$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.mft File: 202AE8066C06A8D8247209E512833DDA85B77BB8.mft (raw, json) Hash identifier: JbOo87VgSK1q7wu2dKnPVCvRJK+Aue+ktjaOKCln5oU= Subject key identifier: 93:AA:D7:0D:17:C6:34:CC:21:C9:CD:F5:09:06:D5:5A:05:7C:73:B6 Authority key identifier: 20:2A:E8:06:6C:06:A8:D8:24:72:09:E5:12:83:3D:DA:85:B7:7B:B8 Certificate issuer: /CN=202AE8066C06A8D8247209E512833DDA85B77BB8 Certificate serial: 761E40AE089B02F55CBA2DCEFF10B079E94B7683 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/202AE8066C06A8D8247209E512833DDA85B77BB8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.mft Manifest number: C2 Signing time: Fri 25 Sep 2026 03:29:36 +0000 Manifest this update: Fri 25 Sep 2026 03:24:36 +0000 Manifest next update: Sat 26 Sep 2026 03:32:36 +0000 Files and hashes: 1: 3130332e31392e3233312e302f32342d3234203d3e20313332363638.roa (hash: Lfhcsuq0sTwRRhPKyKhPGs2CL51mhkSyNfRDvbtgTl8=) 2: 3130332e31392e3233302e302f32342d3234203d3e20313332363638.roa (hash: 7tCfrY+RtB6+WkTyes1RDW6n/IACRq2QGZK0+NvNBQg=) 3: 202AE8066C06A8D8247209E512833DDA85B77BB8.crl (hash: gWAkjLWRpPoD4YyQBXFBsx1kxFY9j6kf/JQCytU6RPc=) 4: 3130332e31392e3232382e302f32342d3234203d3e20313332363638.roa (hash: VqpFZFZX8l9YzsFUEW1KN7wbhAWqil6y6lntU3UefIg=) 5: 3130332e31392e3232392e302f32342d3234203d3e20313332363638.roa (hash: cqtnc1i5sl/i5SSZ+1p5ccjOtXsU77bjgEVzGiDIIzQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.crl rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/202AE8066C06A8D8247209E512833DDA85B77BB8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 03:32:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:1e:40:ae:08:9b:02:f5:5c:ba:2d:ce:ff:10:b0:79:e9:4b:76:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=202AE8066C06A8D8247209E512833DDA85B77BB8 Validity Not Before: Sep 25 03:24:36 2026 GMT Not After : Sep 26 03:32:36 2026 GMT Subject: CN=93AAD70D17C634CC21C9CDF50906D55A057C73B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:11:80:e1:60:9d:ec:d4:5c:b2:24:72:61:5f: e1:22:4f:09:79:a8:d2:65:b2:3f:80:0e:e8:6f:b6: 79:62:7f:6a:c9:a3:07:a4:9c:cf:53:5b:d5:e0:36: 31:d6:7c:60:1e:c7:ad:9a:8b:54:b4:36:f0:3e:e7: c3:f2:72:b6:d2:7b:3a:4a:f3:27:13:e8:da:fc:46: 9e:34:09:e7:0b:99:0b:46:63:1d:c0:7b:09:69:e9: d1:38:99:5b:9c:72:bc:8a:87:51:31:a2:b9:5b:16: 12:58:78:2e:39:a2:92:5d:a9:35:3a:1d:04:3d:ea: a1:6e:50:14:d4:2f:61:79:2f:e9:32:c5:a5:a6:9e: 58:bd:77:3d:f8:c0:e2:0b:4e:b3:db:3e:55:7f:1f: 14:aa:6d:83:5c:7b:ec:82:e4:1a:bc:88:dc:eb:38: 80:7a:62:fe:73:9d:85:7c:5b:23:e2:25:e5:7a:3f: f5:a0:ac:22:90:c0:f9:de:cb:b5:f0:24:e1:db:a3: 5c:91:bd:3d:60:01:78:5f:dd:bc:d2:47:06:2a:60: 0f:d2:2a:e1:6c:24:34:b6:f6:f2:cf:da:bb:58:27: c2:27:3a:ba:c9:cc:06:74:9d:cf:89:bb:00:4a:5b: e5:2b:06:49:92:81:18:76:e2:b4:2a:3c:23:d5:b9: 68:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:AA:D7:0D:17:C6:34:CC:21:C9:CD:F5:09:06:D5:5A:05:7C:73:B6 X509v3 Authority Key Identifier: keyid:20:2A:E8:06:6C:06:A8:D8:24:72:09:E5:12:83:3D:DA:85:B7:7B:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/202AE8066C06A8D8247209E512833DDA85B77BB8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:0b:22:ce:c5:05:ac:00:e3:13:67:d4:22:61:62:7a:11:17: f3:04:cf:6b:2c:fb:4e:c6:25:6e:8b:5a:d2:5e:a5:86:d2:c3: f2:eb:9f:4a:75:05:fa:d3:2d:1d:db:d9:51:f9:62:5b:07:ce: 27:63:84:7c:ea:c5:3c:73:0c:2c:24:2c:e8:fd:83:04:49:35: 69:de:83:9e:7c:3b:75:e3:3d:b1:95:6d:36:73:f2:06:dd:63: 70:f6:71:96:9f:4d:c8:3f:d6:cd:57:0f:dd:f3:f9:6d:a6:0c: e6:cb:61:10:f5:63:c2:de:79:0b:55:d3:9e:e0:d2:4f:0e:98: 2e:98:d3:90:ef:b7:47:7d:b3:64:f3:7d:e3:cf:68:9c:3a:20: bb:16:af:23:19:1a:65:7d:03:f5:4a:de:e0:d5:fa:ed:e1:d8: 5b:90:2f:e8:a6:8c:8f:02:64:00:1b:62:86:23:d5:67:56:00: ee:6a:5d:25:f3:73:f8:25:61:d1:0c:32:b1:ec:60:bf:0f:8f: bb:6f:1a:4e:8a:71:a2:21:d3:cd:ef:76:e6:f6:eb:19:34:c8: af:52:78:0d:16:35:c7:63:7e:2b:ca:e5:93:78:52:f3:ba:23: e0:34:79:5a:40:b1:ce:14:8d:99:73:0b:bc:47:35:a6:85:e2: 3f:49:6a:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdh5ArgibAvVcui3O/xCweelLdoMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAyQUU4MDY2QzA2QThEODI0NzIwOUU1MTI4MzNEREE4 NUI3N0JCODAeFw0yNjA5MjUwMzI0MzZaFw0yNjA5MjYwMzMyMzZaMDMxMTAvBgNV BAMTKDkzQUFENzBEMTdDNjM0Q0MyMUM5Q0RGNTA5MDZENTVBMDU3QzczQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPEYDhYJ3s1FyyJHJhX+EiTwl5 qNJlsj+ADuhvtnlif2rJoweknM9TW9XgNjHWfGAex62ai1S0NvA+58PycrbSezpK 8ycT6Nr8Rp40CecLmQtGYx3Aewlp6dE4mVuccryKh1ExorlbFhJYeC45opJdqTU6 HQQ96qFuUBTUL2F5L+kyxaWmnli9dz34wOILTrPbPlV/HxSqbYNce+yC5Bq8iNzr OIB6Yv5znYV8WyPiJeV6P/WgrCKQwPney7XwJOHbo1yRvT1gAXhf3bzSRwYqYA/S KuFsJDS29vLP2rtYJ8InOrrJzAZ0nc+JuwBKW+UrBkmSgRh24rQqPCPVuWjzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk6rXDRfGNMwhyc31CQbVWgV8c7YwHwYDVR0j BBgwFoAUICroBmwGqNgkcgnlEoM92oW3e7gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDJmMTQxN2EtNTcxOC00MDcxLTlmMzUtYzEyMjU1NWRhYzdhLzAvMjAyQUU4MDY2 QzA2QThEODI0NzIwOUU1MTI4MzNEREE4NUI3N0JCOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDJBRTgwNjZDMDZBOEQ4MjQ3MjA5RTUxMjgzM0REQTg1Qjc3 QkI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDJmMTQxN2EtNTcxOC00MDcxLTlm MzUtYzEyMjU1NWRhYzdhLzAvMjAyQUU4MDY2QzA2QThEODI0NzIwOUU1MTI4MzNE REE4NUI3N0JCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJkLIs7FBawA4xNn1CJhYnoRF/MEz2ss+07G JW6LWtJepYbSw/Lrn0p1BfrTLR3b2VH5YlsHzidjhHzqxTxzDCwkLOj9gwRJNWne g558O3XjPbGVbTZz8gbdY3D2cZafTcg/1s1XD93z+W2mDObLYRD1Y8LeeQtV057g 0k8OmC6Y05Dvt0d9s2TzfePPaJw6ILsWryMZGmV9A/VK3uDV+u3h2FuQL+imjI8C ZAAbYoYj1WdWAO5qXSXzc/glYdEMMrHsYL8Pj7tvGk6KcaIh083vdub26xk0yK9S eA0WNcdjfivK5ZN4UvO6I+A0eVpAsc4UjZlzC7xHNaaF4j9JasI= -----END CERTIFICATE-----Generated at Fri Sep 25 14:58:34 2026 by rpki-client