$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.mft File: CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.mft (raw, json) Hash identifier: m0qCVMCXbBVV1oQ2hiJ2LhlZnxSdiLCME06MClPX3Rk= Subject key identifier: 4E:E3:4D:3E:4F:A4:3D:FB:48:A4:F7:26:BA:FC:F1:28:E0:C1:6B:B7 Authority key identifier: CA:C3:A4:F2:1B:C8:F4:DF:A7:4E:85:15:1F:8B:3E:91:67:DA:57:84 Certificate issuer: /CN=CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784 Certificate serial: 74BB21F46F54B5550E682DD521F2F8A0D7A006C0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.mft Manifest number: BE Signing time: Mon 21 Sep 2026 14:14:09 +0000 Manifest this update: Mon 21 Sep 2026 14:09:09 +0000 Manifest next update: Tue 22 Sep 2026 16:12:09 +0000 Files and hashes: 1: 3130332e32332e32302e302f32322d3234203d3e203538333937.roa (hash: oj9tQCvDwCV4p4Hr9N9eWTF7U8CpjCR1vEULrbqMjA8=) 2: CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.crl (hash: TfymfdBODiYtfWo1GLDu3xKG79ATrcogQUm+m5cnFWA=) 3: 34332e3234352e3138302e302f32322d3234203d3e203538333937.roa (hash: tc2Aw1xglXhbLRMp6kuTfOMbUtYtC4WfWamomx8fpaI=) 4: 323030313a6466303a663830303a3a2f34382d3438203d3e203538333937.roa (hash: FIEaDVHIseW71OoASUCYpCwzUw7yf/gVIj4IdH47VZ0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.crl rsync://rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:bb:21:f4:6f:54:b5:55:0e:68:2d:d5:21:f2:f8:a0:d7:a0:06:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784 Validity Not Before: Sep 21 14:09:09 2026 GMT Not After : Sep 22 16:12:09 2026 GMT Subject: CN=4EE34D3E4FA43DFB48A4F726BAFCF128E0C16BB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:62:e8:ca:a0:a6:f1:76:84:56:2f:de:72:2b: 4d:33:a3:82:27:7f:3a:0b:5d:06:39:5a:c6:80:52: 44:21:25:07:0a:92:35:88:fc:be:05:a1:b3:86:c1: 9e:d6:3a:f8:60:e9:a6:c0:ea:d0:41:55:b3:3d:0e: d2:8f:a7:10:ad:a0:3b:9a:7f:b4:e8:e4:df:ed:59: 6b:51:82:31:e3:fd:4c:c2:6c:82:55:95:97:49:ef: 9b:2a:95:35:55:4b:12:58:d4:25:b0:47:2c:3c:95: 17:29:73:56:7e:66:b1:7d:5d:e2:b0:c5:e6:49:a6: ca:fb:fe:bc:e4:8e:36:66:4f:cb:92:9e:5e:bc:c0: 91:5a:e0:7e:e4:77:b9:1b:31:bf:cd:42:58:c7:20: 55:80:ad:b9:92:de:63:a6:4f:79:79:1e:bd:7b:32: 49:fb:67:53:f1:f8:8c:cc:9d:b3:99:30:5d:5a:ba: 8a:70:2e:b1:6f:3b:fb:64:2c:d7:ff:2b:38:5c:59: cf:79:7e:54:52:7f:a1:f6:43:ea:48:d3:99:da:02: 36:6a:e7:96:8e:5a:7f:9f:cb:fa:07:85:46:9d:b4: f1:ae:22:fb:3c:79:d1:cd:f2:74:60:5a:4f:36:8d: e0:a3:fe:c2:30:51:c9:08:86:3a:73:58:a7:f0:92: d5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:E3:4D:3E:4F:A4:3D:FB:48:A4:F7:26:BA:FC:F1:28:E0:C1:6B:B7 X509v3 Authority Key Identifier: keyid:CA:C3:A4:F2:1B:C8:F4:DF:A7:4E:85:15:1F:8B:3E:91:67:DA:57:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:f0:5c:ff:b8:1b:7b:4a:da:1e:b8:be:c4:11:48:b2:f6:5d: aa:54:34:c7:c0:73:a5:7f:45:de:74:be:7e:d8:e9:b4:0b:6d: 61:9d:f6:2c:75:53:15:19:87:64:1e:08:2f:bf:d4:6a:df:1e: ad:a5:3d:ab:62:21:c2:e7:8b:e4:1e:3f:d7:ed:a3:d4:8f:d4: c6:79:db:55:b1:56:f3:c7:7e:31:c9:04:a4:9c:29:8f:5d:97: bc:40:85:2e:3d:33:cb:5a:f1:cd:3d:bb:30:64:23:00:e1:6c: 20:f0:49:eb:a3:cd:12:ed:09:08:f1:e0:c7:a0:d1:a9:04:d6: 20:d8:26:1f:6f:18:d5:ae:5b:3d:48:eb:b4:fe:df:79:21:a8: de:68:ba:fb:ee:f6:08:1d:2e:48:5b:93:fa:76:21:6f:cf:b2: 4e:d0:b9:99:3a:6e:d2:bb:ff:48:65:8a:57:ea:c7:8c:45:15: 12:74:da:a9:1d:ee:94:db:ba:c7:53:8c:07:fb:f2:99:e1:40: 77:b1:ad:ea:06:b6:7b:ec:73:46:01:e4:34:78:b0:02:83:50: b2:20:ed:e8:2c:b4:01:ab:da:aa:b6:27:60:c2:2a:ee:ba:08: 92:86:4e:d4:33:d9:f9:eb:d4:19:ec:44:f1:db:02:21:9a:21: 2f:62:d4:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdLsh9G9UtVUOaC3VIfL4oNegBsAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FDM0E0RjIxQkM4RjRERkE3NEU4NTE1MUY4QjNFOTE2 N0RBNTc4NDAeFw0yNjA5MjExNDA5MDlaFw0yNjA5MjIxNjEyMDlaMDMxMTAvBgNV BAMTKDRFRTM0RDNFNEZBNDNERkI0OEE0RjcyNkJBRkNGMTI4RTBDMTZCQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoYujKoKbxdoRWL95yK00zo4In fzoLXQY5WsaAUkQhJQcKkjWI/L4FobOGwZ7WOvhg6abA6tBBVbM9DtKPpxCtoDua f7To5N/tWWtRgjHj/UzCbIJVlZdJ75sqlTVVSxJY1CWwRyw8lRcpc1Z+ZrF9XeKw xeZJpsr7/rzkjjZmT8uSnl68wJFa4H7kd7kbMb/NQljHIFWArbmS3mOmT3l5Hr17 Mkn7Z1Px+IzMnbOZMF1auopwLrFvO/tkLNf/KzhcWc95flRSf6H2Q+pI05naAjZq 55aOWn+fy/oHhUadtPGuIvs8edHN8nRgWk82jeCj/sIwUckIhjpzWKfwktUnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTuNNPk+kPftIpPcmuvzxKODBa7cwHwYDVR0j BBgwFoAUysOk8hvI9N+nToUVH4s+kWfaV4QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDhiOTg3MjItMWNiNC00MGQ0LWFjOGItYzNiY2EyYmNhMjE3LzAvQ0FDM0E0RjIx QkM4RjRERkE3NEU4NTE1MUY4QjNFOTE2N0RBNTc4NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUMzQTRGMjFCQzhGNERGQTc0RTg1MTUxRjhCM0U5MTY3REE1 Nzg0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDhiOTg3MjItMWNiNC00MGQ0LWFj OGItYzNiY2EyYmNhMjE3LzAvQ0FDM0E0RjIxQkM4RjRERkE3NEU4NTE1MUY4QjNF OTE2N0RBNTc4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJbwXP+4G3tK2h64vsQRSLL2XapUNMfAc6V/ Rd50vn7Y6bQLbWGd9ix1UxUZh2QeCC+/1GrfHq2lPatiIcLni+QeP9fto9SP1MZ5 21WxVvPHfjHJBKScKY9dl7xAhS49M8ta8c09uzBkIwDhbCDwSeujzRLtCQjx4Meg 0akE1iDYJh9vGNWuWz1I67T+33khqN5ouvvu9ggdLkhbk/p2IW/Psk7QuZk6btK7 /0hlilfqx4xFFRJ02qkd7pTbusdTjAf78pnhQHexreoGtnvsc0YB5DR4sAKDULIg 7egstAGr2qq2J2DCKu66CJKGTtQz2fnr1BnsRPHbAiGaIS9i1Es= -----END CERTIFICATE-----Generated at Mon Sep 21 20:00:24 2026 by rpki-client