$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.mft File: C03D5C36BA12143F61D38A8EBDDB69F3B5990721.mft (raw, json) Hash identifier: 0LkZhlA6u6qBvyLif/tI+BapKoRQBxgTkldMUD10eSM= Subject key identifier: DD:78:E8:1F:C5:D4:8F:1D:D8:C2:3D:F3:38:EA:2E:A3:E7:E4:9E:F1 Authority key identifier: C0:3D:5C:36:BA:12:14:3F:61:D3:8A:8E:BD:DB:69:F3:B5:99:07:21 Certificate issuer: /CN=C03D5C36BA12143F61D38A8EBDDB69F3B5990721 Certificate serial: 037CF5024DD7926BFB963ED10EB0CF3B1B2A5354 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.mft Manifest number: BD Signing time: Sun 20 Sep 2026 23:15:37 +0000 Manifest this update: Sun 20 Sep 2026 23:10:37 +0000 Manifest next update: Tue 22 Sep 2026 03:04:37 +0000 Files and hashes: 1: C03D5C36BA12143F61D38A8EBDDB69F3B5990721.crl (hash: KC6XBs0Zbgi8Cdiu5zHp6aZVi/uvxFMRpzUdU97LcHI=) 2: 3135372e31352e3137342e302f32342d3234203d3e20313532333739.roa (hash: 7fMJt0M4VQARtwl7gUUn1d68a36tK2tjagq7bmrxvDM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.crl rsync://rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 14:21:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:7c:f5:02:4d:d7:92:6b:fb:96:3e:d1:0e:b0:cf:3b:1b:2a:53:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C03D5C36BA12143F61D38A8EBDDB69F3B5990721 Validity Not Before: Sep 20 23:10:37 2026 GMT Not After : Sep 22 03:04:37 2026 GMT Subject: CN=DD78E81FC5D48F1DD8C23DF338EA2EA3E7E49EF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1f:cd:3e:1a:50:33:64:c0:eb:f7:77:af:72: 98:0e:7b:cc:5d:58:02:47:00:ea:86:f1:ae:49:ba: 14:91:8b:63:d7:ea:53:e1:13:ff:49:28:66:ed:82: 81:bf:8e:05:4b:3f:82:47:34:6a:aa:6f:78:25:0b: e8:26:16:08:df:5a:eb:8c:13:c9:3c:57:8d:21:55: ac:d8:2a:5c:c5:5a:7e:b7:bc:db:52:6f:08:f8:d4: 96:e6:34:6d:21:df:82:54:e8:c7:10:33:cd:20:a2: 76:ed:d9:a4:9a:dd:bc:f7:7c:da:18:26:ce:a5:2b: 78:fe:e4:83:f6:89:d5:42:9d:b8:96:6e:61:c9:04: 8d:c6:cf:1c:55:df:d0:9b:e8:97:d0:7c:be:9e:e2: d5:ef:17:fb:e6:af:ba:c9:7d:35:77:93:08:8b:d5: 3b:fc:42:14:03:5e:fa:f1:25:ca:62:15:7d:1b:30: e3:e7:ee:ec:ba:f2:02:d3:30:65:8a:b2:5b:63:63: 9b:81:9d:ed:49:4e:ac:80:40:bc:e8:e5:53:0e:3d: 11:ab:4b:20:59:56:d3:4f:21:49:91:11:19:79:ba: 22:e1:db:c2:ce:a5:15:9c:f1:40:2f:c3:cd:91:87: 83:e7:3b:7f:da:83:50:e2:89:10:6c:73:0d:42:43: 79:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:78:E8:1F:C5:D4:8F:1D:D8:C2:3D:F3:38:EA:2E:A3:E7:E4:9E:F1 X509v3 Authority Key Identifier: keyid:C0:3D:5C:36:BA:12:14:3F:61:D3:8A:8E:BD:DB:69:F3:B5:99:07:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:c3:ce:15:11:17:9f:88:29:91:6f:11:5f:e3:91:b9:d9:04: 51:a0:a6:39:49:e6:10:8f:c1:74:79:80:92:38:aa:41:0b:fb: d9:0c:db:29:11:03:f7:76:a3:21:44:4c:31:02:41:dd:4a:c9: a5:c1:01:fb:84:a3:59:1d:1b:ea:03:7b:d7:a6:f2:8e:19:15: 48:12:42:c1:5f:cc:0a:b6:81:92:0d:d2:e0:65:7b:5e:68:d9: 7e:90:9a:c4:c7:a9:53:ba:2d:64:c5:11:81:07:96:99:43:80: 3b:25:b7:5c:f6:39:06:56:1a:bc:8e:94:a0:b3:fa:33:2f:b9: f2:42:71:b0:62:b5:86:10:87:db:e3:6a:ab:9a:37:a0:2c:1b: 68:ca:83:c5:de:4d:ed:11:dd:24:34:75:3f:98:d6:ee:c1:ac: 92:c8:7a:5a:6d:54:28:6a:ba:62:78:b4:95:c6:6d:84:ab:44: a2:4f:ca:e3:e7:01:5f:f8:4d:27:93:a4:d8:4a:b7:6c:30:c5: f7:8e:6d:a1:c6:10:e6:6d:2e:9d:8b:09:97:0c:26:1f:72:f4: 03:c1:5c:0b:f6:7f:aa:b6:6a:6b:a0:80:72:0e:30:88:3f:3c: a5:30:ad:e0:45:3b:04:ef:2d:29:e9:13:f5:44:c9:82:26:40: 8b:d7:83:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA3z1Ak3Xkmv7lj7RDrDPOxsqU1QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzAzRDVDMzZCQTEyMTQzRjYxRDM4QThFQkREQjY5RjNC NTk5MDcyMTAeFw0yNjA5MjAyMzEwMzdaFw0yNjA5MjIwMzA0MzdaMDMxMTAvBgNV BAMTKERENzhFODFGQzVENDhGMUREOEMyM0RGMzM4RUEyRUEzRTdFNDlFRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgH80+GlAzZMDr93evcpgOe8xd WAJHAOqG8a5JuhSRi2PX6lPhE/9JKGbtgoG/jgVLP4JHNGqqb3glC+gmFgjfWuuM E8k8V40hVazYKlzFWn63vNtSbwj41JbmNG0h34JU6McQM80gonbt2aSa3bz3fNoY Js6lK3j+5IP2idVCnbiWbmHJBI3GzxxV39Cb6JfQfL6e4tXvF/vmr7rJfTV3kwiL 1Tv8QhQDXvrxJcpiFX0bMOPn7uy68gLTMGWKsltjY5uBne1JTqyAQLzo5VMOPRGr SyBZVtNPIUmRERl5uiLh28LOpRWc8UAvw82Rh4PnO3/ag1DiiRBscw1CQ3nVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3XjoH8XUjx3Ywj3zOOouo+fknvEwHwYDVR0j BBgwFoAUwD1cNroSFD9h04qOvdtp87WZByEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWIwMDI5OTItYWNiMi00Zjc3LTk5N2QtMzIxN2VhZDk5YmI1LzAvQzAzRDVDMzZC QTEyMTQzRjYxRDM4QThFQkREQjY5RjNCNTk5MDcyMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DMDNENUMzNkJBMTIxNDNGNjFEMzhBOEVCRERCNjlGM0I1OTkw NzIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWIwMDI5OTItYWNiMi00Zjc3LTk5 N2QtMzIxN2VhZDk5YmI1LzAvQzAzRDVDMzZCQTEyMTQzRjYxRDM4QThFQkREQjY5 RjNCNTk5MDcyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABfDzhURF5+IKZFvEV/jkbnZBFGgpjlJ5hCP wXR5gJI4qkEL+9kM2ykRA/d2oyFETDECQd1KyaXBAfuEo1kdG+oDe9em8o4ZFUgS QsFfzAq2gZIN0uBle15o2X6QmsTHqVO6LWTFEYEHlplDgDslt1z2OQZWGryOlKCz +jMvufJCcbBitYYQh9vjaquaN6AsG2jKg8XeTe0R3SQ0dT+Y1u7BrJLIelptVChq umJ4tJXGbYSrRKJPyuPnAV/4TSeTpNhKt2wwxfeObaHGEOZtLp2LCZcMJh9y9APB XAv2f6q2amuggHIOMIg/PKUwreBFOwTvLSnpE/VEyYImQIvXgxk= -----END CERTIFICATE-----Generated at Mon Sep 21 04:05:58 2026 by rpki-client