$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.mft File: C10437213774C7C2BB5BC9BA7649B72D7646F81C.mft (raw, json) Hash identifier: RsneQc3Q9e7rsPvBa8NT+pR4ZfI3A4fa+5jolWOjFQU= Subject key identifier: 8C:0A:11:48:DF:69:85:E7:84:CD:DA:34:96:EF:6B:C8:A9:69:ED:72 Authority key identifier: C1:04:37:21:37:74:C7:C2:BB:5B:C9:BA:76:49:B7:2D:76:46:F8:1C Certificate issuer: /CN=C10437213774C7C2BB5BC9BA7649B72D7646F81C Certificate serial: 292059D93A5D4489D045BCB111E376D6AF8A81C6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.mft Manifest number: BE Signing time: Tue 22 Sep 2026 00:01:35 +0000 Manifest this update: Mon 21 Sep 2026 23:56:35 +0000 Manifest next update: Wed 23 Sep 2026 03:42:35 +0000 Files and hashes: 1: 3136302e32322e3130302e302f32342d3234203d3e20313532383038.roa (hash: 3Tzs+hQ+b22vv80zUD8FcOM/x7RDc2pjQFIIYIEE2b4=) 2: C10437213774C7C2BB5BC9BA7649B72D7646F81C.crl (hash: gHaT7M0a889a+dM5vAAiUgTROd+muvWfbEkXUmhVHrE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.crl rsync://rpki-rsync.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 03:42:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:20:59:d9:3a:5d:44:89:d0:45:bc:b1:11:e3:76:d6:af:8a:81:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C10437213774C7C2BB5BC9BA7649B72D7646F81C Validity Not Before: Sep 21 23:56:35 2026 GMT Not After : Sep 23 03:42:35 2026 GMT Subject: CN=8C0A1148DF6985E784CDDA3496EF6BC8A969ED72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b3:4e:2b:a9:89:20:13:3f:e9:38:e5:6a:29: 02:1c:09:86:ba:44:62:22:23:e9:6c:10:f8:c2:8a: 02:0b:10:97:a3:e3:9e:b2:fd:e6:60:14:02:e7:f7: e3:a1:e3:ba:14:c4:9f:a2:56:bc:b3:06:ab:65:84: dd:7b:c9:ac:23:1c:3d:c5:aa:b2:f4:1a:48:49:c7: 04:85:a3:af:e2:ad:d5:10:25:e4:1f:a7:70:e3:61: 0c:73:be:16:81:9c:82:80:d9:aa:2b:98:d4:bf:4e: 9c:d0:73:7b:73:1c:d5:1f:88:d6:38:97:ca:79:e0: 79:73:14:e6:f5:52:58:79:7f:1f:45:dc:6b:50:85: 1d:18:db:ed:81:14:b4:64:8e:77:d9:87:71:b9:a6: a4:6c:16:17:74:55:ab:16:a0:ad:ba:d9:27:d4:63: 8e:7f:69:4d:30:22:90:a0:ad:14:43:3c:f3:b5:c6: a4:ff:4c:e0:dd:6d:0b:17:c2:19:cc:f9:09:45:e2: 26:74:28:48:cb:29:b5:4e:4f:ae:ce:38:c3:11:60: 55:22:b9:dd:d4:09:20:46:5f:96:b3:80:34:dd:49: 0b:b1:8e:12:b0:af:3d:a2:6d:26:94:18:98:a5:98: e5:eb:a8:3e:84:d0:e8:7a:25:4d:09:57:90:a0:21: c4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:0A:11:48:DF:69:85:E7:84:CD:DA:34:96:EF:6B:C8:A9:69:ED:72 X509v3 Authority Key Identifier: keyid:C1:04:37:21:37:74:C7:C2:BB:5B:C9:BA:76:49:B7:2D:76:46:F8:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:f9:a2:23:b3:26:0c:70:32:aa:df:cc:30:11:02:f5:c8:ec: 61:4f:e7:6a:be:fb:01:0a:a9:d2:bc:a3:31:f9:eb:56:90:ea: 27:4c:9a:d7:a0:45:2d:13:3f:99:19:c5:ca:33:c7:de:09:49: f9:f3:ac:65:40:3b:c2:09:c8:68:67:75:7d:fb:74:ff:ec:e9: 1c:3a:0f:82:45:85:e6:59:db:86:e6:ba:fa:09:2d:5f:60:16: 0d:84:9e:8c:03:ee:85:6c:9f:7b:d6:d8:c1:4e:30:8c:cc:4f: 4d:02:af:b5:ab:32:a4:4e:c5:cc:23:e5:a0:ca:52:e6:d3:77: 79:d5:48:24:0e:55:2f:62:0e:1d:f7:b0:de:a7:a0:9c:f7:aa: bd:f8:fd:92:d9:e1:15:02:8d:db:5f:ca:3b:73:67:1f:43:43: 45:b7:e1:77:a1:10:da:9e:60:43:21:e8:ea:92:ec:a5:87:64: 4a:f1:7b:00:a1:d3:e2:76:bd:db:ff:6c:e0:b7:b1:77:1f:46: a5:7e:4e:a5:93:a8:05:11:b0:50:fe:34:b9:f3:22:97:a3:0d: 3c:29:70:17:52:3d:42:16:e7:f4:42:02:95:3a:43:ec:bf:51: fc:ed:a3:92:90:45:af:ce:bd:78:0c:db:ce:b5:2b:94:d1:35: 22:8b:50:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKSBZ2TpdRInQRbyxEeN21q+KgcYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzEwNDM3MjEzNzc0QzdDMkJCNUJDOUJBNzY0OUI3MkQ3 NjQ2RjgxQzAeFw0yNjA5MjEyMzU2MzVaFw0yNjA5MjMwMzQyMzVaMDMxMTAvBgNV BAMTKDhDMEExMTQ4REY2OTg1RTc4NENEREEzNDk2RUY2QkM4QTk2OUVENzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRs04rqYkgEz/pOOVqKQIcCYa6 RGIiI+lsEPjCigILEJej456y/eZgFALn9+Oh47oUxJ+iVryzBqtlhN17yawjHD3F qrL0GkhJxwSFo6/irdUQJeQfp3DjYQxzvhaBnIKA2aormNS/TpzQc3tzHNUfiNY4 l8p54HlzFOb1Ulh5fx9F3GtQhR0Y2+2BFLRkjnfZh3G5pqRsFhd0VasWoK262SfU Y45/aU0wIpCgrRRDPPO1xqT/TODdbQsXwhnM+QlF4iZ0KEjLKbVOT67OOMMRYFUi ud3UCSBGX5azgDTdSQuxjhKwrz2ibSaUGJilmOXrqD6E0Oh6JU0JV5CgIcQ/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjAoRSN9pheeEzdo0lu9ryKlp7XIwHwYDVR0j BBgwFoAUwQQ3ITd0x8K7W8m6dkm3LXZG+BwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDBhOGNlNmMtODI5MC00YjlkLTlhZWQtMDc1NGQzZmQ4ZDMyLzAvQzEwNDM3MjEz Nzc0QzdDMkJCNUJDOUJBNzY0OUI3MkQ3NjQ2RjgxQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DMTA0MzcyMTM3NzRDN0MyQkI1QkM5QkE3NjQ5QjcyRDc2NDZG ODFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDBhOGNlNmMtODI5MC00YjlkLTlh ZWQtMDc1NGQzZmQ4ZDMyLzAvQzEwNDM3MjEzNzc0QzdDMkJCNUJDOUJBNzY0OUI3 MkQ3NjQ2RjgxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH/5oiOzJgxwMqrfzDARAvXI7GFP52q++wEK qdK8ozH561aQ6idMmtegRS0TP5kZxcozx94JSfnzrGVAO8IJyGhndX37dP/s6Rw6 D4JFheZZ24bmuvoJLV9gFg2EnowD7oVsn3vW2MFOMIzMT00Cr7WrMqROxcwj5aDK UubTd3nVSCQOVS9iDh33sN6noJz3qr34/ZLZ4RUCjdtfyjtzZx9DQ0W34XehENqe YEMh6OqS7KWHZErxewCh0+J2vdv/bOC3sXcfRqV+TqWTqAURsFD+NLnzIpejDTwp cBdSPUIW5/RCApU6Q+y/Ufzto5KQRa/OvXgM2861K5TRNSKLUKQ= -----END CERTIFICATE-----Generated at Tue Sep 22 11:24:23 2026 by rpki-client