$ rpki-client -vvvf rpki-rsync.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/E57A1275BA6338436B9AC4AE519D143B5747116B.mft File: E57A1275BA6338436B9AC4AE519D143B5747116B.mft (raw, json) Hash identifier: wNWc6c/MeJBUHl9AGqthYcLus6tRbPv5VGwkn2Jh5GI= Subject key identifier: C0:D7:EC:42:72:58:C0:85:BE:47:95:2A:B3:86:CD:F2:D0:F1:D2:C2 Authority key identifier: E5:7A:12:75:BA:63:38:43:6B:9A:C4:AE:51:9D:14:3B:57:47:11:6B Certificate issuer: /CN=E57A1275BA6338436B9AC4AE519D143B5747116B Certificate serial: 33D14A3C040BC7B58D137F2B0FA5958497C6DEEB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E57A1275BA6338436B9AC4AE519D143B5747116B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/E57A1275BA6338436B9AC4AE519D143B5747116B.mft Manifest number: BD Signing time: Sun 20 Sep 2026 12:37:46 +0000 Manifest this update: Sun 20 Sep 2026 12:32:46 +0000 Manifest next update: Mon 21 Sep 2026 15:03:46 +0000 Files and hashes: 1: 3130332e3138342e3132382e302f32342d3234203d3e20313439363830.roa (hash: hnn33VKD9efbhB9XD33L1BjuaAJltz7STiP/0n5gC5M=) 2: E57A1275BA6338436B9AC4AE519D143B5747116B.crl (hash: T2B43umwECyyi29QTpdvTJ721u+8oGrEdnsJV7oyxE4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/E57A1275BA6338436B9AC4AE519D143B5747116B.crl rsync://rpki-rsync.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/E57A1275BA6338436B9AC4AE519D143B5747116B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E57A1275BA6338436B9AC4AE519D143B5747116B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 15:03:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:d1:4a:3c:04:0b:c7:b5:8d:13:7f:2b:0f:a5:95:84:97:c6:de:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E57A1275BA6338436B9AC4AE519D143B5747116B Validity Not Before: Sep 20 12:32:46 2026 GMT Not After : Sep 21 15:03:46 2026 GMT Subject: CN=C0D7EC427258C085BE47952AB386CDF2D0F1D2C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e8:7f:39:3d:98:36:67:65:58:ed:fe:bb:ef: d6:ec:2a:c6:c0:fb:54:c4:26:ed:3f:9e:f9:77:e1: 71:2e:e4:3c:d0:0c:6f:53:f0:86:8e:b3:64:f3:5b: 1c:00:d5:af:60:98:7d:b7:6c:af:4c:fb:d2:57:c5: e8:93:21:ab:3c:b1:7c:ed:a8:25:94:3d:ab:ea:fa: 71:53:2e:2a:4e:f3:46:41:b6:ff:2d:2c:80:25:5e: 81:cf:5d:ef:39:65:a1:d1:66:67:03:5e:31:ff:ba: 75:c6:b2:fe:85:ab:2d:25:76:6f:e3:00:99:03:47: 78:12:ed:9f:42:aa:92:7e:93:e3:7f:02:a0:1a:b1: 8b:36:9d:12:2c:49:b6:77:e9:63:dc:b6:04:50:25: 6a:d1:a7:90:97:c3:16:ab:7a:b1:b9:b8:22:64:e0: 2f:a4:67:7f:d6:46:db:38:22:46:b0:26:80:1f:81: c6:6f:10:b0:96:f8:7d:0f:41:7f:3c:22:09:81:77: 6a:5c:d6:93:07:43:c6:7a:41:0e:07:36:aa:83:95: 49:df:06:62:64:0c:b9:58:66:12:96:96:fd:1c:ec: 05:ce:24:70:55:ab:54:fb:c9:77:8d:79:ef:a6:6d: f8:c5:e1:1e:c9:d6:42:6a:f5:7b:07:e3:9c:ed:e5: 98:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:D7:EC:42:72:58:C0:85:BE:47:95:2A:B3:86:CD:F2:D0:F1:D2:C2 X509v3 Authority Key Identifier: keyid:E5:7A:12:75:BA:63:38:43:6B:9A:C4:AE:51:9D:14:3B:57:47:11:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/E57A1275BA6338436B9AC4AE519D143B5747116B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E57A1275BA6338436B9AC4AE519D143B5747116B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/E57A1275BA6338436B9AC4AE519D143B5747116B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:1b:57:57:2d:96:a8:74:b7:5e:01:3e:e2:f9:fe:58:b0:b6: 3a:8d:8d:0a:88:f6:dd:ea:12:a1:6c:38:5b:2a:1a:b6:f1:19: 00:9a:32:bc:96:a4:47:db:f0:10:5d:c0:3a:65:29:f1:ca:2e: 6f:b3:3e:56:59:dd:3e:36:cc:e2:97:9b:dd:b3:ab:96:98:5d: 3d:b4:3e:86:ac:b3:8c:88:15:4f:5e:94:6b:e9:e8:7a:9a:27: b6:fe:b2:17:0f:d0:58:e5:b8:56:91:e1:83:3a:f9:6c:69:17: 3b:85:8b:13:7d:0c:ce:5f:e8:45:54:9d:bd:5a:c4:58:39:4a: 21:f1:d5:a0:23:a5:5e:e5:64:fd:ae:75:37:e8:e8:8d:73:28: f4:76:8b:51:9b:c1:9d:fa:68:e1:6b:bb:9a:28:52:fb:fa:02: 95:62:9c:ac:8e:39:23:83:09:b5:3f:d0:d0:cf:05:97:9c:28: 34:10:2b:c2:8f:b5:66:83:f9:d4:cc:59:21:ab:ec:cb:7c:6d: ab:a8:79:a7:a6:4a:ce:e1:a6:b0:fb:93:80:f2:92:72:49:fa: e2:d2:b2:93:3e:45:0f:80:c8:02:1e:ad:ee:b9:2d:e5:c1:a8: 2a:13:01:4b:45:d2:7f:e2:1c:7a:5d:eb:39:7c:c5:31:20:6e: 8d:4d:e5:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM9FKPAQLx7WNE38rD6WVhJfG3uswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTU3QTEyNzVCQTYzMzg0MzZCOUFDNEFFNTE5RDE0M0I1 NzQ3MTE2QjAeFw0yNjA5MjAxMjMyNDZaFw0yNjA5MjExNTAzNDZaMDMxMTAvBgNV BAMTKEMwRDdFQzQyNzI1OEMwODVCRTQ3OTUyQUIzODZDREYyRDBGMUQyQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC96H85PZg2Z2VY7f6779bsKsbA +1TEJu0/nvl34XEu5DzQDG9T8IaOs2TzWxwA1a9gmH23bK9M+9JXxeiTIas8sXzt qCWUPavq+nFTLipO80ZBtv8tLIAlXoHPXe85ZaHRZmcDXjH/unXGsv6Fqy0ldm/j AJkDR3gS7Z9CqpJ+k+N/AqAasYs2nRIsSbZ36WPctgRQJWrRp5CXwxarerG5uCJk 4C+kZ3/WRts4IkawJoAfgcZvELCW+H0PQX88IgmBd2pc1pMHQ8Z6QQ4HNqqDlUnf BmJkDLlYZhKWlv0c7AXOJHBVq1T7yXeNee+mbfjF4R7J1kJq9XsH45zt5ZhRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwNfsQnJYwIW+R5Uqs4bN8tDx0sIwHwYDVR0j BBgwFoAU5XoSdbpjOENrmsSuUZ0UO1dHEWswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTkzZTNkMjYtNGFhZi00ZTk2LWFkNDktNTI3M2YwYTRlNmVkLzAvRTU3QTEyNzVC QTYzMzg0MzZCOUFDNEFFNTE5RDE0M0I1NzQ3MTE2Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNTdBMTI3NUJBNjMzODQzNkI5QUM0QUU1MTlEMTQzQjU3NDcx MTZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTkzZTNkMjYtNGFhZi00ZTk2LWFk NDktNTI3M2YwYTRlNmVkLzAvRTU3QTEyNzVCQTYzMzg0MzZCOUFDNEFFNTE5RDE0 M0I1NzQ3MTE2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA4bV1ctlqh0t14BPuL5/liwtjqNjQqI9t3q EqFsOFsqGrbxGQCaMryWpEfb8BBdwDplKfHKLm+zPlZZ3T42zOKXm92zq5aYXT20 Poass4yIFU9elGvp6HqaJ7b+shcP0FjluFaR4YM6+WxpFzuFixN9DM5f6EVUnb1a xFg5SiHx1aAjpV7lZP2udTfo6I1zKPR2i1GbwZ36aOFru5ooUvv6ApVinKyOOSOD CbU/0NDPBZecKDQQK8KPtWaD+dTMWSGr7Mt8bauoeaemSs7hprD7k4DyknJJ+uLS spM+RQ+AyAIere65LeXBqCoTAUtF0n/iHHpd6zl8xTEgbo1N5Qg= -----END CERTIFICATE-----Generated at Sun Sep 20 16:53:44 2026 by rpki-client