$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.mft File: E9F2A418990B480D204FA0D037A5ABB3AEC360E9.mft (raw, json) Hash identifier: WohlorrqElDN9fc3aWw/pORikWVKXh53kUXHE4TVym4= Subject key identifier: DF:7F:11:4A:25:0A:4B:00:F5:8B:BB:F9:EF:B7:55:4C:95:64:7A:FC Authority key identifier: E9:F2:A4:18:99:0B:48:0D:20:4F:A0:D0:37:A5:AB:B3:AE:C3:60:E9 Certificate issuer: /CN=E9F2A418990B480D204FA0D037A5ABB3AEC360E9 Certificate serial: 04C59B14D6F9EE426F2691F7F6AE5D3C31AA040B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.mft Manifest number: BE Signing time: Sun 20 Sep 2026 13:13:23 +0000 Manifest this update: Sun 20 Sep 2026 13:08:23 +0000 Manifest next update: Mon 21 Sep 2026 16:56:23 +0000 Files and hashes: 1: 3130332e3139312e3131362e302f32332d3233203d3e20313439393137.roa (hash: bL7nWexv3dr33uLwywkImAJrJWec+y7OgTN8pZ5ywaw=) 2: 3130332e3139312e3131362e302f32342d3234203d3e20313439393137.roa (hash: 27oObCgWzykb6CFKZyK6/jDYuaqop/FIGkUT/qI+p/Q=) 3: 3130332e3139312e3131372e302f32342d3234203d3e20313439393137.roa (hash: lAAUV9z8f3t9czOX/VqnympJr8MrNtNyhxmHLT5vnzY=) 4: E9F2A418990B480D204FA0D037A5ABB3AEC360E9.crl (hash: UDqQa3DCJuai2IgXrGmayqWp+aDqqW8u/+kemE5DLXo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.crl rsync://rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 16:56:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:c5:9b:14:d6:f9:ee:42:6f:26:91:f7:f6:ae:5d:3c:31:aa:04:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9F2A418990B480D204FA0D037A5ABB3AEC360E9 Validity Not Before: Sep 20 13:08:23 2026 GMT Not After : Sep 21 16:56:23 2026 GMT Subject: CN=DF7F114A250A4B00F58BBBF9EFB7554C95647AFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:cb:26:7e:f9:58:68:14:1b:e9:f7:3c:e4:50: e8:d2:f6:aa:d9:34:5b:de:8e:98:21:92:ad:1d:cd: 66:08:31:d1:90:65:d6:f4:e5:b6:a7:57:56:ed:79: 13:7a:af:7d:c6:25:1e:93:91:34:b7:c5:f1:b4:57: 67:29:63:b6:b1:dc:4e:a5:76:0c:b2:42:4e:a8:3c: b1:30:d0:c8:71:6d:3f:56:ad:8f:51:1a:9a:00:2f: 93:15:41:02:cc:53:f8:97:44:33:63:44:68:b7:fc: 29:28:36:b9:f9:06:f2:5f:05:d8:6e:66:dd:b1:b7: 71:cb:4c:db:96:ef:98:3a:9e:74:be:9b:3e:c0:44: a3:57:3e:d4:e0:e7:2d:82:66:59:74:40:78:c4:4a: d7:da:44:16:c3:21:e8:ef:fb:2b:9d:4d:ad:89:ac: 37:cd:09:c7:81:b1:05:bf:45:19:88:cd:83:32:20: 7f:5c:1c:56:7c:c1:05:2d:45:e9:e6:c9:3f:b4:3a: e4:4a:8b:d2:cc:2a:f4:86:49:2f:e9:92:41:ab:c4: d9:fa:f2:59:53:c0:10:2a:24:db:5b:3f:f7:c1:7f: b3:1c:1b:ca:7f:ca:6c:87:98:14:06:09:11:88:a6: 36:c0:d5:62:b2:00:8d:0e:06:50:e3:8f:c4:24:a0: e0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:7F:11:4A:25:0A:4B:00:F5:8B:BB:F9:EF:B7:55:4C:95:64:7A:FC X509v3 Authority Key Identifier: keyid:E9:F2:A4:18:99:0B:48:0D:20:4F:A0:D0:37:A5:AB:B3:AE:C3:60:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:bf:22:a9:21:0d:22:e1:8a:32:32:2b:25:ee:85:06:7c:ae: d7:a8:60:8e:ff:08:7c:1b:9c:1d:b2:74:bb:e3:f0:3d:b6:d6: 9e:56:ae:53:27:27:66:72:e6:4d:61:1e:65:11:40:10:1a:f7: 57:27:eb:e3:a5:54:2b:12:7a:fb:de:6a:e9:ec:07:65:b6:03: 76:43:27:60:19:48:53:03:47:df:19:c1:3d:94:13:a3:1b:d2: c8:a9:c3:53:e5:fc:b2:18:93:f8:91:a4:17:07:94:b8:56:77: de:00:a5:bc:af:5f:91:4a:60:38:42:5e:4e:ad:c2:c2:90:28: 52:34:da:7b:85:dc:b3:f0:f9:7b:08:c5:01:d2:9d:05:62:80: 16:06:40:f0:63:1a:5a:e0:b8:ad:af:e1:5c:b9:82:ef:1e:cf: 2a:ec:1d:ca:84:7d:b7:c4:c0:f9:ed:50:5e:d8:e6:bf:33:73: b5:f7:12:9f:91:4f:ea:e2:50:51:d1:9e:0f:d7:81:d0:cc:13: f5:8f:30:b5:e3:d2:df:3d:02:58:d3:b9:9b:e8:94:15:d5:4d: 65:fd:c1:85:71:95:a5:ea:82:d0:e4:7b:bb:25:f1:5e:30:93: fc:7c:f3:6c:8d:15:4b:21:66:76:06:5b:4b:f9:5d:9c:28:6a: d1:a2:03:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBMWbFNb57kJvJpH39q5dPDGqBAswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlGMkE0MTg5OTBCNDgwRDIwNEZBMEQwMzdBNUFCQjNB RUMzNjBFOTAeFw0yNjA5MjAxMzA4MjNaFw0yNjA5MjExNjU2MjNaMDMxMTAvBgNV BAMTKERGN0YxMTRBMjUwQTRCMDBGNThCQkJGOUVGQjc1NTRDOTU2NDdBRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbyyZ++VhoFBvp9zzkUOjS9qrZ NFvejpghkq0dzWYIMdGQZdb05banV1bteRN6r33GJR6TkTS3xfG0V2cpY7ax3E6l dgyyQk6oPLEw0MhxbT9WrY9RGpoAL5MVQQLMU/iXRDNjRGi3/CkoNrn5BvJfBdhu Zt2xt3HLTNuW75g6nnS+mz7ARKNXPtTg5y2CZll0QHjEStfaRBbDIejv+yudTa2J rDfNCceBsQW/RRmIzYMyIH9cHFZ8wQUtRenmyT+0OuRKi9LMKvSGSS/pkkGrxNn6 8llTwBAqJNtbP/fBf7McG8p/ymyHmBQGCRGIpjbA1WKyAI0OBlDjj8QkoODJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU338RSiUKSwD1i7v577dVTJVkevwwHwYDVR0j BBgwFoAU6fKkGJkLSA0gT6DQN6Wrs67DYOkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTZhZGFlMmEtNDdiNi00YWU1LTljM2YtM2U4Y2I5MmEzOTg3LzAvRTlGMkE0MTg5 OTBCNDgwRDIwNEZBMEQwMzdBNUFCQjNBRUMzNjBFOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOUYyQTQxODk5MEI0ODBEMjA0RkEwRDAzN0E1QUJCM0FFQzM2 MEU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTZhZGFlMmEtNDdiNi00YWU1LTlj M2YtM2U4Y2I5MmEzOTg3LzAvRTlGMkE0MTg5OTBCNDgwRDIwNEZBMEQwMzdBNUFC QjNBRUMzNjBFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEC/IqkhDSLhijIyKyXuhQZ8rteoYI7/CHwb nB2ydLvj8D221p5WrlMnJ2Zy5k1hHmURQBAa91cn6+OlVCsSevveaunsB2W2A3ZD J2AZSFMDR98ZwT2UE6Mb0sipw1Pl/LIYk/iRpBcHlLhWd94ApbyvX5FKYDhCXk6t wsKQKFI02nuF3LPw+XsIxQHSnQVigBYGQPBjGlrguK2v4Vy5gu8ezyrsHcqEfbfE wPntUF7Y5r8zc7X3Ep+RT+riUFHRng/XgdDME/WPMLXj0t89AljTuZvolBXVTWX9 wYVxlaXqgtDke7sl8V4wk/x882yNFUshZnYGW0v5XZwoatGiA58= -----END CERTIFICATE-----Generated at Sun Sep 20 20:13:11 2026 by rpki-client