$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.mft File: E97B01E9B103A0595C106FBDB4EA9635F3812B44.mft (raw, json) Hash identifier: Qbf4uMR8C2wmbExEoasPkKMv9qWewC96+wCdAYmj7R8= Subject key identifier: DE:40:36:ED:AF:71:F8:67:BE:E0:E1:3C:B7:E5:DC:9F:5D:76:59:45 Authority key identifier: E9:7B:01:E9:B1:03:A0:59:5C:10:6F:BD:B4:EA:96:35:F3:81:2B:44 Certificate issuer: /CN=E97B01E9B103A0595C106FBDB4EA9635F3812B44 Certificate serial: 66AF3D72A39B996BB0B040F48ADFB6C2FF223397 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97B01E9B103A0595C106FBDB4EA9635F3812B44.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.mft Manifest number: C0 Signing time: Mon 21 Sep 2026 12:42:09 +0000 Manifest this update: Mon 21 Sep 2026 12:37:09 +0000 Manifest next update: Tue 22 Sep 2026 16:05:09 +0000 Files and hashes: 1: 3130332e3134382e38382e302f32332d3233203d3e20313430343231.roa (hash: 3u4SqpMZHOiN005smob5L/czZ7TrAkEBbioYuGaCo6o=) 2: 323030313a6466323a633938303a3a2f34382d3438203d3e20313430343231.roa (hash: eE2EjWF5JyFRMHUXcgYuX1KiOGjP1McRgQBH4Ci3bis=) 3: E97B01E9B103A0595C106FBDB4EA9635F3812B44.crl (hash: tFMbKnBjBo266gugDrtXhiuubR/FSqbpbIg07/xJqFw=) 4: 3130332e3134382e38382e302f32342d3234203d3e20313430343231.roa (hash: 17JZlywqEJeGYZvXZ5p1XRwbIJcNG0ARBxLeQExtlUI=) 5: 3130332e3134382e38392e302f32342d3234203d3e20313430343231.roa (hash: vqX/mtnN0W8RLZb7l8bNIZx8LnJh0g2gbraFilNseKo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.crl rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97B01E9B103A0595C106FBDB4EA9635F3812B44.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:af:3d:72:a3:9b:99:6b:b0:b0:40:f4:8a:df:b6:c2:ff:22:33:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E97B01E9B103A0595C106FBDB4EA9635F3812B44 Validity Not Before: Sep 21 12:37:09 2026 GMT Not After : Sep 22 16:05:09 2026 GMT Subject: CN=DE4036EDAF71F867BEE0E13CB7E5DC9F5D765945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b2:fa:97:d6:d3:4a:e8:30:f0:5d:4e:59:44: 91:b4:8b:cd:6a:8d:f9:81:ac:8e:e0:51:8f:f5:8d: 6d:8d:e1:81:3e:1e:7f:65:00:de:7d:11:a5:b6:c2: 1b:72:62:49:5a:6c:b3:44:31:dd:d9:87:07:69:e2: c8:e2:5a:fa:2f:0e:11:4d:a7:b3:b0:2e:47:21:ef: 56:66:a1:b9:09:0e:08:94:1b:04:c8:75:8c:21:43: 00:4a:66:d3:7b:64:7f:4f:00:60:b6:ae:c9:4b:c8: e1:41:91:84:0e:0a:32:7f:0a:24:08:d2:38:5f:be: 02:59:84:04:f7:44:e7:2f:92:39:11:27:d1:61:e9: 16:83:db:5f:62:79:0d:5f:a5:89:9c:e0:2d:16:f1: db:59:d8:ae:b4:cc:88:1b:2b:53:97:59:13:a3:b5: cc:e0:8f:66:02:59:19:c1:31:92:81:df:18:06:f0: cf:16:20:f6:40:c1:f7:fc:18:f2:d7:a1:25:91:ee: 79:f8:54:6f:a4:16:98:7d:e3:c3:de:aa:97:c4:72: b2:09:5d:5a:10:7d:a4:d3:89:6f:f8:ba:8c:04:90: 94:93:0f:ac:ca:85:7b:4b:97:6a:f5:66:28:ef:ff: 12:e7:09:91:a8:ad:84:ac:35:a5:c4:16:81:47:e7: 91:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:40:36:ED:AF:71:F8:67:BE:E0:E1:3C:B7:E5:DC:9F:5D:76:59:45 X509v3 Authority Key Identifier: keyid:E9:7B:01:E9:B1:03:A0:59:5C:10:6F:BD:B4:EA:96:35:F3:81:2B:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97B01E9B103A0595C106FBDB4EA9635F3812B44.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:d6:36:c8:a9:b6:0b:d7:da:eb:03:2f:15:8c:e3:b9:25:43: 06:e0:13:6d:ed:e0:bd:2c:4f:21:d5:8d:63:45:3c:8d:84:03: 74:a9:f2:a9:27:b6:36:c3:30:ac:dc:11:dc:40:b8:4d:44:31: 9c:a3:72:d5:0b:0b:0e:0c:6a:77:bc:67:b0:9d:24:84:a5:cd: 42:e1:7e:f6:02:37:03:84:bb:f7:c0:e1:fe:5b:8d:8c:d7:7d: 67:8a:02:f9:04:ca:f6:a4:41:68:04:5e:5b:e2:22:21:bc:f8: b8:17:f2:a4:b5:4f:29:b3:45:d9:ab:06:41:fa:13:63:b7:49: d8:d0:1f:b8:a0:1d:33:4c:13:67:e0:34:7a:91:b3:69:f9:47: 79:d2:5b:4c:29:e4:93:84:57:c9:e7:d5:58:76:59:8e:40:57: f6:65:79:62:d1:48:b7:69:d6:c1:7b:7f:bb:9d:50:41:bb:fb: d5:58:ec:ba:e5:16:75:91:62:24:bc:91:e5:22:60:8e:f2:d3: ee:e3:80:9a:e2:c9:3a:0a:f9:e3:06:5c:ad:4b:b4:dc:80:fb: c0:21:d9:32:0b:51:86:ca:08:bb:c6:9e:fd:70:24:5c:5f:56: 11:a1:12:b8:da:6f:20:0b:61:3f:2f:10:ce:83:74:5d:46:d8: fe:9b:e3:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZq89cqObmWuwsED0it+2wv8iM5cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk3QjAxRTlCMTAzQTA1OTVDMTA2RkJEQjRFQTk2MzVG MzgxMkI0NDAeFw0yNjA5MjExMjM3MDlaFw0yNjA5MjIxNjA1MDlaMDMxMTAvBgNV BAMTKERFNDAzNkVEQUY3MUY4NjdCRUUwRTEzQ0I3RTVEQzlGNUQ3NjU5NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLsvqX1tNK6DDwXU5ZRJG0i81q jfmBrI7gUY/1jW2N4YE+Hn9lAN59EaW2whtyYklabLNEMd3Zhwdp4sjiWvovDhFN p7OwLkch71ZmobkJDgiUGwTIdYwhQwBKZtN7ZH9PAGC2rslLyOFBkYQOCjJ/CiQI 0jhfvgJZhAT3ROcvkjkRJ9Fh6RaD219ieQ1fpYmc4C0W8dtZ2K60zIgbK1OXWROj tczgj2YCWRnBMZKB3xgG8M8WIPZAwff8GPLXoSWR7nn4VG+kFph948PeqpfEcrIJ XVoQfaTTiW/4uowEkJSTD6zKhXtLl2r1Zijv/xLnCZGorYSsNaXEFoFH55FfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3kA27a9x+Ge+4OE8t+Xcn112WUUwHwYDVR0j BBgwFoAU6XsB6bEDoFlcEG+9tOqWNfOBK0QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGI3MmVjYTQtNzNhZC00ZTBiLWE2YTYtN2E2NTY5OGI3M2JlLzAvRTk3QjAxRTlC MTAzQTA1OTVDMTA2RkJEQjRFQTk2MzVGMzgxMkI0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOTdCMDFFOUIxMDNBMDU5NUMxMDZGQkRCNEVBOTYzNUYzODEy QjQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGI3MmVjYTQtNzNhZC00ZTBiLWE2 YTYtN2E2NTY5OGI3M2JlLzAvRTk3QjAxRTlCMTAzQTA1OTVDMTA2RkJEQjRFQTk2 MzVGMzgxMkI0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHDWNsiptgvX2usDLxWM47klQwbgE23t4L0s TyHVjWNFPI2EA3Sp8qkntjbDMKzcEdxAuE1EMZyjctULCw4Mane8Z7CdJISlzULh fvYCNwOEu/fA4f5bjYzXfWeKAvkEyvakQWgEXlviIiG8+LgX8qS1TymzRdmrBkH6 E2O3SdjQH7igHTNME2fgNHqRs2n5R3nSW0wp5JOEV8nn1Vh2WY5AV/ZleWLRSLdp 1sF7f7udUEG7+9VY7LrlFnWRYiS8keUiYI7y0+7jgJriyToK+eMGXK1LtNyA+8Ah 2TILUYbKCLvGnv1wJFxfVhGhErjabyALYT8vEM6DdF1G2P6b4xc= -----END CERTIFICATE-----Generated at Mon Sep 21 16:01:26 2026 by rpki-client