$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.mft File: C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.mft (raw, json) Hash identifier: n2y71RWl56PBdv3+CdAWpU7qrp7Hj3L7TSP077/fd20= Subject key identifier: FF:CD:84:82:88:F8:C3:3D:93:73:10:0C:9E:41:E8:04:B9:F9:93:9B Authority key identifier: C2:04:09:5D:0D:FA:29:CA:02:22:F4:C1:BE:5E:6A:9C:7F:E5:B5:CC Certificate issuer: /CN=C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC Certificate serial: 5BB079F5A55169B3A258097974AF92E5B3D3278F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.mft Manifest number: BE Signing time: Mon 21 Sep 2026 13:28:15 +0000 Manifest this update: Mon 21 Sep 2026 13:23:15 +0000 Manifest next update: Tue 22 Sep 2026 16:49:15 +0000 Files and hashes: 1: C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.crl (hash: PHvwXvJd+tHKv1qv0pqLfRscGaH15CXBj4fINpSbF0A=) 2: 3135372e31302e3138312e302f32342d3234203d3e20313532333439.roa (hash: R6QK9+MoLmzsMre1Y9YXqP/L5rUmbxfvyX6TdZV81Yk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.crl rsync://rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:b0:79:f5:a5:51:69:b3:a2:58:09:79:74:af:92:e5:b3:d3:27:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC Validity Not Before: Sep 21 13:23:15 2026 GMT Not After : Sep 22 16:49:15 2026 GMT Subject: CN=FFCD848288F8C33D9373100C9E41E804B9F9939B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:63:8d:22:a2:63:73:21:f5:8b:01:cf:e0:fa: 55:ff:7d:79:e3:5b:30:63:cf:d9:e9:45:5f:a0:4f: 86:6d:3a:90:ed:2d:54:0d:bf:c5:a2:f1:22:f9:7d: 95:08:c8:7d:f0:09:fd:e6:d1:04:71:66:57:b8:0d: 94:a1:c2:ea:10:3f:a4:66:56:a5:80:09:5b:4b:ba: 4c:66:e2:ae:12:ab:17:36:34:f8:e0:ad:7b:51:2e: 3e:bb:4f:16:2e:79:a9:1f:5e:99:dc:cc:ea:8f:2d: 15:63:44:f2:e8:8a:f7:b0:e4:bd:74:97:92:29:29: f0:73:a0:f6:65:27:31:fe:01:dd:d4:f9:2b:fb:c9: fc:3d:d9:24:ce:ca:0b:03:66:cd:95:7a:f3:8e:9a: a7:a6:1d:7b:80:ac:2c:92:65:a2:35:cf:c0:cc:0e: f1:52:99:fd:3f:79:83:d9:67:2a:66:7e:84:e6:83: 03:14:bc:ab:99:15:0f:2e:69:b5:b1:64:6e:cd:59: 9a:9c:99:c5:75:59:4c:72:33:5b:02:ca:5c:81:0f: 51:83:ff:fb:de:32:66:95:ca:34:61:4e:d4:10:19: 3a:86:44:1e:e6:dc:ed:fd:d9:75:72:0b:40:ff:b8: de:e7:2d:85:ce:47:6b:34:47:71:ca:97:e4:09:41: 8f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:CD:84:82:88:F8:C3:3D:93:73:10:0C:9E:41:E8:04:B9:F9:93:9B X509v3 Authority Key Identifier: keyid:C2:04:09:5D:0D:FA:29:CA:02:22:F4:C1:BE:5E:6A:9C:7F:E5:B5:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:33:ec:f6:dc:1a:81:29:32:82:e8:f8:d6:da:86:1c:8d:98: 0d:74:c6:75:ee:a6:e9:43:26:62:0c:3e:de:6e:a8:fd:22:b1: 0f:bf:ca:cf:d9:c4:c5:6b:4b:41:40:a6:d2:0c:65:e5:ae:27: 68:2d:5c:79:4f:34:da:08:b6:cb:67:fb:7f:56:e4:13:83:da: 1e:34:5f:f9:1a:e5:82:eb:1f:05:86:bb:de:1a:0c:7c:6c:aa: 53:13:b5:be:cb:11:2f:a0:d0:87:cb:a6:b3:00:56:0a:e3:8d: 1b:53:0e:6a:7d:29:8d:a3:6d:35:8b:1a:59:4c:11:34:a6:06: 5b:08:bd:f0:f2:da:50:dc:28:a6:47:62:e1:9c:9e:97:bb:92: e7:ee:40:d4:4f:61:3a:06:b6:92:a0:44:4b:56:49:07:66:5a: 4b:73:c7:8e:9e:c8:ee:28:38:6a:9d:77:14:bf:a6:92:e2:cc: 4b:53:dd:4d:5a:e0:e5:5a:12:67:28:eb:d5:a3:4e:c4:9f:8f: a4:3d:c6:d1:a9:59:07:7a:3d:ca:2c:5c:fb:02:4c:0d:00:eb: c1:f5:b5:7b:d2:92:57:5c:95:bf:ce:1d:40:88:c0:5d:ae:c9: 43:5c:64:a5:b0:51:80:07:3c:08:5a:2a:39:fe:be:fd:97:52: 2e:2e:20:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW7B59aVRabOiWAl5dK+S5bPTJ48wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIwNDA5NUQwREZBMjlDQTAyMjJGNEMxQkU1RTZBOUM3 RkU1QjVDQzAeFw0yNjA5MjExMzIzMTVaFw0yNjA5MjIxNjQ5MTVaMDMxMTAvBgNV BAMTKEZGQ0Q4NDgyODhGOEMzM0Q5MzczMTAwQzlFNDFFODA0QjlGOTkzOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvY40iomNzIfWLAc/g+lX/fXnj WzBjz9npRV+gT4ZtOpDtLVQNv8Wi8SL5fZUIyH3wCf3m0QRxZle4DZShwuoQP6Rm VqWACVtLukxm4q4Sqxc2NPjgrXtRLj67TxYueakfXpnczOqPLRVjRPLoivew5L10 l5IpKfBzoPZlJzH+Ad3U+Sv7yfw92STOygsDZs2VevOOmqemHXuArCySZaI1z8DM DvFSmf0/eYPZZypmfoTmgwMUvKuZFQ8uabWxZG7NWZqcmcV1WUxyM1sCylyBD1GD //veMmaVyjRhTtQQGTqGRB7m3O392XVyC0D/uN7nLYXOR2s0R3HKl+QJQY+JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/82Egoj4wz2TcxAMnkHoBLn5k5swHwYDVR0j BBgwFoAUwgQJXQ36KcoCIvTBvl5qnH/ltcwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjkwZDAyNjUtMmNjMS00NjNkLTk0OGItY2RlZDEzYTIwMjk1LzAvQzIwNDA5NUQw REZBMjlDQTAyMjJGNEMxQkU1RTZBOUM3RkU1QjVDQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DMjA0MDk1RDBERkEyOUNBMDIyMkY0QzFCRTVFNkE5QzdGRTVC NUNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjkwZDAyNjUtMmNjMS00NjNkLTk0 OGItY2RlZDEzYTIwMjk1LzAvQzIwNDA5NUQwREZBMjlDQTAyMjJGNEMxQkU1RTZB OUM3RkU1QjVDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAMz7PbcGoEpMoLo+NbahhyNmA10xnXupulD JmIMPt5uqP0isQ+/ys/ZxMVrS0FAptIMZeWuJ2gtXHlPNNoItstn+39W5BOD2h40 X/ka5YLrHwWGu94aDHxsqlMTtb7LES+g0IfLprMAVgrjjRtTDmp9KY2jbTWLGllM ETSmBlsIvfDy2lDcKKZHYuGcnpe7kufuQNRPYToGtpKgREtWSQdmWktzx46eyO4o OGqddxS/ppLizEtT3U1a4OVaEmco69WjTsSfj6Q9xtGpWQd6PcosXPsCTA0A68H1 tXvSkldclb/OHUCIwF2uyUNcZKWwUYAHPAhaKjn+vv2XUi4uIEw= -----END CERTIFICATE-----Generated at Tue Sep 22 01:18:11 2026 by rpki-client