$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.mft File: EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.mft (raw, json) Hash identifier: Kdx/Nyr8i3XLO75+he2gzqQvLwQQOkEW1sTiiL1GgGQ= Subject key identifier: F4:AE:FA:3C:9D:57:5A:E8:66:E8:D3:91:C6:C2:7E:8F:B3:78:6D:82 Authority key identifier: EE:75:1C:DC:39:E4:73:04:C1:EE:51:ED:F5:BC:3F:DA:D0:F0:9B:86 Certificate issuer: /CN=EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86 Certificate serial: 6A976589D5E6D9D4C600155F3F623FF9875AFD08 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.mft Manifest number: BE Signing time: Sun 20 Sep 2026 00:58:16 +0000 Manifest this update: Sun 20 Sep 2026 00:53:16 +0000 Manifest next update: Mon 21 Sep 2026 03:40:16 +0000 Files and hashes: 1: 3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa (hash: GBcRuzH/ztafVHYfLj8zgAdxKdzjxCNZd7fnXHiG9vg=) 2: EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.crl (hash: bADHYU2qEzK8+mn41XAzuGxqeXhS1W+T1+uBVPdnvPM=) 3: 3130332e3134342e3132392e302f32342d3234203d3e20313339343333.roa (hash: k8ZBZmDfwahDdiPq/8ia7mwFYTF8XR9bC0fS3/OJdMM=) 4: 3130332e3134342e3132382e302f32342d3234203d3e20313339343333.roa (hash: eZi9ISEjkgP+V5NS/n2oQzmQLoX5n67xR1RnUMkogyM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.crl rsync://rpki-rsync.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 03:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:97:65:89:d5:e6:d9:d4:c6:00:15:5f:3f:62:3f:f9:87:5a:fd:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86 Validity Not Before: Sep 20 00:53:16 2026 GMT Not After : Sep 21 03:40:16 2026 GMT Subject: CN=F4AEFA3C9D575AE866E8D391C6C27E8FB3786D82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:31:33:70:51:78:2f:fe:81:7e:9b:9f:e5:89: f5:cf:79:42:d9:31:46:a1:bf:51:4c:d3:3a:c4:01: 6f:48:df:3b:4d:bc:9d:ac:60:9c:40:58:1b:7f:b8: 7e:05:c3:48:cb:e4:2c:85:ca:85:7b:c4:6d:86:ef: 64:64:ae:e2:e5:35:3e:71:5c:69:45:14:d1:24:f0: c2:9b:6d:a4:7b:97:23:66:be:25:7b:ab:85:c5:69: 77:ea:2e:81:a0:43:e5:53:9e:22:70:53:12:1b:fb: dc:3f:2a:69:e9:9c:bc:e0:05:b1:f7:25:bd:81:74: 57:43:97:0f:b9:a0:aa:7b:3b:e5:bc:00:3e:71:48: 38:a9:12:25:eb:1d:b9:9e:b7:ba:ac:dd:96:31:a8: 43:06:d5:53:26:7b:a9:0b:f8:da:77:68:42:6c:73: be:3f:fa:ff:56:d7:ce:28:1d:18:a5:67:35:31:60: 8f:09:ce:f0:6f:b2:78:9b:5a:c4:d6:06:d8:2f:8c: d5:58:35:6b:51:14:0b:bf:af:7f:3b:fa:3e:dc:91: 89:c1:9b:59:8c:ae:6d:02:91:4c:75:d6:d1:e5:65: 1b:61:a8:65:cb:c5:a7:8d:e3:69:4f:b0:f4:ea:d6: 85:f0:42:36:c4:2a:15:44:26:b4:c4:6b:f4:3a:b9: 91:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:AE:FA:3C:9D:57:5A:E8:66:E8:D3:91:C6:C2:7E:8F:B3:78:6D:82 X509v3 Authority Key Identifier: keyid:EE:75:1C:DC:39:E4:73:04:C1:EE:51:ED:F5:BC:3F:DA:D0:F0:9B:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:9c:b0:7d:85:75:09:9a:cb:d1:d8:73:e0:9e:0d:ce:61:ae: 5f:42:98:fc:0c:a3:65:b6:73:1f:aa:71:b6:79:a3:b5:73:33: 35:69:13:9d:17:0d:95:f7:3e:a5:d2:c2:3e:12:d1:27:69:9d: 0b:d4:c9:9e:01:4e:1c:91:59:f1:fe:29:72:12:2d:30:ab:37: ff:6a:15:56:ca:2f:84:22:8a:0d:d5:8a:83:72:07:1e:70:22: 60:a6:4d:31:28:22:17:9a:77:a4:42:85:8f:a3:d0:be:30:1e: 77:b6:f1:79:6a:a2:5c:42:1a:6d:f2:fb:a7:6b:ba:da:07:62: 69:10:f2:93:12:44:c6:14:33:9f:1a:9d:ea:3c:b7:d6:8a:ae: 5e:1f:52:80:84:85:4b:c7:c2:21:f9:d7:7e:64:ce:2a:8b:2c: 62:e9:09:87:d8:f6:5e:b1:48:8c:81:82:6e:c1:4f:fe:4f:53: 7b:fa:fc:30:3f:0f:33:02:d9:2e:f5:e3:bd:c3:7b:ce:99:c9: 27:6a:98:c6:ca:ae:0c:f1:1d:61:9b:f8:11:68:37:af:1b:30: 2d:f1:b8:d5:57:05:9f:53:61:2e:8a:43:c3:46:9b:0f:a3:ff: 92:aa:68:eb:57:39:2e:2e:ce:7d:ac:a2:29:c6:82:99:dc:9d: b8:40:8b:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUapdlidXm2dTGABVfP2I/+Yda/QgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU3NTFDREMzOUU0NzMwNEMxRUU1MUVERjVCQzNGREFE MEYwOUI4NjAeFw0yNjA5MjAwMDUzMTZaFw0yNjA5MjEwMzQwMTZaMDMxMTAvBgNV BAMTKEY0QUVGQTNDOUQ1NzVBRTg2NkU4RDM5MUM2QzI3RThGQjM3ODZEODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuMTNwUXgv/oF+m5/lifXPeULZ MUahv1FM0zrEAW9I3ztNvJ2sYJxAWBt/uH4Fw0jL5CyFyoV7xG2G72RkruLlNT5x XGlFFNEk8MKbbaR7lyNmviV7q4XFaXfqLoGgQ+VTniJwUxIb+9w/KmnpnLzgBbH3 Jb2BdFdDlw+5oKp7O+W8AD5xSDipEiXrHbmet7qs3ZYxqEMG1VMme6kL+Np3aEJs c74/+v9W184oHRilZzUxYI8JzvBvsnibWsTWBtgvjNVYNWtRFAu/r387+j7ckYnB m1mMrm0CkUx11tHlZRthqGXLxaeN42lPsPTq1oXwQjbEKhVEJrTEa/Q6uZFTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9K76PJ1XWuhm6NORxsJ+j7N4bYIwHwYDVR0j BBgwFoAU7nUc3DnkcwTB7lHt9bw/2tDwm4YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2E5NmY0NTgtY2U1ZS00MWEyLWEyMzItOTk2NGY0OTg4YTA2LzAvRUU3NTFDREMz OUU0NzMwNEMxRUU1MUVERjVCQzNGREFEMEYwOUI4Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRTc1MUNEQzM5RTQ3MzA0QzFFRTUxRURGNUJDM0ZEQUQwRjA5 Qjg2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2E5NmY0NTgtY2U1ZS00MWEyLWEy MzItOTk2NGY0OTg4YTA2LzAvRUU3NTFDREMzOUU0NzMwNEMxRUU1MUVERjVCQzNG REFEMEYwOUI4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALCcsH2FdQmay9HYc+CeDc5hrl9CmPwMo2W2 cx+qcbZ5o7VzMzVpE50XDZX3PqXSwj4S0SdpnQvUyZ4BThyRWfH+KXISLTCrN/9q FVbKL4Qiig3VioNyBx5wImCmTTEoIhead6RChY+j0L4wHne28XlqolxCGm3y+6dr utoHYmkQ8pMSRMYUM58aneo8t9aKrl4fUoCEhUvHwiH5135kziqLLGLpCYfY9l6x SIyBgm7BT/5PU3v6/DA/DzMC2S71473De86ZySdqmMbKrgzxHWGb+BFoN68bMC3x uNVXBZ9TYS6KQ8NGmw+j/5KqaOtXOS4uzn2soinGgpncnbhAi18= -----END CERTIFICATE-----Generated at Sun Sep 20 21:07:07 2026 by rpki-client