$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.mft File: E0DE22F577B4244ECB332B87B5831D4AD7DA8007.mft (raw, json) Hash identifier: XiQ8RsEDmVk2A/9pHnNwPLSvY2hm0222n5K6fvw7En4= Subject key identifier: AA:5C:0B:CD:65:A7:3E:91:D7:18:47:EA:E8:B4:BE:87:E1:A1:6A:CB Authority key identifier: E0:DE:22:F5:77:B4:24:4E:CB:33:2B:87:B5:83:1D:4A:D7:DA:80:07 Certificate issuer: /CN=E0DE22F577B4244ECB332B87B5831D4AD7DA8007 Certificate serial: 2CFA4E4334CE98777876310512FE7536AE151DC5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.mft Manifest number: BF Signing time: Tue 22 Sep 2026 12:26:52 +0000 Manifest this update: Tue 22 Sep 2026 12:21:52 +0000 Manifest next update: Wed 23 Sep 2026 16:21:52 +0000 Files and hashes: 1: 3130332e3135332e322e302f32332d3233203d3e20313430333839.roa (hash: zvVBOICq5pKD2ig8o0wI4pJml9B5+zqomhS6S0vqWcI=) 2: 3130332e3135332e332e302f32342d3234203d3e20313430333839.roa (hash: h7oJXK+AgIlPZVwTrPckQLETitJhhEg1pMAjxm6/Vyw=) 3: 3130332e3135332e322e302f32342d3234203d3e20313430333839.roa (hash: 3fZAI9UVM7/UZBavMAQaA62u0fyHX83Z/pKamnkzV24=) 4: E0DE22F577B4244ECB332B87B5831D4AD7DA8007.crl (hash: c8xu8dy0mtjyC2yCQ2cGxnxxMtzpFl3OiFIxtskLr44=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.crl rsync://rpki-rsync.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 16:21:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:fa:4e:43:34:ce:98:77:78:76:31:05:12:fe:75:36:ae:15:1d:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0DE22F577B4244ECB332B87B5831D4AD7DA8007 Validity Not Before: Sep 22 12:21:52 2026 GMT Not After : Sep 23 16:21:52 2026 GMT Subject: CN=AA5C0BCD65A73E91D71847EAE8B4BE87E1A16ACB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:c4:2a:87:76:d3:b8:d8:6c:04:de:32:4e:0d: 3f:6a:27:bd:0d:2c:4c:b1:1a:d4:e0:df:25:4b:97: 43:b3:88:d1:2b:43:d1:65:9f:b7:c8:b4:ea:07:c1: a9:b1:aa:7f:78:c9:d6:ee:e4:e8:05:dd:da:91:40: 41:8d:d3:e8:21:76:71:18:a1:14:09:88:25:ad:7d: ee:2b:fe:84:fa:72:3e:2a:f9:5d:66:74:80:f0:61: fe:a7:33:fa:cb:8a:92:48:e0:e3:26:6c:56:4a:3d: 95:92:d5:56:c4:8a:9c:bd:2a:b9:13:f7:e1:d5:23: ea:e6:d3:55:e0:f6:b9:75:e4:dc:e3:2b:d3:71:4f: 31:58:04:75:d9:b2:b6:2f:97:3e:40:fc:51:c1:88: 17:ed:b3:28:16:9f:a4:ea:e5:d6:3b:36:c6:d5:84: 0c:8e:0e:36:16:35:72:0c:e7:c7:a1:ec:81:2b:97: ac:10:2e:a8:85:bf:28:1a:3b:9d:c7:44:0f:23:f5: a6:a1:9c:f1:7e:5c:f8:cc:c2:fe:c4:f0:43:e7:96: a0:1d:2f:4f:49:96:df:05:ad:92:b3:9b:8d:02:17: d0:37:97:c4:f1:25:a5:dd:7c:b8:a9:10:89:2b:ee: be:9e:50:44:6b:2f:df:2d:9a:ee:b6:fc:be:c6:8d: 59:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:5C:0B:CD:65:A7:3E:91:D7:18:47:EA:E8:B4:BE:87:E1:A1:6A:CB X509v3 Authority Key Identifier: keyid:E0:DE:22:F5:77:B4:24:4E:CB:33:2B:87:B5:83:1D:4A:D7:DA:80:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:8d:d0:ae:ae:9e:9f:32:56:14:2c:28:d4:c4:fe:f3:d9:f0: a5:85:ca:33:19:23:ff:34:57:4c:0d:f2:69:7e:3c:bd:05:5c: c6:40:62:d6:6c:5e:02:43:d4:8b:32:2a:8f:35:73:87:ee:88: f4:68:a3:ff:f2:91:3c:65:a4:ea:e9:3d:4b:42:56:5d:a7:01: e5:6a:e6:0a:e8:b2:95:f4:86:f5:80:17:d2:96:78:f3:b4:28: 98:70:18:f9:5a:8e:9c:f4:4e:b5:74:9e:fa:18:bc:7a:f4:a7: 10:29:7b:8d:ba:e0:c7:78:73:2a:2e:0d:01:84:c4:18:e3:9d: 90:c9:39:7d:dd:25:cf:b0:0b:72:52:92:15:35:e2:72:f1:63: a0:3d:90:36:84:97:da:ee:bb:95:67:1f:2d:fa:40:53:b6:84: 9e:4f:86:be:94:b5:fe:f6:49:9f:19:40:a4:a1:57:86:35:b9: 8e:9f:af:f4:36:e4:2c:9a:bb:7a:92:f3:a1:61:79:e6:0d:bf: c1:fd:83:13:fb:ea:70:19:d6:82:3d:92:0f:48:05:52:21:71: c4:aa:1c:19:06:31:d4:b2:87:62:28:8f:56:de:2f:3c:c1:c7: c7:f6:b6:dd:fe:7e:b6:31:7f:3d:54:55:a4:76:c2:7c:21:ac: 07:31:f0:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULPpOQzTOmHd4djEFEv51Nq4VHcUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBERTIyRjU3N0I0MjQ0RUNCMzMyQjg3QjU4MzFENEFE N0RBODAwNzAeFw0yNjA5MjIxMjIxNTJaFw0yNjA5MjMxNjIxNTJaMDMxMTAvBgNV BAMTKEFBNUMwQkNENjVBNzNFOTFENzE4NDdFQUU4QjRCRTg3RTFBMTZBQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyxCqHdtO42GwE3jJODT9qJ70N LEyxGtTg3yVLl0OziNErQ9Fln7fItOoHwamxqn94ydbu5OgF3dqRQEGN0+ghdnEY oRQJiCWtfe4r/oT6cj4q+V1mdIDwYf6nM/rLipJI4OMmbFZKPZWS1VbEipy9KrkT 9+HVI+rm01Xg9rl15NzjK9NxTzFYBHXZsrYvlz5A/FHBiBftsygWn6Tq5dY7NsbV hAyODjYWNXIM58eh7IErl6wQLqiFvygaO53HRA8j9aahnPF+XPjMwv7E8EPnlqAd L09Jlt8FrZKzm40CF9A3l8TxJaXdfLipEIkr7r6eUERrL98tmu62/L7GjVnJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqlwLzWWnPpHXGEfq6LS+h+GhasswHwYDVR0j BBgwFoAU4N4i9Xe0JE7LMyuHtYMdStfagAcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWJjMWFiNzEtOTFkMC00ZjBiLWJiMjktY2JiN2QzNWU3NGJhLzAvRTBERTIyRjU3 N0I0MjQ0RUNCMzMyQjg3QjU4MzFENEFEN0RBODAwNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMERFMjJGNTc3QjQyNDRFQ0IzMzJCODdCNTgzMUQ0QUQ3REE4 MDA3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWJjMWFiNzEtOTFkMC00ZjBiLWJi MjktY2JiN2QzNWU3NGJhLzAvRTBERTIyRjU3N0I0MjQ0RUNCMzMyQjg3QjU4MzFE NEFEN0RBODAwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACiN0K6unp8yVhQsKNTE/vPZ8KWFyjMZI/80 V0wN8ml+PL0FXMZAYtZsXgJD1IsyKo81c4fuiPRoo//ykTxlpOrpPUtCVl2nAeVq 5grospX0hvWAF9KWePO0KJhwGPlajpz0TrV0nvoYvHr0pxApe4264Md4cyouDQGE xBjjnZDJOX3dJc+wC3JSkhU14nLxY6A9kDaEl9ruu5VnHy36QFO2hJ5Phr6Utf72 SZ8ZQKShV4Y1uY6fr/Q25Cyau3qS86FheeYNv8H9gxP76nAZ1oI9kg9IBVIhccSq HBkGMdSyh2Ioj1beLzzBx8f2tt3+frYxfz1UVaR2wnwhrAcx8Ak= -----END CERTIFICATE-----Generated at Wed Sep 23 08:40:59 2026 by rpki-client