$ rpki-client -vvvf rpki-rsync.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/E9306CA027A6C73945DD117FFCFB3BAB04C66543.mft File: E9306CA027A6C73945DD117FFCFB3BAB04C66543.mft (raw, json) Hash identifier: BxjqEZJR2AAGuimgrKJq4rnFc1W47OlzFDLCOplhC+o= Subject key identifier: 6E:44:B5:98:E0:35:6F:CD:F3:AB:FC:1B:3C:0C:70:26:5F:7C:73:5E Authority key identifier: E9:30:6C:A0:27:A6:C7:39:45:DD:11:7F:FC:FB:3B:AB:04:C6:65:43 Certificate issuer: /CN=E9306CA027A6C73945DD117FFCFB3BAB04C66543 Certificate serial: 290E218F7ED00E3407CE3A7A881242414D376BD7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9306CA027A6C73945DD117FFCFB3BAB04C66543.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/E9306CA027A6C73945DD117FFCFB3BAB04C66543.mft Manifest number: BD Signing time: Mon 21 Sep 2026 13:23:05 +0000 Manifest this update: Mon 21 Sep 2026 13:18:05 +0000 Manifest next update: Tue 22 Sep 2026 17:04:05 +0000 Files and hashes: 1: E9306CA027A6C73945DD117FFCFB3BAB04C66543.crl (hash: JRDE4obGsl+pG9Zjb2qFVIiLcnloGsGf7QAEyLTRGM0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/E9306CA027A6C73945DD117FFCFB3BAB04C66543.crl rsync://rpki-rsync.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/E9306CA027A6C73945DD117FFCFB3BAB04C66543.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9306CA027A6C73945DD117FFCFB3BAB04C66543.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:0e:21:8f:7e:d0:0e:34:07:ce:3a:7a:88:12:42:41:4d:37:6b:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9306CA027A6C73945DD117FFCFB3BAB04C66543 Validity Not Before: Sep 21 13:18:05 2026 GMT Not After : Sep 22 17:04:05 2026 GMT Subject: CN=6E44B598E0356FCDF3ABFC1B3C0C70265F7C735E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e2:f7:89:4b:cb:43:8d:0b:05:22:1f:d3:88: c4:da:e6:e8:5a:05:57:80:4a:41:2b:90:9a:a2:f4: 6c:62:9f:af:c5:33:e0:86:b1:4b:ac:ca:f9:b7:6f: 24:28:86:f6:11:e3:95:48:fb:6d:fb:55:9c:2e:15: 56:b2:00:29:bd:a1:78:78:b4:49:16:c3:77:b1:19: 97:69:ea:f2:75:6c:92:89:88:50:89:0d:41:29:a5: 9a:e5:bf:9a:8c:64:76:6b:46:91:a5:cc:61:e7:16: 47:e9:95:08:cb:c3:28:f2:2d:df:68:74:43:70:25: 1b:9a:e6:d4:a9:68:fd:f5:a0:05:bc:2b:ca:43:ee: ea:ff:c8:2e:42:2c:50:79:e9:5d:a1:1f:20:78:8a: 55:f1:8c:db:00:b0:23:f6:9d:90:a9:9c:d9:56:67: b1:7c:4d:18:51:40:ed:5a:9b:2b:6b:7d:e7:40:a5: 1f:86:b6:d3:57:4b:e9:d4:33:41:26:58:5f:01:7a: c1:54:b9:d9:90:90:1f:e9:20:45:d8:cf:da:42:28: 9b:a4:f8:75:a0:a9:d2:a4:a5:11:e5:f3:41:da:e4: ed:f9:8d:8c:85:3e:85:6d:c4:e6:c8:88:1d:53:da: d3:7c:7d:b1:44:08:a7:ad:32:85:95:14:26:f2:f2: 01:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:44:B5:98:E0:35:6F:CD:F3:AB:FC:1B:3C:0C:70:26:5F:7C:73:5E X509v3 Authority Key Identifier: keyid:E9:30:6C:A0:27:A6:C7:39:45:DD:11:7F:FC:FB:3B:AB:04:C6:65:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/E9306CA027A6C73945DD117FFCFB3BAB04C66543.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9306CA027A6C73945DD117FFCFB3BAB04C66543.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/E9306CA027A6C73945DD117FFCFB3BAB04C66543.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:76:32:c9:e5:77:87:bd:3e:0e:e7:a7:6b:8f:f9:ad:f1:26: 95:53:c7:6d:37:12:5d:ed:40:85:b4:7b:14:93:26:45:0a:76: fc:50:98:d5:5a:8f:7a:ff:d6:c5:5b:82:95:60:9a:8c:c9:f0: 72:f5:f2:dd:49:b4:f8:e5:15:69:ba:15:71:c8:10:b0:d9:ba: 0a:61:65:ce:36:e0:42:44:df:22:04:50:fe:72:3d:40:a4:d7: 80:3d:a6:6a:5f:6c:89:32:70:24:f2:92:42:5f:91:a2:7d:30: 7e:7e:37:85:b2:bd:10:d8:5c:63:85:f4:7f:02:78:fe:5c:c0: 02:45:de:55:19:56:8d:44:35:18:a0:88:58:5e:12:48:b8:0e: ca:62:be:91:35:9c:ab:21:b3:d9:04:ac:a7:a0:75:7c:aa:e6: 69:77:47:82:f6:19:86:c1:50:2d:15:15:6c:d8:b2:1f:6a:44: 0d:98:a3:86:9f:64:3d:81:50:76:9d:01:64:dc:70:bb:54:2a: 4a:ad:be:9c:80:9d:49:1b:cd:45:f5:55:98:a9:3f:ac:b7:21: 72:0b:cb:12:25:44:96:92:e4:d6:0c:98:8d:b3:11:81:7e:cd: dc:75:0e:7e:96:a7:2f:c5:bc:41:c9:91:33:55:6c:fb:d2:e4: 5f:af:10:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKQ4hj37QDjQHzjp6iBJCQU03a9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTkzMDZDQTAyN0E2QzczOTQ1REQxMTdGRkNGQjNCQUIw NEM2NjU0MzAeFw0yNjA5MjExMzE4MDVaFw0yNjA5MjIxNzA0MDVaMDMxMTAvBgNV BAMTKDZFNDRCNTk4RTAzNTZGQ0RGM0FCRkMxQjNDMEM3MDI2NUY3QzczNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc4veJS8tDjQsFIh/TiMTa5uha BVeASkErkJqi9Gxin6/FM+CGsUusyvm3byQohvYR45VI+237VZwuFVayACm9oXh4 tEkWw3exGZdp6vJ1bJKJiFCJDUEppZrlv5qMZHZrRpGlzGHnFkfplQjLwyjyLd9o dENwJRua5tSpaP31oAW8K8pD7ur/yC5CLFB56V2hHyB4ilXxjNsAsCP2nZCpnNlW Z7F8TRhRQO1amytrfedApR+GttNXS+nUM0EmWF8BesFUudmQkB/pIEXYz9pCKJuk +HWgqdKkpRHl80Ha5O35jYyFPoVtxObIiB1T2tN8fbFECKetMoWVFCby8gGNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbkS1mOA1b83zq/wbPAxwJl98c14wHwYDVR0j BBgwFoAU6TBsoCemxzlF3RF//Ps7qwTGZUMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTk0YmVmMzctNzQ1Yi00ZmZmLWJiMWYtYWZmMWYzM2Y1ZTVhLzAvRTkzMDZDQTAy N0E2QzczOTQ1REQxMTdGRkNGQjNCQUIwNEM2NjU0My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOTMwNkNBMDI3QTZDNzM5NDVERDExN0ZGQ0ZCM0JBQjA0QzY2 NTQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTk0YmVmMzctNzQ1Yi00ZmZmLWJi MWYtYWZmMWYzM2Y1ZTVhLzAvRTkzMDZDQTAyN0E2QzczOTQ1REQxMTdGRkNGQjNC QUIwNEM2NjU0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADR2Msnld4e9Pg7np2uP+a3xJpVTx203El3t QIW0exSTJkUKdvxQmNVaj3r/1sVbgpVgmozJ8HL18t1JtPjlFWm6FXHIELDZugph Zc424EJE3yIEUP5yPUCk14A9pmpfbIkycCTykkJfkaJ9MH5+N4WyvRDYXGOF9H8C eP5cwAJF3lUZVo1ENRigiFheEki4DspivpE1nKshs9kErKegdXyq5ml3R4L2GYbB UC0VFWzYsh9qRA2Yo4afZD2BUHadAWTccLtUKkqtvpyAnUkbzUX1VZipP6y3IXIL yxIlRJaS5NYMmI2zEYF+zdx1Dn6Wpy/FvEHJkTNVbPvS5F+vECY= -----END CERTIFICATE-----Generated at Mon Sep 21 20:39:19 2026 by rpki-client