$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.mft File: E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.mft (raw, json) Hash identifier: R2oNBT4wnl2zKVSxO1/u2UWun03EAD2XuSa+cPz9oKQ= Subject key identifier: E7:42:5C:A7:4E:76:AC:B3:1A:7A:F5:E9:70:56:1C:F5:EB:4C:DC:E5 Authority key identifier: E0:AE:9F:AD:9E:25:90:82:B0:6C:CB:B9:4A:F4:78:F6:B8:61:25:F9 Certificate issuer: /CN=E0AE9FAD9E259082B06CCBB94AF478F6B86125F9 Certificate serial: 319C57C534627C4DA2B6C1558A616FE2E771E958 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.mft Manifest number: BE Signing time: Mon 21 Sep 2026 13:17:57 +0000 Manifest this update: Mon 21 Sep 2026 13:12:57 +0000 Manifest next update: Tue 22 Sep 2026 16:17:57 +0000 Files and hashes: 1: 3130332e3133392e3230372e302f32342d3234203d3e20313530353133.roa (hash: PrnOvop5MQlI3Bsjow/Ci5R1laOpI/zKBTh7ZhHcVKA=) 2: E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.crl (hash: lsha94hmdJWfK1VaCA8injjIpaXr7Jawu28eOzSP4Bs=) 3: 3130332e3139352e32382e302f32342d3234203d3e20313530353133.roa (hash: q+RRwqPLMgbRcU4CF8v6ceD8xY9lz0UrAi1vn0vplwA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.crl rsync://rpki-rsync.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 16:17:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:9c:57:c5:34:62:7c:4d:a2:b6:c1:55:8a:61:6f:e2:e7:71:e9:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0AE9FAD9E259082B06CCBB94AF478F6B86125F9 Validity Not Before: Sep 21 13:12:57 2026 GMT Not After : Sep 22 16:17:57 2026 GMT Subject: CN=E7425CA74E76ACB31A7AF5E970561CF5EB4CDCE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:75:98:b3:19:8c:30:59:2e:d3:75:a3:44:62: 16:fb:9a:25:4e:86:37:e4:85:ee:2d:d6:a3:78:da: f6:a8:11:ab:94:f0:cb:3a:99:ec:6d:21:5b:92:6a: ad:42:53:75:14:8e:cd:ad:f1:34:b3:8c:74:e2:9d: 9b:b6:36:53:88:77:4f:26:27:a4:f3:b1:24:e4:0a: 85:c1:e3:de:7c:ed:cb:44:08:94:8f:ec:ef:af:57: b5:58:20:a2:e3:85:7d:66:89:63:e7:35:d5:20:a9: 81:69:3d:9f:17:01:29:8e:30:4d:d5:3a:a6:a6:2d: 8d:7b:49:32:16:e7:fa:c2:5a:2e:99:8c:27:7f:70: 7a:98:b9:d1:32:bf:9a:2a:cf:b5:71:3a:fa:6e:c6: e3:70:a6:8e:2f:1b:b0:be:04:5d:4d:e0:b9:13:0f: a1:ab:c6:2d:26:eb:45:f5:45:a3:38:eb:d2:37:f1: 22:0e:04:29:4b:81:5c:e9:44:41:72:f5:a4:c7:75: c6:09:b1:04:48:f3:28:00:52:94:cc:58:2b:2c:2d: 22:65:41:ff:08:b8:66:bb:21:6e:19:34:26:16:de: 1a:63:05:53:bc:8e:4f:a9:7d:9b:00:c0:89:d3:61: 35:5f:aa:11:47:e5:e2:0a:87:30:9a:1c:70:16:20: c6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:42:5C:A7:4E:76:AC:B3:1A:7A:F5:E9:70:56:1C:F5:EB:4C:DC:E5 X509v3 Authority Key Identifier: keyid:E0:AE:9F:AD:9E:25:90:82:B0:6C:CB:B9:4A:F4:78:F6:B8:61:25:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:ec:21:e5:31:0d:21:25:26:ae:ea:a2:43:21:74:d5:e2:1a: 97:23:5d:85:ed:c2:e9:7e:b5:69:c9:39:f7:b3:8b:59:cd:8e: 55:9c:58:67:e5:11:5e:33:03:82:78:77:5d:02:29:d6:de:87: 2e:ef:f4:70:72:61:ba:50:1e:1f:f9:2e:c7:c6:aa:a8:a2:a0: 30:40:4e:a4:73:92:a6:61:ac:c2:b1:47:78:e5:e7:fc:90:ea: b8:75:90:7e:88:f7:f4:04:17:10:09:ff:a7:96:2c:74:59:82: 04:69:48:4c:9c:bd:78:b3:8f:a2:8f:34:20:8a:13:a3:1c:3c: 5d:18:98:ad:c4:b9:bc:4f:85:ff:1b:e7:9c:18:52:e2:6a:c3: 0a:d3:77:9c:b1:e9:79:19:4d:61:22:1f:8f:fb:38:56:74:3f: a8:bc:e1:da:c3:e7:5a:2d:b4:71:0a:37:01:85:72:9c:63:f4: 07:ae:88:94:45:82:cb:3b:70:62:01:99:1d:f9:3d:04:3f:41: da:72:1b:65:4d:0e:e2:9d:9e:c0:25:c5:77:1a:fc:3e:d6:63: d9:80:e7:13:ce:72:92:e6:76:7d:9f:57:0d:10:98:3d:f4:41: f6:eb:02:f9:67:76:5c:45:fe:59:ee:1f:65:20:48:16:86:b3: 48:36:8c:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMZxXxTRifE2itsFVimFv4udx6VgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBBRTlGQUQ5RTI1OTA4MkIwNkNDQkI5NEFGNDc4RjZC ODYxMjVGOTAeFw0yNjA5MjExMzEyNTdaFw0yNjA5MjIxNjE3NTdaMDMxMTAvBgNV BAMTKEU3NDI1Q0E3NEU3NkFDQjMxQTdBRjVFOTcwNTYxQ0Y1RUI0Q0RDRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7dZizGYwwWS7TdaNEYhb7miVO hjfkhe4t1qN42vaoEauU8Ms6mextIVuSaq1CU3UUjs2t8TSzjHTinZu2NlOId08m J6TzsSTkCoXB49587ctECJSP7O+vV7VYIKLjhX1miWPnNdUgqYFpPZ8XASmOME3V OqamLY17STIW5/rCWi6ZjCd/cHqYudEyv5oqz7VxOvpuxuNwpo4vG7C+BF1N4LkT D6Grxi0m60X1RaM469I38SIOBClLgVzpREFy9aTHdcYJsQRI8ygAUpTMWCssLSJl Qf8IuGa7IW4ZNCYW3hpjBVO8jk+pfZsAwInTYTVfqhFH5eIKhzCaHHAWIMYlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU50Jcp052rLMaevXpcFYc9etM3OUwHwYDVR0j BBgwFoAU4K6frZ4lkIKwbMu5SvR49rhhJfkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjQ5MTJjOWItZGNlNC00MGU2LTk1ODgtZDdjYThjMzdlZjRkLzAvRTBBRTlGQUQ5 RTI1OTA4MkIwNkNDQkI5NEFGNDc4RjZCODYxMjVGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMEFFOUZBRDlFMjU5MDgyQjA2Q0NCQjk0QUY0NzhGNkI4NjEy NUY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjQ5MTJjOWItZGNlNC00MGU2LTk1 ODgtZDdjYThjMzdlZjRkLzAvRTBBRTlGQUQ5RTI1OTA4MkIwNkNDQkI5NEFGNDc4 RjZCODYxMjVGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALfsIeUxDSElJq7qokMhdNXiGpcjXYXtwul+ tWnJOfezi1nNjlWcWGflEV4zA4J4d10CKdbehy7v9HByYbpQHh/5LsfGqqiioDBA TqRzkqZhrMKxR3jl5/yQ6rh1kH6I9/QEFxAJ/6eWLHRZggRpSEycvXizj6KPNCCK E6McPF0YmK3EubxPhf8b55wYUuJqwwrTd5yx6XkZTWEiH4/7OFZ0P6i84drD51ot tHEKNwGFcpxj9AeuiJRFgss7cGIBmR35PQQ/QdpyG2VNDuKdnsAlxXca/D7WY9mA 5xPOcpLmdn2fVw0QmD30QfbrAvlndlxF/lnuH2UgSBaGs0g2jKs= -----END CERTIFICATE-----Generated at Tue Sep 22 01:50:26 2026 by rpki-client