$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/C8D04547C334902622C8D7CF29F3F1DC8B435B28.mft File: C8D04547C334902622C8D7CF29F3F1DC8B435B28.mft (raw, json) Hash identifier: Fg3T8HfmM9LUZHymFHuGcX//Dzg50s4La4Mw4JaiWxk= Subject key identifier: DC:94:6C:FA:41:D6:EB:69:21:C3:87:28:5C:7C:9D:DE:EC:39:AC:57 Authority key identifier: C8:D0:45:47:C3:34:90:26:22:C8:D7:CF:29:F3:F1:DC:8B:43:5B:28 Certificate issuer: /CN=C8D04547C334902622C8D7CF29F3F1DC8B435B28 Certificate serial: 71657DA157C7C2662DB30B851384F3E933C801FE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D04547C334902622C8D7CF29F3F1DC8B435B28.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/C8D04547C334902622C8D7CF29F3F1DC8B435B28.mft Manifest number: BE Signing time: Mon 21 Sep 2026 07:15:30 +0000 Manifest this update: Mon 21 Sep 2026 07:10:30 +0000 Manifest next update: Tue 22 Sep 2026 09:47:30 +0000 Files and hashes: 1: 3130332e39352e3136302e302f32332d3234203d3e20313336313236.roa (hash: C54NnNs4f4gmLL9qO83WVBxOgZKL0rmUD589emvzz4I=) 2: C8D04547C334902622C8D7CF29F3F1DC8B435B28.crl (hash: fbzYG5DlIe0W6Lt8PaTCqt4g510m6K8/zHZq/VlRXvM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/C8D04547C334902622C8D7CF29F3F1DC8B435B28.crl rsync://rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/C8D04547C334902622C8D7CF29F3F1DC8B435B28.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D04547C334902622C8D7CF29F3F1DC8B435B28.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:65:7d:a1:57:c7:c2:66:2d:b3:0b:85:13:84:f3:e9:33:c8:01:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8D04547C334902622C8D7CF29F3F1DC8B435B28 Validity Not Before: Sep 21 07:10:30 2026 GMT Not After : Sep 22 09:47:30 2026 GMT Subject: CN=DC946CFA41D6EB6921C387285C7C9DDEEC39AC57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:be:e2:dc:88:0d:46:63:16:dd:b1:8a:65:a4: 6d:6a:15:79:14:53:64:8b:15:48:a0:1a:ad:f2:a2: 8b:6c:63:e7:3d:d1:33:5e:6f:fb:5d:2a:3a:02:03: 43:3c:0c:62:a1:11:3e:8f:c7:cc:c7:cd:f4:72:fc: b6:e0:f9:20:da:31:d9:45:a1:13:dd:ad:60:6a:43: 2d:0f:3f:dd:09:32:8c:f8:03:68:0d:9c:b6:64:5f: 9d:dd:d3:7d:d5:01:a1:ea:f4:a6:5d:69:d6:76:81: 8e:71:12:5a:1d:5e:ba:5d:97:8d:07:61:e2:da:3d: 89:74:b0:15:b2:4b:d4:6b:e1:7c:f8:ca:24:c5:21: 03:40:22:74:f5:75:73:a3:73:7e:cc:0e:07:3a:c7: 88:2c:b8:5f:37:33:d1:ae:0b:19:c7:4d:52:50:86: 32:50:7a:22:42:6e:20:ec:bf:ef:2d:3a:4a:00:67: db:62:98:47:a9:d0:10:fe:21:61:00:c1:25:42:f1: af:d6:ef:9c:77:c2:b0:0b:63:d6:a5:e9:ae:e1:02: 2b:91:01:18:b6:22:86:57:f9:ca:8d:28:13:85:4a: c7:24:a0:b3:8e:1c:63:47:13:6e:ea:f5:0a:39:67: ff:af:b8:80:18:5f:4e:f4:56:f6:94:df:46:1a:7d: b6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:94:6C:FA:41:D6:EB:69:21:C3:87:28:5C:7C:9D:DE:EC:39:AC:57 X509v3 Authority Key Identifier: keyid:C8:D0:45:47:C3:34:90:26:22:C8:D7:CF:29:F3:F1:DC:8B:43:5B:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/C8D04547C334902622C8D7CF29F3F1DC8B435B28.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D04547C334902622C8D7CF29F3F1DC8B435B28.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/C8D04547C334902622C8D7CF29F3F1DC8B435B28.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:bc:c7:20:21:4a:53:35:68:dc:7c:0f:52:a5:50:0c:ec:40: 60:77:f3:92:5b:6f:ec:c1:f1:b9:33:a2:44:77:e4:e6:0d:7a: 05:17:56:e2:f8:ac:2b:ab:8b:c0:1d:79:a8:b3:ae:89:4e:38: 7e:67:5f:44:77:25:86:f9:3b:3b:17:58:22:9d:8b:2f:9c:b5: 95:d2:27:dc:cc:71:2e:83:79:4b:cc:3f:09:25:f6:94:31:cb: bc:33:1f:8e:e0:b5:c4:11:65:34:a1:93:f3:51:4a:53:8f:52: 7c:53:e3:79:cd:6b:e5:16:06:f7:5b:a9:e0:0b:2a:4d:3f:61: e5:8f:8e:50:14:fe:9e:c5:6f:46:c0:db:50:df:f4:76:4d:16: f9:0b:f1:61:ba:c8:c4:b6:52:36:4e:73:f5:86:13:5e:c5:33: 80:f4:7d:32:37:f7:d6:a1:0a:4a:af:c8:58:38:0c:1d:3e:ac: 7d:a2:6b:ab:ec:6a:1a:66:08:b1:21:e3:83:70:4d:06:f5:38: 62:b1:1d:62:4f:89:1a:ef:9c:e5:cd:80:f7:f5:d3:2c:67:46: 1a:e3:4b:b8:db:c4:48:25:6c:39:67:bd:c8:3e:d2:e2:12:42: 78:25:c0:d4:78:ef:75:2d:19:5b:c8:7c:55:07:1e:97:a5:df: 26:06:63:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcWV9oVfHwmYtswuFE4Tz6TPIAf4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhEMDQ1NDdDMzM0OTAyNjIyQzhEN0NGMjlGM0YxREM4 QjQzNUIyODAeFw0yNjA5MjEwNzEwMzBaFw0yNjA5MjIwOTQ3MzBaMDMxMTAvBgNV BAMTKERDOTQ2Q0ZBNDFENkVCNjkyMUMzODcyODVDN0M5RERFRUMzOUFDNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcvuLciA1GYxbdsYplpG1qFXkU U2SLFUigGq3yootsY+c90TNeb/tdKjoCA0M8DGKhET6Px8zHzfRy/Lbg+SDaMdlF oRPdrWBqQy0PP90JMoz4A2gNnLZkX53d033VAaHq9KZdadZ2gY5xElodXrpdl40H YeLaPYl0sBWyS9Rr4Xz4yiTFIQNAInT1dXOjc37MDgc6x4gsuF83M9GuCxnHTVJQ hjJQeiJCbiDsv+8tOkoAZ9timEep0BD+IWEAwSVC8a/W75x3wrALY9al6a7hAiuR ARi2IoZX+cqNKBOFSsckoLOOHGNHE27q9Qo5Z/+vuIAYX070VvaU30YafbaBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3JRs+kHW62khw4coXHyd3uw5rFcwHwYDVR0j BBgwFoAUyNBFR8M0kCYiyNfPKfPx3ItDWygwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGE3NWQzNzEtMThjNy00OGRmLThmNjEtMWQ0MDRiNjQ2NDEzLzAvQzhEMDQ1NDdD MzM0OTAyNjIyQzhEN0NGMjlGM0YxREM4QjQzNUIyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOEQwNDU0N0MzMzQ5MDI2MjJDOEQ3Q0YyOUYzRjFEQzhCNDM1 QjI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGE3NWQzNzEtMThjNy00OGRmLThm NjEtMWQ0MDRiNjQ2NDEzLzAvQzhEMDQ1NDdDMzM0OTAyNjIyQzhEN0NGMjlGM0Yx REM4QjQzNUIyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEO8xyAhSlM1aNx8D1KlUAzsQGB385Jbb+zB 8bkzokR35OYNegUXVuL4rCuri8AdeaizrolOOH5nX0R3JYb5OzsXWCKdiy+ctZXS J9zMcS6DeUvMPwkl9pQxy7wzH47gtcQRZTShk/NRSlOPUnxT43nNa+UWBvdbqeAL Kk0/YeWPjlAU/p7Fb0bA21Df9HZNFvkL8WG6yMS2UjZOc/WGE17FM4D0fTI399ah CkqvyFg4DB0+rH2ia6vsahpmCLEh44NwTQb1OGKxHWJPiRrvnOXNgPf10yxnRhrj S7jbxEglbDlnvcg+0uISQnglwNR473UtGVvIfFUHHpel3yYGYwI= -----END CERTIFICATE-----Generated at Mon Sep 21 11:42:29 2026 by rpki-client