$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.mft File: 986AA3A06E40D171D993DC74DEF4BE498C29EDC5.mft (raw, json) Hash identifier: SvtbXZ32GOa5yEeEG6EuP8cXfP/w6MT4ZJP/3BoYSAA= Subject key identifier: C4:5E:19:35:45:7C:98:F1:6E:8B:04:3B:FD:FE:D2:AF:98:99:41:D4 Authority key identifier: 98:6A:A3:A0:6E:40:D1:71:D9:93:DC:74:DE:F4:BE:49:8C:29:ED:C5 Certificate issuer: /CN=986AA3A06E40D171D993DC74DEF4BE498C29EDC5 Certificate serial: 5E1D374F2C4444F237E09A707F2BF5DEB3BCA710 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.mft Manifest number: BF Signing time: Mon 21 Sep 2026 11:25:37 +0000 Manifest this update: Mon 21 Sep 2026 11:20:37 +0000 Manifest next update: Tue 22 Sep 2026 12:42:37 +0000 Files and hashes: 1: 986AA3A06E40D171D993DC74DEF4BE498C29EDC5.crl (hash: Z7cYBSQg9vArhopfMH1Jqj4UfNgX8xLYF5chOBs5HTE=) 2: 3130332e3133302e38302e302f32332d3234203d3e20313339393737.roa (hash: CodcG2RlcElofIyHkhWkjp7iwOM0brF/BMzNO8nhSZI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.crl rsync://rpki-rsync.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 12:42:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:1d:37:4f:2c:44:44:f2:37:e0:9a:70:7f:2b:f5:de:b3:bc:a7:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=986AA3A06E40D171D993DC74DEF4BE498C29EDC5 Validity Not Before: Sep 21 11:20:37 2026 GMT Not After : Sep 22 12:42:37 2026 GMT Subject: CN=C45E1935457C98F16E8B043BFDFED2AF989941D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b4:dd:95:b7:5d:b1:e5:fa:35:3a:1b:3d:f6: 42:31:70:63:37:fb:c2:5e:34:96:98:67:4d:d8:77: 22:01:73:b4:b6:9a:56:46:43:7e:69:e0:58:dd:a5: bf:3b:71:49:97:a5:08:82:26:9c:43:63:fd:15:47: 70:f9:65:35:87:7d:70:b2:d9:94:ca:04:c4:cf:14: e4:3e:8c:5c:87:d3:8a:59:18:e7:0f:67:59:08:31: 47:29:ef:35:97:86:51:1f:70:ba:92:95:bb:65:cb: 40:af:33:e8:9a:1e:c7:b2:38:f3:b6:58:54:74:ac: 50:29:f6:54:c0:21:7b:8b:a3:b6:c8:24:bd:3a:ef: 54:31:b9:1e:64:68:a0:66:5c:c1:29:dc:79:c7:92: e5:77:b9:d3:bf:57:a3:42:b7:66:95:90:f2:91:86: 5b:92:81:12:ae:17:73:f0:87:6f:60:f8:45:fb:8f: 47:a1:0f:d2:96:3a:1e:af:04:87:a6:60:ce:10:09: b7:29:30:e2:8d:de:87:a6:ed:49:93:6b:d1:ca:3d: c7:72:58:d3:40:a4:47:2a:a2:80:5d:6e:ef:b8:ab: 74:40:92:c4:f0:05:8c:30:f2:7e:46:0f:c3:2a:4b: e5:70:8a:27:9e:6e:31:4b:c9:cb:6b:cb:27:a4:ec: cc:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:5E:19:35:45:7C:98:F1:6E:8B:04:3B:FD:FE:D2:AF:98:99:41:D4 X509v3 Authority Key Identifier: keyid:98:6A:A3:A0:6E:40:D1:71:D9:93:DC:74:DE:F4:BE:49:8C:29:ED:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:fe:51:14:54:fa:1b:01:6d:03:37:ae:31:3a:b3:99:6f:32: 0a:02:da:47:5a:06:e2:d4:88:8f:ef:8c:21:2d:3e:b8:c9:0c: a1:3e:48:21:05:34:6c:b6:15:c0:f7:05:1a:3f:c1:a7:61:e3: 9c:d9:ff:dc:4e:d8:94:d7:e6:fb:5f:cf:d9:f4:c7:5b:ff:86: d9:89:6c:c8:e1:bf:06:7e:d8:50:15:4d:45:96:69:6b:dd:da: 57:85:d4:91:a9:20:3d:4a:12:c8:f2:50:77:27:16:1c:cf:83: e5:4e:62:14:a8:0b:76:8f:a0:29:63:a6:6c:3c:38:45:14:ff: ea:5f:53:66:a6:19:c9:29:f5:a5:1f:cd:17:f4:ec:8e:3d:8b: 77:28:90:4a:3d:1c:c7:42:74:6c:e5:d3:39:54:b4:9d:ef:2a: 19:42:41:bc:01:b3:4f:2f:19:86:6b:85:ed:aa:11:a5:c5:6e: 39:97:52:a5:96:b7:bf:53:42:23:ea:88:83:d6:14:7e:e2:a4: 75:79:86:ec:2b:8f:d6:57:66:02:0e:e6:66:9a:4d:5a:e3:dd: ad:25:83:32:b2:1f:f9:d6:ad:5c:e3:4f:54:b9:82:13:14:ed: 08:28:96:13:55:73:dd:38:29:4d:12:a4:a5:58:cf:ef:5f:25: a1:37:d1:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXh03TyxERPI34Jpwfyv13rO8pxAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg2QUEzQTA2RTQwRDE3MUQ5OTNEQzc0REVGNEJFNDk4 QzI5RURDNTAeFw0yNjA5MjExMTIwMzdaFw0yNjA5MjIxMjQyMzdaMDMxMTAvBgNV BAMTKEM0NUUxOTM1NDU3Qzk4RjE2RThCMDQzQkZERkVEMkFGOTg5OTQxRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdtN2Vt12x5fo1Ohs99kIxcGM3 +8JeNJaYZ03YdyIBc7S2mlZGQ35p4Fjdpb87cUmXpQiCJpxDY/0VR3D5ZTWHfXCy 2ZTKBMTPFOQ+jFyH04pZGOcPZ1kIMUcp7zWXhlEfcLqSlbtly0CvM+iaHseyOPO2 WFR0rFAp9lTAIXuLo7bIJL0671QxuR5kaKBmXMEp3HnHkuV3udO/V6NCt2aVkPKR hluSgRKuF3Pwh29g+EX7j0ehD9KWOh6vBIemYM4QCbcpMOKN3oem7UmTa9HKPcdy WNNApEcqooBdbu+4q3RAksTwBYww8n5GD8MqS+VwiieebjFLyctryyek7MzLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxF4ZNUV8mPFuiwQ7/f7Sr5iZQdQwHwYDVR0j BBgwFoAUmGqjoG5A0XHZk9x03vS+SYwp7cUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTRhZTU3YjMtNDZhMi00MjNkLWIyNDQtMDNmZmVlMTA1Yjc3LzAvOTg2QUEzQTA2 RTQwRDE3MUQ5OTNEQzc0REVGNEJFNDk4QzI5RURDNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85ODZBQTNBMDZFNDBEMTcxRDk5M0RDNzRERUY0QkU0OThDMjlF REM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTRhZTU3YjMtNDZhMi00MjNkLWIy NDQtMDNmZmVlMTA1Yjc3LzAvOTg2QUEzQTA2RTQwRDE3MUQ5OTNEQzc0REVGNEJF NDk4QzI5RURDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEH+URRU+hsBbQM3rjE6s5lvMgoC2kdaBuLU iI/vjCEtPrjJDKE+SCEFNGy2FcD3BRo/wadh45zZ/9xO2JTX5vtfz9n0x1v/htmJ bMjhvwZ+2FAVTUWWaWvd2leF1JGpID1KEsjyUHcnFhzPg+VOYhSoC3aPoCljpmw8 OEUU/+pfU2amGckp9aUfzRf07I49i3cokEo9HMdCdGzl0zlUtJ3vKhlCQbwBs08v GYZrhe2qEaXFbjmXUqWWt79TQiPqiIPWFH7ipHV5huwrj9ZXZgIO5maaTVrj3a0l gzKyH/nWrVzjT1S5ghMU7QgolhNVc904KU0SpKVYz+9fJaE30UM= -----END CERTIFICATE-----Generated at Mon Sep 21 23:44:38 2026 by rpki-client