$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/E6F1F637A8FCEC86EE1E93B1EC2C30517A52E41E.mft File: E6F1F637A8FCEC86EE1E93B1EC2C30517A52E41E.mft (raw, json) Hash identifier: 7SBLH81bn0rRlD/Hyq+NKOVQDOiv96l5d05wKg7vhtA= Subject key identifier: D6:74:B4:10:E5:60:A4:24:8F:42:D5:98:0B:6C:C6:25:F3:5A:A3:7A Authority key identifier: E6:F1:F6:37:A8:FC:EC:86:EE:1E:93:B1:EC:2C:30:51:7A:52:E4:1E Certificate issuer: /CN=E6F1F637A8FCEC86EE1E93B1EC2C30517A52E41E Certificate serial: 03C746D910936653304245AEF660FEF49C2DCCA5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6F1F637A8FCEC86EE1E93B1EC2C30517A52E41E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/E6F1F637A8FCEC86EE1E93B1EC2C30517A52E41E.mft Manifest number: BE Signing time: Sun 20 Sep 2026 23:36:03 +0000 Manifest this update: Sun 20 Sep 2026 23:31:03 +0000 Manifest next update: Tue 22 Sep 2026 00:35:03 +0000 Files and hashes: 1: 3130332e3137342e31362e302f32342d3234203d3e20313437303933.roa (hash: 63ncgpR/jOah9LilKhHJzrXwdOZa9+4Jy9C1iGQY95k=) 2: 3130332e3137342e31372e302f32342d3234203d3e20313437303933.roa (hash: sWkEHT/FPRJD9U1n5NdrT2f9bf10TfqaTV3YmX7airQ=) 3: E6F1F637A8FCEC86EE1E93B1EC2C30517A52E41E.crl (hash: jqfyV3XSXJpEZ7UnXpxLx67UbAPX52auaWmSXRHUT4I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/E6F1F637A8FCEC86EE1E93B1EC2C30517A52E41E.crl rsync://rpki-rsync.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/E6F1F637A8FCEC86EE1E93B1EC2C30517A52E41E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6F1F637A8FCEC86EE1E93B1EC2C30517A52E41E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 00:35:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:c7:46:d9:10:93:66:53:30:42:45:ae:f6:60:fe:f4:9c:2d:cc:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E6F1F637A8FCEC86EE1E93B1EC2C30517A52E41E Validity Not Before: Sep 20 23:31:03 2026 GMT Not After : Sep 22 00:35:03 2026 GMT Subject: CN=D674B410E560A4248F42D5980B6CC625F35AA37A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a5:3a:8f:6a:a2:06:52:d1:fa:91:72:ea:3b: c1:7f:45:78:9b:aa:ca:a0:9e:c0:3a:1b:0c:5a:78: 6f:b1:32:1f:5f:e5:e6:5c:a7:d8:e5:f0:44:3c:5e: 1a:17:09:e6:e5:8b:e6:e9:32:82:83:59:ca:d1:2e: 8d:c7:2d:aa:05:3b:99:32:60:5b:65:fc:23:45:8c: bf:74:37:91:7e:5f:65:0e:c6:2a:76:13:b9:bb:9c: a6:7a:eb:6a:17:10:7d:87:84:d0:2d:1f:0a:50:34: a4:f6:25:44:16:64:24:07:bf:df:fa:2d:2c:e5:cf: 11:26:67:0e:cd:fe:d4:81:1d:8f:50:64:de:09:b1: 5e:f4:06:89:26:f8:09:40:99:55:89:af:37:c0:05: ca:0e:ba:0f:9d:15:9c:7e:50:d2:80:16:fe:1d:e5: f3:a5:8e:5f:39:32:d2:ff:28:9c:2a:1f:ee:a4:1a: 61:dc:a9:80:4d:54:76:32:cf:2d:b7:11:af:8a:3c: 98:f9:4d:19:89:b1:42:f6:d0:fc:f3:83:b2:3a:e5: 98:a0:0d:bd:3d:a8:38:6c:9b:d6:ec:81:4d:ac:49: e3:90:97:32:96:c3:c7:5f:12:1f:56:5b:b9:4a:2a: bb:aa:03:e1:74:48:60:2d:e4:4a:21:f6:d9:7e:b0: a1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:74:B4:10:E5:60:A4:24:8F:42:D5:98:0B:6C:C6:25:F3:5A:A3:7A X509v3 Authority Key Identifier: keyid:E6:F1:F6:37:A8:FC:EC:86:EE:1E:93:B1:EC:2C:30:51:7A:52:E4:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/E6F1F637A8FCEC86EE1E93B1EC2C30517A52E41E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6F1F637A8FCEC86EE1E93B1EC2C30517A52E41E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/E6F1F637A8FCEC86EE1E93B1EC2C30517A52E41E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:e7:9c:70:66:72:3d:79:d4:fa:a5:f1:c5:7d:89:ca:39:3c: 02:f5:1a:e3:f5:5f:d2:cd:4e:c1:48:79:76:2a:f9:11:34:ed: c1:e0:c1:61:17:ec:56:04:58:b2:92:96:cd:4e:b2:37:a3:9f: 09:45:f7:66:9d:54:1f:2c:56:c3:82:54:16:c7:69:6e:e3:7f: 57:39:32:62:8f:9e:52:d3:a1:10:62:f2:c0:b5:b4:33:26:1c: a6:f0:44:6b:54:0b:17:35:ec:7f:cb:91:86:38:2b:03:2a:ca: c3:e2:77:7f:63:6d:4e:a3:54:35:2e:84:3a:5d:5f:b1:c2:df: fb:a1:2f:6c:8e:d0:d6:5d:aa:50:8b:64:2f:59:a7:21:36:53: 3c:53:e1:97:1f:50:99:a7:05:36:9f:e6:05:5e:54:85:7c:7a: f6:30:e6:87:d3:b2:90:88:aa:64:90:a2:b8:cf:03:ae:68:da: cc:11:f6:4a:7a:57:81:10:c6:24:47:a3:75:fb:c8:0d:a7:16: 5e:d0:32:03:24:2a:db:be:b7:4d:de:b5:00:7a:41:8c:5f:77: ba:04:cc:2a:15:8a:b7:04:8e:b9:f3:75:d1:47:b7:89:14:13: 54:77:87:8e:6c:9e:ba:f1:40:33:1c:1c:87:ed:53:e2:2d:c0: 4e:c3:e8:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA8dG2RCTZlMwQkWu9mD+9JwtzKUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTZGMUY2MzdBOEZDRUM4NkVFMUU5M0IxRUMyQzMwNTE3 QTUyRTQxRTAeFw0yNjA5MjAyMzMxMDNaFw0yNjA5MjIwMDM1MDNaMDMxMTAvBgNV BAMTKEQ2NzRCNDEwRTU2MEE0MjQ4RjQyRDU5ODBCNkNDNjI1RjM1QUEzN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTpTqPaqIGUtH6kXLqO8F/RXib qsqgnsA6GwxaeG+xMh9f5eZcp9jl8EQ8XhoXCebli+bpMoKDWcrRLo3HLaoFO5ky YFtl/CNFjL90N5F+X2UOxip2E7m7nKZ662oXEH2HhNAtHwpQNKT2JUQWZCQHv9/6 LSzlzxEmZw7N/tSBHY9QZN4JsV70Bokm+AlAmVWJrzfABcoOug+dFZx+UNKAFv4d 5fOljl85MtL/KJwqH+6kGmHcqYBNVHYyzy23Ea+KPJj5TRmJsUL20Pzzg7I65Zig Db09qDhsm9bsgU2sSeOQlzKWw8dfEh9WW7lKKruqA+F0SGAt5Eoh9tl+sKEdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1nS0EOVgpCSPQtWYC2zGJfNao3owHwYDVR0j BBgwFoAU5vH2N6j87IbuHpOx7CwwUXpS5B4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2U0ODJhZGEtZDBjOC00NjRiLWEwMDctODUxOTQ4OWNiMWM0LzAvRTZGMUY2MzdB OEZDRUM4NkVFMUU5M0IxRUMyQzMwNTE3QTUyRTQxRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNkYxRjYzN0E4RkNFQzg2RUUxRTkzQjFFQzJDMzA1MTdBNTJF NDFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2U0ODJhZGEtZDBjOC00NjRiLWEw MDctODUxOTQ4OWNiMWM0LzAvRTZGMUY2MzdBOEZDRUM4NkVFMUU5M0IxRUMyQzMw NTE3QTUyRTQxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEPnnHBmcj151Pql8cV9ico5PAL1GuP1X9LN TsFIeXYq+RE07cHgwWEX7FYEWLKSls1OsjejnwlF92adVB8sVsOCVBbHaW7jf1c5 MmKPnlLToRBi8sC1tDMmHKbwRGtUCxc17H/LkYY4KwMqysPid39jbU6jVDUuhDpd X7HC3/uhL2yO0NZdqlCLZC9ZpyE2UzxT4ZcfUJmnBTaf5gVeVIV8evYw5ofTspCI qmSQorjPA65o2swR9kp6V4EQxiRHo3X7yA2nFl7QMgMkKtu+t03etQB6QYxfd7oE zCoVircEjrnzddFHt4kUE1R3h45snrrxQDMcHIftU+ItwE7D6Js= -----END CERTIFICATE-----Generated at Mon Sep 21 14:06:29 2026 by rpki-client