$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/10305EB1D756B8E205948FA9D96C07D30D5559C6.mft File: 10305EB1D756B8E205948FA9D96C07D30D5559C6.mft (raw, json) Hash identifier: 1c0kZ4c2i6CQqMscOHEW5vKu0YIL5Q2rhnwM1cH+XWo= Subject key identifier: F7:7C:CA:60:CC:5E:A0:A6:5F:B7:D0:40:6A:03:E2:86:68:09:97:CE Authority key identifier: 10:30:5E:B1:D7:56:B8:E2:05:94:8F:A9:D9:6C:07:D3:0D:55:59:C6 Certificate issuer: /CN=10305EB1D756B8E205948FA9D96C07D30D5559C6 Certificate serial: 0516B8E8599E56DCA672F92CA297D8523228FF57 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10305EB1D756B8E205948FA9D96C07D30D5559C6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/10305EB1D756B8E205948FA9D96C07D30D5559C6.mft Manifest number: C9 Signing time: Tue 29 Sep 2026 23:28:48 +0000 Manifest this update: Tue 29 Sep 2026 23:23:48 +0000 Manifest next update: Thu 01 Oct 2026 03:08:48 +0000 Files and hashes: 1: 3130332e3234362e3136392e302f32342d3234203d3e203538333835.roa (hash: wzVp735bfnp8XDnpMDExEB2u8d/EmF9ou01fz223/d4=) 2: 10305EB1D756B8E205948FA9D96C07D30D5559C6.crl (hash: EzujQAK47oV0tz479bHkVsGLzL3bB1hTi562JkpQERA=) 3: 3130332e32382e3231382e302f32342d3234203d3e203538333835.roa (hash: w+xTBuxDVGZDvJln2gWD2TMLIgtp2a/JxAVQQSe/MJc=) 4: 3131302e39322e37342e302f32332d3234203d3e203538333835.roa (hash: G6PGQreB8GGiXWbjNuIkvOBqamEXNRruYXzWZ5ntbWM=) 5: 3130332e32332e3131362e302f32332d3234203d3e203538333835.roa (hash: xg8S5Jz4WdUD3Z66GOwGk02Rpx5TvYnlOCLFL6/urQw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/10305EB1D756B8E205948FA9D96C07D30D5559C6.crl rsync://rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/10305EB1D756B8E205948FA9D96C07D30D5559C6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10305EB1D756B8E205948FA9D96C07D30D5559C6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 02:54:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:16:b8:e8:59:9e:56:dc:a6:72:f9:2c:a2:97:d8:52:32:28:ff:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10305EB1D756B8E205948FA9D96C07D30D5559C6 Validity Not Before: Sep 29 23:23:48 2026 GMT Not After : Oct 1 03:08:48 2026 GMT Subject: CN=F77CCA60CC5EA0A65FB7D0406A03E286680997CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6d:ee:44:54:09:d7:bd:49:1f:52:5e:fc:f9: 43:98:6b:e2:90:1e:d2:1f:6e:6c:af:4d:29:f8:59: 86:d3:aa:b0:de:e0:54:9a:64:a7:22:9f:90:55:07: c4:41:77:65:7b:12:e3:93:e1:c0:60:5a:57:76:95: e3:15:5e:34:95:c8:39:2f:e1:53:76:31:83:b8:c7: 56:25:77:2a:31:2b:a8:c4:c8:4b:24:c9:5e:42:7b: cc:48:25:94:84:d9:80:48:bb:30:73:a0:7f:18:7c: 36:d3:9e:e5:b4:d9:cd:45:8d:ad:8b:fa:50:77:8a: e1:14:c8:dd:fc:27:42:5d:c0:ef:0b:88:83:ea:af: 91:09:85:1e:2e:76:b9:03:40:7d:42:54:2c:f2:4d: 5a:d3:fd:63:e5:3a:45:37:33:8b:88:7e:07:dc:bd: 5d:fb:90:bd:71:f6:d2:04:be:e5:59:f0:68:11:57: ed:cb:1e:3a:df:2e:62:02:5f:cd:82:ac:fd:90:a7: d0:dd:97:f0:fc:55:ff:d7:cd:b8:51:8f:dc:13:86: 3b:b0:b2:f6:08:c5:33:32:a9:94:df:2e:7a:d9:3f: b0:0a:94:80:bf:6e:01:c0:82:fc:9d:1a:11:66:09: d1:36:c4:ac:1c:f7:5f:d1:4b:6a:c9:c5:31:fd:d1: 67:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:7C:CA:60:CC:5E:A0:A6:5F:B7:D0:40:6A:03:E2:86:68:09:97:CE X509v3 Authority Key Identifier: keyid:10:30:5E:B1:D7:56:B8:E2:05:94:8F:A9:D9:6C:07:D3:0D:55:59:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/10305EB1D756B8E205948FA9D96C07D30D5559C6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10305EB1D756B8E205948FA9D96C07D30D5559C6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/10305EB1D756B8E205948FA9D96C07D30D5559C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:5f:48:b9:c4:3b:fc:11:a8:b9:c5:02:e5:9a:c7:c3:c8:a3: 93:66:0c:84:61:09:f5:25:e7:80:77:58:67:63:58:d2:91:0e: 62:d6:28:9e:df:38:9b:1a:08:37:f1:56:35:a8:66:80:78:44: 12:89:09:17:ec:8d:b3:4b:95:83:24:e8:9f:62:b9:82:97:45: bf:c6:cf:d9:88:10:16:98:73:90:9c:3f:66:92:30:12:37:a9: f0:88:be:7a:86:da:0e:e7:0d:3c:e8:7e:27:c7:5c:fc:74:61: 76:ee:49:ed:a7:72:9d:1b:7e:95:86:78:53:29:03:ea:9e:f5: 28:dc:53:8c:fa:ce:85:95:76:17:c5:d0:01:88:92:7e:f2:d1: 82:a1:c3:50:7f:f8:24:03:16:35:d8:c8:d6:cd:6d:f3:ed:07: bc:c4:c6:09:29:a5:81:81:ed:50:da:46:83:d8:bd:c3:5c:9a: a6:18:b0:ea:28:9c:96:87:12:1f:2b:32:97:8d:01:e9:09:92: 83:28:6f:e2:19:47:5e:85:e9:96:d4:51:43:41:e1:25:42:15: 4c:e3:2d:e2:32:6e:f6:2e:fd:0f:8c:f1:9c:06:d6:7f:55:83: 1e:ca:1c:a6:7a:1c:ea:42:93:3d:53:c1:8c:30:3f:7d:fa:72: eb:8d:a8:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBRa46FmeVtymcvksopfYUjIo/1cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTAzMDVFQjFENzU2QjhFMjA1OTQ4RkE5RDk2QzA3RDMw RDU1NTlDNjAeFw0yNjA5MjkyMzIzNDhaFw0yNjEwMDEwMzA4NDhaMDMxMTAvBgNV BAMTKEY3N0NDQTYwQ0M1RUEwQTY1RkI3RDA0MDZBMDNFMjg2NjgwOTk3Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPbe5EVAnXvUkfUl78+UOYa+KQ HtIfbmyvTSn4WYbTqrDe4FSaZKcin5BVB8RBd2V7EuOT4cBgWld2leMVXjSVyDkv 4VN2MYO4x1YldyoxK6jEyEskyV5Ce8xIJZSE2YBIuzBzoH8YfDbTnuW02c1Fja2L +lB3iuEUyN38J0JdwO8LiIPqr5EJhR4udrkDQH1CVCzyTVrT/WPlOkU3M4uIfgfc vV37kL1x9tIEvuVZ8GgRV+3LHjrfLmICX82CrP2Qp9Ddl/D8Vf/XzbhRj9wThjuw svYIxTMyqZTfLnrZP7AKlIC/bgHAgvydGhFmCdE2xKwc91/RS2rJxTH90WfPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU93zKYMxeoKZft9BAagPihmgJl84wHwYDVR0j BBgwFoAUEDBesddWuOIFlI+p2WwH0w1VWcYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDM5MjUzODgtMzVjNi00MWQ3LTlkYzQtZGI0ZDExOGQxMzVhLzAvMTAzMDVFQjFE NzU2QjhFMjA1OTQ4RkE5RDk2QzA3RDMwRDU1NTlDNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMDMwNUVCMUQ3NTZCOEUyMDU5NDhGQTlEOTZDMDdEMzBENTU1 OUM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDM5MjUzODgtMzVjNi00MWQ3LTlk YzQtZGI0ZDExOGQxMzVhLzAvMTAzMDVFQjFENzU2QjhFMjA1OTQ4RkE5RDk2QzA3 RDMwRDU1NTlDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGRfSLnEO/wRqLnFAuWax8PIo5NmDIRhCfUl 54B3WGdjWNKRDmLWKJ7fOJsaCDfxVjWoZoB4RBKJCRfsjbNLlYMk6J9iuYKXRb/G z9mIEBaYc5CcP2aSMBI3qfCIvnqG2g7nDTzofifHXPx0YXbuSe2ncp0bfpWGeFMp A+qe9SjcU4z6zoWVdhfF0AGIkn7y0YKhw1B/+CQDFjXYyNbNbfPtB7zExgkppYGB 7VDaRoPYvcNcmqYYsOoonJaHEh8rMpeNAekJkoMob+IZR16F6ZbUUUNB4SVCFUzj LeIybvYu/Q+M8ZwG1n9Vgx7KHKZ6HOpCkz1TwYwwP336cuuNqHI= -----END CERTIFICATE-----Generated at Wed Sep 30 05:48:44 2026 by rpki-client