$ rpki-client -vvvf rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.mft File: C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.mft (raw, json) Hash identifier: fqf9b9h925Jw8h/QIZuSe8mAUIKm6xuziqJT7K8QQFI= Subject key identifier: 4E:8A:58:F0:6C:A9:DF:A5:E4:3C:F3:4D:6C:68:9D:37:EB:3C:50:A0 Authority key identifier: C0:43:3C:FC:2E:06:4A:77:FD:CB:37:B4:9C:2C:93:C4:D0:A0:52:6C Certificate issuer: /CN=C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C Certificate serial: 1D79214F275BE4D586545A4C9A0BACD8F8CD5D4F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.mft Manifest number: C1 Signing time: Tue 22 Sep 2026 06:09:06 +0000 Manifest this update: Tue 22 Sep 2026 06:04:06 +0000 Manifest next update: Wed 23 Sep 2026 08:12:06 +0000 Files and hashes: 1: 323030313a6466373a353330303a3a2f34382d3438203d3e20313338313135.roa (hash: +rxATWvogOmG58QtPOl3t5ZnCAWvuClI+FAmj6pibBE=) 2: 3130332e3132362e3232362e302f32342d3234203d3e20313338313135.roa (hash: 67eHKrfnUV+o5bdh8AJ2qRePKkWRvK0EPB7qFbO8S2g=) 3: C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.crl (hash: ye+Ruw9BVcI3qRjPHtPo5OwfRTedavUxHVU9JexBHsw=) 4: 3130332e3134372e3135342e302f32342d3234203d3e20313338313135.roa (hash: hbxsy5rYM2ui/y8kSQK8vRtJw5Os4ztQgliynYBu9Sg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.crl rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 08:12:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:79:21:4f:27:5b:e4:d5:86:54:5a:4c:9a:0b:ac:d8:f8:cd:5d:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C Validity Not Before: Sep 22 06:04:06 2026 GMT Not After : Sep 23 08:12:06 2026 GMT Subject: CN=4E8A58F06CA9DFA5E43CF34D6C689D37EB3C50A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1b:95:84:e8:09:fd:bf:8b:43:37:6d:54:1f: 3e:b4:4d:a2:1e:2b:64:8c:70:ea:c9:6a:68:1c:3d: e3:a0:c7:8b:a7:0d:23:66:96:66:c1:7e:a4:b0:74: 26:0e:1f:df:bb:70:a7:41:5f:54:ed:c3:e9:68:c4: be:fe:73:ec:e7:01:e3:a2:1e:34:42:14:81:85:23: 10:62:0f:bd:2f:eb:8d:3f:00:bb:9d:69:15:e2:27: 45:bb:d3:d1:76:92:f1:0d:2b:1c:9e:79:32:96:af: e5:7d:bf:ae:03:31:07:c5:b0:97:25:78:30:8d:53: 37:f6:0b:72:e4:61:f0:5d:98:83:44:56:d8:17:17: 51:69:04:e1:13:47:bc:ab:32:e0:0e:b1:56:0e:1a: b5:5b:4b:f6:99:92:36:46:8b:73:60:08:15:84:dd: 78:84:50:b5:93:e0:08:8e:72:f1:67:66:31:43:78: 2e:16:25:56:ed:32:15:cf:a0:f3:9d:92:42:ed:10: d3:3f:20:8e:17:0d:41:b8:e4:27:11:eb:cd:b6:83: 1c:11:b1:9b:8a:c1:0b:5a:25:8a:33:3a:dc:37:2e: dc:25:7c:de:d5:46:8b:dc:e4:c4:a5:e6:67:ba:4c: 70:e6:c4:c9:db:4c:06:af:dd:cb:c1:b1:e7:f3:30: 3a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:8A:58:F0:6C:A9:DF:A5:E4:3C:F3:4D:6C:68:9D:37:EB:3C:50:A0 X509v3 Authority Key Identifier: keyid:C0:43:3C:FC:2E:06:4A:77:FD:CB:37:B4:9C:2C:93:C4:D0:A0:52:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:3f:56:64:e6:65:45:3f:2f:0b:90:63:b9:52:7f:db:85:d0: 9d:a0:46:52:a6:95:97:88:d1:b2:36:e8:1c:73:58:6b:6e:3d: 8a:31:c6:59:61:37:ce:38:6a:0a:44:29:1e:bf:34:05:01:ac: dc:6c:4d:d4:45:01:f8:66:20:10:f1:10:1c:c9:49:37:68:65: d3:33:88:a9:57:4c:97:6e:46:20:fd:94:5e:d0:2f:2c:2f:f6: dd:41:9d:e4:8e:72:a7:43:39:04:70:8f:b6:f3:91:e5:85:90: 00:48:ac:67:3b:bd:85:0f:46:cd:97:6f:e2:6b:6a:63:02:37: 34:b7:05:11:df:4e:86:cf:a4:b8:a9:67:89:6e:4d:6e:fa:26: 7a:c2:f8:1b:cd:ff:b5:25:45:25:a3:4b:a2:11:74:3a:68:5e: a8:9b:1d:ff:f6:e5:28:eb:0e:09:2f:86:27:42:a6:36:a9:1c: d4:99:0d:53:ba:4a:d6:35:fe:e6:8c:2e:ac:7d:b4:5f:b7:b5: 73:fc:b9:55:bc:bc:19:af:a2:22:4c:80:c7:b7:32:0d:77:ff: 63:98:e0:17:28:1f:64:7e:12:5a:57:76:25:5d:b4:3b:bb:bc: d5:56:b1:42:8b:48:bb:f4:93:4c:58:44:b0:8f:e3:9a:82:a3: 6a:6d:59:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHXkhTydb5NWGVFpMmgus2PjNXU8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA0MzNDRkMyRTA2NEE3N0ZEQ0IzN0I0OUMyQzkzQzRE MEEwNTI2QzAeFw0yNjA5MjIwNjA0MDZaFw0yNjA5MjMwODEyMDZaMDMxMTAvBgNV BAMTKDRFOEE1OEYwNkNBOURGQTVFNDNDRjM0RDZDNjg5RDM3RUIzQzUwQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiG5WE6An9v4tDN21UHz60TaIe K2SMcOrJamgcPeOgx4unDSNmlmbBfqSwdCYOH9+7cKdBX1Ttw+loxL7+c+znAeOi HjRCFIGFIxBiD70v640/ALudaRXiJ0W709F2kvENKxyeeTKWr+V9v64DMQfFsJcl eDCNUzf2C3LkYfBdmINEVtgXF1FpBOETR7yrMuAOsVYOGrVbS/aZkjZGi3NgCBWE 3XiEULWT4AiOcvFnZjFDeC4WJVbtMhXPoPOdkkLtENM/II4XDUG45CcR6822gxwR sZuKwQtaJYozOtw3LtwlfN7VRovc5MSl5me6THDmxMnbTAav3cvBsefzMDrZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTopY8Gyp36XkPPNNbGidN+s8UKAwHwYDVR0j BBgwFoAUwEM8/C4GSnf9yze0nCyTxNCgUmwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjRjZjYzMmQtZDYxYS00ODI2LWI1NzItOWYxOTQ4YWU1ODBjLzAvQzA0MzNDRkMy RTA2NEE3N0ZEQ0IzN0I0OUMyQzkzQzREMEEwNTI2Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMDQzM0NGQzJFMDY0QTc3RkRDQjM3QjQ5QzJDOTNDNEQwQTA1 MjZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjRjZjYzMmQtZDYxYS00ODI2LWI1 NzItOWYxOTQ4YWU1ODBjLzAvQzA0MzNDRkMyRTA2NEE3N0ZEQ0IzN0I0OUMyQzkz QzREMEEwNTI2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABU/VmTmZUU/LwuQY7lSf9uF0J2gRlKmlZeI 0bI26BxzWGtuPYoxxllhN844agpEKR6/NAUBrNxsTdRFAfhmIBDxEBzJSTdoZdMz iKlXTJduRiD9lF7QLywv9t1BneSOcqdDOQRwj7bzkeWFkABIrGc7vYUPRs2Xb+Jr amMCNzS3BRHfTobPpLipZ4luTW76JnrC+BvN/7UlRSWjS6IRdDpoXqibHf/25Sjr DgkvhidCpjapHNSZDVO6StY1/uaMLqx9tF+3tXP8uVW8vBmvoiJMgMe3Mg13/2OY 4BcoH2R+ElpXdiVdtDu7vNVWsUKLSLv0k0xYRLCP45qCo2ptWaI= -----END CERTIFICATE-----Generated at Tue Sep 22 22:24:50 2026 by rpki-client