$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/C352DFD797F0814103500130B1A6B6876355C3DF.mft File: C352DFD797F0814103500130B1A6B6876355C3DF.mft (raw, json) Hash identifier: DEJGTA9Nj9XLo3D7qMEeH9QPCuToOUyQDly11RPaf/4= Subject key identifier: 96:92:AC:40:25:BC:87:66:09:1D:24:41:DC:A2:13:CF:8A:DA:45:2B Authority key identifier: C3:52:DF:D7:97:F0:81:41:03:50:01:30:B1:A6:B6:87:63:55:C3:DF Certificate issuer: /CN=C352DFD797F0814103500130B1A6B6876355C3DF Certificate serial: 73EB5EB7D25C52A083AFFF29C8AE490946D7F40F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C352DFD797F0814103500130B1A6B6876355C3DF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/C352DFD797F0814103500130B1A6B6876355C3DF.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 04:01:00 +0000 Manifest this update: Wed 23 Sep 2026 03:56:00 +0000 Manifest next update: Thu 24 Sep 2026 06:03:00 +0000 Files and hashes: 1: 3130332e3138382e3234392e302f32342d3234203d3e20313439393038.roa (hash: zyRn7jFyehFEgsKHr+RevPoVMdyoLH00YGiqg3O4fKo=) 2: C352DFD797F0814103500130B1A6B6876355C3DF.crl (hash: MEX7JaXK3/BaE0ygFCpTFJL7BVSVT1S1zU7nVcifPQ0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/C352DFD797F0814103500130B1A6B6876355C3DF.crl rsync://rpki-rsync.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/C352DFD797F0814103500130B1A6B6876355C3DF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C352DFD797F0814103500130B1A6B6876355C3DF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 05:37:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:eb:5e:b7:d2:5c:52:a0:83:af:ff:29:c8:ae:49:09:46:d7:f4:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C352DFD797F0814103500130B1A6B6876355C3DF Validity Not Before: Sep 23 03:56:00 2026 GMT Not After : Sep 24 06:03:00 2026 GMT Subject: CN=9692AC4025BC8766091D2441DCA213CF8ADA452B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4d:8c:70:7f:05:68:2a:09:f9:0d:65:d7:ad: 87:78:0d:cc:56:15:93:f3:93:53:4d:5c:97:24:96: 61:af:ac:da:65:5f:a5:fe:68:2b:97:40:d8:ab:40: ed:30:09:d1:4d:63:aa:0b:54:48:47:4d:3d:7b:36: 61:e3:7d:1d:81:38:e3:02:0d:86:24:48:43:2e:79: fb:69:83:de:37:61:74:28:b1:70:37:26:ab:b6:3d: ce:77:c7:1d:ac:34:1b:aa:3e:fe:e2:5d:3a:75:82: c2:1a:31:de:f1:40:b5:6f:8b:45:24:2a:0d:c3:80: b3:f6:0e:30:f6:3a:f3:cd:31:11:ca:67:bd:06:a5: b4:d5:8b:2d:ec:77:2a:13:ad:f3:94:93:b6:53:27: 43:6d:49:cb:92:9a:c7:ae:4b:53:20:a6:8b:1a:c6: 2f:8b:06:61:71:cd:1e:a1:15:c4:51:39:c2:1b:97: 5e:2c:7d:6d:1e:3c:f8:fd:94:df:76:bd:2e:f6:00: 3c:3f:76:14:fb:dc:39:43:da:ee:7b:41:e0:64:06: 92:ac:77:77:cb:2d:d9:fb:d8:f6:7e:ab:f9:50:ca: 4b:81:cd:c4:a5:9d:7a:34:e6:3c:b0:fe:91:15:cc: 37:6c:fb:fc:65:c7:b3:75:16:81:95:7c:3e:f3:fa: 37:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:92:AC:40:25:BC:87:66:09:1D:24:41:DC:A2:13:CF:8A:DA:45:2B X509v3 Authority Key Identifier: keyid:C3:52:DF:D7:97:F0:81:41:03:50:01:30:B1:A6:B6:87:63:55:C3:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/C352DFD797F0814103500130B1A6B6876355C3DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C352DFD797F0814103500130B1A6B6876355C3DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/C352DFD797F0814103500130B1A6B6876355C3DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:ad:cb:8b:c1:ed:19:07:d0:65:65:a3:dd:7d:0e:d9:63:f3: 20:82:91:25:46:f7:8f:f9:7e:62:b2:02:ff:54:bc:0d:b5:8c: 6d:c2:68:aa:e4:2a:02:81:6e:5e:40:23:e5:21:eb:b9:80:0b: ed:5e:4e:3e:36:84:70:41:3a:41:78:2b:2b:4e:0c:c3:d1:ea: f9:67:04:b2:24:c3:eb:10:6a:8f:25:ae:37:86:25:e0:4a:7a: b4:02:87:48:86:b5:6b:9b:82:22:4d:12:f4:2e:7e:d8:5a:b7: cf:db:88:34:c0:a7:dc:52:f8:b8:82:f5:f8:cd:ef:61:00:e5: 2b:c7:4d:01:00:a2:24:a1:6c:85:9f:06:4a:e8:74:a3:58:39: 08:9c:72:12:1c:14:ab:73:4c:ea:94:c9:a8:cc:fb:8d:4b:12: 8d:b6:80:d4:7c:5e:77:63:7a:2e:14:87:10:b8:dd:80:8a:2c: 8e:4a:44:a3:b5:bf:eb:fd:48:ec:21:6d:8b:2d:fa:b7:fb:88: ff:79:a7:07:2a:cb:f7:df:20:92:4c:e9:59:e3:8e:52:08:37: 42:94:f2:7c:e2:b3:a9:d4:ea:1a:99:17:33:5d:61:b0:9e:10: b7:a1:02:a4:af:7a:38:c2:77:ea:cb:2e:57:f6:79:b2:fa:18: 7e:6c:91:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc+tet9JcUqCDr/8pyK5JCUbX9A8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM1MkRGRDc5N0YwODE0MTAzNTAwMTMwQjFBNkI2ODc2 MzU1QzNERjAeFw0yNjA5MjMwMzU2MDBaFw0yNjA5MjQwNjAzMDBaMDMxMTAvBgNV BAMTKDk2OTJBQzQwMjVCQzg3NjYwOTFEMjQ0MURDQTIxM0NGOEFEQTQ1MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDATYxwfwVoKgn5DWXXrYd4DcxW FZPzk1NNXJcklmGvrNplX6X+aCuXQNirQO0wCdFNY6oLVEhHTT17NmHjfR2BOOMC DYYkSEMueftpg943YXQosXA3Jqu2Pc53xx2sNBuqPv7iXTp1gsIaMd7xQLVvi0Uk Kg3DgLP2DjD2OvPNMRHKZ70GpbTViy3sdyoTrfOUk7ZTJ0NtScuSmseuS1Mgposa xi+LBmFxzR6hFcRROcIbl14sfW0ePPj9lN92vS72ADw/dhT73DlD2u57QeBkBpKs d3fLLdn72PZ+q/lQykuBzcSlnXo05jyw/pEVzDds+/xlx7N1FoGVfD7z+jczAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlpKsQCW8h2YJHSRB3KITz4raRSswHwYDVR0j BBgwFoAUw1Lf15fwgUEDUAEwsaa2h2NVw98wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzQ2N2VjMzMtNWE3Mi00YzY1LTlmZDMtNjZlZjg0NzkzOTRkLzAvQzM1MkRGRDc5 N0YwODE0MTAzNTAwMTMwQjFBNkI2ODc2MzU1QzNERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMzUyREZENzk3RjA4MTQxMDM1MDAxMzBCMUE2QjY4NzYzNTVD M0RGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzQ2N2VjMzMtNWE3Mi00YzY1LTlm ZDMtNjZlZjg0NzkzOTRkLzAvQzM1MkRGRDc5N0YwODE0MTAzNTAwMTMwQjFBNkI2 ODc2MzU1QzNERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAaty4vB7RkH0GVlo919Dtlj8yCCkSVG94/5 fmKyAv9UvA21jG3CaKrkKgKBbl5AI+Uh67mAC+1eTj42hHBBOkF4KytODMPR6vln BLIkw+sQao8lrjeGJeBKerQCh0iGtWubgiJNEvQufthat8/biDTAp9xS+LiC9fjN 72EA5SvHTQEAoiShbIWfBkrodKNYOQicchIcFKtzTOqUyajM+41LEo22gNR8Xndj ei4UhxC43YCKLI5KRKO1v+v9SOwhbYst+rf7iP95pwcqy/ffIJJM6VnjjlIIN0KU 8nzis6nU6hqZFzNdYbCeELehAqSvejjCd+rLLlf2ebL6GH5skbQ= -----END CERTIFICATE-----Generated at Wed Sep 23 08:37:58 2026 by rpki-client