$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.mft File: CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.mft (raw, json) Hash identifier: wFJbuIC+4JUvkYUmMnu7p8i8g1AjpXK7LsoGrvc2gNo= Subject key identifier: EC:3D:29:86:1D:EA:AC:07:BB:A9:4F:64:EB:B3:32:80:A4:C6:76:CE Authority key identifier: CD:0A:24:B4:D5:08:D4:3D:8C:25:BB:8E:C5:D4:4F:77:E1:3A:51:A6 Certificate issuer: /CN=CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6 Certificate serial: 388E8DA554F9B450F648691F23BFF0E38B0F7316 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.mft Manifest number: BF Signing time: Tue 22 Sep 2026 02:55:13 +0000 Manifest this update: Tue 22 Sep 2026 02:50:13 +0000 Manifest next update: Wed 23 Sep 2026 04:59:13 +0000 Files and hashes: 1: 3130332e3138392e3136362e302f32332d3233203d3e20313439383835.roa (hash: Pb1HhX9vGzRzwD3eC7x1KFYFFDBS8WYJS934upf4BBQ=) 2: CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.crl (hash: 1Z5cy9iSpjKdZ8gFbuubPPMu0moXKe/5aTOWKQiMV44=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.crl rsync://rpki-rsync.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 03:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:8e:8d:a5:54:f9:b4:50:f6:48:69:1f:23:bf:f0:e3:8b:0f:73:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6 Validity Not Before: Sep 22 02:50:13 2026 GMT Not After : Sep 23 04:59:13 2026 GMT Subject: CN=EC3D29861DEAAC07BBA94F64EBB33280A4C676CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:df:52:af:25:09:70:ec:51:47:fd:57:56:c9: 90:66:9a:14:f9:e2:7b:c0:22:b9:50:d7:f6:4c:38: 1c:41:52:0f:39:bd:9b:72:55:b8:09:68:4f:45:f0: a1:88:6b:46:c2:bf:92:b5:eb:f1:56:40:20:89:ec: f7:5e:8b:a4:40:ce:4d:72:60:b2:0f:8d:95:05:b2: 7d:9f:fa:75:b3:70:d6:f3:56:ca:16:12:e9:45:1d: 55:a6:db:57:50:0f:96:63:5a:69:82:d4:08:d6:c5: 15:ea:b3:47:b1:d0:e2:75:76:82:18:e8:01:44:5a: 72:55:3c:cc:1d:36:93:87:13:4c:fa:f3:64:bc:34: 37:69:85:9b:a6:66:d1:09:83:80:61:a0:14:36:4e: 2f:11:21:84:6e:be:07:a4:38:b1:05:54:39:c0:86: 9f:04:43:61:f8:0b:a0:12:e8:b0:b9:09:1c:ef:92: eb:29:be:32:fb:81:45:19:de:fc:8a:b0:5f:6f:5f: e3:24:c7:22:7a:97:cf:74:64:81:41:d3:cc:64:c4: 0d:56:50:b2:6c:2b:85:0a:75:a6:73:86:05:b3:5f: 3f:30:fb:b8:aa:6f:13:a9:3b:3e:f1:8e:94:1c:ee: a2:ed:0e:1d:26:f4:70:4a:01:f1:12:96:44:65:32: bd:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:3D:29:86:1D:EA:AC:07:BB:A9:4F:64:EB:B3:32:80:A4:C6:76:CE X509v3 Authority Key Identifier: keyid:CD:0A:24:B4:D5:08:D4:3D:8C:25:BB:8E:C5:D4:4F:77:E1:3A:51:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:a6:ba:dd:f5:07:18:57:ff:53:2d:63:88:f0:9e:c1:5d:eb: c1:fd:be:5c:84:88:63:57:8e:dd:48:d4:9b:b5:57:b6:1a:7e: 6e:80:eb:52:05:ad:7b:c0:cc:76:2f:1e:9d:32:85:61:6c:e3: 67:be:f8:7b:f6:41:44:a9:39:d9:57:68:40:e6:70:2f:47:10: 32:99:91:f7:18:6d:04:9d:df:8a:fa:0d:91:9c:75:41:25:f7: a4:3a:23:13:e4:07:5d:f5:1d:52:ac:6f:7b:1c:82:0c:19:98: 83:fe:8e:db:35:90:b6:e6:c9:20:66:b1:df:6d:ad:0f:73:58: 54:ed:e5:c0:ca:be:12:9b:6e:07:b1:4e:18:82:a1:15:2e:d6: 24:89:e1:fd:5b:dc:c8:c3:dd:ee:a1:c6:b8:e5:5b:bf:8a:dc: bb:13:db:da:f3:93:2c:87:14:c3:2c:6f:38:98:18:d4:f0:85: 26:6f:cf:3c:40:e4:b7:dd:52:05:95:6f:b7:fc:3a:38:36:af: d7:fa:d5:ab:cb:93:ed:97:33:23:34:b6:8d:5b:2a:2e:a1:f9: 16:92:3a:90:e6:b8:40:8b:b2:69:6f:25:72:1b:f3:84:5f:7f: 54:6d:cd:ec:aa:9f:f5:87:fe:03:c6:43:0b:6b:b7:2d:67:fa: 88:75:8a:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOI6NpVT5tFD2SGkfI7/w44sPcxYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QwQTI0QjRENTA4RDQzRDhDMjVCQjhFQzVENDRGNzdF MTNBNTFBNjAeFw0yNjA5MjIwMjUwMTNaFw0yNjA5MjMwNDU5MTNaMDMxMTAvBgNV BAMTKEVDM0QyOTg2MURFQUFDMDdCQkE5NEY2NEVCQjMzMjgwQTRDNjc2Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC431KvJQlw7FFH/VdWyZBmmhT5 4nvAIrlQ1/ZMOBxBUg85vZtyVbgJaE9F8KGIa0bCv5K16/FWQCCJ7Pdei6RAzk1y YLIPjZUFsn2f+nWzcNbzVsoWEulFHVWm21dQD5ZjWmmC1AjWxRXqs0ex0OJ1doIY 6AFEWnJVPMwdNpOHE0z682S8NDdphZumZtEJg4BhoBQ2Ti8RIYRuvgekOLEFVDnA hp8EQ2H4C6AS6LC5CRzvkuspvjL7gUUZ3vyKsF9vX+MkxyJ6l890ZIFB08xkxA1W ULJsK4UKdaZzhgWzXz8w+7iqbxOpOz7xjpQc7qLtDh0m9HBKAfESlkRlMr29AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7D0phh3qrAe7qU9k67MygKTGds4wHwYDVR0j BBgwFoAUzQoktNUI1D2MJbuOxdRPd+E6UaYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWUzMGFjNjQtMGYxMy00MTYyLTk2OGYtYWZlNWNjNzE0Y2Y2LzAvQ0QwQTI0QjRE NTA4RDQzRDhDMjVCQjhFQzVENDRGNzdFMTNBNTFBNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRDBBMjRCNEQ1MDhENDNEOEMyNUJCOEVDNUQ0NEY3N0UxM0E1 MUE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWUzMGFjNjQtMGYxMy00MTYyLTk2 OGYtYWZlNWNjNzE0Y2Y2LzAvQ0QwQTI0QjRENTA4RDQzRDhDMjVCQjhFQzVENDRG NzdFMTNBNTFBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEWmut31BxhX/1MtY4jwnsFd68H9vlyEiGNX jt1I1Ju1V7Yafm6A61IFrXvAzHYvHp0yhWFs42e++Hv2QUSpOdlXaEDmcC9HEDKZ kfcYbQSd34r6DZGcdUEl96Q6IxPkB131HVKsb3scggwZmIP+jts1kLbmySBmsd9t rQ9zWFTt5cDKvhKbbgexThiCoRUu1iSJ4f1b3MjD3e6hxrjlW7+K3LsT29rzkyyH FMMsbziYGNTwhSZvzzxA5LfdUgWVb7f8Ojg2r9f61avLk+2XMyM0to1bKi6h+RaS OpDmuECLsmlvJXIb84Rff1Rtzeyqn/WH/gPGQwtrty1n+oh1is0= -----END CERTIFICATE-----Generated at Tue Sep 22 12:17:48 2026 by rpki-client