$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/CDAD8AE64850B7306026A1B46FF84D08284104C9.mft File: CDAD8AE64850B7306026A1B46FF84D08284104C9.mft (raw, json) Hash identifier: e8TN0fA05nfO+d4ETfqe6kG4l/RxtACn0BVE6bKc3Gk= Subject key identifier: 2E:8D:C5:F0:F4:48:46:DF:2B:D8:BE:BD:39:95:73:B1:C0:70:AB:8E Authority key identifier: CD:AD:8A:E6:48:50:B7:30:60:26:A1:B4:6F:F8:4D:08:28:41:04:C9 Certificate issuer: /CN=CDAD8AE64850B7306026A1B46FF84D08284104C9 Certificate serial: 64319A966E12764163D023CC8EA6C20C01E39570 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDAD8AE64850B7306026A1B46FF84D08284104C9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/CDAD8AE64850B7306026A1B46FF84D08284104C9.mft Manifest number: D4 Signing time: Thu 08 Oct 2026 02:04:09 +0000 Manifest this update: Thu 08 Oct 2026 01:59:09 +0000 Manifest next update: Fri 09 Oct 2026 02:24:09 +0000 Files and hashes: 1: CDAD8AE64850B7306026A1B46FF84D08284104C9.crl (hash: 5WUZHvav80X+MFwryRXq5i16Cql7qmn0OB8AS5dFqZk=) 2: 3130332e3136392e3235322e302f32332d3234203d3e203137393935.roa (hash: Rie1EWmYCW5AS7gherk1HJqeE5vY8I4Pjrh2HLZJQzM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/CDAD8AE64850B7306026A1B46FF84D08284104C9.crl rsync://rpki-rsync.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/CDAD8AE64850B7306026A1B46FF84D08284104C9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDAD8AE64850B7306026A1B46FF84D08284104C9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 02:24:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:31:9a:96:6e:12:76:41:63:d0:23:cc:8e:a6:c2:0c:01:e3:95:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDAD8AE64850B7306026A1B46FF84D08284104C9 Validity Not Before: Oct 8 01:59:09 2026 GMT Not After : Oct 9 02:24:09 2026 GMT Subject: CN=2E8DC5F0F44846DF2BD8BEBD399573B1C070AB8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0f:b4:fb:4d:7f:a1:43:86:d7:c8:71:b8:df: 73:cb:f5:18:ed:eb:5f:6c:e4:0b:59:35:72:d8:d1: 89:c4:b4:9e:13:93:d4:2b:43:0f:7f:a2:34:08:e0: f7:d4:2f:6c:9b:c5:fb:b5:be:9e:a7:71:5e:f3:08: 8c:a4:8b:7e:4b:53:8b:c6:71:fd:eb:ae:0e:5a:56: 99:aa:78:0b:f0:87:fa:6c:7f:11:60:a5:11:13:8b: 85:f3:22:5d:9a:50:71:0c:7d:a0:44:c6:f8:99:9e: 11:54:4e:9e:93:ea:6a:56:24:8a:cf:6c:6f:8b:2d: 0b:f7:4a:4f:76:8f:cf:a9:f4:62:86:4d:23:a3:2b: 71:05:78:ea:0f:92:dc:e8:18:6b:c3:43:d9:1b:cc: 14:d4:95:1f:e7:da:63:0c:d7:44:50:2c:ea:9b:08: f8:af:df:16:91:a5:2f:a8:3a:d0:0a:c8:1f:e1:f9: 43:d7:55:b2:21:ea:ef:53:8d:c6:99:96:c9:cb:51: 0f:61:c0:8f:d2:3d:9e:97:b0:45:9d:3b:a3:e5:23: 82:2f:85:9a:ac:a1:99:c2:22:20:76:5c:e9:c5:e1: 48:35:3b:67:31:2b:92:79:ec:21:2a:ec:66:0b:b5: 0c:2c:a0:82:0c:23:40:5e:da:b0:d9:b4:2b:02:e9: a0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:8D:C5:F0:F4:48:46:DF:2B:D8:BE:BD:39:95:73:B1:C0:70:AB:8E X509v3 Authority Key Identifier: keyid:CD:AD:8A:E6:48:50:B7:30:60:26:A1:B4:6F:F8:4D:08:28:41:04:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/CDAD8AE64850B7306026A1B46FF84D08284104C9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDAD8AE64850B7306026A1B46FF84D08284104C9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/CDAD8AE64850B7306026A1B46FF84D08284104C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:fe:ae:00:a9:a5:ae:2d:ff:5c:09:eb:36:b7:22:78:ea:89: 0e:cd:7f:df:e5:83:18:fc:71:64:93:e6:ae:aa:fc:1c:fe:76: 57:6b:c7:7e:cd:28:4c:de:8f:a0:3a:0c:67:a8:cc:da:f4:da: 97:41:10:67:64:b1:9d:2e:c9:00:28:e8:be:1a:ce:6f:73:18: 86:06:a8:20:3b:60:08:e5:7a:dc:ee:75:3e:66:55:6c:b9:3e: 66:fd:9e:1e:4d:cd:52:47:25:eb:e0:70:27:e6:6c:b1:18:c5: 19:d6:c2:0e:2c:ed:cc:53:7d:78:94:31:6d:d8:f8:66:a8:a3: b2:71:cd:96:d4:21:2f:3e:a5:cb:17:40:b4:d2:f5:67:18:e7: 95:09:2b:d1:02:bb:29:c1:b6:12:dc:b8:ec:54:6c:c7:cf:2d: ed:47:ee:51:8e:65:0c:6e:38:75:3a:a0:b2:89:e7:f3:5c:3a: c2:22:92:4a:12:19:cc:e6:42:50:5c:e1:ba:c9:20:57:6f:86: 8a:d9:ff:12:d7:78:f9:7e:e5:49:02:8d:1c:30:a2:f5:66:e2: 44:03:4b:62:8b:9d:76:c4:77:42:05:e9:20:ae:c9:9b:89:e5: d8:23:0b:1d:ed:94:54:a8:64:aa:d2:dd:82:46:c4:55:d7:38: c6:3a:c6:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZDGalm4SdkFj0CPMjqbCDAHjlXAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RBRDhBRTY0ODUwQjczMDYwMjZBMUI0NkZGODREMDgy ODQxMDRDOTAeFw0yNjEwMDgwMTU5MDlaFw0yNjEwMDkwMjI0MDlaMDMxMTAvBgNV BAMTKDJFOERDNUYwRjQ0ODQ2REYyQkQ4QkVCRDM5OTU3M0IxQzA3MEFCOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzD7T7TX+hQ4bXyHG433PL9Rjt 619s5AtZNXLY0YnEtJ4Tk9QrQw9/ojQI4PfUL2ybxfu1vp6ncV7zCIyki35LU4vG cf3rrg5aVpmqeAvwh/psfxFgpRETi4XzIl2aUHEMfaBExviZnhFUTp6T6mpWJIrP bG+LLQv3Sk92j8+p9GKGTSOjK3EFeOoPktzoGGvDQ9kbzBTUlR/n2mMM10RQLOqb CPiv3xaRpS+oOtAKyB/h+UPXVbIh6u9TjcaZlsnLUQ9hwI/SPZ6XsEWdO6PlI4Iv hZqsoZnCIiB2XOnF4Ug1O2cxK5J57CEq7GYLtQwsoIIMI0Be2rDZtCsC6aCfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULo3F8PRIRt8r2L69OZVzscBwq44wHwYDVR0j BBgwFoAUza2K5khQtzBgJqG0b/hNCChBBMkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWI4YzU0M2MtZGUxZi00ZWY0LTkyYjEtNjg1NTZmZjEzMWEzLzAvQ0RBRDhBRTY0 ODUwQjczMDYwMjZBMUI0NkZGODREMDgyODQxMDRDOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DREFEOEFFNjQ4NTBCNzMwNjAyNkExQjQ2RkY4NEQwODI4NDEw NEM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWI4YzU0M2MtZGUxZi00ZWY0LTky YjEtNjg1NTZmZjEzMWEzLzAvQ0RBRDhBRTY0ODUwQjczMDYwMjZBMUI0NkZGODRE MDgyODQxMDRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIX+rgCppa4t/1wJ6za3InjqiQ7Nf9/lgxj8 cWST5q6q/Bz+dldrx37NKEzej6A6DGeozNr02pdBEGdksZ0uyQAo6L4azm9zGIYG qCA7YAjletzudT5mVWy5Pmb9nh5NzVJHJevgcCfmbLEYxRnWwg4s7cxTfXiUMW3Y +Gaoo7JxzZbUIS8+pcsXQLTS9WcY55UJK9ECuynBthLcuOxUbMfPLe1H7lGOZQxu OHU6oLKJ5/NcOsIikkoSGczmQlBc4brJIFdvhorZ/xLXePl+5UkCjRwwovVm4kQD S2KLnXbEd0IF6SCuyZuJ5dgjCx3tlFSoZKrS3YJGxFXXOMY6xnA= -----END CERTIFICATE-----Generated at Thu Oct 8 14:04:46 2026 by rpki-client