$ rpki-client -vvvf rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.mft File: 04C8EF6F5260FDA06661D9E95304572B8E7C4993.mft (raw, json) Hash identifier: C5wUx83HhV155cO87p8/FuXsu6isqjMfWcmF5a6pq1U= Subject key identifier: 21:67:35:EE:0E:10:8B:2D:65:93:87:D7:2B:23:BC:3D:7D:43:AE:CC Authority key identifier: 04:C8:EF:6F:52:60:FD:A0:66:61:D9:E9:53:04:57:2B:8E:7C:49:93 Certificate issuer: /CN=04C8EF6F5260FDA06661D9E95304572B8E7C4993 Certificate serial: 39B2C376817E273436AC983B03EDEE107CAC9A74 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04C8EF6F5260FDA06661D9E95304572B8E7C4993.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.mft Manifest number: BE Signing time: Tue 22 Sep 2026 15:20:19 +0000 Manifest this update: Tue 22 Sep 2026 15:15:19 +0000 Manifest next update: Wed 23 Sep 2026 16:41:19 +0000 Files and hashes: 1: 3135302e3130372e3130342e302f32332d3234203d3e20313432333933.roa (hash: DkvTwpRqRkCZlooRpiKY2+Wy5hBTCQFkxeE1RiY6Adw=) 2: 323430313a316430303a3a2f34382d3438203d3e203338353035.roa (hash: +N9+uIvrbV+jDpFQEoLWVMjE7Tiq4ZoJyUrk8aQRIxU=) 3: 323430313a316430303a3a2f33322d3438203d3e203338353035.roa (hash: 6BMdJfjQOk6ZMP+r3PWXA1452jn4jTz5h082fXgG9S4=) 4: 323430313a316430303a323a3a2f34382d3438203d3e203338353035.roa (hash: FB0gJNbI9gb2zm9vAMp0QwCkUB/Jt+h+ezAWp0ZQAY4=) 5: 3130332e3233332e3134322e302f32332d3234203d3e203338353035.roa (hash: oVIkdyLyFS+O6KZi8z7bLz7e36SBDG2DA+r6DHbMRLY=) 6: 323430313a316430303a3a2f33322d3332203d3e203338353035.roa (hash: U8aX+Se6czCWSw8AT++C8Q2LboeUeYibiDJAjvnWwyg=) 7: 3230332e3135332e3132322e302f32332d3234203d3e203338353035.roa (hash: X3p+VR9fHu2hyTBK0FsVrH6VXDfYDH8j4Zpx8G4MzCs=) 8: 3230332e3135332e3132342e302f32332d3234203d3e203338353035.roa (hash: mnaX8OyQaRRI+TIyOqMa6qm7Y6uLOjvzrF8R5k5MsjU=) 9: 3230332e3135332e3132302e302f32332d3234203d3e203338353035.roa (hash: D63R0HJY3dfFSWeAvX/hnIAUP8j3QRAbibvDX3rchmw=) 10: 323430313a316430303a313a3a2f34382d3438203d3e203338353035.roa (hash: HsxEHeytaLeXbzMYkGNZ4CxQC7x6cG09R70sugNWXM0=) 11: 04C8EF6F5260FDA06661D9E95304572B8E7C4993.crl (hash: xsVr0Pl5uF9tpdQhSrvH3Uq0zsk63mu9HcDaYMkCwrI=) 12: 3230332e3135332e3132362e302f32332d3234203d3e203338353035.roa (hash: E7icouKmlM2nRKVKG7S5JwzSzIgKbeMao7gLF/MZ7HU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.crl rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04C8EF6F5260FDA06661D9E95304572B8E7C4993.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 16:41:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:b2:c3:76:81:7e:27:34:36:ac:98:3b:03:ed:ee:10:7c:ac:9a:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04C8EF6F5260FDA06661D9E95304572B8E7C4993 Validity Not Before: Sep 22 15:15:19 2026 GMT Not After : Sep 23 16:41:19 2026 GMT Subject: CN=216735EE0E108B2D659387D72B23BC3D7D43AECC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d5:26:04:cb:75:5e:95:21:00:8f:9f:b9:ed: 30:fa:a9:ba:da:c3:64:38:b8:8e:d4:7a:8c:4e:93: fd:35:40:aa:c1:bf:c4:27:62:ac:39:1f:19:38:3a: ab:94:a8:3f:1d:e7:80:9f:55:3a:78:45:70:96:8d: e6:bd:04:a3:49:cf:03:66:5a:a8:91:1d:00:61:39: 97:a7:f7:56:9c:5e:eb:61:20:37:fd:df:29:42:44: cf:30:91:81:3e:49:42:24:00:0c:b8:2d:9e:3c:aa: e0:29:c5:78:b7:5e:f1:67:d2:7f:97:db:45:e3:ed: 27:8c:13:41:9a:1a:e8:7a:1d:b3:b3:6e:1c:2b:69: eb:4e:f8:02:c8:92:ad:ae:2e:bd:9b:ca:37:21:dc: ef:8b:38:ba:9c:f4:d2:3f:d8:f9:5c:5b:bc:f0:ef: 79:5c:63:28:1d:41:5e:f5:12:0f:65:a2:53:74:64: 3d:af:86:50:5d:f9:87:90:23:29:0d:84:e3:72:52: 1d:6c:c0:15:54:86:69:fa:9e:fc:3c:10:58:7e:00: 93:0d:53:52:5a:df:b3:eb:e8:c7:d6:de:f3:f9:cd: cb:c2:3e:e1:c6:25:2d:a6:83:1a:06:f9:5a:a6:24: e3:9c:7e:da:46:30:09:37:5e:88:70:6e:1b:e6:f9: a4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:67:35:EE:0E:10:8B:2D:65:93:87:D7:2B:23:BC:3D:7D:43:AE:CC X509v3 Authority Key Identifier: keyid:04:C8:EF:6F:52:60:FD:A0:66:61:D9:E9:53:04:57:2B:8E:7C:49:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04C8EF6F5260FDA06661D9E95304572B8E7C4993.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:2d:ee:34:ed:35:39:25:af:f2:ea:36:21:1f:e3:39:8e:cd: 0d:4b:d8:c8:ce:1d:55:8b:58:c3:e4:a5:60:56:06:52:70:3d: 0c:34:8b:fa:94:d6:f6:5c:10:a6:d4:30:b7:a6:a5:e7:73:e3: 03:e0:cc:3f:e7:8e:85:fa:04:ef:9f:56:e7:15:2e:f5:59:00: 0f:4f:0a:95:b5:97:5b:9f:5e:df:23:0b:15:25:a1:85:a4:3d: 93:a7:72:98:fc:6e:e8:3c:98:39:da:87:ec:43:52:2e:80:18: 05:58:2f:00:7f:d0:e7:39:16:c3:7f:54:bf:fc:1b:55:a0:4c: e5:b1:c0:15:1b:e6:3c:db:08:8b:04:c3:e2:6c:c1:a9:09:ed: b9:15:98:57:87:88:b9:1d:25:ab:06:2c:85:d0:f9:d1:f9:84: 87:a0:0e:2a:20:d5:52:d0:75:8c:47:a2:93:cb:1b:13:c2:e1: 67:22:ce:13:88:33:35:98:5a:fa:73:09:7e:b1:dc:26:60:e6: d7:1e:f9:03:34:84:86:43:50:27:5c:4d:19:73:84:87:05:b3: ec:0d:1f:88:f4:a4:db:31:0e:f2:4b:a1:0d:12:7d:55:dd:6c: ca:81:71:3e:df:ad:af:f4:60:c3:e9:b0:e4:b9:3f:ef:36:57: 16:e4:9a:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUObLDdoF+JzQ2rJg7A+3uEHysmnQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDRDOEVGNkY1MjYwRkRBMDY2NjFEOUU5NTMwNDU3MkI4 RTdDNDk5MzAeFw0yNjA5MjIxNTE1MTlaFw0yNjA5MjMxNjQxMTlaMDMxMTAvBgNV BAMTKDIxNjczNUVFMEUxMDhCMkQ2NTkzODdENzJCMjNCQzNEN0Q0M0FFQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD1SYEy3VelSEAj5+57TD6qbra w2Q4uI7UeoxOk/01QKrBv8QnYqw5Hxk4OquUqD8d54CfVTp4RXCWjea9BKNJzwNm WqiRHQBhOZen91acXuthIDf93ylCRM8wkYE+SUIkAAy4LZ48quApxXi3XvFn0n+X 20Xj7SeME0GaGuh6HbOzbhwraetO+ALIkq2uLr2byjch3O+LOLqc9NI/2PlcW7zw 73lcYygdQV71Eg9lolN0ZD2vhlBd+YeQIykNhONyUh1swBVUhmn6nvw8EFh+AJMN U1Ja37Pr6MfW3vP5zcvCPuHGJS2mgxoG+VqmJOOcftpGMAk3Xohwbhvm+aRPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIWc17g4Qiy1lk4fXKyO8PX1DrswwHwYDVR0j BBgwFoAUBMjvb1Jg/aBmYdnpUwRXK458SZMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODNkMDc4NmQtM2QzZS00NWI3LTk2NjUtOGQ0NzRmZDE0YWVhLzAvMDRDOEVGNkY1 MjYwRkRBMDY2NjFEOUU5NTMwNDU3MkI4RTdDNDk5My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNEM4RUY2RjUyNjBGREEwNjY2MUQ5RTk1MzA0NTcyQjhFN0M0 OTkzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODNkMDc4NmQtM2QzZS00NWI3LTk2 NjUtOGQ0NzRmZDE0YWVhLzAvMDRDOEVGNkY1MjYwRkRBMDY2NjFEOUU5NTMwNDU3 MkI4RTdDNDk5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGot7jTtNTklr/LqNiEf4zmOzQ1L2MjOHVWL WMPkpWBWBlJwPQw0i/qU1vZcEKbUMLempedz4wPgzD/njoX6BO+fVucVLvVZAA9P CpW1l1ufXt8jCxUloYWkPZOncpj8bug8mDnah+xDUi6AGAVYLwB/0Oc5FsN/VL/8 G1WgTOWxwBUb5jzbCIsEw+JswakJ7bkVmFeHiLkdJasGLIXQ+dH5hIegDiog1VLQ dYxHopPLGxPC4WcizhOIMzWYWvpzCX6x3CZg5tce+QM0hIZDUCdcTRlzhIcFs+wN H4j0pNsxDvJLoQ0SfVXdbMqBcT7fra/0YMPpsOS5P+82VxbkmhM= -----END CERTIFICATE-----Generated at Tue Sep 22 20:57:58 2026 by rpki-client