$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.mft File: CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.mft (raw, json) Hash identifier: bpw0H4LWK5UPZwGdBZVD0XSdjXDZSIk1IMgjcJTWkfU= Subject key identifier: E0:52:CC:64:CD:8A:06:F7:D2:39:B5:D5:12:40:1A:C2:06:A3:15:E7 Authority key identifier: CD:47:4E:79:16:37:1A:E6:AC:CF:87:42:2C:4E:A8:D4:E5:3D:1E:D1 Certificate issuer: /CN=CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1 Certificate serial: 35E2CB0CD0D3D5B063718273B5661B85C0DFC74B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.mft Manifest number: C0 Signing time: Mon 21 Sep 2026 21:12:51 +0000 Manifest this update: Mon 21 Sep 2026 21:07:51 +0000 Manifest next update: Wed 23 Sep 2026 00:51:51 +0000 Files and hashes: 1: 3130332e35342e38322e302f32332d3233203d3e20313530353132.roa (hash: bbQqob1JTbWw2rvNr6s3TBx3HaklMvpVDZzpBLfCECs=) 2: 3130332e35342e38322e302f32342d3234203d3e20313530353132.roa (hash: wOpjCYu2B/2dvfL2/p92TM51IsDnzUPICTzMvcgVUFY=) 3: CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.crl (hash: ABksGq8oM3/jqcT2y62vUlwvzH4Jieieb94OS+K4MOk=) 4: 3130332e35342e38332e302f32342d3234203d3e20313530353132.roa (hash: yc9l1FWLsdkyL80KmG/CENv1nMl40+rlvUGHbaIRcrU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.crl rsync://rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 00:51:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:e2:cb:0c:d0:d3:d5:b0:63:71:82:73:b5:66:1b:85:c0:df:c7:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1 Validity Not Before: Sep 21 21:07:51 2026 GMT Not After : Sep 23 00:51:51 2026 GMT Subject: CN=E052CC64CD8A06F7D239B5D512401AC206A315E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e3:42:a7:62:52:36:09:16:94:96:3a:59:fe: 4a:d0:de:9e:30:f6:d8:32:21:93:50:59:80:ba:b4: fe:9c:b3:15:00:7e:03:0e:69:ec:21:ff:5e:ac:01: c0:1e:09:f6:11:24:22:57:4b:6b:00:1a:81:f0:f0: be:3f:b3:8f:65:b4:41:1a:38:2a:b7:ad:ab:6f:c7: a4:f3:5b:d2:51:48:7c:31:6e:4f:a0:58:b6:5f:25: 3d:ac:2a:20:3a:af:87:d5:b4:e9:9a:c8:a5:d6:23: fe:43:57:9a:e3:7a:dd:f0:93:ae:1f:62:b9:68:a6: b9:f1:15:9e:df:91:25:7e:1f:ea:77:17:d0:86:e1: 3e:b3:9c:57:c5:9d:f7:e0:24:4e:24:72:c4:82:e9: 97:12:b2:d4:d1:69:ee:d6:f5:d7:07:03:7c:c1:c8: 6d:7f:2d:33:ee:cd:96:96:36:88:16:4b:0b:29:09: 3c:69:4c:75:8b:21:09:99:f4:4f:f3:f1:ca:88:c1: 6c:cc:bf:d0:f6:35:6d:90:54:05:d4:42:dd:16:75: a5:13:a0:49:7d:e9:c6:b0:4d:e5:a5:5b:f9:bd:04: 79:37:08:ff:e6:92:9a:40:7e:75:30:bc:c8:05:5d: 71:06:6e:f6:f5:06:75:cf:15:be:8a:89:53:1c:41: 66:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:52:CC:64:CD:8A:06:F7:D2:39:B5:D5:12:40:1A:C2:06:A3:15:E7 X509v3 Authority Key Identifier: keyid:CD:47:4E:79:16:37:1A:E6:AC:CF:87:42:2C:4E:A8:D4:E5:3D:1E:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:f1:76:8d:55:17:76:75:4d:9c:23:53:96:ae:7e:27:72:93: 20:55:41:d8:8e:88:2e:f2:08:eb:31:04:3b:a1:64:3a:f2:24: 4a:6b:97:fa:9f:7f:cf:a3:ca:2f:a6:40:05:ea:e6:d4:87:37: 9d:d0:cd:33:77:7e:7e:c3:6a:45:0b:73:c2:22:5c:75:4d:1a: f9:1f:98:22:f0:27:3f:db:29:ed:5d:c3:70:19:6c:01:38:5d: 48:ef:73:fa:be:83:cb:0f:fe:bd:fc:f9:cc:07:42:5f:4e:f0: 84:78:10:a0:7d:ea:a5:0e:40:b8:de:58:e6:33:d9:26:fe:68: 49:5c:bf:ff:36:3f:03:1d:59:46:87:53:d2:99:cb:e6:8e:cc: f6:4c:05:25:83:e2:5a:4a:79:1f:f0:e6:d9:8a:45:b7:c0:4c: 8f:23:f9:9b:d7:92:3b:31:4d:d2:18:ee:32:ec:f0:99:40:f9: 74:55:d5:c1:0d:38:48:7c:95:1d:f4:cb:78:d7:85:8b:ff:94: 4d:ef:9e:3a:87:c6:53:a6:fd:bc:74:12:5b:8c:88:40:07:d0: 88:75:83:1d:b8:a5:5d:db:46:be:e1:36:25:28:38:f0:ea:d0: 85:82:97:ad:55:76:cf:28:cd:84:89:29:56:c4:b5:b8:c0:bf: 97:64:ac:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNeLLDNDT1bBjcYJztWYbhcDfx0swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q0NzRFNzkxNjM3MUFFNkFDQ0Y4NzQyMkM0RUE4RDRF NTNEMUVEMTAeFw0yNjA5MjEyMTA3NTFaFw0yNjA5MjMwMDUxNTFaMDMxMTAvBgNV BAMTKEUwNTJDQzY0Q0Q4QTA2RjdEMjM5QjVENTEyNDAxQUMyMDZBMzE1RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC440KnYlI2CRaUljpZ/krQ3p4w 9tgyIZNQWYC6tP6csxUAfgMOaewh/16sAcAeCfYRJCJXS2sAGoHw8L4/s49ltEEa OCq3ratvx6TzW9JRSHwxbk+gWLZfJT2sKiA6r4fVtOmayKXWI/5DV5rjet3wk64f YrloprnxFZ7fkSV+H+p3F9CG4T6znFfFnffgJE4kcsSC6ZcSstTRae7W9dcHA3zB yG1/LTPuzZaWNogWSwspCTxpTHWLIQmZ9E/z8cqIwWzMv9D2NW2QVAXUQt0WdaUT oEl96cawTeWlW/m9BHk3CP/mkppAfnUwvMgFXXEGbvb1BnXPFb6KiVMcQWbxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4FLMZM2KBvfSObXVEkAawgajFecwHwYDVR0j BBgwFoAUzUdOeRY3Guasz4dCLE6o1OU9HtEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZThkZTk0NjMtNjhhNy00NjJkLTk0MDgtYTdjMzljZTZlOGZmLzAvQ0Q0NzRFNzkx NjM3MUFFNkFDQ0Y4NzQyMkM0RUE4RDRFNTNEMUVEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRDQ3NEU3OTE2MzcxQUU2QUNDRjg3NDIyQzRFQThENEU1M0Qx RUQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZThkZTk0NjMtNjhhNy00NjJkLTk0 MDgtYTdjMzljZTZlOGZmLzAvQ0Q0NzRFNzkxNjM3MUFFNkFDQ0Y4NzQyMkM0RUE4 RDRFNTNEMUVEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI3xdo1VF3Z1TZwjU5aufidykyBVQdiOiC7y COsxBDuhZDryJEprl/qff8+jyi+mQAXq5tSHN53QzTN3fn7DakULc8IiXHVNGvkf mCLwJz/bKe1dw3AZbAE4XUjvc/q+g8sP/r38+cwHQl9O8IR4EKB96qUOQLjeWOYz 2Sb+aElcv/82PwMdWUaHU9KZy+aOzPZMBSWD4lpKeR/w5tmKRbfATI8j+ZvXkjsx TdIY7jLs8JlA+XRV1cENOEh8lR30y3jXhYv/lE3vnjqHxlOm/bx0EluMiEAH0Ih1 gx24pV3bRr7hNiUoOPDq0IWCl61Vds8ozYSJKVbEtbjAv5dkrEk= -----END CERTIFICATE-----Generated at Tue Sep 22 14:45:48 2026 by rpki-client