$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.mft File: 964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.mft (raw, json) Hash identifier: /il7/fPftH0Vx9LK++cMlY5+ImkG2Jwivv4HVBy1cSI= Subject key identifier: 90:3F:4D:7D:A2:5D:F1:D2:1D:7D:1F:99:B2:B3:7C:1C:E9:47:27:D6 Authority key identifier: 96:4C:EC:E4:DB:02:A6:D9:78:CE:7F:22:B0:B3:36:E7:8E:7E:FE:21 Certificate issuer: /CN=964CECE4DB02A6D978CE7F22B0B336E78E7EFE21 Certificate serial: 3DF2E4CA4AB1279ACAD01DA9AA9FD3EEBBD007B4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.mft Manifest number: BC Signing time: Sun 20 Sep 2026 17:03:00 +0000 Manifest this update: Sun 20 Sep 2026 16:58:00 +0000 Manifest next update: Mon 21 Sep 2026 20:42:00 +0000 Files and hashes: 1: 3130332e3136322e31362e302f32332d3234203d3e20313431363336.roa (hash: FykeN+ZnqOJgkPJefPV3nDEsoGKfA2/qLMJi68jlv2o=) 2: 964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.crl (hash: p52FaJ6yzR6+SQV6PPofpZWFZRfyt8FFYrJMOIpklGY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.crl rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:f2:e4:ca:4a:b1:27:9a:ca:d0:1d:a9:aa:9f:d3:ee:bb:d0:07:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=964CECE4DB02A6D978CE7F22B0B336E78E7EFE21 Validity Not Before: Sep 20 16:58:00 2026 GMT Not After : Sep 21 20:42:00 2026 GMT Subject: CN=903F4D7DA25DF1D21D7D1F99B2B37C1CE94727D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0d:46:a1:18:6e:17:1a:50:e4:9f:f7:4e:e4: b0:f3:ec:d8:23:73:cb:0d:a5:04:97:5e:39:3b:cf: 46:4d:61:b2:e4:d4:da:fa:b5:6a:72:cb:84:4d:bf: 74:d0:0b:2b:b0:0e:91:d1:56:eb:a2:da:91:c6:31: ad:f4:5f:9c:f9:34:2a:2c:e2:30:df:97:f7:a5:6a: a7:c4:d7:4c:62:62:ea:20:64:20:22:90:c1:39:d4: fb:75:c2:86:03:6e:5c:4b:c8:7c:bf:7e:3a:e5:b1: fa:21:33:e4:ac:80:2e:bb:8b:36:e3:5b:2c:65:3e: c7:ae:e1:0e:d5:8f:c2:12:22:35:6b:52:dd:58:96: ad:a9:c8:5a:f7:89:cc:30:51:fc:d3:92:31:4e:83: d6:b5:d2:bd:37:8e:72:13:96:c5:81:bd:6e:4b:f2: 67:06:8c:fa:26:aa:25:be:ef:fd:56:4e:1f:ba:ec: 70:c9:fd:c4:20:bd:7f:00:fb:4d:3f:d3:6d:84:4e: 72:91:dd:e7:6e:90:ee:b0:e9:43:da:8e:4c:c8:d5: 35:e2:70:13:ff:8a:dd:20:f5:99:52:08:dd:2f:3c: da:1c:74:3f:54:9a:c7:72:cc:e6:d3:06:e9:9b:aa: d5:50:a5:18:74:cf:b9:1f:39:c1:39:de:51:d4:e1: b6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:3F:4D:7D:A2:5D:F1:D2:1D:7D:1F:99:B2:B3:7C:1C:E9:47:27:D6 X509v3 Authority Key Identifier: keyid:96:4C:EC:E4:DB:02:A6:D9:78:CE:7F:22:B0:B3:36:E7:8E:7E:FE:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:c9:67:72:b4:63:2a:3b:75:e4:f6:8b:3b:b7:40:0b:18:76: 02:6a:c8:2e:06:aa:4f:a0:4f:92:02:9d:29:39:98:37:eb:c1: c9:b9:b7:30:c4:54:d9:87:df:09:ef:4b:33:57:4e:cf:1f:50: f2:38:f0:e6:be:d6:30:0c:55:ab:7b:40:ae:cc:eb:e9:49:2a: eb:f0:28:1a:3e:3d:84:ac:cc:ba:12:66:95:b2:87:d8:93:f1: d8:6a:87:5e:62:c7:ff:79:3e:10:38:3f:77:cb:c1:14:9a:bf: af:3d:be:2d:04:86:b2:72:72:2a:e6:67:1d:a4:77:8f:8f:6d: a3:29:2b:59:f4:b0:a0:67:15:ec:fb:0d:bb:57:a6:37:16:fe: 3e:35:5d:5c:06:0e:5b:05:62:54:e8:8e:ad:cd:3c:28:50:7d: b1:7c:35:50:0f:fa:cd:ee:14:e8:cf:2e:81:8e:ec:ae:0f:9b: e3:7f:fb:34:47:78:33:95:3e:f4:3d:94:7c:05:6f:4f:36:a5: 7b:9f:37:06:47:8f:55:df:6d:7c:81:29:e1:e7:70:8d:21:63: 83:4f:d7:27:67:af:ad:42:75:17:71:06:5e:03:21:2f:53:2b: 68:e1:9c:6f:65:4e:79:cd:83:c2:ea:02:21:6c:d6:39:d8:06: b4:36:f3:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPfLkykqxJ5rK0B2pqp/T7rvQB7QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY0Q0VDRTREQjAyQTZEOTc4Q0U3RjIyQjBCMzM2RTc4 RTdFRkUyMTAeFw0yNjA5MjAxNjU4MDBaFw0yNjA5MjEyMDQyMDBaMDMxMTAvBgNV BAMTKDkwM0Y0RDdEQTI1REYxRDIxRDdEMUY5OUIyQjM3QzFDRTk0NzI3RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLDUahGG4XGlDkn/dO5LDz7Ngj c8sNpQSXXjk7z0ZNYbLk1Nr6tWpyy4RNv3TQCyuwDpHRVuui2pHGMa30X5z5NCos 4jDfl/elaqfE10xiYuogZCAikME51Pt1woYDblxLyHy/fjrlsfohM+SsgC67izbj WyxlPseu4Q7Vj8ISIjVrUt1Ylq2pyFr3icwwUfzTkjFOg9a10r03jnITlsWBvW5L 8mcGjPomqiW+7/1WTh+67HDJ/cQgvX8A+00/022ETnKR3edukO6w6UPajkzI1TXi cBP/it0g9ZlSCN0vPNocdD9UmsdyzObTBumbqtVQpRh0z7kfOcE53lHU4bbHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkD9NfaJd8dIdfR+ZsrN8HOlHJ9YwHwYDVR0j BBgwFoAUlkzs5NsCptl4zn8isLM2545+/iEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGYzMTUxZGItMTMzMC00ZTcwLTljYzQtOWI4ZmNkNWVkMmQyLzAvOTY0Q0VDRTRE QjAyQTZEOTc4Q0U3RjIyQjBCMzM2RTc4RTdFRkUyMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NjRDRUNFNERCMDJBNkQ5NzhDRTdGMjJCMEIzMzZFNzhFN0VG RTIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGYzMTUxZGItMTMzMC00ZTcwLTlj YzQtOWI4ZmNkNWVkMmQyLzAvOTY0Q0VDRTREQjAyQTZEOTc4Q0U3RjIyQjBCMzM2 RTc4RTdFRkUyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC3JZ3K0Yyo7deT2izu3QAsYdgJqyC4Gqk+g T5ICnSk5mDfrwcm5tzDEVNmH3wnvSzNXTs8fUPI48Oa+1jAMVat7QK7M6+lJKuvw KBo+PYSszLoSZpWyh9iT8dhqh15ix/95PhA4P3fLwRSav689vi0EhrJycirmZx2k d4+PbaMpK1n0sKBnFez7DbtXpjcW/j41XVwGDlsFYlTojq3NPChQfbF8NVAP+s3u FOjPLoGO7K4Pm+N/+zRHeDOVPvQ9lHwFb082pXufNwZHj1XfbXyBKeHncI0hY4NP 1ydnr61CdRdxBl4DIS9TK2jhnG9lTnnNg8LqAiFs1jnYBrQ28wo= -----END CERTIFICATE-----Generated at Mon Sep 21 06:49:20 2026 by rpki-client