$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.mft File: C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.mft (raw, json) Hash identifier: JWwwT5+/oVQE/F2XERepcaVOBVCt5pR5bFj9JnbdPwU= Subject key identifier: 64:5B:F5:E3:78:3F:51:07:0C:15:2F:2F:A4:9C:44:39:3D:8F:5E:D1 Authority key identifier: C8:1C:7B:AD:CE:1C:C5:07:5C:39:8F:6A:91:BF:29:C7:9B:9D:24:19 Certificate issuer: /CN=C81C7BADCE1CC5075C398F6A91BF29C79B9D2419 Certificate serial: 2DB251559CB0CD0C857D0E0840BEC44769508740 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.mft Manifest number: BC Signing time: Mon 21 Sep 2026 14:34:37 +0000 Manifest this update: Mon 21 Sep 2026 14:29:37 +0000 Manifest next update: Tue 22 Sep 2026 16:22:37 +0000 Files and hashes: 1: 3130332e36382e3231322e302f32342d3234203d3e20313530353330.roa (hash: l8WWbVdsfCxIG53KEYuD2G886pY6gWcw9Sl2OeYKNN0=) 2: 3130332e36382e3231322e302f32332d3234203d3e20313530353330.roa (hash: IVfgbGei5sG8aHxKcQ03LzSWtbMPZQoN7TQZBqmMcs8=) 3: C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.crl (hash: GtrNfuLVxGltJ0sJvYKs70MKvGY3tsZ/b60y8iR2u/Q=) 4: 3130332e36382e3231332e302f32342d3234203d3e20313530353330.roa (hash: IpOu0hw1kU1giNWGBV8+r7d/kylv24hX1J5iHuymIp0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.crl rsync://rpki-rsync.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:b2:51:55:9c:b0:cd:0c:85:7d:0e:08:40:be:c4:47:69:50:87:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C81C7BADCE1CC5075C398F6A91BF29C79B9D2419 Validity Not Before: Sep 21 14:29:37 2026 GMT Not After : Sep 22 16:22:37 2026 GMT Subject: CN=645BF5E3783F51070C152F2FA49C44393D8F5ED1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:39:38:44:96:61:ed:bd:ca:a4:77:26:dd:86: 3a:69:28:48:e3:f5:e4:31:65:9a:5a:47:08:38:2e: 82:e2:07:7b:66:b2:b8:da:eb:cd:24:0d:12:b7:ba: ab:90:7b:6c:9b:87:84:39:c1:7f:d5:ad:27:f6:ab: 25:27:0b:ea:bf:d3:b8:cf:22:cc:1a:ee:7c:4e:e2: d7:6f:11:7c:ae:0b:2e:1c:b8:c1:74:89:fb:99:6e: 59:ed:3f:2e:c3:eb:ff:df:fb:aa:be:11:e1:95:39: 70:86:0f:2b:64:e5:20:61:eb:5d:63:46:4c:58:85: 11:3c:cb:27:95:5a:b3:b7:27:ff:c5:80:b1:32:35: e9:e2:36:5c:83:9d:90:a9:53:31:b7:fe:a3:c3:ce: 19:f7:58:42:bd:d2:78:12:da:12:86:02:b5:63:c0: 1f:bc:66:36:85:9c:e5:a5:f5:32:79:e0:13:18:4e: f3:16:95:bb:33:67:e4:4b:74:3b:f4:00:cf:4e:6b: 80:c6:4e:de:5d:8a:53:ce:98:21:97:79:c6:b4:18: 4d:d4:bf:0d:47:8e:cd:28:07:80:2c:b0:0c:6e:6f: 3a:5e:03:39:5a:d0:27:58:a9:8c:43:49:e9:b5:89: d5:10:f8:c2:4e:ab:27:d1:7f:54:24:ce:8c:de:b6: 9a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:5B:F5:E3:78:3F:51:07:0C:15:2F:2F:A4:9C:44:39:3D:8F:5E:D1 X509v3 Authority Key Identifier: keyid:C8:1C:7B:AD:CE:1C:C5:07:5C:39:8F:6A:91:BF:29:C7:9B:9D:24:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:b1:c6:2e:fd:8e:5d:c2:6b:9c:88:a8:7a:81:ca:ce:4b:8f: ac:06:74:16:0f:d2:10:01:c2:b9:6e:8e:4d:0e:45:83:bc:f0: d8:da:57:35:81:6c:f3:be:bc:42:e9:5a:70:2a:52:06:6a:44: ab:07:bf:b7:c2:9c:2a:58:8b:15:a1:e7:37:f8:c1:fc:84:b9: f5:8c:86:21:50:ab:49:87:b1:c6:6c:84:e5:67:8a:e7:45:24: d4:30:d8:23:f7:07:6a:38:37:52:c8:c8:d7:d3:0b:e0:05:88: 0f:57:9c:c1:6b:53:f2:61:09:f3:ea:da:1d:40:e2:01:62:f4: aa:6d:f7:66:d6:66:63:7d:8e:ea:a3:d0:32:ee:84:eb:ce:f7: 4e:b8:2f:d9:90:08:92:b5:a5:3b:92:a6:e3:61:9f:d2:46:e7: 38:17:11:af:ec:75:93:15:65:67:ad:f9:04:77:31:4b:c7:06: 5f:cb:5e:6f:31:53:5c:34:9b:e8:79:fd:b8:9f:27:cb:65:29: 6a:1f:b3:90:ed:8f:92:8c:e0:34:9d:5d:e4:a0:1f:0c:c6:af: bc:9a:96:30:9a:01:2c:82:75:7b:d7:73:4e:4f:52:9b:d7:21: ae:4e:a1:e2:90:6b:12:7e:ff:3c:21:29:35:a4:e5:0d:53:21: e3:34:4c:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULbJRVZywzQyFfQ4IQL7ER2lQh0AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzgxQzdCQURDRTFDQzUwNzVDMzk4RjZBOTFCRjI5Qzc5 QjlEMjQxOTAeFw0yNjA5MjExNDI5MzdaFw0yNjA5MjIxNjIyMzdaMDMxMTAvBgNV BAMTKDY0NUJGNUUzNzgzRjUxMDcwQzE1MkYyRkE0OUM0NDM5M0Q4RjVFRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGOThElmHtvcqkdybdhjppKEjj 9eQxZZpaRwg4LoLiB3tmsrja680kDRK3uquQe2ybh4Q5wX/VrSf2qyUnC+q/07jP Iswa7nxO4tdvEXyuCy4cuMF0ifuZblntPy7D6//f+6q+EeGVOXCGDytk5SBh611j RkxYhRE8yyeVWrO3J//FgLEyNeniNlyDnZCpUzG3/qPDzhn3WEK90ngS2hKGArVj wB+8ZjaFnOWl9TJ54BMYTvMWlbszZ+RLdDv0AM9Oa4DGTt5dilPOmCGXeca0GE3U vw1Hjs0oB4AssAxubzpeAzla0CdYqYxDSem1idUQ+MJOqyfRf1QkzozetpqtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZFv143g/UQcMFS8vpJxEOT2PXtEwHwYDVR0j BBgwFoAUyBx7rc4cxQdcOY9qkb8px5udJBkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDI2MGNmMTYtNzRmZi00ZjJmLWI1NmMtZTU4MWVhZWEyNTFjLzAvQzgxQzdCQURD RTFDQzUwNzVDMzk4RjZBOTFCRjI5Qzc5QjlEMjQxOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DODFDN0JBRENFMUNDNTA3NUMzOThGNkE5MUJGMjlDNzlCOUQy NDE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDI2MGNmMTYtNzRmZi00ZjJmLWI1 NmMtZTU4MWVhZWEyNTFjLzAvQzgxQzdCQURDRTFDQzUwNzVDMzk4RjZBOTFCRjI5 Qzc5QjlEMjQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAuxxi79jl3Ca5yIqHqBys5Lj6wGdBYP0hAB wrlujk0ORYO88NjaVzWBbPO+vELpWnAqUgZqRKsHv7fCnCpYixWh5zf4wfyEufWM hiFQq0mHscZshOVniudFJNQw2CP3B2o4N1LIyNfTC+AFiA9XnMFrU/JhCfPq2h1A 4gFi9Kpt92bWZmN9juqj0DLuhOvO9064L9mQCJK1pTuSpuNhn9JG5zgXEa/sdZMV ZWet+QR3MUvHBl/LXm8xU1w0m+h5/bifJ8tlKWofs5Dtj5KM4DSdXeSgHwzGr7ya ljCaASyCdXvXc05PUpvXIa5OoeKQaxJ+/zwhKTWk5Q1TIeM0TH8= -----END CERTIFICATE-----Generated at Mon Sep 21 18:51:50 2026 by rpki-client