$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.mft File: E029C9E3702797CC6083E1D4D891799F0F5AA144.mft (raw, json) Hash identifier: ZuZ9NERXl/wyGPyAYKmPoZf9qzIUnRAEiBufADRfsGs= Subject key identifier: 36:35:FD:27:0B:5E:A7:14:F3:5F:EF:F0:17:A6:09:F7:A3:15:FF:D0 Authority key identifier: E0:29:C9:E3:70:27:97:CC:60:83:E1:D4:D8:91:79:9F:0F:5A:A1:44 Certificate issuer: /CN=E029C9E3702797CC6083E1D4D891799F0F5AA144 Certificate serial: 39BB7317EAB29FC252C6E1C685E9E723B763E143 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E029C9E3702797CC6083E1D4D891799F0F5AA144.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.mft Manifest number: BF Signing time: Tue 22 Sep 2026 03:10:38 +0000 Manifest this update: Tue 22 Sep 2026 03:05:38 +0000 Manifest next update: Wed 23 Sep 2026 03:22:38 +0000 Files and hashes: 1: 3130332e3130392e3230372e302f32342d3234203d3e20313530393335.roa (hash: DY6/Cy+Nw1dnpzSyQJvKM4XZv0DQUdJYanxa6KJ+Sng=) 2: E029C9E3702797CC6083E1D4D891799F0F5AA144.crl (hash: bvEZ3Sug1pf7vFnPDQs4LgRDB/Xv3oZoqrJ0YtMXa8U=) 3: 3130332e3130392e3230362e302f32342d3234203d3e20313530393335.roa (hash: 8AqsSwbCPBkMa1bd8eWoyuIjrtuzrPJimjGA2fsl3AA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.crl rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E029C9E3702797CC6083E1D4D891799F0F5AA144.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 03:22:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:bb:73:17:ea:b2:9f:c2:52:c6:e1:c6:85:e9:e7:23:b7:63:e1:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E029C9E3702797CC6083E1D4D891799F0F5AA144 Validity Not Before: Sep 22 03:05:38 2026 GMT Not After : Sep 23 03:22:38 2026 GMT Subject: CN=3635FD270B5EA714F35FEFF017A609F7A315FFD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:98:8f:d9:c2:4c:1a:fc:af:ad:30:c2:53:69: 52:02:23:b9:c1:72:fe:a3:c0:7c:36:dc:3e:54:c6: 16:05:0f:7c:6e:68:bb:b0:0c:d9:ea:bc:c1:90:67: 49:97:ef:5c:f9:c9:77:2b:5a:56:14:50:dd:5e:91: e1:19:07:ef:5b:db:4c:5a:ca:1a:0e:bd:75:4a:5a: 49:69:6b:be:42:74:1b:4c:5d:13:d2:aa:82:00:d5: 2b:49:d1:01:26:59:21:01:12:df:aa:23:0e:24:25: 6c:22:e3:09:3d:3f:3b:e0:d3:f3:18:2e:68:e8:12: 47:40:86:ad:9f:b5:c1:03:f5:7d:34:b2:9b:85:a7: 3c:9f:12:b9:cd:43:e7:a9:41:b1:a8:71:9f:d2:d2: a5:73:38:5c:91:3d:e5:e7:7c:1f:2a:52:d8:5c:6b: c5:e3:fc:d7:82:3a:c1:8b:ec:78:68:04:26:95:aa: a3:2c:b5:57:10:d5:95:50:2d:15:78:f0:1d:f1:7c: 2e:de:01:fa:b6:5f:b6:e3:fe:6c:d0:5e:36:a8:a8: aa:6b:94:99:29:1d:6b:29:61:4b:5e:27:ac:00:33: 97:4d:86:4f:81:c3:7f:3e:7f:68:1b:2b:49:b5:7b: 5d:31:fa:44:9b:3a:1e:4d:76:a4:8c:0f:19:f5:ed: b7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:35:FD:27:0B:5E:A7:14:F3:5F:EF:F0:17:A6:09:F7:A3:15:FF:D0 X509v3 Authority Key Identifier: keyid:E0:29:C9:E3:70:27:97:CC:60:83:E1:D4:D8:91:79:9F:0F:5A:A1:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E029C9E3702797CC6083E1D4D891799F0F5AA144.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:41:0c:f0:40:ee:48:72:92:03:56:9c:3d:57:f0:cc:be:d6: 7c:e9:54:aa:7d:dc:3f:a8:81:3f:fc:56:a9:79:3e:b9:30:2a: 78:a1:d0:8c:53:f1:21:ee:d4:53:60:43:43:28:7c:27:f3:ca: 74:ee:2f:e9:e9:3f:5c:1d:c1:32:5f:b7:d5:db:ee:5e:17:52: 49:53:be:7d:24:ed:73:e1:78:4e:98:e7:88:10:1d:64:fe:11: fb:01:82:94:64:db:15:21:1a:30:9c:20:d0:44:22:17:b2:83: bf:b4:ec:0a:b7:07:0d:a5:49:6f:42:0a:e6:55:08:96:c2:6f: ba:6c:f6:71:a2:c2:86:33:5d:f5:a9:0e:e7:d7:1a:d2:9e:5a: e1:d4:7f:5a:97:81:74:82:14:3f:cf:5b:0d:31:00:ad:98:3a: da:22:71:72:43:78:04:11:49:74:86:50:c6:a7:c4:1f:1c:7f: f9:40:06:73:0b:fd:e5:89:8b:15:e7:9c:ed:64:57:6c:e4:ec: d1:d8:75:76:a2:c3:13:cd:4d:5d:10:2c:bc:fa:0b:94:74:4e: 67:87:2f:a2:c4:8a:eb:5c:b5:ef:f6:8a:00:2d:4c:3f:b1:40: fb:e6:ad:4c:48:56:bc:ae:b6:d4:70:d0:ba:63:56:2b:10:47: 8c:e3:58:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUObtzF+qyn8JSxuHGhennI7dj4UMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTAyOUM5RTM3MDI3OTdDQzYwODNFMUQ0RDg5MTc5OUYw RjVBQTE0NDAeFw0yNjA5MjIwMzA1MzhaFw0yNjA5MjMwMzIyMzhaMDMxMTAvBgNV BAMTKDM2MzVGRDI3MEI1RUE3MTRGMzVGRUZGMDE3QTYwOUY3QTMxNUZGRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZmI/Zwkwa/K+tMMJTaVICI7nB cv6jwHw23D5UxhYFD3xuaLuwDNnqvMGQZ0mX71z5yXcrWlYUUN1ekeEZB+9b20xa yhoOvXVKWklpa75CdBtMXRPSqoIA1StJ0QEmWSEBEt+qIw4kJWwi4wk9Pzvg0/MY LmjoEkdAhq2ftcED9X00spuFpzyfErnNQ+epQbGocZ/S0qVzOFyRPeXnfB8qUthc a8Xj/NeCOsGL7HhoBCaVqqMstVcQ1ZVQLRV48B3xfC7eAfq2X7bj/mzQXjaoqKpr lJkpHWspYUteJ6wAM5dNhk+Bw38+f2gbK0m1e10x+kSbOh5NdqSMDxn17bdHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNjX9JwtepxTzX+/wF6YJ96MV/9AwHwYDVR0j BBgwFoAU4CnJ43Anl8xgg+HU2JF5nw9aoUQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWM4ODkyZWItZGRjMC00Y2I2LTk1N2MtYjY1M2YyOGJiZjM5LzAvRTAyOUM5RTM3 MDI3OTdDQzYwODNFMUQ0RDg5MTc5OUYwRjVBQTE0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMDI5QzlFMzcwMjc5N0NDNjA4M0UxRDREODkxNzk5RjBGNUFB MTQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWM4ODkyZWItZGRjMC00Y2I2LTk1 N2MtYjY1M2YyOGJiZjM5LzAvRTAyOUM5RTM3MDI3OTdDQzYwODNFMUQ0RDg5MTc5 OUYwRjVBQTE0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABFBDPBA7khykgNWnD1X8My+1nzpVKp93D+o gT/8Vql5PrkwKnih0IxT8SHu1FNgQ0MofCfzynTuL+npP1wdwTJft9Xb7l4XUklT vn0k7XPheE6Y54gQHWT+EfsBgpRk2xUhGjCcINBEIheyg7+07Aq3Bw2lSW9CCuZV CJbCb7ps9nGiwoYzXfWpDufXGtKeWuHUf1qXgXSCFD/PWw0xAK2YOtoicXJDeAQR SXSGUManxB8cf/lABnML/eWJixXnnO1kV2zk7NHYdXaiwxPNTV0QLLz6C5R0TmeH L6LEiutcte/2igAtTD+xQPvmrUxIVryuttRw0LpjVisQR4zjWHw= -----END CERTIFICATE-----Generated at Tue Sep 22 10:50:11 2026 by rpki-client