$ rpki-client -vvvf rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/5338904940BF82A8EFF37162A1BAE6B91FCB673C.mft File: 5338904940BF82A8EFF37162A1BAE6B91FCB673C.mft (raw, json) Hash identifier: 9hUafsWGG5XW/tGftPucyPkByPFM9S/lu4+Q0wtR7hk= Subject key identifier: C6:47:30:D8:9D:68:88:C5:F6:A6:7B:94:7C:33:BD:92:86:BE:B9:12 Authority key identifier: 53:38:90:49:40:BF:82:A8:EF:F3:71:62:A1:BA:E6:B9:1F:CB:67:3C Certificate issuer: /CN=5338904940BF82A8EFF37162A1BAE6B91FCB673C Certificate serial: 4B78C6C0F0A593381D0648244C988A72B5D6E557 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5338904940BF82A8EFF37162A1BAE6B91FCB673C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/5338904940BF82A8EFF37162A1BAE6B91FCB673C.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 02:21:26 +0000 Manifest this update: Thu 17 Sep 2026 02:16:26 +0000 Manifest next update: Fri 18 Sep 2026 03:37:26 +0000 Files and hashes: 1: 5338904940BF82A8EFF37162A1BAE6B91FCB673C.crl (hash: anRW6muaXbgKDleuhBsBJIWgq+AKMieC6Qxl+t0LBHc=) 2: 323030313a6466333a643234303a3a2f34382d3438203d3e20313336303839.roa (hash: ln/cutFyRprFz8dtBUFO3cjX8Yn8fKNHUiK0Pk7iFOE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/5338904940BF82A8EFF37162A1BAE6B91FCB673C.crl rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/5338904940BF82A8EFF37162A1BAE6B91FCB673C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5338904940BF82A8EFF37162A1BAE6B91FCB673C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 03:37:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:78:c6:c0:f0:a5:93:38:1d:06:48:24:4c:98:8a:72:b5:d6:e5:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5338904940BF82A8EFF37162A1BAE6B91FCB673C Validity Not Before: Sep 17 02:16:26 2026 GMT Not After : Sep 18 03:37:26 2026 GMT Subject: CN=C64730D89D6888C5F6A67B947C33BD9286BEB912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e3:a1:a3:9d:e6:5a:5e:9b:b8:36:b0:de:cd: 23:1d:ed:ed:7b:7f:15:d7:13:0e:9c:b6:34:e9:5b: b4:66:48:51:6a:ae:e1:be:a4:cc:be:40:64:0c:b9: 63:54:91:67:cc:3c:a1:10:8b:20:74:8f:0f:f7:cc: 9e:75:c4:f9:79:b7:e5:2b:c8:45:f0:40:c8:67:f1: 59:a2:a4:12:eb:9c:d9:67:85:2d:1a:da:78:39:2a: 1d:04:84:0d:45:03:13:94:2a:f0:05:3a:65:6b:ca: aa:b5:af:aa:fd:6b:45:c1:24:37:4a:bd:c3:66:d9: 34:87:73:cb:3d:d0:05:92:37:bf:04:4b:df:1f:24: dc:15:0a:21:56:87:d6:46:00:49:c3:d9:85:d2:dd: f4:e0:42:c3:05:b7:1a:51:cc:0b:86:31:06:99:0f: c1:4e:8d:7e:80:d7:d0:fe:84:5a:99:c6:cc:09:e7: c2:eb:35:7f:5d:8f:37:29:31:d6:a2:c4:79:c1:e2: 6e:ec:d4:f4:9a:53:26:0b:da:8d:b3:60:ce:9a:72: c4:bc:36:c4:59:16:dc:7e:f5:a8:33:95:65:b9:80: 7e:74:a8:d6:5d:7a:43:4b:f8:2c:3f:1c:e1:b6:bc: 9c:50:5b:97:2a:2d:20:11:6a:a5:b2:be:a5:33:b2: 6e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:47:30:D8:9D:68:88:C5:F6:A6:7B:94:7C:33:BD:92:86:BE:B9:12 X509v3 Authority Key Identifier: keyid:53:38:90:49:40:BF:82:A8:EF:F3:71:62:A1:BA:E6:B9:1F:CB:67:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/5338904940BF82A8EFF37162A1BAE6B91FCB673C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5338904940BF82A8EFF37162A1BAE6B91FCB673C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/5338904940BF82A8EFF37162A1BAE6B91FCB673C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:3e:98:30:e2:97:f5:8a:8a:ba:fb:b0:04:bb:eb:86:b7:3a: 1e:7c:72:55:12:44:60:38:2b:ca:b6:6c:1c:ac:28:96:b3:12: 5c:ec:61:c3:18:5c:65:99:61:8c:50:3d:4d:c6:a0:79:84:4c: 9c:3f:45:a8:f7:42:e0:da:cf:0b:66:5e:b5:6e:d0:c9:7f:95: b1:82:bc:fa:4a:73:34:4b:e5:b5:cf:42:24:12:2e:ae:5b:79: 80:2f:84:f0:49:78:e5:98:ec:e6:f4:04:4d:ef:83:2a:a6:1e: 50:06:cd:c2:e8:20:6e:ec:00:db:57:94:20:bb:ec:7f:eb:1c: c7:88:cf:c0:53:88:54:dc:f7:c3:ff:01:c6:19:25:e3:f6:e4: 37:c6:2f:85:81:93:b7:a5:64:f0:2d:ab:bc:b4:9b:06:53:44: 59:23:ca:7f:ec:e2:b8:03:9c:35:a9:19:49:06:20:9a:c9:e0: 2c:de:2d:9c:7e:2b:72:ad:87:bc:26:6d:c8:21:06:44:5f:22: a8:72:19:ad:f3:a1:88:08:5e:8a:22:c0:a8:7d:3d:a5:52:e5: 1c:13:af:df:aa:fb:f6:57:53:79:04:02:46:b3:98:82:31:af: a8:3a:39:fc:46:4d:76:55:22:f6:ca:00:45:f4:91:68:22:c6: 29:6f:73:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS3jGwPClkzgdBkgkTJiKcrXW5VcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMzODkwNDk0MEJGODJBOEVGRjM3MTYyQTFCQUU2Qjkx RkNCNjczQzAeFw0yNjA5MTcwMjE2MjZaFw0yNjA5MTgwMzM3MjZaMDMxMTAvBgNV BAMTKEM2NDczMEQ4OUQ2ODg4QzVGNkE2N0I5NDdDMzNCRDkyODZCRUI5MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC146GjneZaXpu4NrDezSMd7e17 fxXXEw6ctjTpW7RmSFFqruG+pMy+QGQMuWNUkWfMPKEQiyB0jw/3zJ51xPl5t+Ur yEXwQMhn8VmipBLrnNlnhS0a2ng5Kh0EhA1FAxOUKvAFOmVryqq1r6r9a0XBJDdK vcNm2TSHc8s90AWSN78ES98fJNwVCiFWh9ZGAEnD2YXS3fTgQsMFtxpRzAuGMQaZ D8FOjX6A19D+hFqZxswJ58LrNX9djzcpMdaixHnB4m7s1PSaUyYL2o2zYM6acsS8 NsRZFtx+9agzlWW5gH50qNZdekNL+Cw/HOG2vJxQW5cqLSARaqWyvqUzsm57AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxkcw2J1oiMX2pnuUfDO9koa+uRIwHwYDVR0j BBgwFoAUUziQSUC/gqjv83FiobrmuR/LZzwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTRlZDhkNmMtZjBmYS00N2NjLWFlYWEtYjRlM2VlMTE2ODgyLzEvNTMzODkwNDk0 MEJGODJBOEVGRjM3MTYyQTFCQUU2QjkxRkNCNjczQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MzM4OTA0OTQwQkY4MkE4RUZGMzcxNjJBMUJBRTZCOTFGQ0I2 NzNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTRlZDhkNmMtZjBmYS00N2NjLWFl YWEtYjRlM2VlMTE2ODgyLzEvNTMzODkwNDk0MEJGODJBOEVGRjM3MTYyQTFCQUU2 QjkxRkNCNjczQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAE+mDDil/WKirr7sAS764a3Oh58clUSRGA4 K8q2bBysKJazElzsYcMYXGWZYYxQPU3GoHmETJw/Raj3QuDazwtmXrVu0Ml/lbGC vPpKczRL5bXPQiQSLq5beYAvhPBJeOWY7Ob0BE3vgyqmHlAGzcLoIG7sANtXlCC7 7H/rHMeIz8BTiFTc98P/AcYZJeP25DfGL4WBk7elZPAtq7y0mwZTRFkjyn/s4rgD nDWpGUkGIJrJ4CzeLZx+K3Kth7wmbcghBkRfIqhyGa3zoYgIXooiwKh9PaVS5RwT r9+q+/ZXU3kEAkazmIIxr6g6OfxGTXZVIvbKAEX0kWgixilvc5c= -----END CERTIFICATE-----Generated at Thu Sep 17 15:51:43 2026 by rpki-client