$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/996D7371455A834C9B196DACD041DB7C6E779021.mft File: 996D7371455A834C9B196DACD041DB7C6E779021.mft (raw, json) Hash identifier: aDT6FTXHaFgAyeXlo/zkwItnQUtAW8Npyt2N+niMDu4= Subject key identifier: F3:93:D7:D4:84:6E:1A:32:FB:45:E1:5C:E4:29:E2:A5:F7:C6:68:66 Authority key identifier: 99:6D:73:71:45:5A:83:4C:9B:19:6D:AC:D0:41:DB:7C:6E:77:90:21 Certificate issuer: /CN=996D7371455A834C9B196DACD041DB7C6E779021 Certificate serial: 175D8807074BE4C7D5A14B32FD7C0DA0EBE971B3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/996D7371455A834C9B196DACD041DB7C6E779021.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/996D7371455A834C9B196DACD041DB7C6E779021.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 01:07:14 +0000 Manifest this update: Thu 24 Sep 2026 01:02:14 +0000 Manifest next update: Fri 25 Sep 2026 01:40:14 +0000 Files and hashes: 1: 3130332e3135382e3139332e302f32342d3234203d3e20313439373035.roa (hash: y81kh0KeqX5r1jHre6tsGWtKJonbTr6cZ5My00O1C1k=) 2: 996D7371455A834C9B196DACD041DB7C6E779021.crl (hash: NdkbXqI7CLnC6ua3dbxlif3vKh5rj7oo+Yq8a/+s+ME=) 3: 3130332e3135382e3139322e302f32342d3234203d3e20313439373035.roa (hash: CbnjGUXd5+J6hJMKbj+3ua0RtVbeM/SLewiagXzRFOs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/996D7371455A834C9B196DACD041DB7C6E779021.crl rsync://rpki-rsync.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/996D7371455A834C9B196DACD041DB7C6E779021.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/996D7371455A834C9B196DACD041DB7C6E779021.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 01:40:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:5d:88:07:07:4b:e4:c7:d5:a1:4b:32:fd:7c:0d:a0:eb:e9:71:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=996D7371455A834C9B196DACD041DB7C6E779021 Validity Not Before: Sep 24 01:02:14 2026 GMT Not After : Sep 25 01:40:14 2026 GMT Subject: CN=F393D7D4846E1A32FB45E15CE429E2A5F7C66866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:19:4e:e6:d0:09:40:ec:fa:c1:e7:bc:e8:53: 3b:f5:f1:0b:cb:bb:97:9d:9e:37:27:2c:20:a5:7f: 21:87:c4:20:2b:4e:3a:04:15:cc:7f:d1:af:0a:51: 0a:dc:a8:46:db:61:c9:83:91:99:02:4a:18:77:dd: b7:75:cc:f3:a5:b0:19:e7:42:60:50:d5:94:6c:90: 65:95:24:c7:14:88:2f:25:de:7e:26:41:ac:1d:ca: 52:b1:72:9a:1a:7e:2d:5a:24:50:f0:71:d3:ff:7b: 14:61:59:84:a0:a5:24:80:1c:09:83:5b:57:9a:04: 29:90:ba:f8:17:86:18:33:68:8f:cf:94:35:c1:1c: 04:30:9e:8e:de:5e:7a:dc:60:d3:46:3b:b4:66:32: 1d:00:2c:88:6c:5d:55:13:f7:f8:64:b4:aa:de:86: 83:cd:6d:b4:13:d5:6d:2d:4a:3e:82:b5:71:ec:5f: fd:0c:38:5b:8e:f1:03:90:4b:fa:0d:cc:56:e0:be: dd:ee:96:f0:b3:60:e6:9f:63:77:2d:5a:b0:c8:45: 7a:c2:9f:cb:99:6c:d3:41:25:01:05:bf:f8:b4:84: 16:a1:d0:6e:93:3a:ab:55:1e:f4:ca:0c:e9:f3:f2: e4:e1:d8:7c:29:e9:0a:74:4f:24:f5:69:66:32:c0: 72:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:93:D7:D4:84:6E:1A:32:FB:45:E1:5C:E4:29:E2:A5:F7:C6:68:66 X509v3 Authority Key Identifier: keyid:99:6D:73:71:45:5A:83:4C:9B:19:6D:AC:D0:41:DB:7C:6E:77:90:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/996D7371455A834C9B196DACD041DB7C6E779021.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/996D7371455A834C9B196DACD041DB7C6E779021.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/996D7371455A834C9B196DACD041DB7C6E779021.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:26:e2:1c:21:e7:04:f8:bb:40:ef:6f:66:31:6c:cf:3a:bc: 44:85:19:6f:f4:2c:e0:76:9e:90:40:45:ab:0e:1c:fd:aa:ad: 26:33:9e:c5:53:28:65:8b:2f:43:d9:ac:00:ff:50:3b:6c:ba: 70:36:8e:d4:aa:c9:c4:17:ad:a6:04:29:d4:0c:14:4d:ba:17: f3:2b:0e:fb:ea:84:8d:72:76:78:70:40:4f:a5:89:23:16:46: 88:07:94:57:0f:7a:09:28:69:4b:d6:72:92:7a:8d:8d:9d:d1: 19:e1:85:89:3f:7d:3d:67:e1:31:75:89:86:3d:57:96:07:56: 2c:35:1a:e1:3a:b2:18:14:ae:f4:3d:c3:ee:01:2d:09:56:38: 20:55:f6:a7:95:a0:a7:0e:d9:5e:fc:e0:c8:44:8b:8d:82:e1: 40:fd:13:f7:80:1f:64:61:0a:ec:45:a6:23:7c:24:57:17:b8: 3c:61:19:47:bf:e5:a1:90:13:10:84:d3:f3:23:d3:f4:89:c9: c2:f5:ef:fe:e0:ac:9a:a4:ec:64:4a:86:15:a8:f5:be:00:90: fb:b1:c5:50:a9:95:86:b1:cf:87:4f:5f:2e:62:36:5f:c3:5b: d4:ab:78:f4:bf:ba:0f:16:18:db:1e:14:52:8e:35:2d:0a:ad: f1:01:dd:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF12IBwdL5MfVoUsy/XwNoOvpcbMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk2RDczNzE0NTVBODM0QzlCMTk2REFDRDA0MURCN0M2 RTc3OTAyMTAeFw0yNjA5MjQwMTAyMTRaFw0yNjA5MjUwMTQwMTRaMDMxMTAvBgNV BAMTKEYzOTNEN0Q0ODQ2RTFBMzJGQjQ1RTE1Q0U0MjlFMkE1RjdDNjY4NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzGU7m0AlA7PrB57zoUzv18QvL u5ednjcnLCClfyGHxCArTjoEFcx/0a8KUQrcqEbbYcmDkZkCShh33bd1zPOlsBnn QmBQ1ZRskGWVJMcUiC8l3n4mQawdylKxcpoafi1aJFDwcdP/exRhWYSgpSSAHAmD W1eaBCmQuvgXhhgzaI/PlDXBHAQwno7eXnrcYNNGO7RmMh0ALIhsXVUT9/hktKre hoPNbbQT1W0tSj6CtXHsX/0MOFuO8QOQS/oNzFbgvt3ulvCzYOafY3ctWrDIRXrC n8uZbNNBJQEFv/i0hBah0G6TOqtVHvTKDOnz8uTh2Hwp6Qp0TyT1aWYywHL3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU85PX1IRuGjL7ReFc5CnipffGaGYwHwYDVR0j BBgwFoAUmW1zcUVag0ybGW2s0EHbfG53kCEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWI2YzYxNGYtZDBmZi00MWE5LTkyZDAtM2EyMTM1ODE1MzdiLzAvOTk2RDczNzE0 NTVBODM0QzlCMTk2REFDRDA0MURCN0M2RTc3OTAyMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OTZENzM3MTQ1NUE4MzRDOUIxOTZEQUNEMDQxREI3QzZFNzc5 MDIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWI2YzYxNGYtZDBmZi00MWE5LTky ZDAtM2EyMTM1ODE1MzdiLzAvOTk2RDczNzE0NTVBODM0QzlCMTk2REFDRDA0MURC N0M2RTc3OTAyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAMm4hwh5wT4u0Dvb2YxbM86vESFGW/0LOB2 npBARasOHP2qrSYznsVTKGWLL0PZrAD/UDtsunA2jtSqycQXraYEKdQMFE26F/Mr DvvqhI1ydnhwQE+liSMWRogHlFcPegkoaUvWcpJ6jY2d0RnhhYk/fT1n4TF1iYY9 V5YHViw1GuE6shgUrvQ9w+4BLQlWOCBV9qeVoKcO2V784MhEi42C4UD9E/eAH2Rh CuxFpiN8JFcXuDxhGUe/5aGQExCE0/Mj0/SJycL17/7grJqk7GRKhhWo9b4AkPux xVCplYaxz4dPXy5iNl/DW9SrePS/ug8WGNseFFKONS0KrfEB3UA= -----END CERTIFICATE-----Generated at Thu Sep 24 08:51:55 2026 by rpki-client