$ rpki-client -vvvf rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/E86D81600C2E0C408A83A10FE1734F7CB80049B5.mft File: E86D81600C2E0C408A83A10FE1734F7CB80049B5.mft (raw, json) Hash identifier: Hn179I5Wh3sgsyOKAFLBKlmGb5OUPP7NOGn85rnCvXk= Subject key identifier: A4:43:3D:67:8B:41:05:F7:00:8F:00:54:D1:4C:63:7F:88:59:01:43 Authority key identifier: E8:6D:81:60:0C:2E:0C:40:8A:83:A1:0F:E1:73:4F:7C:B8:00:49:B5 Certificate issuer: /CN=E86D81600C2E0C408A83A10FE1734F7CB80049B5 Certificate serial: 430D736183007B8743F8DBE2990590F261CB92B1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E86D81600C2E0C408A83A10FE1734F7CB80049B5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/E86D81600C2E0C408A83A10FE1734F7CB80049B5.mft Manifest number: BD Signing time: Sun 20 Sep 2026 15:51:34 +0000 Manifest this update: Sun 20 Sep 2026 15:46:34 +0000 Manifest next update: Mon 21 Sep 2026 17:23:34 +0000 Files and hashes: 1: E86D81600C2E0C408A83A10FE1734F7CB80049B5.crl (hash: /gI5mSZ7JpJT9XgYG9kt4z92ST0SGbVCH0noMvn62y8=) 2: 3130332e35322e3137302e302f32342d3234203d3e203633383732.roa (hash: BkJTNl2EaGlXKx/0oxL6MDW8bV/3huXeq9qOcksMrJo=) 3: 3130332e35322e3137302e302f32332d3233203d3e203633383732.roa (hash: MQJVRwYJnTX2QpJhcgqI//Yd9f8cE6OV9xHlB/+R9PA=) 4: 3130332e3132372e3134342e302f32342d3234203d3e203633383732.roa (hash: b2H2J9oU1FTem9NxnIqJBxJ6q92fSr/bX1QAdywuSTE=) 5: 3130332e35322e3137312e302f32342d3234203d3e203633383732.roa (hash: b/Ogd32BhDs9RrIQse7X4kUyjngtFlmzyV/u5hkoU2o=) 6: 323030313a6466333a6330303a3a2f34382d3438203d3e203633383732.roa (hash: z3UTfjn7LsK1eLHAQE8Fe9WFM0g5YMcTUPNSeasibaA=) 7: 3130332e3132372e3134352e302f32342d3234203d3e203633383732.roa (hash: IjEzO4J4/DAGMp7yw/Fv4jYmilXWlJ5CggUFR3MkMwg=) 8: 3130332e3132372e3134342e302f32332d3233203d3e203633383732.roa (hash: YESQQe584DxGo0SLuNik4wkwCQuVf9tDli0g7fG2mUQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/E86D81600C2E0C408A83A10FE1734F7CB80049B5.crl rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/E86D81600C2E0C408A83A10FE1734F7CB80049B5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E86D81600C2E0C408A83A10FE1734F7CB80049B5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:23:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:0d:73:61:83:00:7b:87:43:f8:db:e2:99:05:90:f2:61:cb:92:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E86D81600C2E0C408A83A10FE1734F7CB80049B5 Validity Not Before: Sep 20 15:46:34 2026 GMT Not After : Sep 21 17:23:34 2026 GMT Subject: CN=A4433D678B4105F7008F0054D14C637F88590143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1e:92:cf:a0:a4:f5:46:9a:c3:7e:a9:18:5e: 1b:a7:19:02:39:88:9c:69:22:d5:17:14:23:03:f3: ee:4f:8a:ee:d6:43:36:21:b6:f3:34:14:ab:5c:b0: 72:f0:68:71:69:b9:a6:a4:5a:23:5c:a8:16:5c:d6: a1:16:9e:47:e5:96:a8:96:45:b8:fb:e0:e7:a3:0e: 30:c2:2c:a2:79:d8:a7:c5:dd:cf:bf:fe:04:36:97: 57:21:cc:21:18:78:b9:6c:00:34:dc:aa:fe:8b:c7: b0:06:07:32:be:0a:04:6d:6a:a1:a1:5f:18:34:67: 0e:1e:8f:95:1c:49:d3:fa:18:ae:4c:57:dc:db:d2: 8e:d6:34:8d:3d:35:79:44:81:00:6c:cc:42:b8:12: 12:88:a2:d9:96:49:0c:22:d0:cd:c1:77:64:0a:9b: cc:13:70:68:bb:1b:3a:f8:29:a7:ce:46:57:6b:80: d9:ad:18:21:a8:fd:93:bc:fe:88:49:33:18:38:3f: 2c:13:f3:32:9a:f3:4b:60:46:0e:44:de:9d:6e:ba: c8:b5:c5:aa:95:ef:26:58:c5:e7:6c:7f:13:d0:14: 21:6f:6d:5f:26:0c:6e:ac:1d:f0:18:f8:30:b4:c3: b5:77:74:8e:b9:8f:76:70:ae:cc:b1:a8:ba:ec:ba: 11:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:43:3D:67:8B:41:05:F7:00:8F:00:54:D1:4C:63:7F:88:59:01:43 X509v3 Authority Key Identifier: keyid:E8:6D:81:60:0C:2E:0C:40:8A:83:A1:0F:E1:73:4F:7C:B8:00:49:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/E86D81600C2E0C408A83A10FE1734F7CB80049B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E86D81600C2E0C408A83A10FE1734F7CB80049B5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/E86D81600C2E0C408A83A10FE1734F7CB80049B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:48:68:bb:51:ad:ad:77:ac:af:35:8b:ba:1a:35:e6:1e:07: 9b:b8:be:50:c9:91:c4:c3:ae:eb:8b:9e:d7:bd:4a:52:92:a5: 57:43:84:a3:ee:3d:d5:be:dd:47:ea:97:77:f4:d7:cd:bc:46: f1:59:88:63:3b:bc:ab:7a:7a:7d:7e:92:e1:3a:a4:5c:8e:b4: 96:68:1a:ee:9f:c6:bf:27:02:dc:c3:96:69:e2:35:7b:d0:3c: 5c:50:f5:52:c9:dc:dc:a7:44:79:f6:43:d1:f6:ac:f2:e5:8d: 34:71:de:bf:99:18:7c:24:e8:00:0a:e1:9b:7f:99:93:57:bb: 2c:17:77:b3:54:b5:07:53:6f:2d:c4:30:e4:af:af:5d:70:22: 40:03:75:e6:19:99:0d:b4:58:41:f6:b3:d6:db:ab:90:09:27: 90:a9:e6:bc:f3:ad:0b:11:64:e1:e5:00:60:3c:19:88:5f:9f: aa:d6:f7:72:42:0a:22:9f:ff:03:6c:03:35:b5:5a:d1:68:24: d0:6a:a8:d5:71:61:12:fa:0b:95:91:f4:f1:95:0f:c0:15:52: f3:c8:a8:26:a6:b4:37:10:65:5f:de:f8:db:c0:1b:b4:0a:a9: b4:bf:03:b8:3a:7a:18:ca:3f:5c:bc:0b:7c:a8:9e:5f:bc:64: 52:ed:39:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQw1zYYMAe4dD+NvimQWQ8mHLkrEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg2RDgxNjAwQzJFMEM0MDhBODNBMTBGRTE3MzRGN0NC ODAwNDlCNTAeFw0yNjA5MjAxNTQ2MzRaFw0yNjA5MjExNzIzMzRaMDMxMTAvBgNV BAMTKEE0NDMzRDY3OEI0MTA1RjcwMDhGMDA1NEQxNEM2MzdGODg1OTAxNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEHpLPoKT1RprDfqkYXhunGQI5 iJxpItUXFCMD8+5Piu7WQzYhtvM0FKtcsHLwaHFpuaakWiNcqBZc1qEWnkfllqiW Rbj74OejDjDCLKJ52KfF3c+//gQ2l1chzCEYeLlsADTcqv6Lx7AGBzK+CgRtaqGh Xxg0Zw4ej5UcSdP6GK5MV9zb0o7WNI09NXlEgQBszEK4EhKIotmWSQwi0M3Bd2QK m8wTcGi7Gzr4KafORldrgNmtGCGo/ZO8/ohJMxg4PywT8zKa80tgRg5E3p1uusi1 xaqV7yZYxedsfxPQFCFvbV8mDG6sHfAY+DC0w7V3dI65j3ZwrsyxqLrsuhHxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpEM9Z4tBBfcAjwBU0Uxjf4hZAUMwHwYDVR0j BBgwFoAU6G2BYAwuDECKg6EP4XNPfLgASbUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTZiYjMzM2MtOTgyYi00ZmNlLWFjODEtYmMwNjkyMjllMjQzLzAvRTg2RDgxNjAw QzJFMEM0MDhBODNBMTBGRTE3MzRGN0NCODAwNDlCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FODZEODE2MDBDMkUwQzQwOEE4M0ExMEZFMTczNEY3Q0I4MDA0 OUI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTZiYjMzM2MtOTgyYi00ZmNlLWFj ODEtYmMwNjkyMjllMjQzLzAvRTg2RDgxNjAwQzJFMEM0MDhBODNBMTBGRTE3MzRG N0NCODAwNDlCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALxIaLtRra13rK81i7oaNeYeB5u4vlDJkcTD ruuLnte9SlKSpVdDhKPuPdW+3Ufql3f01828RvFZiGM7vKt6en1+kuE6pFyOtJZo Gu6fxr8nAtzDlmniNXvQPFxQ9VLJ3NynRHn2Q9H2rPLljTRx3r+ZGHwk6AAK4Zt/ mZNXuywXd7NUtQdTby3EMOSvr11wIkADdeYZmQ20WEH2s9bbq5AJJ5Cp5rzzrQsR ZOHlAGA8GYhfn6rW93JCCiKf/wNsAzW1WtFoJNBqqNVxYRL6C5WR9PGVD8AVUvPI qCamtDcQZV/e+NvAG7QKqbS/A7g6ehjKP1y8C3yonl+8ZFLtOWc= -----END CERTIFICATE-----Generated at Mon Sep 21 08:12:36 2026 by rpki-client