$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.mft File: E4FD11A334BDCA34C2EAB964DCA226B6942B929D.mft (raw, json) Hash identifier: icVpkAEcKTkS7/FwXvlD3gOi21BrxdEAQBNDIKM7H0E= Subject key identifier: 49:0E:31:8E:B6:3D:2E:82:95:41:51:36:72:88:84:A3:F8:45:C5:FC Authority key identifier: E4:FD:11:A3:34:BD:CA:34:C2:EA:B9:64:DC:A2:26:B6:94:2B:92:9D Certificate issuer: /CN=E4FD11A334BDCA34C2EAB964DCA226B6942B929D Certificate serial: 0342538C7C30C192625CB58CCE96CE7329311B03 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.mft Manifest number: BF Signing time: Tue 22 Sep 2026 07:00:09 +0000 Manifest this update: Tue 22 Sep 2026 06:55:09 +0000 Manifest next update: Wed 23 Sep 2026 07:40:09 +0000 Files and hashes: 1: 3130332e32392e3137312e302f32342d3234203d3e203538333738.roa (hash: Bo3J9bvJrG5KvK6zISNrunddpueB7wbNcCGt/02SR80=) 2: E4FD11A334BDCA34C2EAB964DCA226B6942B929D.crl (hash: EYFb4rOLXR/cUPqPcGCY1AVNaTS4/vKdJKHoyJTWNqY=) 3: 3130332e32392e3137302e302f32342d3234203d3e203536323631.roa (hash: O1jacwkaM82L67sDrz7lXelPyRl9Rz1j5J3jiVwgpPw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.crl rsync://rpki-rsync.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 07:40:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:42:53:8c:7c:30:c1:92:62:5c:b5:8c:ce:96:ce:73:29:31:1b:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4FD11A334BDCA34C2EAB964DCA226B6942B929D Validity Not Before: Sep 22 06:55:09 2026 GMT Not After : Sep 23 07:40:09 2026 GMT Subject: CN=490E318EB63D2E8295415136728884A3F845C5FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ee:16:52:bc:d1:4b:19:64:71:7c:7e:a3:c1: ee:26:bd:e8:d7:1c:78:f8:33:66:3d:b4:e9:1c:6a: 6e:1c:4f:38:1f:a6:64:5e:33:d8:bd:a4:0c:41:ae: 7d:96:8a:2e:2d:7a:26:18:cc:43:eb:49:de:50:d6: 43:fe:9c:17:98:22:cf:b6:af:38:e0:83:25:d5:f2: 18:4c:c5:2b:9c:61:46:ca:50:8e:9f:d9:da:d7:eb: ae:8a:07:b1:1c:dc:22:d3:d7:59:74:65:d6:bf:9b: 03:e4:2b:09:91:62:e1:42:5b:92:8f:8f:f6:1c:e0: 2c:f6:82:e4:ba:31:ea:31:f0:f8:58:f0:a5:55:79: cb:b7:59:a5:92:36:38:d9:78:24:2d:1d:5a:6b:5f: db:13:60:82:05:c4:4a:cb:c8:2d:33:f0:34:63:4b: 1d:c7:70:c1:a8:1a:9b:7e:0e:37:dc:b8:de:dc:16: 0c:dc:61:d6:8c:c9:32:4a:df:af:e0:c8:d7:85:3c: 28:a5:0e:12:97:08:2c:49:35:aa:aa:03:ff:cd:5b: 2c:68:3b:0e:25:b7:9e:47:37:02:4f:e6:17:ea:44: 93:89:d0:9f:59:93:da:fc:11:2d:87:2b:7a:be:a4: cc:33:de:89:dc:e0:aa:2b:e4:85:8b:c0:18:14:8c: 1f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:0E:31:8E:B6:3D:2E:82:95:41:51:36:72:88:84:A3:F8:45:C5:FC X509v3 Authority Key Identifier: keyid:E4:FD:11:A3:34:BD:CA:34:C2:EA:B9:64:DC:A2:26:B6:94:2B:92:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:f5:6d:b3:3a:d6:94:94:6b:fd:60:92:96:05:a8:48:63:94: 3e:6e:3c:72:c8:50:17:bf:40:26:d9:5c:dd:a0:79:2e:df:60: 2a:e6:a7:4a:34:c2:8f:3b:e0:c4:2f:79:7d:31:c7:2c:98:55: c2:26:d2:cb:d8:93:d7:51:1d:2f:e8:97:47:b7:3f:3e:5e:41: 00:ea:dd:e7:82:fa:b1:59:8e:67:d8:24:72:fe:1c:a1:34:51: 17:d5:6a:08:b4:1d:22:e1:c6:52:1a:6e:2b:e7:98:56:25:3b: 7b:c2:6c:3c:60:a7:b0:68:0b:8d:1d:41:07:06:4a:91:c3:55: 7a:6a:5a:e8:33:47:0c:44:24:f2:27:c0:f8:03:c2:8f:bb:c9: 01:f6:14:76:f3:77:63:75:d7:80:09:e1:c6:2a:0d:ca:57:1f: 8c:48:13:ee:16:e8:f0:09:10:8e:18:ca:db:6a:a7:b4:66:7b: 2b:40:18:88:e2:6e:0b:a1:1b:5d:d4:2b:38:a0:1c:64:bf:d5: 94:ce:a9:8e:db:e7:ee:a3:40:e4:e3:61:52:36:84:87:11:1c: 71:74:e7:8f:1a:93:3b:47:37:ca:57:16:4d:cf:4d:cc:b6:16: 6f:f8:f2:a8:5f:2e:19:fe:95:f7:35:96:98:35:fb:a0:b5:46: 4d:b1:cd:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA0JTjHwwwZJiXLWMzpbOcykxGwMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTRGRDExQTMzNEJEQ0EzNEMyRUFCOTY0RENBMjI2QjY5 NDJCOTI5RDAeFw0yNjA5MjIwNjU1MDlaFw0yNjA5MjMwNzQwMDlaMDMxMTAvBgNV BAMTKDQ5MEUzMThFQjYzRDJFODI5NTQxNTEzNjcyODg4NEEzRjg0NUM1RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC17hZSvNFLGWRxfH6jwe4mvejX HHj4M2Y9tOkcam4cTzgfpmReM9i9pAxBrn2Wii4teiYYzEPrSd5Q1kP+nBeYIs+2 rzjggyXV8hhMxSucYUbKUI6f2drX666KB7Ec3CLT11l0Zda/mwPkKwmRYuFCW5KP j/Yc4Cz2guS6Meox8PhY8KVVecu3WaWSNjjZeCQtHVprX9sTYIIFxErLyC0z8DRj Sx3HcMGoGpt+DjfcuN7cFgzcYdaMyTJK36/gyNeFPCilDhKXCCxJNaqqA//NWyxo Ow4lt55HNwJP5hfqRJOJ0J9Zk9r8ES2HK3q+pMwz3onc4Kor5IWLwBgUjB97AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSQ4xjrY9LoKVQVE2coiEo/hFxfwwHwYDVR0j BBgwFoAU5P0RozS9yjTC6rlk3KImtpQrkp0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTM4MDkzODQtOWIxYy00ZjVhLWFhNmItOWRlM2I1MmE5YzA1LzAvRTRGRDExQTMz NEJEQ0EzNEMyRUFCOTY0RENBMjI2QjY5NDJCOTI5RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNEZEMTFBMzM0QkRDQTM0QzJFQUI5NjREQ0EyMjZCNjk0MkI5 MjlELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTM4MDkzODQtOWIxYy00ZjVhLWFh NmItOWRlM2I1MmE5YzA1LzAvRTRGRDExQTMzNEJEQ0EzNEMyRUFCOTY0RENBMjI2 QjY5NDJCOTI5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF/1bbM61pSUa/1gkpYFqEhjlD5uPHLIUBe/ QCbZXN2geS7fYCrmp0o0wo874MQveX0xxyyYVcIm0svYk9dRHS/ol0e3Pz5eQQDq 3eeC+rFZjmfYJHL+HKE0URfVagi0HSLhxlIabivnmFYlO3vCbDxgp7BoC40dQQcG SpHDVXpqWugzRwxEJPInwPgDwo+7yQH2FHbzd2N114AJ4cYqDcpXH4xIE+4W6PAJ EI4Yyttqp7RmeytAGIjibguhG13UKzigHGS/1ZTOqY7b5+6jQOTjYVI2hIcRHHF0 548akztHN8pXFk3PTcy2Fm/48qhfLhn+lfc1lpg1+6C1Rk2xzZM= -----END CERTIFICATE-----Generated at Tue Sep 22 21:20:33 2026 by rpki-client