$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/E1AE51C8B4FB85A0C6F681266B78AEB4E206B05B.mft File: E1AE51C8B4FB85A0C6F681266B78AEB4E206B05B.mft (raw, json) Hash identifier: xJx5aIzLDr+kSC+DP4aIR8CA9Lkhu2IYg4nxV4kWJgU= Subject key identifier: 1D:A2:03:F3:D4:32:F6:BD:61:1C:CA:FC:20:94:77:E0:21:A3:E2:4B Authority key identifier: E1:AE:51:C8:B4:FB:85:A0:C6:F6:81:26:6B:78:AE:B4:E2:06:B0:5B Certificate issuer: /CN=E1AE51C8B4FB85A0C6F681266B78AEB4E206B05B Certificate serial: 1A6A12C43575C16D4231A2B54570F54BDE685AF0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1AE51C8B4FB85A0C6F681266B78AEB4E206B05B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/E1AE51C8B4FB85A0C6F681266B78AEB4E206B05B.mft Manifest number: C2 Signing time: Sat 26 Sep 2026 06:02:27 +0000 Manifest this update: Sat 26 Sep 2026 05:57:27 +0000 Manifest next update: Sun 27 Sep 2026 08:54:27 +0000 Files and hashes: 1: E1AE51C8B4FB85A0C6F681266B78AEB4E206B05B.crl (hash: 9uwo8vdvufzKfLQfOt5fLHXVbCbeGf/TvszGesYCGUY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/E1AE51C8B4FB85A0C6F681266B78AEB4E206B05B.crl rsync://rpki-rsync.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/E1AE51C8B4FB85A0C6F681266B78AEB4E206B05B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1AE51C8B4FB85A0C6F681266B78AEB4E206B05B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:6a:12:c4:35:75:c1:6d:42:31:a2:b5:45:70:f5:4b:de:68:5a:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1AE51C8B4FB85A0C6F681266B78AEB4E206B05B Validity Not Before: Sep 26 05:57:27 2026 GMT Not After : Sep 27 08:54:27 2026 GMT Subject: CN=1DA203F3D432F6BD611CCAFC209477E021A3E24B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d2:e6:dc:7f:65:51:23:e1:3e:d1:4f:65:41: e4:43:07:8f:bf:31:68:7a:a6:b2:bd:0f:c8:8d:2c: e4:2b:bc:bc:4d:59:11:6c:42:cd:b2:7d:f0:26:69: 21:e5:f1:72:4c:59:65:3c:49:aa:9f:63:fe:96:d2: 07:71:ee:59:93:c5:3e:00:be:72:34:f9:32:1d:6d: b6:37:10:32:52:8f:eb:4d:09:58:48:e8:38:80:e9: 71:7b:b9:2f:cb:a6:aa:dd:19:a4:04:ed:5d:56:15: f6:b6:53:b2:0f:db:39:84:bf:ed:f0:b5:b8:40:56: ca:e5:10:83:48:7f:c8:c4:07:fc:68:c4:10:6a:69: 1f:d5:7f:dd:5e:7d:c8:f6:c4:d2:b9:a9:29:99:d8: b9:17:e2:7c:d4:53:09:1f:58:7f:eb:32:db:23:11: d9:62:d7:3d:6c:f6:67:ca:11:17:f1:e8:dd:4e:99: b5:39:a1:10:c8:84:1e:4d:a3:81:40:db:ec:10:f1: 35:65:41:15:ad:e2:99:74:ac:2c:b6:f4:b1:56:96: c5:0c:48:dd:99:07:e5:db:e5:29:df:19:e8:01:72: 88:8e:e9:10:00:ec:45:cd:b3:53:dd:cb:a4:54:4f: b2:8f:7b:96:23:ea:ea:af:38:c1:de:ed:ce:34:8d: 1e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A2:03:F3:D4:32:F6:BD:61:1C:CA:FC:20:94:77:E0:21:A3:E2:4B X509v3 Authority Key Identifier: keyid:E1:AE:51:C8:B4:FB:85:A0:C6:F6:81:26:6B:78:AE:B4:E2:06:B0:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/E1AE51C8B4FB85A0C6F681266B78AEB4E206B05B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1AE51C8B4FB85A0C6F681266B78AEB4E206B05B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/E1AE51C8B4FB85A0C6F681266B78AEB4E206B05B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:a8:04:0a:ba:5e:99:81:28:2e:a9:8e:28:3c:f4:bf:08:dd: db:b0:63:65:66:b9:0a:16:8e:39:27:f6:e7:f4:1f:04:42:24: d9:85:d4:8a:db:eb:08:4a:2c:0c:62:9f:31:fd:74:f5:d3:3f: 37:48:64:5a:54:f7:63:97:e2:21:19:cd:c1:46:07:97:a7:24: 78:4e:91:e5:d2:ea:87:23:b1:21:e8:56:54:19:52:ee:aa:ee: 4d:6e:97:97:2c:67:7b:89:68:8e:93:31:b3:35:2b:ce:0f:be: 3a:42:ee:46:2a:cf:62:46:09:ce:9e:85:3b:d6:3a:f7:aa:03: 62:6d:d0:3e:1f:b0:43:a7:45:4f:b3:bc:bf:85:a3:ca:80:e6: 64:8e:4c:72:20:21:1c:3e:81:77:47:aa:6b:53:c0:04:ba:9e: 6a:66:2a:f2:10:49:d1:a1:45:25:c8:b0:ac:59:5a:fc:e8:51: 5a:53:c8:82:0e:a3:f6:0c:ed:40:6c:f9:a3:63:67:d8:5e:c5: c8:96:65:34:7d:25:f1:1d:16:69:12:b9:40:b6:51:3d:95:cc: 40:a0:c7:4a:7f:7c:b5:e2:64:78:76:bb:88:04:6c:55:c8:a8: 3c:d5:d8:e4:cc:cf:e3:ef:d6:84:57:89:37:0e:c3:13:9d:98: c2:d2:b6:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGmoSxDV1wW1CMaK1RXD1S95oWvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFBRTUxQzhCNEZCODVBMEM2RjY4MTI2NkI3OEFFQjRF MjA2QjA1QjAeFw0yNjA5MjYwNTU3MjdaFw0yNjA5MjcwODU0MjdaMDMxMTAvBgNV BAMTKDFEQTIwM0YzRDQzMkY2QkQ2MTFDQ0FGQzIwOTQ3N0UwMjFBM0UyNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh0ubcf2VRI+E+0U9lQeRDB4+/ MWh6prK9D8iNLOQrvLxNWRFsQs2yffAmaSHl8XJMWWU8SaqfY/6W0gdx7lmTxT4A vnI0+TIdbbY3EDJSj+tNCVhI6DiA6XF7uS/LpqrdGaQE7V1WFfa2U7IP2zmEv+3w tbhAVsrlEINIf8jEB/xoxBBqaR/Vf91efcj2xNK5qSmZ2LkX4nzUUwkfWH/rMtsj Edli1z1s9mfKERfx6N1OmbU5oRDIhB5No4FA2+wQ8TVlQRWt4pl0rCy29LFWlsUM SN2ZB+Xb5SnfGegBcoiO6RAA7EXNs1Pdy6RUT7KPe5Yj6uqvOMHe7c40jR5hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHaID89Qy9r1hHMr8IJR34CGj4kswHwYDVR0j BBgwFoAU4a5RyLT7haDG9oEma3iutOIGsFswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDgzNDljZDQtYzA3OS00MWZmLWFhOWUtMzZmM2Q0NDgyNjQ1LzAvRTFBRTUxQzhC NEZCODVBMEM2RjY4MTI2NkI3OEFFQjRFMjA2QjA1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMUFFNTFDOEI0RkI4NUEwQzZGNjgxMjY2Qjc4QUVCNEUyMDZC MDVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDgzNDljZDQtYzA3OS00MWZmLWFh OWUtMzZmM2Q0NDgyNjQ1LzAvRTFBRTUxQzhCNEZCODVBMEM2RjY4MTI2NkI3OEFF QjRFMjA2QjA1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADCoBAq6XpmBKC6pjig89L8I3duwY2VmuQoW jjkn9uf0HwRCJNmF1Irb6whKLAxinzH9dPXTPzdIZFpU92OX4iEZzcFGB5enJHhO keXS6ocjsSHoVlQZUu6q7k1ul5csZ3uJaI6TMbM1K84PvjpC7kYqz2JGCc6ehTvW OveqA2Jt0D4fsEOnRU+zvL+Fo8qA5mSOTHIgIRw+gXdHqmtTwAS6nmpmKvIQSdGh RSXIsKxZWvzoUVpTyIIOo/YM7UBs+aNjZ9hexciWZTR9JfEdFmkSuUC2UT2VzECg x0p/fLXiZHh2u4gEbFXIqDzV2OTMz+Pv1oRXiTcOwxOdmMLStm4= -----END CERTIFICATE-----Generated at Sat Sep 26 10:40:34 2026 by rpki-client