$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.mft File: E37B9DE76B8369C86CBDD85F17B4B08DA3903912.mft (raw, json) Hash identifier: e4R9oTW5QtptDym7nYVUWlVynl3hJUG6Phmd2d8K91o= Subject key identifier: 8D:A6:AF:2B:AC:E6:BC:BB:EA:9D:E9:9D:11:CD:F3:E7:DD:69:0A:10 Authority key identifier: E3:7B:9D:E7:6B:83:69:C8:6C:BD:D8:5F:17:B4:B0:8D:A3:90:39:12 Certificate issuer: /CN=E37B9DE76B8369C86CBDD85F17B4B08DA3903912 Certificate serial: 53576D6DA084A35A3F212A7D9FFC0B8008BBCDFA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.mft Manifest number: D5 Signing time: Fri 09 Oct 2026 16:01:53 +0000 Manifest this update: Fri 09 Oct 2026 15:56:53 +0000 Manifest next update: Sat 10 Oct 2026 17:38:53 +0000 Files and hashes: 1: 3230332e3132332e36302e302f32332d3233203d3e203338373535.roa (hash: PQRif44rE/vHl6KI352lV/5EM+qmOZyEEJRR83eHyBI=) 2: 3230332e3132332e36302e302f32342d3234203d3e203338373535.roa (hash: oSx0cFa1nsipfiH0pkhplDWMeAxUpXV7UZUBLF8bNIo=) 3: E37B9DE76B8369C86CBDD85F17B4B08DA3903912.crl (hash: +0NP7vo5DBEUWVV5zOMBccJ/SUPsdqMe+f5o71GgeGE=) 4: 3230332e3132332e36332e302f32342d3234203d3e203338373535.roa (hash: 8H0ycrYvaT3pEUwMuUYMPkeb6+nIJfK2o58CvS7laFE=) 5: 3230332e3132332e36322e302f32332d3234203d3e203338373535.roa (hash: D9MoAcvsSp+WiO9dOaWrzis15LUcy+CINQir9MZwMpg=) 6: 323030313a6466353a336530303a3a2f34382d3438203d3e203338373535.roa (hash: n2lJ9bzcnUw6O+w0adArBpP91Kujz+/33ven90vG4LQ=) 7: 3230332e3132332e36302e302f32322d3232203d3e203338373535.roa (hash: gmD9ajpsyadNWLNIYrlzTIV+UYw18CE56nZqbLaELis=) 8: 3230332e3132332e36322e302f32342d3234203d3e203338373535.roa (hash: rS0I7oveJtn+l4aAAzlWodrD1fslAxWP3f3cXLvaPIY=) 9: 3230332e3132332e36312e302f32342d3234203d3e203338373535.roa (hash: WdpYi9xOJp2Ik1RGOa6PotA1dBwWjL6rALxGb9WjneQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.crl rsync://rpki-rsync.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 08:51:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:57:6d:6d:a0:84:a3:5a:3f:21:2a:7d:9f:fc:0b:80:08:bb:cd:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E37B9DE76B8369C86CBDD85F17B4B08DA3903912 Validity Not Before: Oct 9 15:56:53 2026 GMT Not After : Oct 10 17:38:53 2026 GMT Subject: CN=8DA6AF2BACE6BCBBEA9DE99D11CDF3E7DD690A10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ca:e3:55:be:69:22:e0:f1:ea:d2:3e:25:39: d2:6d:af:91:4b:a7:e2:02:8a:d2:fe:f7:24:6b:1a: 8a:85:07:91:aa:e8:32:98:3e:6d:79:1f:2b:a2:e5: 1c:5b:f2:fc:61:f5:66:33:0e:26:70:00:e1:fa:3e: cc:7c:0e:1b:0e:00:c6:a9:f5:52:bc:d6:14:18:c8: 8e:8a:00:bf:94:3e:6c:c0:d7:8e:15:3a:e0:71:a1: 6a:27:5b:79:7c:e2:b0:23:9c:5b:cd:1f:7c:d9:79: 91:16:74:87:f2:52:61:79:bf:43:08:7a:7b:f5:86: d2:c0:42:12:b6:0b:f0:26:ab:89:13:52:88:85:e2: 96:55:af:f2:42:89:3f:3e:93:9d:dc:68:bd:fc:c8: f1:09:fc:5c:e5:1c:6f:90:9b:9a:92:ba:3d:6e:07: 97:e8:9e:0e:2e:32:7c:46:be:a1:b7:07:2d:d5:b1: ff:93:29:f4:35:db:2c:18:d6:e7:cd:55:ae:1b:cb: ee:cf:20:f3:1d:fa:42:8c:97:1f:4a:01:b6:24:39: 2c:18:bf:a5:af:38:e2:3b:01:40:3a:ed:95:fd:b9: ef:cc:74:8b:87:a9:4c:27:e0:c3:e5:7a:e5:29:57: f1:01:c4:6e:4f:d8:96:1f:ac:c2:d1:44:23:82:7c: b4:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:A6:AF:2B:AC:E6:BC:BB:EA:9D:E9:9D:11:CD:F3:E7:DD:69:0A:10 X509v3 Authority Key Identifier: keyid:E3:7B:9D:E7:6B:83:69:C8:6C:BD:D8:5F:17:B4:B0:8D:A3:90:39:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:11:c0:ed:15:90:e0:8a:62:86:cf:3c:dc:f0:5b:4c:94:83: 43:16:16:59:0a:ff:96:0b:71:38:d3:9d:6b:5e:3c:56:ba:a8: b0:78:dd:e0:f4:fb:4a:2c:bc:a9:ff:88:27:f9:be:4f:69:87: 1d:f1:bb:95:0a:61:01:43:b8:d0:1d:a3:46:f3:97:4a:be:3a: d3:ec:e0:5f:d0:ea:d5:51:d6:ba:1b:0f:62:fe:59:a4:e2:c4: 06:e4:d8:2d:01:2f:29:89:9e:75:2c:c8:15:99:77:2a:77:ec: f6:18:d1:de:e2:46:e5:bc:a9:5d:f7:df:f9:3c:fd:b0:eb:7a: e4:70:2e:34:32:37:14:d6:33:22:3b:63:7d:21:03:66:9c:1e: 08:b9:90:01:c2:1b:97:11:16:d8:2f:49:98:03:eb:ec:96:98: 11:f0:fd:e6:80:c6:80:5d:40:01:26:b4:56:26:3c:fa:18:7d: a9:1a:a3:59:0c:7a:2a:b3:8b:f6:81:49:99:88:b4:36:7c:76: a5:50:4b:fc:cf:64:b1:ae:58:74:9f:07:69:02:09:7e:0f:34: 98:f0:7c:2d:a3:dc:e8:89:da:29:e2:cd:c8:a7:98:98:b6:65: 96:88:b7:a4:b1:da:71:32:5a:93:ec:d9:e9:db:ab:02:3e:e4: 77:10:ce:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU1dtbaCEo1o/ISp9n/wLgAi7zfowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM3QjlERTc2QjgzNjlDODZDQkREODVGMTdCNEIwOERB MzkwMzkxMjAeFw0yNjEwMDkxNTU2NTNaFw0yNjEwMTAxNzM4NTNaMDMxMTAvBgNV BAMTKDhEQTZBRjJCQUNFNkJDQkJFQTlERTk5RDExQ0RGM0U3REQ2OTBBMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAyuNVvmki4PHq0j4lOdJtr5FL p+ICitL+9yRrGoqFB5Gq6DKYPm15Hyui5Rxb8vxh9WYzDiZwAOH6Psx8DhsOAMap 9VK81hQYyI6KAL+UPmzA144VOuBxoWonW3l84rAjnFvNH3zZeZEWdIfyUmF5v0MI env1htLAQhK2C/Amq4kTUoiF4pZVr/JCiT8+k53caL38yPEJ/FzlHG+Qm5qSuj1u B5fong4uMnxGvqG3By3Vsf+TKfQ12ywY1ufNVa4by+7PIPMd+kKMlx9KAbYkOSwY v6WvOOI7AUA67ZX9ue/MdIuHqUwn4MPleuUpV/EBxG5P2JYfrMLRRCOCfLTXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjaavK6zmvLvqnemdEc3z591pChAwHwYDVR0j BBgwFoAU43ud52uDachsvdhfF7SwjaOQORIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWFiMzkwMmItNzQ1OS00ODU0LWE1ZjUtMDlmMTVkOGM4N2QzLzAvRTM3QjlERTc2 QjgzNjlDODZDQkREODVGMTdCNEIwOERBMzkwMzkxMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMzdCOURFNzZCODM2OUM4NkNCREQ4NUYxN0I0QjA4REEzOTAz OTEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWFiMzkwMmItNzQ1OS00ODU0LWE1 ZjUtMDlmMTVkOGM4N2QzLzAvRTM3QjlERTc2QjgzNjlDODZDQkREODVGMTdCNEIw OERBMzkwMzkxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHwRwO0VkOCKYobPPNzwW0yUg0MWFlkK/5YL cTjTnWtePFa6qLB43eD0+0osvKn/iCf5vk9phx3xu5UKYQFDuNAdo0bzl0q+OtPs 4F/Q6tVR1robD2L+WaTixAbk2C0BLymJnnUsyBWZdyp37PYY0d7iRuW8qV333/k8 /bDreuRwLjQyNxTWMyI7Y30hA2acHgi5kAHCG5cRFtgvSZgD6+yWmBHw/eaAxoBd QAEmtFYmPPoYfakao1kMeiqzi/aBSZmItDZ8dqVQS/zPZLGuWHSfB2kCCX4PNJjw fC2j3OiJ2inizcinmJi2ZZaIt6Sx2nEyWpPs2enbqwI+5HcQzgA= -----END CERTIFICATE-----Generated at Sat Oct 10 00:18:35 2026 by rpki-client