$ rpki-client -vvvf rpki-rsync.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/E4AC5A0B7B031CC8F4387521F896C49FC8165D46.mft File: E4AC5A0B7B031CC8F4387521F896C49FC8165D46.mft (raw, json) Hash identifier: zbOnCfj3thwdj9G21NitLVhQU4DluWvWtM3TR38Jp14= Subject key identifier: 6A:E3:02:14:CC:59:08:FB:BB:3C:BA:1C:09:04:B6:A4:86:E8:DE:97 Authority key identifier: E4:AC:5A:0B:7B:03:1C:C8:F4:38:75:21:F8:96:C4:9F:C8:16:5D:46 Certificate issuer: /CN=E4AC5A0B7B031CC8F4387521F896C49FC8165D46 Certificate serial: 33F39A77A04EEC8F7C5B17734908519402BAA57F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4AC5A0B7B031CC8F4387521F896C49FC8165D46.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/E4AC5A0B7B031CC8F4387521F896C49FC8165D46.mft Manifest number: BD Signing time: Sun 20 Sep 2026 21:43:55 +0000 Manifest this update: Sun 20 Sep 2026 21:38:55 +0000 Manifest next update: Mon 21 Sep 2026 22:30:55 +0000 Files and hashes: 1: E4AC5A0B7B031CC8F4387521F896C49FC8165D46.crl (hash: d+mQOGrxABILRjWyIU3MJ7GAy2JwGGtwttYI6HWtVLY=) 2: 3130332e3133392e3138382e302f32332d3233203d3e20313338393031.roa (hash: l0X0+poFCOAwI1du4qGF+veeFoCLhTMTvuXxlX7wlYc=) 3: 3130332e3133392e3138382e302f32332d3234203d3e20313338393031.roa (hash: nmYerSBoYz5ABQ7ABcFXpaJW56oTyB9j1y+H2x6EP3A=) 4: 323030313a6466303a386438303a3a2f34382d3438203d3e20313338393031.roa (hash: Fw4ZShoY1ipa+BexcpJaYw89aApjuOYJwqsXze7oiwI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/E4AC5A0B7B031CC8F4387521F896C49FC8165D46.crl rsync://rpki-rsync.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/E4AC5A0B7B031CC8F4387521F896C49FC8165D46.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4AC5A0B7B031CC8F4387521F896C49FC8165D46.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 22:30:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:f3:9a:77:a0:4e:ec:8f:7c:5b:17:73:49:08:51:94:02:ba:a5:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4AC5A0B7B031CC8F4387521F896C49FC8165D46 Validity Not Before: Sep 20 21:38:55 2026 GMT Not After : Sep 21 22:30:55 2026 GMT Subject: CN=6AE30214CC5908FBBB3CBA1C0904B6A486E8DE97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:eb:3e:ef:cc:79:94:c8:78:86:7e:8b:52:12: 14:cb:f4:c5:39:be:e2:4e:3e:9d:43:41:31:06:98: ac:e6:34:9d:ee:9b:79:2c:dc:a6:21:fa:f1:36:d4: 1a:95:23:04:e6:c6:06:39:00:ac:36:d1:0e:45:92: 45:76:d0:41:56:0d:45:30:0e:2e:cd:20:d3:d3:64: d5:c5:a2:7e:ff:42:9b:b4:d3:6a:af:39:8c:90:65: 3b:da:74:05:af:21:6b:20:b9:13:8f:ea:69:99:49: 66:61:5d:ff:ce:a6:84:78:c4:ed:55:42:7c:68:74: 9b:a9:36:c1:ab:95:c8:77:fb:31:2d:12:db:ff:9f: 0b:4d:98:29:c9:99:10:be:50:f5:4a:de:c8:fb:e4: e4:9d:bf:d7:9a:32:9c:fb:4e:1f:cc:df:60:5b:ed: 1f:b9:62:72:6d:bd:6e:d9:96:d6:bf:4d:73:46:01: 14:50:c3:84:07:76:b7:fc:6d:89:a8:d3:42:66:09: 5a:df:ac:94:a0:c5:67:f5:8a:ae:39:29:04:21:bf: 16:62:e1:0a:b9:4b:0d:49:1c:e0:6c:1c:67:b5:86: 65:ff:73:dd:40:a5:51:df:c3:28:07:86:43:82:fc: da:15:bb:5a:d9:3e:de:36:6e:c7:1a:de:ce:f3:09: dd:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E3:02:14:CC:59:08:FB:BB:3C:BA:1C:09:04:B6:A4:86:E8:DE:97 X509v3 Authority Key Identifier: keyid:E4:AC:5A:0B:7B:03:1C:C8:F4:38:75:21:F8:96:C4:9F:C8:16:5D:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/E4AC5A0B7B031CC8F4387521F896C49FC8165D46.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4AC5A0B7B031CC8F4387521F896C49FC8165D46.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/E4AC5A0B7B031CC8F4387521F896C49FC8165D46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:f7:54:8a:a0:53:83:37:1c:af:be:1f:34:2d:73:56:d7:82: 48:85:12:ed:4e:dd:77:79:ae:34:b9:75:30:ad:dd:a4:03:e4: 0f:6f:a1:31:74:ba:22:cc:10:42:1f:61:3e:4e:35:6a:a7:ba: 2b:7b:db:ce:4c:bf:63:a1:6d:86:f5:0b:47:b2:42:5d:74:5f: 08:59:81:c4:1b:d7:b5:80:44:be:2c:00:72:30:d9:ef:0d:e2: 26:7c:ec:56:e1:bd:99:ac:f0:09:e2:87:f9:21:a9:6c:f6:40: c5:a3:02:49:0a:a5:7f:86:11:73:da:6e:b9:24:d0:2f:10:67: 24:5c:d5:93:0c:b6:f7:3d:39:7e:b2:72:e4:9c:21:f9:06:70: 35:cb:52:58:07:40:69:29:7a:74:b2:dc:11:bf:80:fc:72:ef: 7c:19:35:05:37:4c:8d:63:c3:0e:d9:ec:f5:74:ad:c5:e0:cd: ab:7f:ca:e5:5b:d9:7e:c6:6b:af:f7:c6:8c:b8:2f:23:2c:87: 52:d9:86:8a:eb:38:f3:dc:e7:cb:aa:43:3d:7c:a8:80:1f:47: 82:7b:82:fa:4a:06:fe:44:95:77:88:27:6b:94:b1:34:dd:ea: 23:5d:1f:b6:a0:39:c9:35:0d:19:4b:5a:66:7c:65:7d:35:c2: cc:57:9c:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM/Oad6BO7I98WxdzSQhRlAK6pX8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTRBQzVBMEI3QjAzMUNDOEY0Mzg3NTIxRjg5NkM0OUZD ODE2NUQ0NjAeFw0yNjA5MjAyMTM4NTVaFw0yNjA5MjEyMjMwNTVaMDMxMTAvBgNV BAMTKDZBRTMwMjE0Q0M1OTA4RkJCQjNDQkExQzA5MDRCNkE0ODZFOERFOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR6z7vzHmUyHiGfotSEhTL9MU5 vuJOPp1DQTEGmKzmNJ3um3ks3KYh+vE21BqVIwTmxgY5AKw20Q5FkkV20EFWDUUw Di7NINPTZNXFon7/Qpu002qvOYyQZTvadAWvIWsguROP6mmZSWZhXf/OpoR4xO1V QnxodJupNsGrlch3+zEtEtv/nwtNmCnJmRC+UPVK3sj75OSdv9eaMpz7Th/M32Bb 7R+5YnJtvW7Zlta/TXNGARRQw4QHdrf8bYmo00JmCVrfrJSgxWf1iq45KQQhvxZi 4Qq5Sw1JHOBsHGe1hmX/c91ApVHfwygHhkOC/NoVu1rZPt42bsca3s7zCd2/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUauMCFMxZCPu7PLocCQS2pIbo3pcwHwYDVR0j BBgwFoAU5KxaC3sDHMj0OHUh+JbEn8gWXUYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWI3OTkwNjgtNGVjOC00YzM2LThmYTctM2U3MmFlYmNlZWI4LzAvRTRBQzVBMEI3 QjAzMUNDOEY0Mzg3NTIxRjg5NkM0OUZDODE2NUQ0Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNEFDNUEwQjdCMDMxQ0M4RjQzODc1MjFGODk2QzQ5RkM4MTY1 RDQ2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWI3OTkwNjgtNGVjOC00YzM2LThm YTctM2U3MmFlYmNlZWI4LzAvRTRBQzVBMEI3QjAzMUNDOEY0Mzg3NTIxRjg5NkM0 OUZDODE2NUQ0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGb3VIqgU4M3HK++HzQtc1bXgkiFEu1O3Xd5 rjS5dTCt3aQD5A9voTF0uiLMEEIfYT5ONWqnuit7285Mv2OhbYb1C0eyQl10XwhZ gcQb17WARL4sAHIw2e8N4iZ87FbhvZms8Anih/khqWz2QMWjAkkKpX+GEXPabrkk 0C8QZyRc1ZMMtvc9OX6ycuScIfkGcDXLUlgHQGkpenSy3BG/gPxy73wZNQU3TI1j ww7Z7PV0rcXgzat/yuVb2X7Ga6/3xoy4LyMsh1LZhorrOPPc58uqQz18qIAfR4J7 gvpKBv5ElXeIJ2uUsTTd6iNdH7agOck1DRlLWmZ8ZX01wsxXnMg= -----END CERTIFICATE-----Generated at Mon Sep 21 16:33:11 2026 by rpki-client