$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.mft File: DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.mft (raw, json) Hash identifier: dNO8noUFAa5BZ/KK1S8ItYJOfg809FB9oTB+J3P2AZ0= Subject key identifier: E5:0F:20:11:02:C4:CF:77:7B:FC:31:95:BD:5B:F8:F5:09:DB:FD:40 Authority key identifier: DE:4E:99:EA:03:0A:F8:AE:BF:B7:B6:A7:A0:E9:16:74:DD:B2:9A:C3 Certificate issuer: /CN=DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3 Certificate serial: 28F9DEC257052D90CADEB80A7AD4A6E4948DFB08 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.mft Manifest number: BC Signing time: Sun 20 Sep 2026 09:23:53 +0000 Manifest this update: Sun 20 Sep 2026 09:18:53 +0000 Manifest next update: Mon 21 Sep 2026 13:00:53 +0000 Files and hashes: 1: 3232332e32352e3130342e302f32342d3234203d3e20313530323238.roa (hash: ovVBKtJH+Wixf+bjFfGN0BaqhZuS+FBdLYnDH3wV8vw=) 2: 3232332e32352e3130372e302f32342d3234203d3e20313439373138.roa (hash: f+1xV3V7eIo4yjJqos+xUQVvX1GIUuOZUCoIKtF+llo=) 3: 323430323a613530303a3a2f33322d3332203d3e2034383231.roa (hash: BDfl1ljAlzUeNiFgOAogNvfZpmtNq6Kp37cGWuK0R5E=) 4: 3232332e32352e3130352e302f32342d3234203d3e2034383231.roa (hash: zkjugBCGR1RTN3rv+4fVMMpCR+DjhaqSm22RICfrfmA=) 5: 3232332e32352e3131312e302f32342d3234203d3e20313431363037.roa (hash: 2xJo8vO5RtzGv7BkUmxulZhOANWhCfhuYoau31MaZh0=) 6: 3232332e32352e3131302e302f32342d3234203d3e20313336383733.roa (hash: d26NLF/sKVXadNSIsUNq9koHjOM/iTFNcX1v1zkyxRU=) 7: 3232332e32352e39362e302f32312d3234203d3e2039333431.roa (hash: 7Jy3y4ltltsmzNhSvINfLmQPgIpSxy3LDWGrSnNQ3Zk=) 8: 3232332e32352e3130362e302f32342d3234203d3e20313336383733.roa (hash: zZohFjEfg5KbgTKUDn03P4ViER6I84zu0tvUUBWCbms=) 9: 3232332e32352e3130382e302f32342d3234203d3e2034383231.roa (hash: lZy/D3zEI+V1zNnvBB6OJZ7BzAoFD7HSvYryTbhRU2s=) 10: 3232332e32352e3130392e302f32342d3234203d3e20313439373138.roa (hash: D8gdQFYf8NnWhum3Srq97Jkm5hnXUuKFuTsge2OROqA=) 11: DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.crl (hash: TA5lAEtkvUHxq1JVFKDgRty0XhbCATaQbFfLQV++oDY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.crl rsync://rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 13:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:f9:de:c2:57:05:2d:90:ca:de:b8:0a:7a:d4:a6:e4:94:8d:fb:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3 Validity Not Before: Sep 20 09:18:53 2026 GMT Not After : Sep 21 13:00:53 2026 GMT Subject: CN=E50F201102C4CF777BFC3195BD5BF8F509DBFD40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f1:88:7e:bb:47:bb:af:5d:e5:9a:d1:0d:52: b2:65:9c:6e:61:a0:a6:20:03:0e:a2:f5:fb:47:8e: 7a:53:f8:98:09:73:a1:b1:98:a5:eb:66:8c:46:c7: ef:2f:b5:c8:81:a5:8b:cf:d7:61:7f:3a:45:ea:45: d7:a4:3d:f1:dc:d1:c3:0c:41:f2:1a:b5:af:17:2f: 9f:94:03:2a:2d:87:e8:fd:c7:9d:c5:89:73:75:b7: 8d:ea:35:78:aa:15:00:12:f1:ca:c3:99:93:98:ab: 4c:39:19:5c:cb:cb:f3:84:65:37:42:73:2a:91:da: 74:ac:14:85:33:05:6b:20:b9:7d:e8:80:89:3a:97: e8:35:47:6b:f7:b3:a8:ad:f3:46:1e:50:37:b3:8e: 39:70:cc:96:40:27:74:41:78:3c:75:4e:67:9b:f7: 92:a2:47:75:92:e7:97:f3:b8:ca:f8:b1:df:06:d9: 9a:c3:ed:1e:ea:30:e3:0f:ff:f5:38:41:c6:8a:8e: 9c:17:75:68:f2:5c:d3:a7:b4:89:09:d6:80:25:5e: 5e:12:d2:69:2c:81:5b:2a:19:0e:49:73:2f:48:71: 37:d3:72:79:b3:b6:46:07:01:2b:ab:cf:a6:f9:ad: dd:63:e2:d8:ad:bf:5e:42:e3:dd:43:e7:92:64:35: b3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:0F:20:11:02:C4:CF:77:7B:FC:31:95:BD:5B:F8:F5:09:DB:FD:40 X509v3 Authority Key Identifier: keyid:DE:4E:99:EA:03:0A:F8:AE:BF:B7:B6:A7:A0:E9:16:74:DD:B2:9A:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:93:b2:6b:21:2d:69:a7:99:44:3a:30:25:94:5a:17:f9:22: 9e:04:e5:42:1c:64:93:88:d1:cd:e4:89:0c:31:96:6e:42:b6: 17:2f:7a:b9:f1:92:34:d7:18:03:5a:8f:51:6b:ab:8b:f0:7a: 2e:37:4e:f5:34:12:18:57:39:97:be:e4:a5:d3:7f:36:b4:9f: a6:62:e3:8e:0c:2d:90:c6:11:ac:d2:0c:60:05:f4:75:65:d1: f1:4f:1f:c2:7a:a4:d8:f1:d8:43:51:ff:e7:d3:1e:7d:00:c0: 88:02:ff:d6:0d:bb:82:a0:72:ef:20:70:bc:53:92:4d:48:44: 52:eb:5d:26:bd:1d:e5:00:0d:97:65:cc:ad:24:19:70:6f:80: 64:60:c7:6f:8c:85:ad:be:67:19:1a:e2:5f:94:ff:f8:0b:a5: 96:57:a5:1d:9d:a0:b9:57:80:c2:03:35:fe:fc:4d:f9:2e:31: 1d:1b:72:dd:ed:f5:c4:49:95:18:e2:36:b3:4c:0f:ca:e9:38: d9:18:93:2c:1a:7a:66:1a:0f:c4:cc:91:a3:74:e4:db:a8:95: 9a:dc:32:bd:3c:7e:20:70:57:af:ac:83:5c:b6:19:0d:10:6b: 58:f3:31:f7:2c:6f:6f:43:36:a7:21:02:72:e2:3b:ad:c1:07: de:18:8f:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKPnewlcFLZDK3rgKetSm5JSN+wgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU0RTk5RUEwMzBBRjhBRUJGQjdCNkE3QTBFOTE2NzRE REIyOUFDMzAeFw0yNjA5MjAwOTE4NTNaFw0yNjA5MjExMzAwNTNaMDMxMTAvBgNV BAMTKEU1MEYyMDExMDJDNENGNzc3QkZDMzE5NUJENUJGOEY1MDlEQkZENDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCI8Yh+u0e7r13lmtENUrJlnG5h oKYgAw6i9ftHjnpT+JgJc6GxmKXrZoxGx+8vtciBpYvP12F/OkXqRdekPfHc0cMM QfIata8XL5+UAyoth+j9x53FiXN1t43qNXiqFQAS8crDmZOYq0w5GVzLy/OEZTdC cyqR2nSsFIUzBWsguX3ogIk6l+g1R2v3s6it80YeUDezjjlwzJZAJ3RBeDx1Tmeb 95KiR3WS55fzuMr4sd8G2ZrD7R7qMOMP//U4QcaKjpwXdWjyXNOntIkJ1oAlXl4S 0mksgVsqGQ5Jcy9IcTfTcnmztkYHASurz6b5rd1j4titv15C491D55JkNbM7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5Q8gEQLEz3d7/DGVvVv49Qnb/UAwHwYDVR0j BBgwFoAU3k6Z6gMK+K6/t7anoOkWdN2ymsMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQyNTQ0MTktNTNiZS00YWQ0LWJmN2YtMjlmODkxMjUyM2QwLzAvREU0RTk5RUEw MzBBRjhBRUJGQjdCNkE3QTBFOTE2NzREREIyOUFDMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERTRFOTlFQTAzMEFGOEFFQkZCN0I2QTdBMEU5MTY3NEREQjI5 QUMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQyNTQ0MTktNTNiZS00YWQ0LWJm N2YtMjlmODkxMjUyM2QwLzAvREU0RTk5RUEwMzBBRjhBRUJGQjdCNkE3QTBFOTE2 NzREREIyOUFDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAASTsmshLWmnmUQ6MCWUWhf5Ip4E5UIcZJOI 0c3kiQwxlm5CthcvernxkjTXGANaj1Frq4vwei43TvU0EhhXOZe+5KXTfza0n6Zi 444MLZDGEazSDGAF9HVl0fFPH8J6pNjx2ENR/+fTHn0AwIgC/9YNu4Kgcu8gcLxT kk1IRFLrXSa9HeUADZdlzK0kGXBvgGRgx2+Mha2+Zxka4l+U//gLpZZXpR2doLlX gMIDNf78TfkuMR0bct3t9cRJlRjiNrNMD8rpONkYkywaemYaD8TMkaN05NuolZrc Mr08fiBwV6+sg1y2GQ0Qa1jzMfcsb29DNqchAnLiO63BB94Yj9Q= -----END CERTIFICATE-----Generated at Sun Sep 20 17:58:20 2026 by rpki-client