$ rpki-client -vvvf rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.mft File: E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.mft (raw, json) Hash identifier: 6CKBJkNhu7OiUWneEIa20AMYHVSp/YpLDlT2Ihw3FXw= Subject key identifier: 24:39:03:71:66:E3:40:EF:AB:85:78:FA:5E:85:41:7B:0A:3E:BF:66 Authority key identifier: E9:7D:24:06:2E:3E:80:91:38:8E:0E:26:DF:E8:25:A3:AE:0F:5E:C1 Certificate issuer: /CN=E97D24062E3E8091388E0E26DFE825A3AE0F5EC1 Certificate serial: 0F80F9760F108C40508271C383A14C9504AE86D9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.mft Manifest number: BD Signing time: Mon 21 Sep 2026 15:36:01 +0000 Manifest this update: Mon 21 Sep 2026 15:31:01 +0000 Manifest next update: Tue 22 Sep 2026 17:42:01 +0000 Files and hashes: 1: 3130332e36382e3133362e302f32332d3233203d3e203338353131.roa (hash: mf3IPyVMZfES2LPj/qKW1uxRQxXFsgdbVk4fq7bhazg=) 2: 3130332e36382e3133372e302f32342d3234203d3e203338353131.roa (hash: IBqjxLNXqSTykZaxJEDmSDLPjTO+m3MiFe7W+kVNa1Q=) 3: 3130332e36382e3133362e302f32342d3234203d3e20313335343535.roa (hash: EhQ7R7hv9ww9SVAVibUO5OafRSJMymQa0QNdea7zNE0=) 4: 323030313a6466333a313230303a3a2f34382d3438203d3e20313335343535.roa (hash: R27uG9wLK3XnlCddZVxdbbwrtPpS8ZSeb7rGWZG6Ph4=) 5: 3130332e36382e3133362e302f32342d3234203d3e203338353131.roa (hash: GFz+TTDbnW2nztXcZjgib7laNHpvzTT0hcf+2L3G+7o=) 6: 3130332e36382e3133372e302f32342d3234203d3e20313335343535.roa (hash: 2Vf+pTFqJv7XrQMn75awWPNpommC6ezf5Mi4NO6m5ug=) 7: E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.crl (hash: LGohq+7IE6uXV4n2U79iN/7vNsntskScJB+kL5ROL+8=) 8: 3130332e36382e3133362e302f32332d3234203d3e20313335343535.roa (hash: a9SdeOZSphcGVgljZg1tnbLWdBiFIVD0GygHfLT2ZLs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.crl rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:80:f9:76:0f:10:8c:40:50:82:71:c3:83:a1:4c:95:04:ae:86:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E97D24062E3E8091388E0E26DFE825A3AE0F5EC1 Validity Not Before: Sep 21 15:31:01 2026 GMT Not After : Sep 22 17:42:01 2026 GMT Subject: CN=2439037166E340EFAB8578FA5E85417B0A3EBF66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:98:5a:7f:12:d5:95:88:f1:e5:33:5c:f5:ca: 57:7f:37:fe:e0:99:6b:60:67:bd:f7:7b:3a:a7:37: 56:bd:d3:06:4b:a4:77:58:87:a1:3a:72:ee:ab:23: c0:c6:21:71:d8:d6:83:cb:21:93:ac:f9:dc:db:a4: 84:d7:1c:c7:2e:a2:20:12:2d:a1:27:c5:cd:eb:0e: f0:bd:58:34:01:c3:79:e2:06:bf:7b:34:23:4e:f1: 5c:77:71:65:0e:cb:23:44:6b:4b:d7:56:97:6c:71: c2:65:a3:b1:2f:fe:25:ef:be:f4:16:1d:aa:ec:35: 38:d6:f2:68:93:fa:89:cd:55:51:5b:53:88:a3:a0: dd:34:02:61:48:fe:5f:8e:e5:d5:17:e3:08:d7:be: 3b:07:09:82:f3:7f:a0:f1:41:ff:71:6b:83:b1:98: da:27:bc:3e:a8:d7:f4:7d:0f:0e:25:ee:bd:48:d5: ad:bc:d2:6d:49:db:26:d4:6e:da:54:15:83:05:dd: f0:66:f4:18:ab:35:47:7e:37:b3:c0:20:14:99:25: 01:5e:a7:e6:ff:2f:4d:64:64:93:53:50:15:14:9c: 3c:12:aa:92:8a:8f:44:9f:b9:8b:98:57:16:6d:b3: b1:81:d4:36:fd:97:5a:c3:07:00:ce:d2:4f:0e:93: 01:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:39:03:71:66:E3:40:EF:AB:85:78:FA:5E:85:41:7B:0A:3E:BF:66 X509v3 Authority Key Identifier: keyid:E9:7D:24:06:2E:3E:80:91:38:8E:0E:26:DF:E8:25:A3:AE:0F:5E:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:9f:26:f7:14:89:08:26:c7:48:14:d7:5b:9c:c2:f7:5b:d4: f0:b0:5c:eb:fc:3e:9d:51:40:23:66:00:07:11:7b:fd:21:ee: 6b:cb:21:0f:ef:ed:32:97:e5:0f:9d:80:4a:d3:c2:69:5e:d2: 21:01:a4:cb:64:e6:14:6a:35:6d:f7:33:dd:10:08:a4:95:04: d0:48:25:2b:98:c4:94:3d:5b:33:e9:b8:8d:00:66:69:bf:bb: 2b:99:86:41:eb:68:16:a8:89:31:fd:b3:8b:ac:fa:d6:ff:7a: 7d:4b:96:2c:b3:f6:67:67:85:1c:45:28:ad:34:46:2f:30:98: 75:32:06:fc:11:d4:e9:3c:61:88:30:f3:c4:3a:47:26:be:8e: b3:14:c3:1d:58:21:81:24:2e:47:29:16:1f:bd:ca:cd:b5:79: b3:46:a5:9e:16:40:7f:b7:5c:ca:65:dc:5e:d8:ff:cf:ca:e0: b6:e2:ac:22:83:09:3b:bd:67:4d:c3:79:61:06:c2:4a:78:16: f9:ca:cc:c0:3a:ab:20:e5:78:c3:da:53:22:d1:c7:d1:3a:a6: f1:49:fa:ad:7f:0d:ce:1a:f3:06:e8:7d:28:c9:d1:a8:97:cb: c9:6f:84:3d:94:06:36:ee:d6:5a:b3:74:5b:c3:d1:7b:92:9c: 17:ea:07:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD4D5dg8QjEBQgnHDg6FMlQSuhtkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk3RDI0MDYyRTNFODA5MTM4OEUwRTI2REZFODI1QTNB RTBGNUVDMTAeFw0yNjA5MjExNTMxMDFaFw0yNjA5MjIxNzQyMDFaMDMxMTAvBgNV BAMTKDI0MzkwMzcxNjZFMzQwRUZBQjg1NzhGQTVFODU0MTdCMEEzRUJGNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3mFp/EtWViPHlM1z1yld/N/7g mWtgZ733ezqnN1a90wZLpHdYh6E6cu6rI8DGIXHY1oPLIZOs+dzbpITXHMcuoiAS LaEnxc3rDvC9WDQBw3niBr97NCNO8Vx3cWUOyyNEa0vXVpdsccJlo7Ev/iXvvvQW HarsNTjW8miT+onNVVFbU4ijoN00AmFI/l+O5dUX4wjXvjsHCYLzf6DxQf9xa4Ox mNonvD6o1/R9Dw4l7r1I1a280m1J2ybUbtpUFYMF3fBm9BirNUd+N7PAIBSZJQFe p+b/L01kZJNTUBUUnDwSqpKKj0SfuYuYVxZts7GB1Db9l1rDBwDO0k8OkwGpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJDkDcWbjQO+rhXj6XoVBewo+v2YwHwYDVR0j BBgwFoAU6X0kBi4+gJE4jg4m3+glo64PXsEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTNkYzFiMDUtMmE2OS00NWIwLThjNDQtNjI2NzcyMjc2YmQ5LzAvRTk3RDI0MDYy RTNFODA5MTM4OEUwRTI2REZFODI1QTNBRTBGNUVDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOTdEMjQwNjJFM0U4MDkxMzg4RTBFMjZERkU4MjVBM0FFMEY1 RUMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTNkYzFiMDUtMmE2OS00NWIwLThj NDQtNjI2NzcyMjc2YmQ5LzAvRTk3RDI0MDYyRTNFODA5MTM4OEUwRTI2REZFODI1 QTNBRTBGNUVDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKefJvcUiQgmx0gU11ucwvdb1PCwXOv8Pp1R QCNmAAcRe/0h7mvLIQ/v7TKX5Q+dgErTwmle0iEBpMtk5hRqNW33M90QCKSVBNBI JSuYxJQ9WzPpuI0AZmm/uyuZhkHraBaoiTH9s4us+tb/en1Lliyz9mdnhRxFKK00 Ri8wmHUyBvwR1Ok8YYgw88Q6Rya+jrMUwx1YIYEkLkcpFh+9ys21ebNGpZ4WQH+3 XMpl3F7Y/8/K4LbirCKDCTu9Z03DeWEGwkp4FvnKzMA6qyDleMPaUyLRx9E6pvFJ +q1/Dc4a8wbofSjJ0aiXy8lvhD2UBjbu1lqzdFvD0XuSnBfqBxs= -----END CERTIFICATE-----Generated at Mon Sep 21 20:15:00 2026 by rpki-client