$ rpki-client -vvvf rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/C3CDEFC1D42DBC526894B49382D693AB81922151.mft File: C3CDEFC1D42DBC526894B49382D693AB81922151.mft (raw, json) Hash identifier: iBuiwDvJt93xn7bRpX1VicUlIJVIYtDV/4KNeYg0+no= Subject key identifier: D6:46:3C:FF:B7:A0:DA:38:68:B7:9B:67:E9:04:A8:83:2D:56:7D:D1 Authority key identifier: C3:CD:EF:C1:D4:2D:BC:52:68:94:B4:93:82:D6:93:AB:81:92:21:51 Certificate issuer: /CN=C3CDEFC1D42DBC526894B49382D693AB81922151 Certificate serial: 668C2305D88DBE7F380F4A52868B62DE7ADCF9F5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3CDEFC1D42DBC526894B49382D693AB81922151.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/C3CDEFC1D42DBC526894B49382D693AB81922151.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 14:34:03 +0000 Manifest this update: Wed 23 Sep 2026 14:29:03 +0000 Manifest next update: Thu 24 Sep 2026 17:50:03 +0000 Files and hashes: 1: 3130332e3136332e31332e302f32342d3234203d3e20313431383839.roa (hash: U7/0nIu+Bj5x9bRwZDPcfh3tl44rRdCnsM5J63akTiA=) 2: C3CDEFC1D42DBC526894B49382D693AB81922151.crl (hash: 4DhywYp5LgaYbLI/hv4vWP7z6+Arh9l2VaFp4/Za4jU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/C3CDEFC1D42DBC526894B49382D693AB81922151.crl rsync://rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/C3CDEFC1D42DBC526894B49382D693AB81922151.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3CDEFC1D42DBC526894B49382D693AB81922151.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 17:50:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:8c:23:05:d8:8d:be:7f:38:0f:4a:52:86:8b:62:de:7a:dc:f9:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CDEFC1D42DBC526894B49382D693AB81922151 Validity Not Before: Sep 23 14:29:03 2026 GMT Not After : Sep 24 17:50:03 2026 GMT Subject: CN=D6463CFFB7A0DA3868B79B67E904A8832D567DD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ec:58:40:aa:65:33:3b:0f:79:7d:22:43:72: 5c:0f:41:90:cf:6f:cf:3c:e6:15:50:03:af:65:39: 4a:c6:82:e9:e0:d2:8b:15:1f:b3:7a:1b:be:30:90: ff:e6:b5:89:63:c0:77:6a:e2:8a:12:62:e9:c3:fd: 84:e9:93:d5:49:93:55:5e:dc:2b:06:19:30:b0:6b: ff:7e:59:b0:98:22:2d:8c:d4:07:09:3d:c9:1a:32: 76:40:c5:38:8c:1a:23:6c:ed:60:07:24:4b:ea:6d: 7e:ed:e8:7a:a7:1e:c3:4f:cd:eb:98:f5:b0:67:5a: 24:2c:3a:be:36:e2:b4:dc:66:ea:a9:85:a0:53:d1: 9a:97:2f:e9:4a:c0:56:09:89:1c:c1:ca:cb:9e:13: 78:d2:01:de:d6:3d:b8:74:8d:7c:84:8e:ed:40:3c: 20:c0:14:06:a8:b0:a9:49:e3:0d:4f:55:35:4f:3c: d5:de:9c:d8:dc:c8:0f:31:c9:0e:c8:97:99:17:ee: b7:c7:98:a1:74:05:31:8e:1c:38:67:15:c6:ea:7f: 03:c3:24:96:a4:55:e7:e1:57:06:91:76:d6:eb:29: a3:00:c8:28:8f:13:fb:78:9a:65:08:38:b7:08:5d: 99:59:ce:db:1c:ba:f5:bd:5a:33:28:f3:2c:33:4e: 8c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:46:3C:FF:B7:A0:DA:38:68:B7:9B:67:E9:04:A8:83:2D:56:7D:D1 X509v3 Authority Key Identifier: keyid:C3:CD:EF:C1:D4:2D:BC:52:68:94:B4:93:82:D6:93:AB:81:92:21:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/C3CDEFC1D42DBC526894B49382D693AB81922151.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3CDEFC1D42DBC526894B49382D693AB81922151.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/C3CDEFC1D42DBC526894B49382D693AB81922151.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:68:7f:2f:2f:39:44:b1:39:5e:a3:65:30:48:5b:b0:2d:17: 59:49:d6:46:52:78:1d:73:f9:99:cb:31:26:52:61:4e:cd:1d: 1f:c8:31:15:41:a5:50:81:ce:d0:c4:a9:8f:10:5c:59:49:8c: 71:71:92:c1:a4:3d:fb:c7:a9:46:53:48:89:f3:80:08:20:3a: 00:20:2d:a5:c7:ed:21:18:cd:82:01:21:a9:75:5d:ac:73:c8: b7:5a:a0:d1:a3:f4:5e:39:07:68:39:c2:4c:b8:19:a4:5a:27: 6a:37:97:32:46:9e:f6:c5:94:56:6c:be:95:51:46:9e:76:da: fe:d0:96:68:10:3f:fc:53:a3:46:34:48:2b:e2:e2:10:31:c2: 6a:c1:4f:11:b9:bd:64:6e:56:b9:2c:38:5b:7c:d3:64:2c:17: af:da:0c:86:d5:e9:17:16:d8:71:d4:41:ae:6c:93:a4:b7:04: 46:78:41:f8:2d:45:ed:aa:ea:d6:0a:07:e9:eb:57:29:59:75: 8e:da:6d:4a:76:61:bc:44:04:ac:1c:59:73:8c:4f:c6:7e:b7: a1:67:e0:5d:c9:6e:15:cc:f2:52:c6:8a:e8:35:0d:29:78:5c: 20:a7:19:21:72:05:02:3e:41:82:6b:0c:44:9e:f6:e7:ca:8b: e3:65:4c:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZowjBdiNvn84D0pShoti3nrc+fUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDREVGQzFENDJEQkM1MjY4OTRCNDkzODJENjkzQUI4 MTkyMjE1MTAeFw0yNjA5MjMxNDI5MDNaFw0yNjA5MjQxNzUwMDNaMDMxMTAvBgNV BAMTKEQ2NDYzQ0ZGQjdBMERBMzg2OEI3OUI2N0U5MDRBODgzMkQ1NjdERDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU7FhAqmUzOw95fSJDclwPQZDP b8885hVQA69lOUrGgung0osVH7N6G74wkP/mtYljwHdq4ooSYunD/YTpk9VJk1Ve 3CsGGTCwa/9+WbCYIi2M1AcJPckaMnZAxTiMGiNs7WAHJEvqbX7t6HqnHsNPzeuY 9bBnWiQsOr424rTcZuqphaBT0ZqXL+lKwFYJiRzBysueE3jSAd7WPbh0jXyEju1A PCDAFAaosKlJ4w1PVTVPPNXenNjcyA8xyQ7Il5kX7rfHmKF0BTGOHDhnFcbqfwPD JJakVefhVwaRdtbrKaMAyCiPE/t4mmUIOLcIXZlZztscuvW9WjMo8ywzToxFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1kY8/7eg2jhot5tn6QSogy1WfdEwHwYDVR0j BBgwFoAUw83vwdQtvFJolLSTgtaTq4GSIVEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTVkZjUxMmYtMGQxYS00YjA5LWI5YTQtYTljNTI1ZWMyODE3LzAvQzNDREVGQzFE NDJEQkM1MjY4OTRCNDkzODJENjkzQUI4MTkyMjE1MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DM0NERUZDMUQ0MkRCQzUyNjg5NEI0OTM4MkQ2OTNBQjgxOTIy MTUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTVkZjUxMmYtMGQxYS00YjA5LWI5 YTQtYTljNTI1ZWMyODE3LzAvQzNDREVGQzFENDJEQkM1MjY4OTRCNDkzODJENjkz QUI4MTkyMjE1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAVofy8vOUSxOV6jZTBIW7AtF1lJ1kZSeB1z +ZnLMSZSYU7NHR/IMRVBpVCBztDEqY8QXFlJjHFxksGkPfvHqUZTSInzgAggOgAg LaXH7SEYzYIBIal1XaxzyLdaoNGj9F45B2g5wky4GaRaJ2o3lzJGnvbFlFZsvpVR Rp522v7QlmgQP/xTo0Y0SCvi4hAxwmrBTxG5vWRuVrksOFt802QsF6/aDIbV6RcW 2HHUQa5sk6S3BEZ4QfgtRe2q6tYKB+nrVylZdY7abUp2YbxEBKwcWXOMT8Z+t6Fn 4F3JbhXM8lLGiug1DSl4XCCnGSFyBQI+QYJrDESe9ufKi+NlTPA= -----END CERTIFICATE-----Generated at Thu Sep 24 01:22:27 2026 by rpki-client