$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.mft File: CD845730E45E4D531071D97C1EDC23DA378D662F.mft (raw, json) Hash identifier: Ub5oSJt4zwF+HZqMuxvHppl+/12kTcL52il6DxgImsg= Subject key identifier: E5:66:20:9F:2C:72:4E:8D:CC:95:8D:21:93:76:C8:D1:73:90:83:AD Authority key identifier: CD:84:57:30:E4:5E:4D:53:10:71:D9:7C:1E:DC:23:DA:37:8D:66:2F Certificate issuer: /CN=CD845730E45E4D531071D97C1EDC23DA378D662F Certificate serial: 1B88152D8D6ED256CC5947A80A7069D2B15F7D8C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD845730E45E4D531071D97C1EDC23DA378D662F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 02:09:02 +0000 Manifest this update: Tue 22 Sep 2026 02:04:02 +0000 Manifest next update: Wed 23 Sep 2026 03:11:02 +0000 Files and hashes: 1: 3130332e3131342e35322e302f32332d3234203d3e20313337333439.roa (hash: ZyTKIgLUxCGhcIet/CFJoBSXRoiA7e9G+Kr6S5o0mEQ=) 2: 3130332e3131342e35332e302f32342d3234203d3e20313337333439.roa (hash: BgiKJc54U9vx0Bz6VAlgbJ7Gti2eL3QTE9xees67wzA=) 3: 323030313a6466343a663330303a3a2f34382d3438203d3e20313337333439.roa (hash: lb4d9lrnmMWGai0ItqfgLnvKFt7iEuEC2HCE9pUg2nE=) 4: 3130332e3131342e35322e302f32342d3234203d3e20313337333439.roa (hash: qBRAe7C40tWA04dsJPNXkwqtoGUaunwx7S+rfFhu9ho=) 5: CD845730E45E4D531071D97C1EDC23DA378D662F.crl (hash: 1SmOBZxftYWb/PoULyqnslJayk+9WGEF0EMrmKKCHV8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.crl rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD845730E45E4D531071D97C1EDC23DA378D662F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 03:11:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:88:15:2d:8d:6e:d2:56:cc:59:47:a8:0a:70:69:d2:b1:5f:7d:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD845730E45E4D531071D97C1EDC23DA378D662F Validity Not Before: Sep 22 02:04:02 2026 GMT Not After : Sep 23 03:11:02 2026 GMT Subject: CN=E566209F2C724E8DCC958D219376C8D1739083AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a8:42:ee:25:49:08:c8:e8:94:28:8d:15:6a: ca:6a:e5:81:e7:ef:23:ec:ca:07:ff:1e:3c:09:c6: 31:5d:fc:76:b8:ab:cd:97:f9:c7:5d:1b:61:62:1f: d5:29:33:ee:28:e4:7b:88:cc:b8:26:da:08:2c:f5: e6:d8:55:26:0f:e5:4b:ea:8b:19:de:c7:f7:94:4b: 90:ac:81:a7:70:7f:b4:7e:37:b3:5a:c4:d0:d7:e0: df:7a:eb:aa:e3:29:a6:49:88:17:0a:d6:55:d1:61: f0:07:ad:bd:5a:62:6b:cf:ba:11:23:c3:b8:77:5d: e3:cc:05:c4:4a:67:07:5e:25:a8:45:8a:b9:57:e4: bb:b4:06:4a:51:62:f9:61:bb:c1:9b:76:35:b4:ab: 4a:90:13:e0:98:d5:99:99:9c:3e:cb:31:20:64:1e: cc:32:0b:fc:9d:ba:a7:b6:63:13:f0:cb:13:cc:f0: b4:34:c7:d9:c7:8c:e2:a0:83:be:85:a0:06:d9:5f: 56:44:e5:e9:68:e5:07:12:09:6d:ed:5f:91:32:63: 5e:16:59:28:8f:6f:09:4d:bc:39:75:4f:4d:b3:7e: 05:02:85:4f:63:25:cc:50:ac:cf:3c:42:57:32:8b: bf:4c:75:4a:17:e6:e5:f7:4a:71:91:eb:30:3c:35: 63:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:66:20:9F:2C:72:4E:8D:CC:95:8D:21:93:76:C8:D1:73:90:83:AD X509v3 Authority Key Identifier: keyid:CD:84:57:30:E4:5E:4D:53:10:71:D9:7C:1E:DC:23:DA:37:8D:66:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD845730E45E4D531071D97C1EDC23DA378D662F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:24:b4:74:fc:77:69:06:12:fc:f2:d1:25:e1:6b:66:c3:64: 05:18:fb:2c:4b:72:52:33:e1:cb:0f:02:ba:c9:3c:b9:a7:0b: 91:8d:0e:d6:40:a5:41:1b:22:79:a2:47:c8:3b:bf:e0:df:b3: c1:7e:64:de:56:49:bd:81:c1:5a:2c:ee:4c:6d:ab:8e:9b:5b: f7:17:d1:fd:0f:ad:f2:b1:c8:b2:70:19:e6:27:27:7e:d5:3f: b8:ea:cc:b0:64:a0:96:c1:ee:da:29:0f:c8:aa:b4:65:a5:b2: 08:85:88:c8:9d:ff:09:83:38:05:8c:47:fa:6f:6f:36:9c:bf: d5:97:27:03:08:7b:ae:cd:9e:9b:f1:4b:94:1e:c9:fb:ec:41: 45:74:5d:26:09:ea:d7:39:b6:5b:56:36:1e:c9:9a:88:14:8e: 6d:e6:21:df:c8:24:1b:b1:b3:4b:83:0e:34:a0:22:e8:bd:4b: 5c:79:79:6e:7a:01:f9:06:e5:bd:82:7a:09:28:65:4e:e5:06: 3e:89:82:f2:5c:d0:d9:55:87:b8:62:9b:db:95:76:cc:72:16: b1:92:1d:ca:c1:20:c0:66:59:e9:ac:9d:ea:f2:f9:d0:af:a3: ed:bf:7e:14:77:b6:25:ba:46:c2:e4:66:34:c4:3b:56:e7:67: cc:08:71:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG4gVLY1u0lbMWUeoCnBp0rFffYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q4NDU3MzBFNDVFNEQ1MzEwNzFEOTdDMUVEQzIzREEz NzhENjYyRjAeFw0yNjA5MjIwMjA0MDJaFw0yNjA5MjMwMzExMDJaMDMxMTAvBgNV BAMTKEU1NjYyMDlGMkM3MjRFOERDQzk1OEQyMTkzNzZDOEQxNzM5MDgzQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwqELuJUkIyOiUKI0Vaspq5YHn 7yPsygf/HjwJxjFd/Ha4q82X+cddG2FiH9UpM+4o5HuIzLgm2ggs9ebYVSYP5Uvq ixnex/eUS5Csgadwf7R+N7NaxNDX4N9666rjKaZJiBcK1lXRYfAHrb1aYmvPuhEj w7h3XePMBcRKZwdeJahFirlX5Lu0BkpRYvlhu8GbdjW0q0qQE+CY1ZmZnD7LMSBk HswyC/yduqe2YxPwyxPM8LQ0x9nHjOKgg76FoAbZX1ZE5elo5QcSCW3tX5EyY14W WSiPbwlNvDl1T02zfgUChU9jJcxQrM88Qlcyi79MdUoX5uX3SnGR6zA8NWM5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5WYgnyxyTo3MlY0hk3bI0XOQg60wHwYDVR0j BBgwFoAUzYRXMOReTVMQcdl8Htwj2jeNZi8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDA5NjJjNmUtNTk1YS00N2M0LWFhN2MtZWY4ZTc3Y2FlNjQyLzAvQ0Q4NDU3MzBF NDVFNEQ1MzEwNzFEOTdDMUVEQzIzREEzNzhENjYyRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRDg0NTczMEU0NUU0RDUzMTA3MUQ5N0MxRURDMjNEQTM3OEQ2 NjJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDA5NjJjNmUtNTk1YS00N2M0LWFh N2MtZWY4ZTc3Y2FlNjQyLzAvQ0Q4NDU3MzBFNDVFNEQ1MzEwNzFEOTdDMUVEQzIz REEzNzhENjYyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFwktHT8d2kGEvzy0SXha2bDZAUY+yxLclIz 4csPArrJPLmnC5GNDtZApUEbInmiR8g7v+Dfs8F+ZN5WSb2BwVos7kxtq46bW/cX 0f0PrfKxyLJwGeYnJ37VP7jqzLBkoJbB7topD8iqtGWlsgiFiMid/wmDOAWMR/pv bzacv9WXJwMIe67NnpvxS5QeyfvsQUV0XSYJ6tc5tltWNh7JmogUjm3mId/IJBux s0uDDjSgIui9S1x5eW56AfkG5b2CegkoZU7lBj6JgvJc0NlVh7him9uVdsxyFrGS HcrBIMBmWemsnery+dCvo+2/fhR3tiW6RsLkZjTEO1bnZ8wIcYw= -----END CERTIFICATE-----Generated at Tue Sep 22 06:31:27 2026 by rpki-client