3F:7E:38:31:06:34:C5:FE:E8:AE:7C:8A:A6:EE Certificate issuer: /CN=E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE Certificate serial: 2BE9E558F4905E46B410258E889D697FF01972DC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.mft Manifest number: DA Signing time: Mon 12 Oct 2026 21:03:03 +0000 Manifest this update: Mon 12 Oct 2026 20:58:03 +0000 Manifest next update: Tue 13 Oct 2026 23:40:03 +0000 Files and hashes: 1: E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.crl (hash: 2ifweVbWRocBgY+QEaebBKxyiBBPTVdy3kE7TBEwK3Y=) 2: 3130332e35352e3231362e302f32342d3234203d3e20313333383234.roa (hash: SdJfcBicTcG5/kcedYnrcuYyXbwXNypphwy52Yrbsfs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.crl rsync://rpki-rsync.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 08:55:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:e9:e5:58:f4:90:5e:46:b4:10:25:8e:88:9d:69:7f:f0:19:72:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE Validity Not Before: Oct 12 20:58:03 2026 GMT Not After : Oct 13 23:40:03 2026 GMT Subject: CN=FB9A495387DC4BE870F6042EDD0B23E484591860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b4:d6:70:e1:af:dc:d1:af:2f:b5:8b:f2:f5: 5a:5a:d3:90:9e:5f:a4:de:42:14:fc:6b:26:3f:bb: ba:c9:59:b9:3f:92:7a:63:71:e3:ca:e1:93:4f:bd: d8:01:42:b4:77:01:5c:12:2d:38:00:b9:c7:33:7a: 73:d0:bc:a3:af:77:d1:71:3d:9f:61:e2:e6:fb:78: 06:42:cd:73:c6:69:7b:f6:dd:62:c0:de:71:3e:15: 8d:5f:84:4b:a0:f1:77:e9:12:63:57:6b:02:66:c5: ae:33:eb:5d:dd:67:cd:aa:98:1a:27:9d:1a:39:11: b1:42:d8:6d:1c:15:e6:c1:a1:29:af:5e:48:e6:7b: 32:44:e4:2b:55:18:b2:95:9e:d9:9a:9e:55:e3:ad: 40:f8:b4:03:68:24:51:ea:12:f0:19:39:80:19:8a: 94:f7:b2:f2:c3:82:8c:c3:5c:f0:a4:02:ff:0a:9a: 5c:25:11:8d:60:4a:f7:7a:d5:c1:4e:7d:23:dc:c1: 9d:f4:d2:f9:d6:4c:88:28:c4:1e:0d:4a:c1:18:d4: e8:2b:95:e7:9e:f2:86:76:86:b9:12:37:c9:bd:0c: de:75:de:f3:92:bc:54:04:6d:30:2a:e9:e7:a4:8b: 05:01:4c:91:c8:d7:e0:82:ff:87:dc:89:34:14:ff: 22:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:9A:49:53:87:DC:4B:E8:70:F6:04:2E:DD:0B:23:E4:84:59:18:60 X509v3 Authority Key Identifier: keyid:E9:8D:6B:64:1E:94:3F:7E:38:31:06:34:C5:FE:E8:AE:7C:8A:A6:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:f3:0e:90:9d:74:9c:b5:18:f2:30:c7:25:20:88:0a:2c:ce: 68:e8:c2:60:c7:4c:77:8e:83:e7:22:c6:55:04:16:0e:bb:3b: 2b:fb:d2:7d:a3:2a:03:4c:68:46:8e:e3:0e:30:50:20:e8:0f: fc:3b:47:bf:f6:ca:b7:54:f5:12:79:d9:af:23:c7:2d:b8:05: 10:7e:76:d0:c4:68:23:18:f5:1b:56:e8:c0:1a:5d:02:8a:d2: 3f:5a:d3:97:d6:41:bf:b7:c5:3b:e8:1f:a8:0a:b5:21:ba:99: 42:f6:f6:4b:1d:70:cc:b2:ae:77:3e:02:0b:9e:01:8d:e8:6f: 04:bf:42:35:df:9f:2d:6f:92:12:ab:b8:8f:db:b2:6b:5e:fa: f4:69:cd:ef:a0:1f:b3:e8:8e:a3:b3:6f:bc:31:41:82:bf:9c: 8c:0b:94:a9:ce:be:db:fc:ed:76:b8:70:25:e2:9a:42:b4:3a: 87:87:43:fb:45:86:6b:7b:f7:76:48:d8:3e:82:a8:db:9f:5f: 75:97:a3:c7:85:fc:5c:f6:77:70:33:c2:fd:98:2f:16:02:7b: af:12:a5:90:e6:ac:88:f1:06:83:14:96:cf:5b:5f:f3:b2:0f: bb:b7:9a:ed:05:51:e2:a8:e5:48:15:c6:ff:01:bf:f5:3b:a7: e9:38:46:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK+nlWPSQXka0ECWOiJ1pf/AZctwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk4RDZCNjQxRTk0M0Y3RTM4MzEwNjM0QzVGRUU4QUU3 QzhBQTZFRTAeFw0yNjEwMTIyMDU4MDNaFw0yNjEwMTMyMzQwMDNaMDMxMTAvBgNV BAMTKEZCOUE0OTUzODdEQzRCRTg3MEY2MDQyRUREMEIyM0U0ODQ1OTE4NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBtNZw4a/c0a8vtYvy9Vpa05Ce X6TeQhT8ayY/u7rJWbk/knpjcePK4ZNPvdgBQrR3AVwSLTgAucczenPQvKOvd9Fx PZ9h4ub7eAZCzXPGaXv23WLA3nE+FY1fhEug8XfpEmNXawJmxa4z613dZ82qmBon nRo5EbFC2G0cFebBoSmvXkjmezJE5CtVGLKVntmanlXjrUD4tANoJFHqEvAZOYAZ ipT3svLDgozDXPCkAv8KmlwlEY1gSvd61cFOfSPcwZ300vnWTIgoxB4NSsEY1Ogr leee8oZ2hrkSN8m9DN513vOSvFQEbTAq6eekiwUBTJHI1+CC/4fciTQU/yLrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+5pJU4fcS+hw9gQu3Qsj5IRZGGAwHwYDVR0j BBgwFoAU6Y1rZB6UP344MQY0xf7ornyKpu4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWU2MWY4NmUtMDdmMC00YzYwLWFkYzAtZmM2ODgxNmFjODY2LzAvRTk4RDZCNjQx RTk0M0Y3RTM4MzEwNjM0QzVGRUU4QUU3QzhBQTZFRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOThENkI2NDFFOTQzRjdFMzgzMTA2MzRDNUZFRThBRTdDOEFB NkVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWU2MWY4NmUtMDdmMC00YzYwLWFk YzAtZmM2ODgxNmFjODY2LzAvRTk4RDZCNjQxRTk0M0Y3RTM4MzEwNjM0QzVGRUU4 QUU3QzhBQTZFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHLzDpCddJy1GPIwxyUgiAoszmjowmDHTHeO g+cixlUEFg67Oyv70n2jKgNMaEaO4w4wUCDoD/w7R7/2yrdU9RJ52a8jxy24BRB+ dtDEaCMY9RtW6MAaXQKK0j9a05fWQb+3xTvoH6gKtSG6mUL29ksdcMyyrnc+Ague AY3obwS/QjXfny1vkhKruI/bsmte+vRpze+gH7PojqOzb7wxQYK/nIwLlKnOvtv8 7Xa4cCXimkK0OoeHQ/tFhmt793ZI2D6CqNufX3WXo8eF/Fz2d3Azwv2YLxYCe68S pZDmrIjxBoMUls9bX/OyD7u3mu0FUeKo5UgVxv8Bv/U7p+k4Ro8= -----END CERTIFICATE-----Generated at Mon Oct 12 23:56:04 2026 by rpki-client