$ rpki-client -vvvf rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/657097DED993749F454B2CB2980019AC9335E3AD.mft File: 657097DED993749F454B2CB2980019AC9335E3AD.mft (raw, json) Hash identifier: lZUQjpIrgmmgFE3Pui5SI5s1WyXDIS3E+7u0EF19WIs= Subject key identifier: 2E:A2:0C:53:6D:B8:12:50:6F:2B:1B:1F:99:D8:35:75:BD:D7:8B:B2 Authority key identifier: 65:70:97:DE:D9:93:74:9F:45:4B:2C:B2:98:00:19:AC:93:35:E3:AD Certificate issuer: /CN=657097DED993749F454B2CB2980019AC9335E3AD Certificate serial: 022027CF5AB5668174EFF70E53E0AF6EF72B8C56 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/657097DED993749F454B2CB2980019AC9335E3AD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/657097DED993749F454B2CB2980019AC9335E3AD.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 01:22:26 +0000 Manifest this update: Thu 24 Sep 2026 01:17:26 +0000 Manifest next update: Fri 25 Sep 2026 04:49:26 +0000 Files and hashes: 1: 3130332e37382e3233322e302f32342d3234203d3e203634333032.roa (hash: je0fW/T+7CeDw/BD58L4wbwCS+OqE/uQcMZPbWUcwBw=) 2: 657097DED993749F454B2CB2980019AC9335E3AD.crl (hash: myGIrz+EvEaMdH8CV4SPG2z8PmFPIJ4zgVgc3QsDyhQ=) 3: 323030313a6466363a356130303a3a2f34382d3438203d3e203634333032.roa (hash: hHvYrx/Q2c2wL+t/Mvndx8RZ1B96+Yi4bVgwQw+Eax8=) 4: 3130332e37382e3233352e302f32342d3234203d3e203634333032.roa (hash: 0jC3KwRI9r1ivA5GrXfbobGO1Ve7iEJj8iR97yMbeBk=) 5: 3130332e37382e3233332e302f32342d3234203d3e203634333032.roa (hash: QHrcU8/Y1C7fxNPrmLufpFIhIro1O+9k0qozDOyT2no=) 6: 3130332e37382e3233342e302f32342d3234203d3e203634333032.roa (hash: eJ1BYbsJGJ2bGSK9jVV+Gd+vXCEbHNqHyQWyZRyuJo0=) 7: 3130332e37382e3233322e302f32322d3232203d3e203634333032.roa (hash: OIuTP91/14M0E047uX/8jj8cJw1PhQi/jIKe8uO7ED8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/657097DED993749F454B2CB2980019AC9335E3AD.crl rsync://rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/657097DED993749F454B2CB2980019AC9335E3AD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/657097DED993749F454B2CB2980019AC9335E3AD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 04:49:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:20:27:cf:5a:b5:66:81:74:ef:f7:0e:53:e0:af:6e:f7:2b:8c:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=657097DED993749F454B2CB2980019AC9335E3AD Validity Not Before: Sep 24 01:17:26 2026 GMT Not After : Sep 25 04:49:26 2026 GMT Subject: CN=2EA20C536DB812506F2B1B1F99D83575BDD78BB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c9:49:55:87:6e:c8:66:05:48:9f:1c:2b:ac: 22:d8:92:c0:4d:c1:a4:b1:b6:f2:82:58:5b:6f:b9: 9e:33:78:ac:b4:83:71:79:52:cf:1c:d9:6e:ba:28: 08:03:3a:22:b0:2d:d5:8c:8e:29:51:a9:6c:54:53: 4c:45:03:21:41:38:1b:2f:2b:8f:2d:ff:dc:9a:04: a7:3c:d4:22:99:33:23:04:7c:3a:0b:d7:7b:e8:dc: 46:78:e4:93:9b:f7:65:75:5c:7a:f2:69:3e:f8:d2: 34:49:51:92:c7:39:9f:c1:78:af:1b:0a:f5:35:14: 89:07:1d:c7:45:45:69:24:f4:8d:72:5d:bf:4c:e3: dc:a7:42:26:8a:53:9b:0d:00:c2:0f:a3:81:2b:a0: bc:56:c2:67:91:41:56:62:0d:99:46:af:c4:9e:bf: 28:08:06:1f:54:d7:8e:c0:34:21:6c:90:d5:60:ce: a5:20:d2:1e:02:ef:6c:38:84:9c:86:f5:46:b4:a4: 75:d2:e6:ce:de:cc:08:9c:8d:b9:e9:d4:ed:65:12: 74:dd:bb:34:c1:fb:53:54:d8:a3:f2:de:f6:7d:15: ca:33:0c:c8:b9:79:38:d0:3c:64:d5:a9:22:a4:e8: 9e:bc:c3:db:43:2a:58:f3:d6:1d:f9:c8:cc:35:b4: e6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:A2:0C:53:6D:B8:12:50:6F:2B:1B:1F:99:D8:35:75:BD:D7:8B:B2 X509v3 Authority Key Identifier: keyid:65:70:97:DE:D9:93:74:9F:45:4B:2C:B2:98:00:19:AC:93:35:E3:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/657097DED993749F454B2CB2980019AC9335E3AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/657097DED993749F454B2CB2980019AC9335E3AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/657097DED993749F454B2CB2980019AC9335E3AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:8e:97:72:5b:f2:f1:8c:d2:c2:f6:41:ad:ff:8c:47:be:4a: 08:23:48:1b:d5:fe:d9:24:9d:64:c8:24:d9:e9:38:fd:18:c0: 62:c7:18:ab:b9:78:f0:1c:1b:67:e1:e3:73:a9:29:9a:a5:2f: df:c0:d8:eb:af:a7:39:bf:eb:de:f9:b7:e6:78:ba:fc:b4:e8: 7c:a8:f7:8c:fc:6c:6f:3c:8a:36:db:cc:85:61:cd:63:65:fc: f2:ad:69:49:a6:12:21:64:99:4d:c8:29:14:03:f2:f7:c6:c9: 21:4e:38:d6:ed:2f:ff:5f:27:04:b5:48:7f:bd:01:2e:1b:e3: 31:09:4e:ad:24:f8:ce:43:7e:76:87:33:56:24:78:69:e4:ad: fc:3e:41:8c:31:92:25:06:79:33:5f:d6:28:44:00:75:12:49: 3f:a9:53:83:61:9f:58:fd:2e:1a:3b:81:37:40:80:96:c8:93: 04:c2:7d:da:ab:e1:ab:1d:e2:8a:ee:68:4e:a8:2c:86:d9:16: 76:de:f3:73:a9:61:5d:53:2e:58:6e:10:21:2d:37:b3:16:24: 5b:6b:b8:1b:80:9f:42:fc:9b:c0:6c:2d:70:04:30:e7:c1:36: ec:bb:00:82:a3:2b:32:aa:6a:19:7d:de:e7:21:d5:e9:9b:eb: bd:97:b2:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAiAnz1q1ZoF07/cOU+CvbvcrjFYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU3MDk3REVEOTkzNzQ5RjQ1NEIyQ0IyOTgwMDE5QUM5 MzM1RTNBRDAeFw0yNjA5MjQwMTE3MjZaFw0yNjA5MjUwNDQ5MjZaMDMxMTAvBgNV BAMTKDJFQTIwQzUzNkRCODEyNTA2RjJCMUIxRjk5RDgzNTc1QkRENzhCQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+yUlVh27IZgVInxwrrCLYksBN waSxtvKCWFtvuZ4zeKy0g3F5Us8c2W66KAgDOiKwLdWMjilRqWxUU0xFAyFBOBsv K48t/9yaBKc81CKZMyMEfDoL13vo3EZ45JOb92V1XHryaT740jRJUZLHOZ/BeK8b CvU1FIkHHcdFRWkk9I1yXb9M49ynQiaKU5sNAMIPo4EroLxWwmeRQVZiDZlGr8Se vygIBh9U147ANCFskNVgzqUg0h4C72w4hJyG9Ua0pHXS5s7ezAicjbnp1O1lEnTd uzTB+1NU2KPy3vZ9FcozDMi5eTjQPGTVqSKk6J68w9tDKljz1h35yMw1tObnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULqIMU224ElBvKxsfmdg1db3Xi7IwHwYDVR0j BBgwFoAUZXCX3tmTdJ9FSyyymAAZrJM1460wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWRkZThmYjgtM2E3Ny00ODdlLTlkZmMtZjQ3OWQ2YjMzODA5LzAvNjU3MDk3REVE OTkzNzQ5RjQ1NEIyQ0IyOTgwMDE5QUM5MzM1RTNBRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NTcwOTdERUQ5OTM3NDlGNDU0QjJDQjI5ODAwMTlBQzkzMzVF M0FELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWRkZThmYjgtM2E3Ny00ODdlLTlk ZmMtZjQ3OWQ2YjMzODA5LzAvNjU3MDk3REVEOTkzNzQ5RjQ1NEIyQ0IyOTgwMDE5 QUM5MzM1RTNBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHSOl3Jb8vGM0sL2Qa3/jEe+SggjSBvV/tkk nWTIJNnpOP0YwGLHGKu5ePAcG2fh43OpKZqlL9/A2Ouvpzm/6975t+Z4uvy06Hyo 94z8bG88ijbbzIVhzWNl/PKtaUmmEiFkmU3IKRQD8vfGySFOONbtL/9fJwS1SH+9 AS4b4zEJTq0k+M5DfnaHM1YkeGnkrfw+QYwxkiUGeTNf1ihEAHUSST+pU4Nhn1j9 Lho7gTdAgJbIkwTCfdqr4asd4oruaE6oLIbZFnbe83OpYV1TLlhuECEtN7MWJFtr uBuAn0L8m8BsLXAEMOfBNuy7AIKjKzKqahl93uch1emb672Xstk= -----END CERTIFICATE-----Generated at Thu Sep 24 18:03:19 2026 by rpki-client