$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/096782C6E108EAAEE59692E8A1E468AA698658F3.mft File: 096782C6E108EAAEE59692E8A1E468AA698658F3.mft (raw, json) Hash identifier: SvccEYOjuvp4t1da5s9ESWEF8Pc1Z0qDCQmD/Kx1Syo= Subject key identifier: FD:0F:F2:85:E8:C3:46:CA:D6:7A:E8:D1:C1:81:CD:4A:1F:AA:C0:E5 Authority key identifier: 09:67:82:C6:E1:08:EA:AE:E5:96:92:E8:A1:E4:68:AA:69:86:58:F3 Certificate issuer: /CN=096782C6E108EAAEE59692E8A1E468AA698658F3 Certificate serial: 21C32E6FFCA5233F2A43081228E70AE07C764C41 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/096782C6E108EAAEE59692E8A1E468AA698658F3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/096782C6E108EAAEE59692E8A1E468AA698658F3.mft Manifest number: C4 Signing time: Thu 24 Sep 2026 23:09:17 +0000 Manifest this update: Thu 24 Sep 2026 23:04:17 +0000 Manifest next update: Fri 25 Sep 2026 23:46:17 +0000 Files and hashes: 1: 3130332e3138322e38312e302f32342d3234203d3e20313439343031.roa (hash: 2fUOKnvs8nbAYX5IeKT2gpYQH5FYCwB7JlXdvrKSoYU=) 2: 3130332e3138322e38302e302f32332d3234203d3e20313439343031.roa (hash: tMpre+MZxLR5ON6NNmXKYRn2JHOCOghwsK548yy7sUU=) 3: 096782C6E108EAAEE59692E8A1E468AA698658F3.crl (hash: 5gLsjaYpKDOnsKlgQfkmq+DURmsfkP0X43RMekNghZw=) 4: 3130332e3138322e38302e302f32342d3234203d3e20313439343031.roa (hash: MoX5ilaIoQNT0YRgbynks7+fFHyOxX0urPfftQqHjU8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/096782C6E108EAAEE59692E8A1E468AA698658F3.crl rsync://rpki-rsync.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/096782C6E108EAAEE59692E8A1E468AA698658F3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/096782C6E108EAAEE59692E8A1E468AA698658F3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 23:46:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:c3:2e:6f:fc:a5:23:3f:2a:43:08:12:28:e7:0a:e0:7c:76:4c:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=096782C6E108EAAEE59692E8A1E468AA698658F3 Validity Not Before: Sep 24 23:04:17 2026 GMT Not After : Sep 25 23:46:17 2026 GMT Subject: CN=FD0FF285E8C346CAD67AE8D1C181CD4A1FAAC0E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:87:74:68:a2:77:bf:43:7b:17:65:f4:3f:88: 07:fc:7c:76:3e:28:66:5f:a3:6d:41:c1:f7:eb:64: 69:b8:d9:68:8d:fe:c8:f9:ea:fa:40:77:df:4d:b2: 00:80:b9:1d:20:69:e8:0b:1f:19:41:ca:d4:67:f0: 6a:aa:17:51:0e:d2:95:ef:70:3f:0f:44:0b:30:1d: a2:a7:e8:71:4d:88:bd:08:d1:eb:be:5e:a4:91:73: 68:29:20:b1:e0:f5:10:3e:b7:7b:67:c6:4e:21:dd: 8a:d7:50:0f:c3:92:75:6d:40:36:76:00:99:5e:9e: 2a:76:97:76:da:82:92:b8:1a:a8:96:a0:68:4d:cc: 2f:3d:31:8a:3b:01:76:5f:04:05:8d:d6:16:32:70: d7:85:8f:58:fa:e9:1c:35:a1:11:78:d4:17:dd:06: 27:3f:51:a9:42:3e:1e:39:10:f3:85:69:a3:13:b8: 91:fa:f9:f2:74:a5:e5:19:f8:d3:1f:51:b7:4c:6c: 03:40:df:22:50:ef:71:93:b3:c0:bd:16:61:16:2e: 21:0a:79:0e:16:c7:84:0d:f0:6d:24:0d:96:48:01: e6:38:55:af:83:d3:49:1b:98:ae:83:24:af:45:2c: 00:d6:79:c1:d2:13:0c:70:21:7f:d1:70:26:5c:c4: 21:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:0F:F2:85:E8:C3:46:CA:D6:7A:E8:D1:C1:81:CD:4A:1F:AA:C0:E5 X509v3 Authority Key Identifier: keyid:09:67:82:C6:E1:08:EA:AE:E5:96:92:E8:A1:E4:68:AA:69:86:58:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/096782C6E108EAAEE59692E8A1E468AA698658F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/096782C6E108EAAEE59692E8A1E468AA698658F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/096782C6E108EAAEE59692E8A1E468AA698658F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:1d:c4:2a:ee:1c:d0:56:39:57:a9:0c:94:8c:01:55:73:74: ec:5b:c4:01:f7:0d:39:fe:94:04:6a:bb:e4:1c:7b:35:ec:2a: c8:d8:c9:0e:da:80:5a:40:93:8a:5d:a0:c8:4e:38:96:87:cf: 10:e3:03:88:d0:3f:40:84:8c:eb:a2:c4:81:49:0b:5d:de:aa: 80:1f:a0:af:35:e9:83:59:57:17:7c:f6:86:cf:b0:f6:e9:d1: 2d:69:2a:e5:03:4f:b7:e7:27:4c:80:9d:a6:68:5f:f7:64:9b: 18:7e:31:92:71:01:3f:8b:41:30:f7:23:25:31:37:4a:28:ba: 9a:14:be:fd:81:8e:94:0b:20:9c:08:6b:96:c7:fd:28:61:05: ab:2d:96:0d:a6:42:7b:6a:71:01:ac:57:3c:87:79:df:bb:ed: d8:73:58:00:f6:e5:c4:f4:f2:03:e3:24:2b:ad:d9:ec:ea:af: a9:7b:ab:2c:30:de:62:90:d4:a0:84:34:1e:c0:c0:6b:f3:1c: fe:0a:56:7b:2a:53:82:00:ca:84:b8:7b:88:73:3f:ba:8f:57: 7e:ac:05:25:b4:3d:0a:43:97:94:3d:75:be:19:c1:9e:83:7a: c1:8f:26:53:af:bb:ab:29:8d:93:a0:1b:a9:80:31:b1:2d:d7: b9:68:c1:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIcMub/ylIz8qQwgSKOcK4Hx2TEEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk2NzgyQzZFMTA4RUFBRUU1OTY5MkU4QTFFNDY4QUE2 OTg2NThGMzAeFw0yNjA5MjQyMzA0MTdaFw0yNjA5MjUyMzQ2MTdaMDMxMTAvBgNV BAMTKEZEMEZGMjg1RThDMzQ2Q0FENjdBRThEMUMxODFDRDRBMUZBQUMwRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrh3Roone/Q3sXZfQ/iAf8fHY+ KGZfo21BwffrZGm42WiN/sj56vpAd99NsgCAuR0gaegLHxlBytRn8GqqF1EO0pXv cD8PRAswHaKn6HFNiL0I0eu+XqSRc2gpILHg9RA+t3tnxk4h3YrXUA/DknVtQDZ2 AJlenip2l3bagpK4GqiWoGhNzC89MYo7AXZfBAWN1hYycNeFj1j66Rw1oRF41Bfd Bic/UalCPh45EPOFaaMTuJH6+fJ0peUZ+NMfUbdMbANA3yJQ73GTs8C9FmEWLiEK eQ4Wx4QN8G0kDZZIAeY4Va+D00kbmK6DJK9FLADWecHSEwxwIX/RcCZcxCFZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/Q/yhejDRsrWeujRwYHNSh+qwOUwHwYDVR0j BBgwFoAUCWeCxuEI6q7llpLooeRoqmmGWPMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWI1MGJhYzQtYTZhNy00NTZjLTg1MGYtNjBkY2RlNjdiNDk5LzAvMDk2NzgyQzZF MTA4RUFBRUU1OTY5MkU4QTFFNDY4QUE2OTg2NThGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wOTY3ODJDNkUxMDhFQUFFRTU5NjkyRThBMUU0NjhBQTY5ODY1 OEYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWI1MGJhYzQtYTZhNy00NTZjLTg1 MGYtNjBkY2RlNjdiNDk5LzAvMDk2NzgyQzZFMTA4RUFBRUU1OTY5MkU4QTFFNDY4 QUE2OTg2NThGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA0dxCruHNBWOVepDJSMAVVzdOxbxAH3DTn+ lARqu+QcezXsKsjYyQ7agFpAk4pdoMhOOJaHzxDjA4jQP0CEjOuixIFJC13eqoAf oK816YNZVxd89obPsPbp0S1pKuUDT7fnJ0yAnaZoX/dkmxh+MZJxAT+LQTD3IyUx N0ooupoUvv2BjpQLIJwIa5bH/ShhBastlg2mQntqcQGsVzyHed+77dhzWAD25cT0 8gPjJCut2ezqr6l7qyww3mKQ1KCENB7AwGvzHP4KVnsqU4IAyoS4e4hzP7qPV36s BSW0PQpDl5Q9db4ZwZ6DesGPJlOvu6spjZOgG6mAMbEt17lowQA= -----END CERTIFICATE-----Generated at Fri Sep 25 09:52:18 2026 by rpki-client