$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.mft File: E1CBE571A9B35E54880250F3C035E3A2C5EA3688.mft (raw, json) Hash identifier: PklGfb3VkmLyVzYahDEGMLDV10WAOIbJskUTPDqM9Xw= Subject key identifier: 53:3F:9C:EC:BD:8D:20:D4:92:AE:9F:FB:04:8C:61:0F:33:38:E2:81 Authority key identifier: E1:CB:E5:71:A9:B3:5E:54:88:02:50:F3:C0:35:E3:A2:C5:EA:36:88 Certificate issuer: /CN=E1CBE571A9B35E54880250F3C035E3A2C5EA3688 Certificate serial: 6EF132D2FEF6ABDABD0A420FCD7DB5AC5B2E3B9C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.mft Manifest number: C9 Signing time: Mon 28 Sep 2026 23:33:59 +0000 Manifest this update: Mon 28 Sep 2026 23:28:59 +0000 Manifest next update: Wed 30 Sep 2026 00:43:59 +0000 Files and hashes: 1: 3130332e3130362e3131322e302f32322d3234203d3e20313336383830.roa (hash: sb2b0BvTmrzj1UZrNAjcbapczR2THwPhTn7rFLIGhwc=) 2: 323430323a343234303a3a2f33322d3332203d3e20313336383830.roa (hash: P320z9KUFpWQ3fuDHhMBAn5wP+R8TtjEv0OQMaUZbt0=) 3: E1CBE571A9B35E54880250F3C035E3A2C5EA3688.crl (hash: KwC1d0yaksnxSZxdvDfKlKEX87iZgr9Qq6hTegY8E7E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.crl rsync://rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 00:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:f1:32:d2:fe:f6:ab:da:bd:0a:42:0f:cd:7d:b5:ac:5b:2e:3b:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1CBE571A9B35E54880250F3C035E3A2C5EA3688 Validity Not Before: Sep 28 23:28:59 2026 GMT Not After : Sep 30 00:43:59 2026 GMT Subject: CN=533F9CECBD8D20D492AE9FFB048C610F3338E281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a6:ad:9c:e5:fc:1d:22:09:42:4d:dc:c5:58: d7:a4:ca:1d:7d:24:49:8e:31:bf:30:b5:0b:d0:9c: 70:37:ff:2c:86:60:a8:7b:fa:7d:1f:c1:20:5f:6a: 0e:ba:3e:73:ca:55:fc:5f:c7:b5:4f:b0:d9:22:1e: c6:bf:4d:a6:f2:24:41:f6:70:6a:c5:4a:cf:08:9b: f8:c5:aa:a3:ba:1c:8d:41:f5:f5:60:7f:bf:86:fd: 3e:09:c5:1a:bc:fa:cf:1e:4c:71:45:f8:7a:be:18: 29:46:26:36:90:39:de:f3:15:6e:fc:29:2a:30:13: a9:cf:b1:b7:a4:9a:99:28:5d:9b:48:bf:f0:92:e2: 78:77:fa:1d:35:8b:ab:d2:da:5a:17:37:8c:3e:db: 79:76:f4:1b:fd:0f:a0:8d:3a:02:3e:61:11:3d:bb: 63:47:85:2a:bb:fd:a1:6a:3a:82:2c:ae:6d:be:ca: 45:cd:92:68:be:44:97:e0:70:bd:e6:8e:5d:00:65: c1:a5:db:c2:01:67:61:41:d6:73:97:a0:c3:b8:16: 85:97:40:59:21:18:96:9d:91:58:81:4a:59:78:f4: 49:a2:4c:fa:70:75:6b:17:55:cc:2b:e8:91:70:5d: 69:95:80:46:14:f5:85:9e:8d:a5:c3:2d:58:b7:dd: a5:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:3F:9C:EC:BD:8D:20:D4:92:AE:9F:FB:04:8C:61:0F:33:38:E2:81 X509v3 Authority Key Identifier: keyid:E1:CB:E5:71:A9:B3:5E:54:88:02:50:F3:C0:35:E3:A2:C5:EA:36:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:71:f6:34:5f:d4:2a:9a:09:20:31:9f:02:ae:0c:7e:c7:42: 47:7a:4c:1f:25:79:5d:07:86:28:ed:57:72:ec:40:36:6d:e5: 78:8a:17:3e:2d:7e:f4:b9:b4:15:88:35:6c:2d:34:5a:1e:28: bc:a7:0f:0a:7d:3c:1e:91:f7:a7:d1:58:ca:0b:b0:d5:e2:5b: c6:13:d3:3a:7b:41:d3:45:04:42:0f:9f:15:14:ab:fd:81:52: 2b:5e:cd:14:e7:d2:a1:2f:c4:cd:b5:3d:1c:c3:42:9f:51:4b: d8:31:d8:05:3a:d4:7e:fb:eb:07:9b:f0:37:13:b5:3c:d5:8a: dc:fb:6c:1d:7f:a0:be:be:c2:26:38:ba:d1:b7:35:0c:2e:fa: 2e:29:2b:90:7e:cb:b6:d8:34:ae:2b:48:14:cf:be:e3:57:2f: d9:d1:8f:41:7c:ba:66:22:05:8e:05:26:89:e8:81:23:de:01: eb:21:d6:0d:31:07:3e:c8:af:97:ba:48:db:65:c7:e6:e6:9d: aa:12:05:27:f8:c2:00:0a:90:d3:48:de:37:d8:b1:f3:4f:fe: cd:6a:ba:f4:b8:26:21:79:a0:9f:db:60:31:f4:69:f2:e4:0a: b5:8d:65:55:75:bd:dc:ac:4c:21:a6:ef:96:43:89:2b:64:3b: ad:69:f5:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbvEy0v72q9q9CkIPzX21rFsuO5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFDQkU1NzFBOUIzNUU1NDg4MDI1MEYzQzAzNUUzQTJD NUVBMzY4ODAeFw0yNjA5MjgyMzI4NTlaFw0yNjA5MzAwMDQzNTlaMDMxMTAvBgNV BAMTKDUzM0Y5Q0VDQkQ4RDIwRDQ5MkFFOUZGQjA0OEM2MTBGMzMzOEUyODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYpq2c5fwdIglCTdzFWNekyh19 JEmOMb8wtQvQnHA3/yyGYKh7+n0fwSBfag66PnPKVfxfx7VPsNkiHsa/TabyJEH2 cGrFSs8Im/jFqqO6HI1B9fVgf7+G/T4JxRq8+s8eTHFF+Hq+GClGJjaQOd7zFW78 KSowE6nPsbekmpkoXZtIv/CS4nh3+h01i6vS2loXN4w+23l29Bv9D6CNOgI+YRE9 u2NHhSq7/aFqOoIsrm2+ykXNkmi+RJfgcL3mjl0AZcGl28IBZ2FB1nOXoMO4FoWX QFkhGJadkViBSll49EmiTPpwdWsXVcwr6JFwXWmVgEYU9YWejaXDLVi33aUxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUz+c7L2NINSSrp/7BIxhDzM44oEwHwYDVR0j BBgwFoAU4cvlcamzXlSIAlDzwDXjosXqNogwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmIwN2IzN2MtMDUwNy00OTEzLTgzMjktM2YxNjFiNmFmZjU2LzAvRTFDQkU1NzFB OUIzNUU1NDg4MDI1MEYzQzAzNUUzQTJDNUVBMzY4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMUNCRTU3MUE5QjM1RTU0ODgwMjUwRjNDMDM1RTNBMkM1RUEz Njg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmIwN2IzN2MtMDUwNy00OTEzLTgz MjktM2YxNjFiNmFmZjU2LzAvRTFDQkU1NzFBOUIzNUU1NDg4MDI1MEYzQzAzNUUz QTJDNUVBMzY4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEFx9jRf1CqaCSAxnwKuDH7HQkd6TB8leV0H hijtV3LsQDZt5XiKFz4tfvS5tBWINWwtNFoeKLynDwp9PB6R96fRWMoLsNXiW8YT 0zp7QdNFBEIPnxUUq/2BUitezRTn0qEvxM21PRzDQp9RS9gx2AU61H776web8DcT tTzVitz7bB1/oL6+wiY4utG3NQwu+i4pK5B+y7bYNK4rSBTPvuNXL9nRj0F8umYi BY4FJonogSPeAesh1g0xBz7Ir5e6SNtlx+bmnaoSBSf4wgAKkNNI3jfYsfNP/s1q uvS4JiF5oJ/bYDH0afLkCrWNZVV1vdysTCGm75ZDiStkO61p9To= -----END CERTIFICATE-----Generated at Tue Sep 29 05:01:55 2026 by rpki-client