$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/C0DF2950676479309D2FBC873ADFE7F5B6058640.mft File: C0DF2950676479309D2FBC873ADFE7F5B6058640.mft (raw, json) Hash identifier: y1Wj+AEs58yS0dBCx2ra2xxkEnR1I9QiGpbUASH7M7I= Subject key identifier: F0:78:E5:AF:82:BE:6B:44:3B:CB:EF:94:60:4F:1E:AD:84:7C:EA:32 Authority key identifier: C0:DF:29:50:67:64:79:30:9D:2F:BC:87:3A:DF:E7:F5:B6:05:86:40 Certificate issuer: /CN=C0DF2950676479309D2FBC873ADFE7F5B6058640 Certificate serial: 426D0F62CC6FFC64EEE250F120E6368CE23AAE94 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0DF2950676479309D2FBC873ADFE7F5B6058640.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/C0DF2950676479309D2FBC873ADFE7F5B6058640.mft Manifest number: BE Signing time: Mon 21 Sep 2026 15:00:05 +0000 Manifest this update: Mon 21 Sep 2026 14:55:05 +0000 Manifest next update: Tue 22 Sep 2026 17:05:05 +0000 Files and hashes: 1: 3130332e3135322e35322e302f32342d3234203d3e20313431303532.roa (hash: ajRVgGN4gMUd4j39yvek6vpf46EiM5S4d3QDYc3oIa4=) 2: 323030313a6466333a663738303a3a2f34382d3438203d3e20313431303532.roa (hash: W26Vx4nLZMqxpvpr3m/RYSVAUYlrlFX1e6tV2N6J5ys=) 3: C0DF2950676479309D2FBC873ADFE7F5B6058640.crl (hash: E6bZPqfbvfQ4upiuQObaKFBJMW1GrFX0p/NK0usezis=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/C0DF2950676479309D2FBC873ADFE7F5B6058640.crl rsync://rpki-rsync.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/C0DF2950676479309D2FBC873ADFE7F5B6058640.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0DF2950676479309D2FBC873ADFE7F5B6058640.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:6d:0f:62:cc:6f:fc:64:ee:e2:50:f1:20:e6:36:8c:e2:3a:ae:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0DF2950676479309D2FBC873ADFE7F5B6058640 Validity Not Before: Sep 21 14:55:05 2026 GMT Not After : Sep 22 17:05:05 2026 GMT Subject: CN=F078E5AF82BE6B443BCBEF94604F1EAD847CEA32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c3:c2:4f:05:f3:72:0d:ea:0f:70:98:a8:55: f8:50:27:98:8d:b3:70:7f:04:cc:9e:d0:ee:42:26: 72:14:5f:35:c4:99:4e:15:20:5b:6b:8b:df:c7:97: e3:0c:24:82:56:28:31:83:63:5c:68:a3:b4:7a:57: d6:01:78:06:e5:4c:d4:89:0b:59:70:e7:c9:70:aa: bb:68:a6:63:dd:e8:68:a8:3f:a1:db:f1:bc:3f:21: 2e:f1:ed:04:8a:a3:59:53:ce:0c:0a:80:12:23:4e: dc:5f:b2:58:73:b6:fb:ab:3f:07:0c:cd:57:a9:b4: f5:d6:f6:a9:4d:0b:7d:f8:43:77:7a:df:f9:34:2c: b4:af:b3:4b:85:c4:8b:fc:f5:5a:b6:61:93:af:e0: 99:9f:79:71:77:e3:01:ce:9d:7b:31:31:0b:a4:3b: 06:a0:23:f4:4c:cf:0f:13:46:8e:1b:62:d7:1b:b2: e3:8e:ea:03:75:60:f7:f5:ef:0e:06:bf:01:86:46: 4f:26:61:9e:6b:28:12:b1:16:92:ff:c6:12:f3:27: 1c:10:7a:18:06:1f:66:81:0d:e0:d3:65:df:9d:38: c6:fe:ac:32:b8:05:0f:c1:eb:c8:94:c6:1e:ae:53: bb:b5:e5:4c:d0:1e:13:80:af:cf:43:2a:5c:06:33: 08:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:78:E5:AF:82:BE:6B:44:3B:CB:EF:94:60:4F:1E:AD:84:7C:EA:32 X509v3 Authority Key Identifier: keyid:C0:DF:29:50:67:64:79:30:9D:2F:BC:87:3A:DF:E7:F5:B6:05:86:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/C0DF2950676479309D2FBC873ADFE7F5B6058640.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0DF2950676479309D2FBC873ADFE7F5B6058640.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/C0DF2950676479309D2FBC873ADFE7F5B6058640.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:e1:d2:0e:98:cd:e9:60:b2:b5:b3:c8:a5:fa:2b:91:83:3b: 0d:f9:93:b7:5a:16:30:cd:0f:47:69:c8:1a:cf:07:e4:d0:d5: 73:f0:0b:9f:03:72:66:af:05:23:9c:ef:ff:bd:b8:52:2f:40: 7a:25:4b:a3:92:33:6a:4a:56:6c:ed:5b:df:bd:e9:0f:19:70: 2c:2d:e2:e0:34:be:18:64:d3:be:fd:21:f8:c0:62:37:d8:95: 28:da:9d:25:90:5f:47:e9:69:42:57:82:d6:bc:0e:70:c7:af: 64:3d:c6:f1:48:a2:c1:52:7f:57:5a:ed:d6:dd:7e:e5:c9:e3: 7f:07:c6:e3:80:32:ac:4c:86:4f:89:85:db:f4:0a:22:4e:17: 98:a8:1a:17:66:11:d3:fb:98:1c:81:fe:4d:a1:98:84:44:22: 4b:3f:81:18:e6:0a:40:f0:86:bf:9e:31:94:14:2f:af:40:71: ba:58:ac:bb:96:3e:28:51:1f:79:c3:4e:59:76:be:3b:a6:66: aa:bf:ae:88:a3:94:79:f7:27:12:75:7a:86:a3:e0:fc:10:fe: 5a:e3:3f:24:eb:c0:d6:7a:49:be:de:99:3e:9c:53:6a:1c:c8: 04:cd:62:16:4d:bb:68:f5:68:67:ea:77:43:59:ee:5f:6d:d4: e7:0f:bb:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQm0PYsxv/GTu4lDxIOY2jOI6rpQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBERjI5NTA2NzY0NzkzMDlEMkZCQzg3M0FERkU3RjVC NjA1ODY0MDAeFw0yNjA5MjExNDU1MDVaFw0yNjA5MjIxNzA1MDVaMDMxMTAvBgNV BAMTKEYwNzhFNUFGODJCRTZCNDQzQkNCRUY5NDYwNEYxRUFEODQ3Q0VBMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZw8JPBfNyDeoPcJioVfhQJ5iN s3B/BMye0O5CJnIUXzXEmU4VIFtri9/Hl+MMJIJWKDGDY1xoo7R6V9YBeAblTNSJ C1lw58lwqrtopmPd6GioP6Hb8bw/IS7x7QSKo1lTzgwKgBIjTtxfslhztvurPwcM zVeptPXW9qlNC334Q3d63/k0LLSvs0uFxIv89Vq2YZOv4JmfeXF34wHOnXsxMQuk OwagI/RMzw8TRo4bYtcbsuOO6gN1YPf17w4GvwGGRk8mYZ5rKBKxFpL/xhLzJxwQ ehgGH2aBDeDTZd+dOMb+rDK4BQ/B68iUxh6uU7u15UzQHhOAr89DKlwGMwiDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8Hjlr4K+a0Q7y++UYE8erYR86jIwHwYDVR0j BBgwFoAUwN8pUGdkeTCdL7yHOt/n9bYFhkAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTg0NGUxYjItOTNjNi00OGFlLTk2Y2MtZWQ4MzgyOWY1YTIwLzAvQzBERjI5NTA2 NzY0NzkzMDlEMkZCQzg3M0FERkU3RjVCNjA1ODY0MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMERGMjk1MDY3NjQ3OTMwOUQyRkJDODczQURGRTdGNUI2MDU4 NjQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTg0NGUxYjItOTNjNi00OGFlLTk2 Y2MtZWQ4MzgyOWY1YTIwLzAvQzBERjI5NTA2NzY0NzkzMDlEMkZCQzg3M0FERkU3 RjVCNjA1ODY0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANDh0g6YzelgsrWzyKX6K5GDOw35k7daFjDN D0dpyBrPB+TQ1XPwC58DcmavBSOc7/+9uFIvQHolS6OSM2pKVmztW9+96Q8ZcCwt 4uA0vhhk0779IfjAYjfYlSjanSWQX0fpaUJXgta8DnDHr2Q9xvFIosFSf1da7dbd fuXJ438HxuOAMqxMhk+Jhdv0CiJOF5ioGhdmEdP7mByB/k2hmIREIks/gRjmCkDw hr+eMZQUL69AcbpYrLuWPihRH3nDTll2vjumZqq/roijlHn3JxJ1eoaj4PwQ/lrj PyTrwNZ6Sb7emT6cU2ocyATNYhZNu2j1aGfqd0NZ7l9t1OcPu9w= -----END CERTIFICATE-----Generated at Mon Sep 21 20:02:09 2026 by rpki-client