$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/E34C8E8E9B9B8D0D672DBA596B883531646A2C6E.mft File: E34C8E8E9B9B8D0D672DBA596B883531646A2C6E.mft (raw, json) Hash identifier: 5WYUgHAT/60OorEhbl0kINBEfar3Ni64a94Ge7Diyo0= Subject key identifier: 9E:05:A0:BA:8C:8D:00:6A:E4:93:EA:BC:D1:FC:67:7D:BB:82:76:05 Authority key identifier: E3:4C:8E:8E:9B:9B:8D:0D:67:2D:BA:59:6B:88:35:31:64:6A:2C:6E Certificate issuer: /CN=E34C8E8E9B9B8D0D672DBA596B883531646A2C6E Certificate serial: 76163D529FD726739EEC625E8B5E884049246F7D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E34C8E8E9B9B8D0D672DBA596B883531646A2C6E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/E34C8E8E9B9B8D0D672DBA596B883531646A2C6E.mft Manifest number: C1 Signing time: Tue 22 Sep 2026 22:54:53 +0000 Manifest this update: Tue 22 Sep 2026 22:49:53 +0000 Manifest next update: Thu 24 Sep 2026 02:10:53 +0000 Files and hashes: 1: E34C8E8E9B9B8D0D672DBA596B883531646A2C6E.crl (hash: KJVEebY1V+UsvGRz3m3wrlfRO5/iqMm+nZgRChRKHsc=) 2: 3130332e31372e3139322e302f32342d3234203d3e20313331373836.roa (hash: 3K7HIaNZHq6siHJ1rjKjSGagB9KT2fdBKPyuyy2IpIc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/E34C8E8E9B9B8D0D672DBA596B883531646A2C6E.crl rsync://rpki-rsync.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/E34C8E8E9B9B8D0D672DBA596B883531646A2C6E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E34C8E8E9B9B8D0D672DBA596B883531646A2C6E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 02:10:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:16:3d:52:9f:d7:26:73:9e:ec:62:5e:8b:5e:88:40:49:24:6f:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E34C8E8E9B9B8D0D672DBA596B883531646A2C6E Validity Not Before: Sep 22 22:49:53 2026 GMT Not After : Sep 24 02:10:53 2026 GMT Subject: CN=9E05A0BA8C8D006AE493EABCD1FC677DBB827605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c0:b5:6e:ea:29:50:bd:90:c4:5f:1a:66:08: 21:39:b3:a9:69:04:d8:8e:1e:b3:9c:54:0b:a0:fe: 11:08:2e:1b:dc:b5:06:cd:c0:54:c6:32:c5:4b:d8: 0e:13:b5:29:c4:32:59:6a:21:f8:bf:39:8f:23:3a: d2:ef:9d:e0:31:5e:8b:78:fc:cb:99:44:31:df:3c: d1:b9:87:51:16:b6:8c:b0:7f:97:28:40:40:72:1b: 25:b0:ea:43:0c:8b:df:2e:11:67:06:27:d8:37:4d: b6:f7:3d:9b:d6:e9:5d:e9:f6:a2:8d:9c:44:33:58: 82:7a:6f:60:00:3a:3c:7b:8f:de:66:3a:97:e7:fc: 22:42:83:1a:be:9d:84:c4:76:13:b8:1e:22:91:47: f3:bc:fa:87:2d:c0:f2:df:68:f6:b2:0c:ac:7b:ae: 2a:14:12:b5:3b:96:ef:8e:ae:67:90:75:be:46:be: 72:1e:15:e5:7d:fa:84:06:94:4b:f8:f1:d3:c1:31: 84:cc:4a:3c:fd:cd:21:07:01:3e:70:e8:e5:8c:97: 05:44:ee:e3:a5:09:76:1e:f4:94:9e:fd:6a:81:d4: 47:0c:8f:a2:f5:70:e0:b7:1f:5b:6c:ec:c9:3e:74: 86:e3:de:e6:53:87:5e:77:a5:b2:a9:5d:6b:13:dd: 7f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:05:A0:BA:8C:8D:00:6A:E4:93:EA:BC:D1:FC:67:7D:BB:82:76:05 X509v3 Authority Key Identifier: keyid:E3:4C:8E:8E:9B:9B:8D:0D:67:2D:BA:59:6B:88:35:31:64:6A:2C:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/E34C8E8E9B9B8D0D672DBA596B883531646A2C6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E34C8E8E9B9B8D0D672DBA596B883531646A2C6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/E34C8E8E9B9B8D0D672DBA596B883531646A2C6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:6b:30:52:cd:69:df:bf:1c:a6:d6:fc:c6:2a:88:44:81:63: c9:2a:95:bd:af:f7:6d:d7:a9:35:c2:23:87:64:4a:13:86:bb: 57:50:3a:37:0b:37:fe:de:6a:de:a8:d6:52:6b:59:38:0c:e2: 70:c1:b8:19:d0:76:6e:53:e4:09:5c:cc:d8:7d:78:8b:be:14: 06:0b:67:48:d2:63:b2:17:d4:7c:79:0d:5c:1e:ea:66:a2:4d: ca:c5:43:b4:f7:36:d2:8a:93:12:e6:77:a7:2c:c3:c1:3e:da: 70:c5:e2:ac:a7:81:b4:0b:79:45:3f:22:b9:af:22:a2:c7:0a: 6f:6f:dd:a2:65:02:c1:a7:3f:b4:b7:ac:0b:db:fa:34:32:d9: 8c:2f:2b:47:27:91:41:65:c8:98:be:17:f9:a8:ce:90:f7:c1: 10:03:32:d9:60:03:8a:4b:13:41:a1:00:20:52:91:2d:1e:55: 62:71:c1:73:d5:69:ba:0a:bf:60:be:08:66:11:0a:5f:9b:00: eb:32:db:9a:e7:7d:4b:a4:bd:73:42:67:f3:94:5e:31:9c:5b: 5d:26:8e:70:ff:ad:98:3d:82:99:ea:be:08:f7:9c:67:02:dd: 98:8a:35:d6:40:09:c4:23:76:4c:82:38:b3:4a:95:4c:2f:87: 2e:a3:20:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdhY9Up/XJnOe7GJei16IQEkkb30wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM0QzhFOEU5QjlCOEQwRDY3MkRCQTU5NkI4ODM1MzE2 NDZBMkM2RTAeFw0yNjA5MjIyMjQ5NTNaFw0yNjA5MjQwMjEwNTNaMDMxMTAvBgNV BAMTKDlFMDVBMEJBOEM4RDAwNkFFNDkzRUFCQ0QxRkM2NzdEQkI4Mjc2MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3wLVu6ilQvZDEXxpmCCE5s6lp BNiOHrOcVAug/hEILhvctQbNwFTGMsVL2A4TtSnEMllqIfi/OY8jOtLvneAxXot4 /MuZRDHfPNG5h1EWtoywf5coQEByGyWw6kMMi98uEWcGJ9g3Tbb3PZvW6V3p9qKN nEQzWIJ6b2AAOjx7j95mOpfn/CJCgxq+nYTEdhO4HiKRR/O8+octwPLfaPayDKx7 rioUErU7lu+OrmeQdb5GvnIeFeV9+oQGlEv48dPBMYTMSjz9zSEHAT5w6OWMlwVE 7uOlCXYe9JSe/WqB1EcMj6L1cOC3H1ts7Mk+dIbj3uZTh153pbKpXWsT3X9XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUngWguoyNAGrkk+q80fxnfbuCdgUwHwYDVR0j BBgwFoAU40yOjpubjQ1nLbpZa4g1MWRqLG4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTE1MTRkNjEtOTlmZi00MmE5LWJhOWEtNTk2MWRkNjhkYjY1LzAvRTM0QzhFOEU5 QjlCOEQwRDY3MkRCQTU5NkI4ODM1MzE2NDZBMkM2RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMzRDOEU4RTlCOUI4RDBENjcyREJBNTk2Qjg4MzUzMTY0NkEy QzZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTE1MTRkNjEtOTlmZi00MmE5LWJh OWEtNTk2MWRkNjhkYjY1LzAvRTM0QzhFOEU5QjlCOEQwRDY3MkRCQTU5NkI4ODM1 MzE2NDZBMkM2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKFrMFLNad+/HKbW/MYqiESBY8kqlb2v923X qTXCI4dkShOGu1dQOjcLN/7eat6o1lJrWTgM4nDBuBnQdm5T5AlczNh9eIu+FAYL Z0jSY7IX1Hx5DVwe6maiTcrFQ7T3NtKKkxLmd6csw8E+2nDF4qyngbQLeUU/Irmv IqLHCm9v3aJlAsGnP7S3rAvb+jQy2YwvK0cnkUFlyJi+F/mozpD3wRADMtlgA4pL E0GhACBSkS0eVWJxwXPVaboKv2C+CGYRCl+bAOsy25rnfUukvXNCZ/OUXjGcW10m jnD/rZg9gpnqvgj3nGcC3ZiKNdZACcQjdkyCOLNKlUwvhy6jIF0= -----END CERTIFICATE-----Generated at Wed Sep 23 12:04:28 2026 by rpki-client