$ rpki-client -vvvf rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.mft File: C8C1A31E42E799E9EDC0FAB813163052945845AC.mft (raw, json) Hash identifier: fJTUDkiRi8x2yHpLymQ1SuhKGWxi603uBckZgw6YdP4= Subject key identifier: 63:62:10:67:AA:21:A1:2D:45:13:03:3D:EA:9E:CE:71:72:2E:55:7C Authority key identifier: C8:C1:A3:1E:42:E7:99:E9:ED:C0:FA:B8:13:16:30:52:94:58:45:AC Certificate issuer: /CN=C8C1A31E42E799E9EDC0FAB813163052945845AC Certificate serial: 230B90DE24C79F7D5CC00CBB6C564DDDFB20C00C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8C1A31E42E799E9EDC0FAB813163052945845AC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.mft Manifest number: D9 Signing time: Sat 10 Oct 2026 11:36:37 +0000 Manifest this update: Sat 10 Oct 2026 11:31:37 +0000 Manifest next update: Sun 11 Oct 2026 14:01:37 +0000 Files and hashes: 1: 323430373a373263303a3a2f33322d3438203d3e203538383230.roa (hash: FEgS5ex34lgarvKtqbdAVQc0toy/dLHosJymf/4jCzU=) 2: C8C1A31E42E799E9EDC0FAB813163052945845AC.crl (hash: Qsf8iIlP1RxQVICaxpt7MpaHDa0Ky3OqchdG2HPrLmI=) 3: 323430373a373263303a3a2f33322d3332203d3e203538383230.roa (hash: QTf5TvW/sGJCtiqjYOWSFSyqMXy6xLfUyzA5Wf2VFMo=) 4: 3130332e3135322e39322e302f32332d3234203d3e20313338383630.roa (hash: UWH9gD1/4ElZU52MCqktUtjxRojq4daDEIdWkUnok2k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.crl rsync://rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8C1A31E42E799E9EDC0FAB813163052945845AC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 04:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:0b:90:de:24:c7:9f:7d:5c:c0:0c:bb:6c:56:4d:dd:fb:20:c0:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8C1A31E42E799E9EDC0FAB813163052945845AC Validity Not Before: Oct 10 11:31:37 2026 GMT Not After : Oct 11 14:01:37 2026 GMT Subject: CN=63621067AA21A12D4513033DEA9ECE71722E557C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:00:e9:26:65:75:85:3c:19:e0:95:64:c3:2a: 48:3e:ba:f5:2d:2e:c2:48:98:ec:f1:59:f2:3e:87: c7:fc:56:7b:85:d3:58:12:ff:ca:15:51:a5:62:51: 0a:e3:89:48:4e:4f:eb:3b:45:f4:4f:4c:31:fc:a1: 3b:22:2a:fa:fd:f5:ce:19:26:ea:b8:d5:2d:c0:5f: 99:91:ba:67:3c:64:51:99:a1:af:5d:c3:22:4a:fd: 61:1c:18:5a:8a:0c:92:3f:24:19:b9:bf:c3:cd:bd: 0d:10:2a:4d:13:89:cf:68:a6:92:c6:e9:d2:f9:4e: 05:61:a3:ac:34:f1:c2:1d:dc:e7:c9:1e:c1:de:e6: 2a:51:b6:d4:ad:49:a2:f1:50:94:ca:92:ee:71:e2: 77:42:a9:8f:32:f2:22:cc:03:59:1a:92:d5:5d:bb: 63:f7:3e:58:4e:1a:37:0a:89:f8:0b:31:0a:59:b3: 89:85:c1:46:cc:f2:2f:aa:1f:e8:f4:c7:e4:27:b3: 9d:d1:08:8f:3c:e8:17:9e:a2:6a:4b:b6:35:f6:43: cf:19:9d:68:6b:90:2d:7c:91:cc:ee:47:e2:1e:21: 03:bd:a9:44:52:3a:16:77:e1:41:c5:83:65:c7:5b: a1:34:c0:8e:16:3e:79:6a:b8:c6:33:5f:f6:65:f5: 83:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:62:10:67:AA:21:A1:2D:45:13:03:3D:EA:9E:CE:71:72:2E:55:7C X509v3 Authority Key Identifier: keyid:C8:C1:A3:1E:42:E7:99:E9:ED:C0:FA:B8:13:16:30:52:94:58:45:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8C1A31E42E799E9EDC0FAB813163052945845AC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:3c:29:51:51:ae:35:fe:53:f2:66:29:28:74:d7:05:f1:69: 31:16:d0:af:f6:63:2e:3a:61:5c:7f:56:b6:da:b3:72:b9:d6: 0f:f8:87:a4:f0:32:a8:f6:92:81:42:7b:01:cf:8d:e1:10:f3: 0e:5d:0a:d1:3b:d3:06:8d:16:8b:5a:da:5a:75:5e:cd:7b:2d: 10:93:7b:2a:e4:dd:9b:c7:db:84:40:f8:20:0d:6e:19:40:da: f4:36:33:7c:e1:69:34:b4:29:e8:31:36:39:9a:e0:d9:69:fd: af:2c:2e:9e:ac:e6:84:fb:de:ac:30:29:2a:67:65:6b:89:84: 86:04:47:ec:29:44:ef:a3:f1:f7:1e:53:91:f2:8b:10:c0:a9: 66:3c:7f:f2:ca:13:4f:38:94:79:a5:8a:32:73:0c:96:84:f0: f6:d5:66:64:d6:b1:f4:ac:da:18:00:f0:cd:60:51:8e:64:a4: 02:d4:3a:01:33:ba:d0:9e:88:b2:83:60:91:94:cf:5b:8c:00: 27:82:01:96:5d:30:4e:d6:02:15:8a:cc:36:35:b5:48:0f:9b: 52:48:22:81:37:20:1b:a9:83:d6:2d:43:8d:ee:69:53:22:ad: e8:e9:d1:68:77:c4:d4:9d:38:a1:34:24:92:83:d4:23:49:67: 00:7e:2d:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIwuQ3iTHn31cwAy7bFZN3fsgwAwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhDMUEzMUU0MkU3OTlFOUVEQzBGQUI4MTMxNjMwNTI5 NDU4NDVBQzAeFw0yNjEwMTAxMTMxMzdaFw0yNjEwMTExNDAxMzdaMDMxMTAvBgNV BAMTKDYzNjIxMDY3QUEyMUExMkQ0NTEzMDMzREVBOUVDRTcxNzIyRTU1N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIAOkmZXWFPBnglWTDKkg+uvUt LsJImOzxWfI+h8f8VnuF01gS/8oVUaViUQrjiUhOT+s7RfRPTDH8oTsiKvr99c4Z Juq41S3AX5mRumc8ZFGZoa9dwyJK/WEcGFqKDJI/JBm5v8PNvQ0QKk0Tic9oppLG 6dL5TgVho6w08cId3OfJHsHe5ipRttStSaLxUJTKku5x4ndCqY8y8iLMA1kaktVd u2P3PlhOGjcKifgLMQpZs4mFwUbM8i+qH+j0x+Qns53RCI886BeeompLtjX2Q88Z nWhrkC18kczuR+IeIQO9qURSOhZ34UHFg2XHW6E0wI4WPnlquMYzX/Zl9YOdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY2IQZ6ohoS1FEwM96p7OcXIuVXwwHwYDVR0j BBgwFoAUyMGjHkLnmentwPq4ExYwUpRYRawwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzhjOWMyNTItZjdjYS00ZGQ1LTg4ZjYtMjJhZGRjODkzNGIzLzAvQzhDMUEzMUU0 MkU3OTlFOUVEQzBGQUI4MTMxNjMwNTI5NDU4NDVBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOEMxQTMxRTQyRTc5OUU5RURDMEZBQjgxMzE2MzA1Mjk0NTg0 NUFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzhjOWMyNTItZjdjYS00ZGQ1LTg4 ZjYtMjJhZGRjODkzNGIzLzAvQzhDMUEzMUU0MkU3OTlFOUVEQzBGQUI4MTMxNjMw NTI5NDU4NDVBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFI8KVFRrjX+U/JmKSh01wXxaTEW0K/2Yy46 YVx/Vrbas3K51g/4h6TwMqj2koFCewHPjeEQ8w5dCtE70waNFota2lp1Xs17LRCT eyrk3ZvH24RA+CANbhlA2vQ2M3zhaTS0KegxNjma4Nlp/a8sLp6s5oT73qwwKSpn ZWuJhIYER+wpRO+j8fceU5HyixDAqWY8f/LKE084lHmlijJzDJaE8PbVZmTWsfSs 2hgA8M1gUY5kpALUOgEzutCeiLKDYJGUz1uMACeCAZZdME7WAhWKzDY1tUgPm1JI IoE3IBupg9YtQ43uaVMirejp0Wh3xNSdOKE0JJKD1CNJZwB+LUY= -----END CERTIFICATE-----Generated at Sat Oct 10 18:00:35 2026 by rpki-client