$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.mft File: C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.mft (raw, json) Hash identifier: LT4TESHe7ZWD/ZFhCao1v4yhKxeWq5tnau3Z9/G6IeU= Subject key identifier: DF:DE:DA:4E:99:7F:BF:D0:3D:81:E9:0B:D2:FA:1F:88:62:5D:8E:18 Authority key identifier: C0:FD:03:30:B0:66:5A:32:4B:ED:EF:57:93:F7:3F:D4:FA:6F:30:C1 Certificate issuer: /CN=C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1 Certificate serial: 752D3E76A43B732C728FF4D0EB70E6F1BD702167 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.mft Manifest number: BC Signing time: Sun 20 Sep 2026 19:41:11 +0000 Manifest this update: Sun 20 Sep 2026 19:36:11 +0000 Manifest next update: Mon 21 Sep 2026 22:23:11 +0000 Files and hashes: 1: C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.crl (hash: E1iyglQ+sgwFlVdZISQMV/aG1gyLpIfUKUJmp9Vfe/E=) 2: 3136302e32352e3233362e302f32332d3234203d3e20313533313035.roa (hash: NFuKh4QURKhti5ts/RHCyWk9MjNgIHs/zpDCkdJPOO8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.crl rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 14:21:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:2d:3e:76:a4:3b:73:2c:72:8f:f4:d0:eb:70:e6:f1:bd:70:21:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1 Validity Not Before: Sep 20 19:36:11 2026 GMT Not After : Sep 21 22:23:11 2026 GMT Subject: CN=DFDEDA4E997FBFD03D81E90BD2FA1F88625D8E18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b3:b6:56:53:21:3a:ae:07:d7:8a:56:6c:e4: 65:e7:6e:c8:e7:6c:60:2a:df:b4:34:1c:b0:62:e1: af:32:dc:cd:df:37:3e:a6:3e:17:6e:20:5b:e8:46: af:c8:d5:df:bd:88:d6:9c:cb:3d:eb:14:37:65:1c: 17:62:fa:8d:76:85:12:d3:7b:97:29:70:02:4e:93: 95:05:a1:a2:d0:54:03:3a:0f:21:e3:68:d8:85:4c: 98:8c:cd:ae:34:81:e7:9d:f0:bf:cc:42:78:40:eb: 53:6e:4b:59:27:22:8a:4d:d6:6e:f6:0e:2d:9b:3e: b2:9e:98:38:9e:e1:63:76:39:63:17:43:47:78:90: c5:ba:da:47:2f:42:55:8f:b2:37:e6:ea:db:58:d8: 65:73:27:31:c2:8d:50:a5:0d:76:c1:15:ff:da:3d: f8:ff:43:de:75:9e:cb:58:77:9f:d1:46:68:ae:4a: 9e:3d:59:d3:7f:79:ab:b7:81:df:bb:ff:ba:9a:b0: c5:1e:0b:8e:db:6a:6c:49:75:c1:fa:05:53:5a:5a: 99:d0:e0:b2:b3:ec:ab:bb:c2:c6:67:fa:b9:33:15: 20:cb:f7:44:82:c5:1d:f0:21:b2:c6:8e:90:2d:da: 1f:a8:c9:74:f7:46:d3:aa:49:0d:bf:bd:07:34:ca: 48:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:DE:DA:4E:99:7F:BF:D0:3D:81:E9:0B:D2:FA:1F:88:62:5D:8E:18 X509v3 Authority Key Identifier: keyid:C0:FD:03:30:B0:66:5A:32:4B:ED:EF:57:93:F7:3F:D4:FA:6F:30:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:b9:35:ca:d2:12:4c:73:e6:8d:f7:89:20:0f:f8:00:d2:e1: 05:90:47:a8:72:f1:e2:b7:a6:22:c1:5e:40:59:9c:2c:47:0e: dd:8d:cc:23:e6:4e:67:69:16:b1:e8:83:51:d6:09:91:5e:ad: 27:7b:9d:15:f9:5d:8b:12:2e:70:c3:45:34:af:01:63:b9:0d: 27:ea:9b:12:b6:d8:f8:6d:34:b1:b0:18:d9:4a:9f:6c:78:0b: 38:a1:8e:c9:40:03:09:ce:fc:91:71:ce:db:ec:29:ef:74:53: 54:d1:36:ae:5d:c7:3b:2b:c7:5f:0a:f3:03:21:3f:95:83:e3: 18:b0:a0:a1:8a:a2:3e:46:1b:25:7f:8c:6c:02:dd:2d:b5:12: da:bc:9c:60:8f:bd:56:f4:ea:58:91:e8:07:fe:89:ad:68:35: 8a:e4:32:cb:c6:d6:f0:77:25:cb:84:00:ed:d7:eb:08:9b:a4: 8e:9e:01:6d:90:67:1e:b8:8d:50:99:87:d9:3d:12:dd:37:41: 80:51:82:9b:7d:f7:02:8e:ed:77:fd:08:65:5c:22:20:f5:da: 27:76:a9:93:50:6e:d9:28:03:2d:1b:39:c3:17:7d:aa:51:00: 1f:a0:49:bb:14:c3:42:d6:6e:3d:f7:5f:12:4e:9e:d2:db:0c: 19:ab:9b:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdS0+dqQ7cyxyj/TQ63Dm8b1wIWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBGRDAzMzBCMDY2NUEzMjRCRURFRjU3OTNGNzNGRDRG QTZGMzBDMTAeFw0yNjA5MjAxOTM2MTFaFw0yNjA5MjEyMjIzMTFaMDMxMTAvBgNV BAMTKERGREVEQTRFOTk3RkJGRDAzRDgxRTkwQkQyRkExRjg4NjI1RDhFMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUs7ZWUyE6rgfXilZs5GXnbsjn bGAq37Q0HLBi4a8y3M3fNz6mPhduIFvoRq/I1d+9iNacyz3rFDdlHBdi+o12hRLT e5cpcAJOk5UFoaLQVAM6DyHjaNiFTJiMza40geed8L/MQnhA61NuS1knIopN1m72 Di2bPrKemDie4WN2OWMXQ0d4kMW62kcvQlWPsjfm6ttY2GVzJzHCjVClDXbBFf/a Pfj/Q951nstYd5/RRmiuSp49WdN/eau3gd+7/7qasMUeC47bamxJdcH6BVNaWpnQ 4LKz7Ku7wsZn+rkzFSDL90SCxR3wIbLGjpAt2h+oyXT3RtOqSQ2/vQc0ykglAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU397aTpl/v9A9gekL0vofiGJdjhgwHwYDVR0j BBgwFoAUwP0DMLBmWjJL7e9Xk/c/1PpvMMEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGVjMmExYWMtNWFlNC00N2FkLThkYjEtNjUyYzdmM2Y3ZThmLzAvQzBGRDAzMzBC MDY2NUEzMjRCRURFRjU3OTNGNzNGRDRGQTZGMzBDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DMEZEMDMzMEIwNjY1QTMyNEJFREVGNTc5M0Y3M0ZENEZBNkYz MEMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGVjMmExYWMtNWFlNC00N2FkLThk YjEtNjUyYzdmM2Y3ZThmLzAvQzBGRDAzMzBCMDY2NUEzMjRCRURFRjU3OTNGNzNG RDRGQTZGMzBDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIK5NcrSEkxz5o33iSAP+ADS4QWQR6hy8eK3 piLBXkBZnCxHDt2NzCPmTmdpFrHog1HWCZFerSd7nRX5XYsSLnDDRTSvAWO5DSfq mxK22PhtNLGwGNlKn2x4CzihjslAAwnO/JFxztvsKe90U1TRNq5dxzsrx18K8wMh P5WD4xiwoKGKoj5GGyV/jGwC3S21Etq8nGCPvVb06liR6Af+ia1oNYrkMsvG1vB3 JcuEAO3X6wibpI6eAW2QZx64jVCZh9k9Et03QYBRgpt99wKO7Xf9CGVcIiD12id2 qZNQbtkoAy0bOcMXfapRAB+gSbsUw0LWbj33XxJOntLbDBmrm3k= -----END CERTIFICATE-----Generated at Mon Sep 21 07:19:42 2026 by rpki-client