$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/994E7625F275D75C44DFB4A7ADF4842506F11789.mft File: 994E7625F275D75C44DFB4A7ADF4842506F11789.mft (raw, json) Hash identifier: cNxGBGRpVDamLb5wxKkZ5WmA9IgJx5r7KyQF0TiDAyI= Subject key identifier: A1:8B:C5:DE:35:C6:1F:08:E7:DD:3D:FB:CD:A0:0E:C3:84:6B:04:69 Authority key identifier: 99:4E:76:25:F2:75:D7:5C:44:DF:B4:A7:AD:F4:84:25:06:F1:17:89 Certificate issuer: /CN=994E7625F275D75C44DFB4A7ADF4842506F11789 Certificate serial: 36D6EA00FF03D350F08F56F9FC9C0C4338219F2A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/994E7625F275D75C44DFB4A7ADF4842506F11789.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/994E7625F275D75C44DFB4A7ADF4842506F11789.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 08:41:30 +0000 Manifest this update: Thu 24 Sep 2026 08:36:30 +0000 Manifest next update: Fri 25 Sep 2026 08:54:30 +0000 Files and hashes: 1: 994E7625F275D75C44DFB4A7ADF4842506F11789.crl (hash: zXk2wivZpVKk/YbYegn3AONWkP9VQaeebztqAZ8Z+M8=) 2: 323030313a6466333a653563303a3a2f34382d3438203d3e20313430343233.roa (hash: r8HkCpINzf8MUL+ZwgRHMLjx/E/uKIxBx07xyWJ8oXY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/994E7625F275D75C44DFB4A7ADF4842506F11789.crl rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/994E7625F275D75C44DFB4A7ADF4842506F11789.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/994E7625F275D75C44DFB4A7ADF4842506F11789.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 08:54:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:d6:ea:00:ff:03:d3:50:f0:8f:56:f9:fc:9c:0c:43:38:21:9f:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994E7625F275D75C44DFB4A7ADF4842506F11789 Validity Not Before: Sep 24 08:36:30 2026 GMT Not After : Sep 25 08:54:30 2026 GMT Subject: CN=A18BC5DE35C61F08E7DD3DFBCDA00EC3846B0469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b1:87:16:b2:81:7e:01:15:5a:38:b1:36:1e: 8e:00:4f:4c:42:e2:9e:ed:ff:5e:82:c9:73:75:8f: fe:5f:d0:25:0b:05:b9:f6:a7:74:d6:b4:0e:47:1b: d4:ec:fd:98:c7:1c:f2:6a:c4:d8:fb:8f:8e:7f:9d: 34:ee:a7:4a:69:ef:75:8e:9e:79:9d:35:17:89:fa: 00:4a:f5:59:73:1d:98:98:04:a4:72:b5:da:57:ea: 20:9f:5d:5c:cf:4f:12:32:bb:73:b2:4b:fc:b5:71: f3:3c:d7:d1:3d:20:b9:09:c9:1f:a3:a3:7d:eb:5d: 91:a3:f4:f9:c0:8a:9d:6d:1a:14:56:a7:11:35:0b: 05:8b:10:38:f3:7b:69:1b:a6:f6:42:74:c6:0c:8b: a9:77:fd:e0:67:c5:e3:c0:1c:ac:a7:79:91:58:57: e6:ec:9a:fa:7e:73:11:8b:f2:ad:9b:1b:52:86:fe: e0:72:9d:a3:7f:55:89:16:51:d3:81:1a:46:8b:21: 8a:05:83:53:f0:90:19:e4:b7:02:c6:a4:bb:e6:ed: f7:e6:36:d0:45:ff:9f:fb:2d:6e:b1:ea:8b:c5:2f: be:57:44:a1:59:5b:78:8c:5b:2d:59:ed:a8:6c:42: c4:65:0b:11:a1:99:79:a7:cd:d2:1a:24:c5:20:26: 57:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:8B:C5:DE:35:C6:1F:08:E7:DD:3D:FB:CD:A0:0E:C3:84:6B:04:69 X509v3 Authority Key Identifier: keyid:99:4E:76:25:F2:75:D7:5C:44:DF:B4:A7:AD:F4:84:25:06:F1:17:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/994E7625F275D75C44DFB4A7ADF4842506F11789.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/994E7625F275D75C44DFB4A7ADF4842506F11789.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/994E7625F275D75C44DFB4A7ADF4842506F11789.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:f7:df:67:96:32:a2:5b:c7:ec:73:1d:d2:97:37:9f:ec:4d: 31:f4:ee:1f:17:d1:0e:c4:ff:0e:bd:e2:ef:76:f2:2d:02:a0: e8:9c:01:2c:6e:b7:37:2a:7e:97:ff:f9:19:6d:d5:66:85:eb: 67:21:90:00:82:45:e6:12:f9:6f:50:a6:98:df:e1:5c:59:89: 6a:28:ce:10:bc:90:eb:03:d2:53:92:05:ee:ed:c1:2a:da:f0: 10:c8:71:3d:e2:2e:1f:67:13:ec:c8:ab:f5:fb:fe:ee:a5:45: 54:f8:71:7e:c1:19:04:cc:53:04:22:d8:cc:6a:bd:53:91:c2: 0a:6b:f0:52:91:ce:6c:79:f0:3b:63:b5:f8:cc:95:91:ba:ac: d0:09:83:44:f0:62:33:bf:04:92:fe:3d:a3:3c:c4:04:4c:e2: f1:3d:8f:3d:1f:84:6a:96:72:c3:9e:b2:a9:04:d6:29:4e:0d: b7:af:f9:ed:6f:43:7b:d3:c9:fb:0c:86:6c:93:76:ba:ad:67: bd:33:45:e6:82:08:b7:4e:d6:fa:52:f3:c1:3f:3c:d3:17:e0: 31:66:9b:2c:e6:84:96:0b:7c:f2:9d:ca:17:39:bb:5e:64:a4: 6b:9c:db:e7:29:e5:d7:1e:db:c5:3c:e6:d3:61:07:02:a3:40: 9d:57:51:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNtbqAP8D01Dwj1b5/JwMQzghnyowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk0RTc2MjVGMjc1RDc1QzQ0REZCNEE3QURGNDg0MjUw NkYxMTc4OTAeFw0yNjA5MjQwODM2MzBaFw0yNjA5MjUwODU0MzBaMDMxMTAvBgNV BAMTKEExOEJDNURFMzVDNjFGMDhFN0REM0RGQkNEQTAwRUMzODQ2QjA0NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLsYcWsoF+ARVaOLE2Ho4AT0xC 4p7t/16CyXN1j/5f0CULBbn2p3TWtA5HG9Ts/ZjHHPJqxNj7j45/nTTup0pp73WO nnmdNReJ+gBK9VlzHZiYBKRytdpX6iCfXVzPTxIyu3OyS/y1cfM819E9ILkJyR+j o33rXZGj9PnAip1tGhRWpxE1CwWLEDjze2kbpvZCdMYMi6l3/eBnxePAHKyneZFY V+bsmvp+cxGL8q2bG1KG/uBynaN/VYkWUdOBGkaLIYoFg1PwkBnktwLGpLvm7ffm NtBF/5/7LW6x6ovFL75XRKFZW3iMWy1Z7ahsQsRlCxGhmXmnzdIaJMUgJldTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoYvF3jXGHwjn3T37zaAOw4RrBGkwHwYDVR0j BBgwFoAUmU52JfJ111xE37SnrfSEJQbxF4kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGVjNjc3ZmQtZDU2OS00Y2M1LWE1NjMtOWIwZjI0OGIxYWYxLzEvOTk0RTc2MjVG Mjc1RDc1QzQ0REZCNEE3QURGNDg0MjUwNkYxMTc4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OTRFNzYyNUYyNzVENzVDNDRERkI0QTdBREY0ODQyNTA2RjEx Nzg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGVjNjc3ZmQtZDU2OS00Y2M1LWE1 NjMtOWIwZjI0OGIxYWYxLzEvOTk0RTc2MjVGMjc1RDc1QzQ0REZCNEE3QURGNDg0 MjUwNkYxMTc4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMP332eWMqJbx+xzHdKXN5/sTTH07h8X0Q7E /w694u928i0CoOicASxutzcqfpf/+Rlt1WaF62chkACCReYS+W9Qppjf4VxZiWoo zhC8kOsD0lOSBe7twSra8BDIcT3iLh9nE+zIq/X7/u6lRVT4cX7BGQTMUwQi2Mxq vVORwgpr8FKRzmx58DtjtfjMlZG6rNAJg0TwYjO/BJL+PaM8xARM4vE9jz0fhGqW csOesqkE1ilODbev+e1vQ3vTyfsMhmyTdrqtZ70zReaCCLdO1vpS88E/PNMX4DFm myzmhJYLfPKdyhc5u15kpGuc2+cp5dce28U85tNhBwKjQJ1XUeg= -----END CERTIFICATE-----Generated at Thu Sep 24 19:04:51 2026 by rpki-client