$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/354106638019F94606F5ABA3A90FEB87A8A7FA76.mft File: 354106638019F94606F5ABA3A90FEB87A8A7FA76.mft (raw, json) Hash identifier: jWflQGarodx8hXH2tVwCCBPEpErOQpY+QPYjg1FwcpU= Subject key identifier: 0E:7C:4C:D8:BE:41:0E:56:84:33:26:DA:2A:8A:44:F1:AE:02:E8:CF Authority key identifier: 35:41:06:63:80:19:F9:46:06:F5:AB:A3:A9:0F:EB:87:A8:A7:FA:76 Certificate issuer: /CN=354106638019F94606F5ABA3A90FEB87A8A7FA76 Certificate serial: 0B69F246A07AC53C9C2E4765025DCDAD61FF3390 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/354106638019F94606F5ABA3A90FEB87A8A7FA76.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/354106638019F94606F5ABA3A90FEB87A8A7FA76.mft Manifest number: BF Signing time: Tue 22 Sep 2026 04:57:31 +0000 Manifest this update: Tue 22 Sep 2026 04:52:31 +0000 Manifest next update: Wed 23 Sep 2026 06:00:31 +0000 Files and hashes: 1: 3130332e3139312e3134382e302f32332d3234203d3e2034383030.roa (hash: ikR4B1sB9IhhiTpM9SD6KX5Vk82b9oPtczvgaIgOyo8=) 2: 354106638019F94606F5ABA3A90FEB87A8A7FA76.crl (hash: gVJgoJMMsY4jRH4Ch/PnlD4gC4OjUoAEAyveIh+fND0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/354106638019F94606F5ABA3A90FEB87A8A7FA76.crl rsync://rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/354106638019F94606F5ABA3A90FEB87A8A7FA76.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/354106638019F94606F5ABA3A90FEB87A8A7FA76.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 06:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:69:f2:46:a0:7a:c5:3c:9c:2e:47:65:02:5d:cd:ad:61:ff:33:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=354106638019F94606F5ABA3A90FEB87A8A7FA76 Validity Not Before: Sep 22 04:52:31 2026 GMT Not After : Sep 23 06:00:31 2026 GMT Subject: CN=0E7C4CD8BE410E56843326DA2A8A44F1AE02E8CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7f:7f:80:99:8e:05:1b:e1:c7:c2:e7:20:54: 83:21:24:e1:e9:cb:f5:a3:2d:8a:97:9d:a4:1d:7c: 43:f5:de:c2:b6:23:52:af:16:1e:f3:ec:1a:1a:54: fc:cf:db:44:06:26:54:18:02:7d:3c:f4:fc:f9:d8: dc:af:38:8f:3d:fa:11:92:64:fa:f3:b7:8e:23:cb: 98:82:c3:e8:5e:ab:9d:df:94:8f:49:ac:fe:eb:da: c6:55:d0:f1:a9:a2:ea:18:ac:03:23:e9:d6:0d:95: 1f:7e:37:9f:4d:63:ff:d5:85:2f:2f:f4:d7:23:c2: 9c:21:99:73:63:76:ac:ab:d7:43:10:d5:83:d3:40: 89:cd:f4:5c:e5:15:b2:5f:bc:cf:7d:9a:67:7e:36: 88:f5:8a:25:f8:fd:bb:19:9f:4f:99:47:1a:3a:7d: 6a:0a:f1:68:c1:cf:7c:8b:ee:6a:cd:1f:85:49:c5: 3b:95:a6:45:8f:ba:b7:30:bd:ca:3b:66:c1:ac:b2: 89:4d:fd:c0:49:12:a1:f5:20:8c:3c:b4:37:9c:ce: c7:da:bd:32:c8:46:20:08:9f:1e:81:88:b4:9f:7d: 46:33:5f:88:ca:b2:2e:66:01:5f:8a:8b:f8:fd:cb: 43:32:bd:a6:28:8e:71:63:a7:53:16:b9:4f:ee:9e: 91:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:7C:4C:D8:BE:41:0E:56:84:33:26:DA:2A:8A:44:F1:AE:02:E8:CF X509v3 Authority Key Identifier: keyid:35:41:06:63:80:19:F9:46:06:F5:AB:A3:A9:0F:EB:87:A8:A7:FA:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/354106638019F94606F5ABA3A90FEB87A8A7FA76.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/354106638019F94606F5ABA3A90FEB87A8A7FA76.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/354106638019F94606F5ABA3A90FEB87A8A7FA76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:26:b9:1a:ac:75:f4:09:55:8d:e2:71:b3:8a:d9:7c:21:dd: 23:49:22:1c:14:80:dc:d1:cc:68:ce:01:66:0c:d3:f9:22:8c: e3:a0:9c:86:17:84:a9:99:16:c3:8d:03:4c:c1:e7:ae:ed:46: 53:95:72:87:43:c2:61:d8:06:77:c4:19:02:00:f8:71:bd:55: a6:16:62:e8:b3:d8:4b:61:37:a3:d7:17:79:76:7b:dd:96:61: 52:0b:f7:11:cc:6a:64:8d:e4:8e:53:82:06:48:66:41:98:c7: 78:f5:71:90:39:af:53:e8:99:0a:37:92:14:20:ea:1a:b6:e6: ae:df:a2:c2:72:59:ab:26:27:93:ca:1e:76:bc:42:cd:b1:0d: aa:77:d7:52:2b:6c:e5:46:77:d0:6f:1b:55:c5:b5:38:76:06: 5f:89:07:13:5f:67:58:01:d8:66:68:d4:e9:a9:41:55:af:30: 2c:79:31:70:31:f9:f0:2b:56:7d:f3:9b:7d:94:26:c2:d2:25: 3e:6d:95:c9:0c:63:9d:01:27:6a:45:63:c8:be:13:2f:05:ef: b9:a8:88:9d:e4:0c:d3:3e:cd:d3:15:46:96:33:2a:54:cd:f5: 8a:87:77:75:2e:53:da:86:1a:ef:5c:a2:7a:2a:f5:0b:84:fb: 80:ba:14:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC2nyRqB6xTycLkdlAl3NrWH/M5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU0MTA2NjM4MDE5Rjk0NjA2RjVBQkEzQTkwRkVCODdB OEE3RkE3NjAeFw0yNjA5MjIwNDUyMzFaFw0yNjA5MjMwNjAwMzFaMDMxMTAvBgNV BAMTKDBFN0M0Q0Q4QkU0MTBFNTY4NDMzMjZEQTJBOEE0NEYxQUUwMkU4Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkf3+AmY4FG+HHwucgVIMhJOHp y/WjLYqXnaQdfEP13sK2I1KvFh7z7BoaVPzP20QGJlQYAn089Pz52NyvOI89+hGS ZPrzt44jy5iCw+heq53flI9JrP7r2sZV0PGpouoYrAMj6dYNlR9+N59NY//VhS8v 9NcjwpwhmXNjdqyr10MQ1YPTQInN9FzlFbJfvM99mmd+Noj1iiX4/bsZn0+ZRxo6 fWoK8WjBz3yL7mrNH4VJxTuVpkWPurcwvco7ZsGssolN/cBJEqH1IIw8tDeczsfa vTLIRiAInx6BiLSffUYzX4jKsi5mAV+Ki/j9y0MyvaYojnFjp1MWuU/unpF1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDnxM2L5BDlaEMybaKopE8a4C6M8wHwYDVR0j BBgwFoAUNUEGY4AZ+UYG9aujqQ/rh6in+nYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGQ5MDZmYzAtNDM2My00ZjQ2LTliMTQtNWMxYWI4MjVhMzM1LzAvMzU0MTA2NjM4 MDE5Rjk0NjA2RjVBQkEzQTkwRkVCODdBOEE3RkE3Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNTQxMDY2MzgwMTlGOTQ2MDZGNUFCQTNBOTBGRUI4N0E4QTdG QTc2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGQ5MDZmYzAtNDM2My00ZjQ2LTli MTQtNWMxYWI4MjVhMzM1LzAvMzU0MTA2NjM4MDE5Rjk0NjA2RjVBQkEzQTkwRkVC ODdBOEE3RkE3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACcmuRqsdfQJVY3icbOK2Xwh3SNJIhwUgNzR zGjOAWYM0/kijOOgnIYXhKmZFsONA0zB567tRlOVcodDwmHYBnfEGQIA+HG9VaYW Yuiz2EthN6PXF3l2e92WYVIL9xHMamSN5I5TggZIZkGYx3j1cZA5r1PomQo3khQg 6hq25q7fosJyWasmJ5PKHna8Qs2xDap311IrbOVGd9BvG1XFtTh2Bl+JBxNfZ1gB 2GZo1OmpQVWvMCx5MXAx+fArVn3zm32UJsLSJT5tlckMY50BJ2pFY8i+Ey8F77mo iJ3kDNM+zdMVRpYzKlTN9YqHd3UuU9qGGu9conoq9QuE+4C6FEk= -----END CERTIFICATE-----Generated at Tue Sep 22 18:13:45 2026 by rpki-client