$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.mft File: C685EF86C3EED3646B26DDA717952CDBC1AF938B.mft (raw, json) Hash identifier: A4n0qaDhxomy5EwAbaHyoQoJR48jGpEYmjynk1XHKfA= Subject key identifier: 62:76:19:AF:D5:A5:39:FB:BE:25:D2:1F:4A:B6:06:B9:95:30:B0:2C Authority key identifier: C6:85:EF:86:C3:EE:D3:64:6B:26:DD:A7:17:95:2C:DB:C1:AF:93:8B Certificate issuer: /CN=C685EF86C3EED3646B26DDA717952CDBC1AF938B Certificate serial: 049B1C3B9197BE4224DA74D3729ECB3082BD71FF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C685EF86C3EED3646B26DDA717952CDBC1AF938B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.mft Manifest number: BD Signing time: Sun 20 Sep 2026 09:23:48 +0000 Manifest this update: Sun 20 Sep 2026 09:18:48 +0000 Manifest next update: Mon 21 Sep 2026 12:49:48 +0000 Files and hashes: 1: 3130332e3136362e36362e302f32332d3234203d3e203137393935.roa (hash: /TEOvHICrNlzqHKdTSQimWH4eZASaMfqjyKyEfSs2B4=) 2: C685EF86C3EED3646B26DDA717952CDBC1AF938B.crl (hash: BGBTthJ+EBCLIYLJIR9XEAQD8vH1FPHYLGRtW3B3SrY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.crl rsync://rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C685EF86C3EED3646B26DDA717952CDBC1AF938B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 12:49:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:9b:1c:3b:91:97:be:42:24:da:74:d3:72:9e:cb:30:82:bd:71:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C685EF86C3EED3646B26DDA717952CDBC1AF938B Validity Not Before: Sep 20 09:18:48 2026 GMT Not After : Sep 21 12:49:48 2026 GMT Subject: CN=627619AFD5A539FBBE25D21F4AB606B99530B02C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c6:12:4e:b8:b2:52:c9:a3:a8:76:d3:af:a0: 03:6a:53:1b:ec:e6:71:6d:b5:cb:36:f4:79:22:59: 7e:b5:04:1c:1c:4b:5e:4e:4e:e8:eb:8d:da:67:bd: 7e:c2:23:e3:de:ec:0f:61:fb:f7:d5:13:3c:84:7e: cb:28:40:a0:c7:b2:26:86:2a:39:11:d7:36:66:d1: ea:07:b1:b8:ca:62:3b:9a:da:e8:d3:e9:8e:f5:f5: 97:59:8c:76:ad:b9:3a:ce:1d:67:80:28:0e:8b:a4: 7e:3c:86:d2:f9:35:8a:6c:2b:a7:ac:bd:42:ac:b0: bd:81:3d:35:86:1a:80:5a:bd:26:95:67:13:d0:40: 72:c8:cb:05:a2:fe:a7:8d:6a:c0:e0:1d:9d:e6:18: b8:c0:22:01:6c:b0:f9:19:15:3a:47:c6:a2:44:70: 3b:91:e9:05:73:af:9c:7c:2f:2a:ba:29:27:67:48: 3c:9e:9f:fe:10:dd:4d:de:47:25:fe:74:0a:71:2c: 99:2a:58:36:57:9c:f3:08:f2:c0:d4:52:db:d7:5e: bc:86:d0:ad:31:ba:7b:97:3d:19:04:45:e1:57:56: af:51:b2:9f:84:f2:ef:80:ac:cd:94:81:1d:b1:cf: 5a:e6:7d:77:78:10:8a:d5:51:91:8a:8c:9a:f1:40: 5e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:76:19:AF:D5:A5:39:FB:BE:25:D2:1F:4A:B6:06:B9:95:30:B0:2C X509v3 Authority Key Identifier: keyid:C6:85:EF:86:C3:EE:D3:64:6B:26:DD:A7:17:95:2C:DB:C1:AF:93:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C685EF86C3EED3646B26DDA717952CDBC1AF938B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:07:c4:1c:f0:58:7c:f6:58:f1:68:81:61:61:98:73:f0:85: f7:5b:09:a4:65:b2:f8:d8:9b:82:92:a6:90:45:2a:37:87:d4: b3:8a:43:c5:7e:18:d6:35:67:ce:01:e2:0b:59:fb:b1:ea:22: 7a:dd:ab:b8:c6:81:34:05:13:06:48:56:ca:e5:23:1b:11:4d: 7e:99:d6:b2:67:0b:bf:63:d6:66:2c:c6:05:2d:e1:4d:e7:da: 13:2d:a1:26:ab:52:88:1b:2e:07:80:c1:e5:b7:7e:a6:ee:2d: 0f:4e:5b:9a:36:d0:14:f8:2c:01:a3:80:b4:8c:20:4c:b3:39: f6:0c:ea:08:3c:d7:c7:3e:a2:db:c5:26:af:d1:b1:78:70:fa: 10:4c:91:3d:16:4e:7b:14:b5:83:84:4e:0c:c9:f7:1c:31:22: 0a:df:c4:79:87:f4:95:90:cd:23:81:4b:ec:60:3a:f2:03:fc: 77:e5:cc:a2:01:10:c3:f6:6b:5d:66:7b:01:84:7c:96:82:20: a6:39:8e:4e:27:63:e7:46:fe:a3:ef:7c:61:1b:c4:0f:f6:fe: 3b:40:bc:b9:d2:69:4d:38:e6:df:30:f0:e3:dc:7d:08:43:f2: 07:f9:9e:da:2c:2b:35:f9:2b:b0:02:33:e1:b6:d1:80:55:0b: e5:2e:af:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBJscO5GXvkIk2nTTcp7LMIK9cf8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzY4NUVGODZDM0VFRDM2NDZCMjZEREE3MTc5NTJDREJD MUFGOTM4QjAeFw0yNjA5MjAwOTE4NDhaFw0yNjA5MjExMjQ5NDhaMDMxMTAvBgNV BAMTKDYyNzYxOUFGRDVBNTM5RkJCRTI1RDIxRjRBQjYwNkI5OTUzMEIwMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6xhJOuLJSyaOodtOvoANqUxvs 5nFttcs29HkiWX61BBwcS15OTujrjdpnvX7CI+Pe7A9h+/fVEzyEfssoQKDHsiaG KjkR1zZm0eoHsbjKYjua2ujT6Y719ZdZjHatuTrOHWeAKA6LpH48htL5NYpsK6es vUKssL2BPTWGGoBavSaVZxPQQHLIywWi/qeNasDgHZ3mGLjAIgFssPkZFTpHxqJE cDuR6QVzr5x8Lyq6KSdnSDyen/4Q3U3eRyX+dApxLJkqWDZXnPMI8sDUUtvXXryG 0K0xunuXPRkEReFXVq9Rsp+E8u+ArM2UgR2xz1rmfXd4EIrVUZGKjJrxQF7HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYnYZr9WlOfu+JdIfSrYGuZUwsCwwHwYDVR0j BBgwFoAUxoXvhsPu02RrJt2nF5Us28Gvk4swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTU3ZTViMGUtNTk2NC00NjNmLTgwNDEtMzM3ZjgwNTU2NDNjLzAvQzY4NUVGODZD M0VFRDM2NDZCMjZEREE3MTc5NTJDREJDMUFGOTM4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNjg1RUY4NkMzRUVEMzY0NkIyNkREQTcxNzk1MkNEQkMxQUY5 MzhCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTU3ZTViMGUtNTk2NC00NjNmLTgw NDEtMzM3ZjgwNTU2NDNjLzAvQzY4NUVGODZDM0VFRDM2NDZCMjZEREE3MTc5NTJD REJDMUFGOTM4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIAHxBzwWHz2WPFogWFhmHPwhfdbCaRlsvjY m4KSppBFKjeH1LOKQ8V+GNY1Z84B4gtZ+7HqInrdq7jGgTQFEwZIVsrlIxsRTX6Z 1rJnC79j1mYsxgUt4U3n2hMtoSarUogbLgeAweW3fqbuLQ9OW5o20BT4LAGjgLSM IEyzOfYM6gg818c+otvFJq/RsXhw+hBMkT0WTnsUtYOETgzJ9xwxIgrfxHmH9JWQ zSOBS+xgOvID/HflzKIBEMP2a11mewGEfJaCIKY5jk4nY+dG/qPvfGEbxA/2/jtA vLnSaU045t8w8OPcfQhD8gf5ntosKzX5K7ACM+G20YBVC+Uur1Q= -----END CERTIFICATE-----Generated at Mon Sep 21 04:14:31 2026 by rpki-client