$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.mft File: E9A8A6B9E08D026673630DC1A26DBE73DFA16132.mft (raw, json) Hash identifier: 2yovO0ghuKsGvNr9qogUSCDGPaAzpBp4aPzuKQ9gGoY= Subject key identifier: D8:8D:D4:05:F8:EE:DF:33:23:B1:8D:28:66:12:C9:51:A6:3F:3A:81 Authority key identifier: E9:A8:A6:B9:E0:8D:02:66:73:63:0D:C1:A2:6D:BE:73:DF:A1:61:32 Certificate issuer: /CN=E9A8A6B9E08D026673630DC1A26DBE73DFA16132 Certificate serial: 67248B656C85E3DD6E97FC96834FD86A6F85460F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 12:37:04 +0000 Manifest this update: Tue 22 Sep 2026 12:32:04 +0000 Manifest next update: Wed 23 Sep 2026 14:27:04 +0000 Files and hashes: 1: 3130332e3136302e33372e302f32342d3234203d3e20313431353834.roa (hash: 5XEDOOrbyLaQ3rvBerNKeMoDupncLVY5Kqo+4A1sTYY=) 2: E9A8A6B9E08D026673630DC1A26DBE73DFA16132.crl (hash: s2LibD6NSACCAkgtwPZKbsAEQ7jESgjH9FXoSTDzG7A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.crl rsync://rpki-rsync.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 14:27:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:24:8b:65:6c:85:e3:dd:6e:97:fc:96:83:4f:d8:6a:6f:85:46:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9A8A6B9E08D026673630DC1A26DBE73DFA16132 Validity Not Before: Sep 22 12:32:04 2026 GMT Not After : Sep 23 14:27:04 2026 GMT Subject: CN=D88DD405F8EEDF3323B18D286612C951A63F3A81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f5:a7:aa:5c:e5:07:06:68:37:8b:c6:14:df: 33:1b:fa:14:7d:3c:c6:b9:65:43:a1:e0:07:27:7b: 58:18:0f:2b:5c:67:37:57:3e:14:54:ba:b1:bb:88: 21:f6:5c:c4:46:6c:72:ae:b3:a8:04:7c:ae:39:91: c1:d8:58:a1:ec:a4:c8:2e:34:d0:97:e7:42:fb:3e: ec:6c:d3:99:eb:d5:9c:44:7c:c5:4f:7a:2f:b7:3e: d7:fb:26:5d:6b:ed:7e:c4:9a:c8:df:e8:9e:a0:76: b4:29:29:7f:cf:3c:d5:ba:41:22:94:fc:04:9e:de: b8:91:36:92:6f:bf:0b:43:75:6e:2f:58:3e:37:eb: 50:7e:dc:d7:5f:97:c5:fc:22:7f:6e:15:88:7a:85: ca:5c:ba:01:9d:8d:e8:cc:84:47:fe:c9:3d:de:f4: 13:98:81:de:59:1a:e1:7f:2b:f5:22:66:b4:73:8e: 3a:95:76:b6:96:23:58:b1:72:53:4a:da:de:4e:60: f7:ac:e8:0a:c1:f3:b5:47:67:e8:36:78:e6:e1:c8: 14:42:eb:c4:1a:b6:ee:c1:3b:cc:76:8d:3c:f0:60: 83:be:85:41:6f:4a:f9:a1:35:fc:51:05:d4:57:67: 8f:74:9a:a9:3f:a7:97:48:c7:a6:4b:2b:50:d5:e6: c4:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:8D:D4:05:F8:EE:DF:33:23:B1:8D:28:66:12:C9:51:A6:3F:3A:81 X509v3 Authority Key Identifier: keyid:E9:A8:A6:B9:E0:8D:02:66:73:63:0D:C1:A2:6D:BE:73:DF:A1:61:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:4b:1a:f0:bf:27:ad:59:93:00:ed:f9:87:55:32:2c:db:27: a8:e6:6a:7d:f7:de:0d:30:bd:4f:74:ac:29:5a:7b:9b:41:13: 0d:06:9c:2e:9b:3f:c9:8f:54:db:e8:95:fa:9a:bf:29:96:f8: 43:69:5c:1c:09:97:1e:df:58:8b:40:42:5e:15:51:d3:01:3c: 19:bc:1d:38:90:f7:2b:65:f2:93:b2:70:fe:74:d4:ff:23:6b: b3:39:4e:9b:89:10:13:ef:15:d1:a6:8c:e3:9a:2d:b3:61:50: 57:41:9e:a6:74:d8:1e:57:53:1c:b5:6a:e5:be:2b:66:5f:53: 85:66:71:94:c2:86:1d:93:ee:81:be:59:63:1e:0e:98:64:3f: af:2a:59:a0:06:f5:99:4c:36:64:68:9a:21:42:d4:13:6d:91: 3b:1e:3b:c2:6d:e5:47:c2:79:e5:1f:e3:1a:ac:b3:c7:13:2b: 9a:b7:3f:21:b1:5a:51:77:cb:0a:f2:9f:88:bd:57:14:a3:10: 1a:00:30:df:a6:66:86:a9:86:6d:da:e8:0f:2f:38:6d:fe:97: 83:ce:2e:51:96:56:18:a8:24:83:87:b0:8f:ca:be:6b:55:99: 60:64:dc:97:00:69:4a:eb:61:54:82:b5:42:3f:0a:e6:30:e7: 9e:39:18:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZySLZWyF491ul/yWg0/Yam+FRg8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlBOEE2QjlFMDhEMDI2NjczNjMwREMxQTI2REJFNzNE RkExNjEzMjAeFw0yNjA5MjIxMjMyMDRaFw0yNjA5MjMxNDI3MDRaMDMxMTAvBgNV BAMTKEQ4OERENDA1RjhFRURGMzMyM0IxOEQyODY2MTJDOTUxQTYzRjNBODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+9aeqXOUHBmg3i8YU3zMb+hR9 PMa5ZUOh4Acne1gYDytcZzdXPhRUurG7iCH2XMRGbHKus6gEfK45kcHYWKHspMgu NNCX50L7Puxs05nr1ZxEfMVPei+3Ptf7Jl1r7X7Emsjf6J6gdrQpKX/PPNW6QSKU /ASe3riRNpJvvwtDdW4vWD4361B+3Ndfl8X8In9uFYh6hcpcugGdjejMhEf+yT3e 9BOYgd5ZGuF/K/UiZrRzjjqVdraWI1ixclNK2t5OYPes6ArB87VHZ+g2eObhyBRC 68Qatu7BO8x2jTzwYIO+hUFvSvmhNfxRBdRXZ490mqk/p5dIx6ZLK1DV5sQBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2I3UBfju3zMjsY0oZhLJUaY/OoEwHwYDVR0j BBgwFoAU6aimueCNAmZzYw3Bom2+c9+hYTIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzg0NmZlZDctZjg4ZS00OGVhLWE2ZDEtNmY3NTZiY2Y4ZGI2LzAvRTlBOEE2QjlF MDhEMDI2NjczNjMwREMxQTI2REJFNzNERkExNjEzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOUE4QTZCOUUwOEQwMjY2NzM2MzBEQzFBMjZEQkU3M0RGQTE2 MTMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzg0NmZlZDctZjg4ZS00OGVhLWE2 ZDEtNmY3NTZiY2Y4ZGI2LzAvRTlBOEE2QjlFMDhEMDI2NjczNjMwREMxQTI2REJF NzNERkExNjEzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACVLGvC/J61ZkwDt+YdVMizbJ6jman333g0w vU90rClae5tBEw0GnC6bP8mPVNvolfqavymW+ENpXBwJlx7fWItAQl4VUdMBPBm8 HTiQ9ytl8pOycP501P8ja7M5TpuJEBPvFdGmjOOaLbNhUFdBnqZ02B5XUxy1auW+ K2ZfU4VmcZTChh2T7oG+WWMeDphkP68qWaAG9ZlMNmRomiFC1BNtkTseO8Jt5UfC eeUf4xqss8cTK5q3PyGxWlF3ywryn4i9VxSjEBoAMN+mZoaphm3a6A8vOG3+l4PO LlGWVhioJIOHsI/KvmtVmWBk3JcAaUrrYVSCtUI/CuYw5545GL4= -----END CERTIFICATE-----Generated at Tue Sep 22 19:02:34 2026 by rpki-client