$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft File: E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft (raw, json) Hash identifier: 8yAoCgDy76yGxzhl4pJk1qoMTKAHB7GFMGk/plZ+SFc= Subject key identifier: 47:8A:19:21:66:B3:0F:5F:CA:79:C2:14:84:96:D9:B4:15:75:CE:E9 Authority key identifier: E5:04:3A:05:3B:BA:5B:BD:65:F1:17:C3:80:A8:E5:ED:BB:FB:E9:6A Certificate issuer: /CN=E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A Certificate serial: 5657729A3B9B6CF8047643963B4802BB8A006A37 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft Manifest number: BF Signing time: Tue 22 Sep 2026 18:44:42 +0000 Manifest this update: Tue 22 Sep 2026 18:39:42 +0000 Manifest next update: Wed 23 Sep 2026 22:03:42 +0000 Files and hashes: 1: E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.crl (hash: T99i8wjFsuZI4jt8cJtQnaj34NXcOFVKly31rEQhtNs=) 2: 3136302e3138372e3133382e302f32342d3234203d3e20313533313232.roa (hash: is5WdfvUY1KRmUVaEDtXvqlI2WCzItjy85jNK7qc29s=) 3: 3136302e3138372e3133392e302f32342d3234203d3e20313533313232.roa (hash: mmr69bHLezkQuiDZandeSB0qYXcAYeWx1GHP/ifPRTA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.crl rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 15:18:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:57:72:9a:3b:9b:6c:f8:04:76:43:96:3b:48:02:bb:8a:00:6a:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A Validity Not Before: Sep 22 18:39:42 2026 GMT Not After : Sep 23 22:03:42 2026 GMT Subject: CN=478A192166B30F5FCA79C2148496D9B41575CEE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f8:c2:ad:d5:50:db:f8:39:35:39:31:2e:98: 59:4b:3d:fb:28:1d:9f:d9:08:1b:4d:52:86:69:70: 6b:10:d5:d4:74:73:0b:ab:6a:7b:80:a5:ba:48:c8: e6:5d:46:14:5e:e9:f7:fd:8b:1e:68:ae:65:1f:22: 10:18:81:ed:8b:22:61:09:38:21:76:4b:f3:0e:8a: 6a:e1:ce:31:86:f5:67:dc:95:4b:76:72:19:d6:e7: 06:64:ad:c1:72:a5:00:dc:76:d9:11:12:20:50:70: 31:9b:3e:50:0c:b1:b5:5a:19:4c:d8:67:d9:78:91: 7b:40:34:41:df:89:89:f2:90:6f:0e:64:37:3a:65: 63:a2:84:9a:14:d6:e1:54:d8:f0:ea:39:83:34:e8: 9d:e4:db:ae:5c:7a:c4:3e:16:d1:58:08:a7:06:cb: c7:cb:5c:56:f8:f0:18:3b:ff:2d:53:a6:f7:b2:d1: 36:b3:b6:74:40:46:0c:32:f7:9f:ac:9e:f4:b3:45: 55:de:cd:14:4c:2d:ed:a6:46:7a:a7:e7:33:ea:50: 10:43:a5:85:59:16:7c:75:a6:0e:77:b6:54:93:0d: d6:bb:8b:8a:df:32:f5:9a:30:62:a3:75:0c:0e:24: 7d:8e:b2:8b:d7:aa:c1:ce:3e:66:46:fb:60:fa:e2: 1f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:8A:19:21:66:B3:0F:5F:CA:79:C2:14:84:96:D9:B4:15:75:CE:E9 X509v3 Authority Key Identifier: keyid:E5:04:3A:05:3B:BA:5B:BD:65:F1:17:C3:80:A8:E5:ED:BB:FB:E9:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:3d:59:fb:08:c7:41:f8:2d:96:c8:40:9e:3f:b9:df:12:13: a8:58:98:cf:9d:95:44:5d:4a:e7:61:94:45:78:d3:87:24:c2: bc:fd:78:4a:3e:5f:7c:f3:db:e3:6e:1c:25:b5:a0:d3:4b:f8: 1b:8d:6b:49:ce:e2:76:29:ec:9f:13:90:ca:fa:1e:b1:fc:84: 07:e4:18:30:5d:7e:34:3f:11:fc:77:52:18:78:ef:f7:c7:21: b8:b7:d8:65:b9:eb:c2:5b:47:d6:6e:cb:e3:00:93:41:a1:bc: e3:49:01:55:bd:d7:b4:d1:df:78:56:66:43:23:14:63:65:cf: c0:c6:f8:84:a7:04:bb:e2:3f:01:6f:67:db:67:5f:a8:fa:fe: 91:9b:99:aa:5d:9d:15:9c:07:2a:f1:a0:40:eb:b9:a6:3c:60: ff:e6:ef:e7:f9:21:62:6a:98:88:b6:10:27:d2:40:f6:7f:4e: 9d:a6:bb:34:45:0c:68:99:84:a1:22:02:9f:bb:1b:d1:3a:83: ba:42:5f:1a:d1:49:5d:3f:8a:09:7b:29:aa:de:ee:ca:17:31: 72:1d:36:fe:dc:c9:2e:69:a0:8e:ec:88:b9:51:76:e3:ea:7e: f1:74:10:62:66:0f:8b:7b:d1:cc:f0:6f:6d:67:1c:96:40:86: d5:37:b5:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVldymjubbPgEdkOWO0gCu4oAajcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTUwNDNBMDUzQkJBNUJCRDY1RjExN0MzODBBOEU1RURC QkZCRTk2QTAeFw0yNjA5MjIxODM5NDJaFw0yNjA5MjMyMjAzNDJaMDMxMTAvBgNV BAMTKDQ3OEExOTIxNjZCMzBGNUZDQTc5QzIxNDg0OTZEOUI0MTU3NUNFRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/+MKt1VDb+Dk1OTEumFlLPfso HZ/ZCBtNUoZpcGsQ1dR0cwuranuApbpIyOZdRhRe6ff9ix5ormUfIhAYge2LImEJ OCF2S/MOimrhzjGG9WfclUt2chnW5wZkrcFypQDcdtkREiBQcDGbPlAMsbVaGUzY Z9l4kXtANEHfiYnykG8OZDc6ZWOihJoU1uFU2PDqOYM06J3k265cesQ+FtFYCKcG y8fLXFb48Bg7/y1Tpvey0TaztnRARgwy95+snvSzRVXezRRMLe2mRnqn5zPqUBBD pYVZFnx1pg53tlSTDda7i4rfMvWaMGKjdQwOJH2OsovXqsHOPmZG+2D64h8VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR4oZIWazD1/KecIUhJbZtBV1zukwHwYDVR0j BBgwFoAU5QQ6BTu6W71l8RfDgKjl7bv76WowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQyMmY2NDktOTk2OC00OTVkLWJkZjEtN2Q3NjI1NmRhYWQ1LzAvRTUwNDNBMDUz QkJBNUJCRDY1RjExN0MzODBBOEU1RURCQkZCRTk2QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FNTA0M0EwNTNCQkE1QkJENjVGMTE3QzM4MEE4RTVFREJCRkJF OTZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQyMmY2NDktOTk2OC00OTVkLWJk ZjEtN2Q3NjI1NmRhYWQ1LzAvRTUwNDNBMDUzQkJBNUJCRDY1RjExN0MzODBBOEU1 RURCQkZCRTk2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABI9WfsIx0H4LZbIQJ4/ud8SE6hYmM+dlURd SudhlEV404ckwrz9eEo+X3zz2+NuHCW1oNNL+BuNa0nO4nYp7J8TkMr6HrH8hAfk GDBdfjQ/Efx3Uhh47/fHIbi32GW568JbR9Zuy+MAk0GhvONJAVW917TR33hWZkMj FGNlz8DG+ISnBLviPwFvZ9tnX6j6/pGbmapdnRWcByrxoEDruaY8YP/m7+f5IWJq mIi2ECfSQPZ/Tp2muzRFDGiZhKEiAp+7G9E6g7pCXxrRSV0/igl7Kare7soXMXId Nv7cyS5poI7siLlRduPqfvF0EGJmD4t70czwb21nHJZAhtU3tZY= -----END CERTIFICATE-----Generated at Wed Sep 23 03:57:23 2026 by rpki-client