$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/E1476FC7E4095A3095E47FBC4834D7ECE111F313.mft File: E1476FC7E4095A3095E47FBC4834D7ECE111F313.mft (raw, json) Hash identifier: sLiD/fOyhPKezVC+4wJpRSZkT3z2UwX7GBZ8BdPr1rI= Subject key identifier: 43:92:33:BC:BE:EB:30:76:39:6C:2B:63:16:69:33:E8:A6:02:3A:B1 Authority key identifier: E1:47:6F:C7:E4:09:5A:30:95:E4:7F:BC:48:34:D7:EC:E1:11:F3:13 Certificate issuer: /CN=E1476FC7E4095A3095E47FBC4834D7ECE111F313 Certificate serial: 700F7919B3BCA3948B58D0E65CEC667098D47F4A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1476FC7E4095A3095E47FBC4834D7ECE111F313.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/E1476FC7E4095A3095E47FBC4834D7ECE111F313.mft Manifest number: C4 Signing time: Thu 24 Sep 2026 19:04:14 +0000 Manifest this update: Thu 24 Sep 2026 18:59:14 +0000 Manifest next update: Fri 25 Sep 2026 22:17:14 +0000 Files and hashes: 1: 3130332e3233302e3234362e302f32342d3234203d3e20313331373735.roa (hash: /1MgccGZfskMTbGr8xqejz+aa0C1YMlfgjpiT2WdsBo=) 2: E1476FC7E4095A3095E47FBC4834D7ECE111F313.crl (hash: 6wLF+fFwcThnwFDSeP3KHabymWI/WP8TCOOOgc8LrbE=) 3: 3130332e3138302e3136322e302f32342d3234203d3e20313439333737.roa (hash: +kRo7LiXN7GRQQL/5vawAMwmjkMc/A/ZykmCvCb8Chs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/E1476FC7E4095A3095E47FBC4834D7ECE111F313.crl rsync://rpki-rsync.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/E1476FC7E4095A3095E47FBC4834D7ECE111F313.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1476FC7E4095A3095E47FBC4834D7ECE111F313.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:0f:79:19:b3:bc:a3:94:8b:58:d0:e6:5c:ec:66:70:98:d4:7f:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1476FC7E4095A3095E47FBC4834D7ECE111F313 Validity Not Before: Sep 24 18:59:14 2026 GMT Not After : Sep 25 22:17:14 2026 GMT Subject: CN=439233BCBEEB3076396C2B63166933E8A6023AB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ed:5d:2a:7e:10:93:6f:e6:93:00:3e:f7:b9: 1c:a9:8a:27:d9:cc:45:4a:af:64:29:6b:0d:19:1e: d3:12:f9:87:0d:23:8c:f2:1f:66:3d:22:5d:d9:5a: 64:1a:3c:c7:2f:6c:61:8c:e8:44:ae:74:fd:d4:15: a2:07:ad:2a:93:f5:6f:f7:63:a9:d5:a8:51:fc:0c: e9:e0:c0:a5:5d:c9:2c:fe:8a:07:09:93:ea:e6:64: 69:cc:51:c7:28:9f:e5:7c:3d:95:24:84:d0:c1:92: 24:f0:1d:87:e8:48:0a:4a:a2:d7:9d:d8:1f:74:78: b3:ed:aa:b8:0a:e4:d7:ed:84:5a:b0:37:53:bb:50: 60:ee:2b:45:ff:ce:c6:01:f3:9c:6e:fa:30:50:dd: 96:39:54:c5:0b:39:25:f6:96:2a:74:bb:ac:0d:d8: 66:d4:87:7d:de:40:42:ec:38:fd:1d:ad:cc:45:73: ad:79:46:c0:0d:e6:a8:a3:9f:da:65:3b:f5:ee:02: 20:a8:29:ca:a7:30:d8:5b:fc:0f:82:35:74:0e:e3: 17:56:7f:fc:52:94:55:88:b6:52:f1:35:96:b1:77: f1:a2:45:71:07:e5:79:23:f3:83:de:ea:5c:86:da: fa:cc:90:6f:05:80:06:bd:3f:53:35:3b:c2:d9:d1: e6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:92:33:BC:BE:EB:30:76:39:6C:2B:63:16:69:33:E8:A6:02:3A:B1 X509v3 Authority Key Identifier: keyid:E1:47:6F:C7:E4:09:5A:30:95:E4:7F:BC:48:34:D7:EC:E1:11:F3:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/E1476FC7E4095A3095E47FBC4834D7ECE111F313.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1476FC7E4095A3095E47FBC4834D7ECE111F313.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/E1476FC7E4095A3095E47FBC4834D7ECE111F313.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:02:7e:0a:de:73:2d:1e:b9:2d:63:8f:33:84:5b:0d:27:93: ea:a3:fc:7f:ea:32:09:a0:0d:63:b9:b8:7c:8d:85:7a:c1:74: b5:8b:a8:89:22:93:9d:08:58:76:bc:dc:a3:c3:e2:2e:97:bb: b8:1b:d0:4d:b1:e3:ce:85:6a:9d:c1:64:68:2b:43:c5:a0:ed: ed:8b:18:1b:f2:0a:7f:c1:fc:00:1f:5c:b2:b8:75:5d:99:b6: 0c:37:fd:94:a1:ab:dc:03:35:87:d5:e8:1e:4b:18:16:e1:c6: 92:04:54:b1:53:84:26:44:c3:48:a8:92:27:7c:96:bc:96:d5: f5:bf:f5:f5:38:94:07:5b:34:8c:ab:e7:9b:73:c2:69:2a:c3: ab:9e:fc:5f:78:59:27:f1:71:4d:3e:58:be:04:36:a3:07:71: cd:49:f9:c6:16:f8:6d:03:00:26:06:84:55:ca:dd:77:44:04: 8d:f1:dc:fc:14:6d:13:af:da:cb:5a:5e:34:21:6d:e8:79:5a: 99:bf:66:a9:9f:45:0d:28:b8:4f:39:b5:3e:0f:66:72:bf:d1: 90:c3:60:0a:73:1e:e6:b5:ca:55:08:4a:8a:1d:82:ac:9f:55: 72:a2:40:75:f2:f2:bd:90:69:bf:47:84:17:79:6c:af:2d:c1: 1a:5e:e8:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcA95GbO8o5SLWNDmXOxmcJjUf0owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE0NzZGQzdFNDA5NUEzMDk1RTQ3RkJDNDgzNEQ3RUNF MTExRjMxMzAeFw0yNjA5MjQxODU5MTRaFw0yNjA5MjUyMjE3MTRaMDMxMTAvBgNV BAMTKDQzOTIzM0JDQkVFQjMwNzYzOTZDMkI2MzE2NjkzM0U4QTYwMjNBQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl7V0qfhCTb+aTAD73uRypiifZ zEVKr2Qpaw0ZHtMS+YcNI4zyH2Y9Il3ZWmQaPMcvbGGM6ESudP3UFaIHrSqT9W/3 Y6nVqFH8DOngwKVdySz+igcJk+rmZGnMUccon+V8PZUkhNDBkiTwHYfoSApKoted 2B90eLPtqrgK5NfthFqwN1O7UGDuK0X/zsYB85xu+jBQ3ZY5VMULOSX2lip0u6wN 2GbUh33eQELsOP0drcxFc615RsAN5qijn9plO/XuAiCoKcqnMNhb/A+CNXQO4xdW f/xSlFWItlLxNZaxd/GiRXEH5Xkj84Pe6lyG2vrMkG8FgAa9P1M1O8LZ0eY9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ5IzvL7rMHY5bCtjFmkz6KYCOrEwHwYDVR0j BBgwFoAU4Udvx+QJWjCV5H+8SDTX7OER8xMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDcwZDYyOWEtOTZlZC00NTFhLTg3ODctMzQxMjIyODJhNzA2LzAvRTE0NzZGQzdF NDA5NUEzMDk1RTQ3RkJDNDgzNEQ3RUNFMTExRjMxMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMTQ3NkZDN0U0MDk1QTMwOTVFNDdGQkM0ODM0RDdFQ0UxMTFG MzEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDcwZDYyOWEtOTZlZC00NTFhLTg3 ODctMzQxMjIyODJhNzA2LzAvRTE0NzZGQzdFNDA5NUEzMDk1RTQ3RkJDNDgzNEQ3 RUNFMTExRjMxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGwCfgrecy0euS1jjzOEWw0nk+qj/H/qMgmg DWO5uHyNhXrBdLWLqIkik50IWHa83KPD4i6Xu7gb0E2x486Fap3BZGgrQ8Wg7e2L GBvyCn/B/AAfXLK4dV2Ztgw3/ZShq9wDNYfV6B5LGBbhxpIEVLFThCZEw0iokid8 lryW1fW/9fU4lAdbNIyr55tzwmkqw6ue/F94WSfxcU0+WL4ENqMHcc1J+cYW+G0D ACYGhFXK3XdEBI3x3PwUbROv2staXjQhbeh5Wpm/ZqmfRQ0ouE85tT4PZnK/0ZDD YApzHua1ylUISoodgqyfVXKiQHXy8r2Qab9HhBd5bK8twRpe6Bs= -----END CERTIFICATE-----Generated at Thu Sep 24 22:36:28 2026 by rpki-client