$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/C858999BCD42FDA190703525FA3DB0036EF8DC4B.mft File: C858999BCD42FDA190703525FA3DB0036EF8DC4B.mft (raw, json) Hash identifier: rizwy+nYj+m+gZnLcUklHFzwsJ4AsqzmLr5QjEDQEWQ= Subject key identifier: 16:D3:42:AE:9D:37:4B:B6:97:82:E7:64:06:4B:C0:04:04:06:36:BA Authority key identifier: C8:58:99:9B:CD:42:FD:A1:90:70:35:25:FA:3D:B0:03:6E:F8:DC:4B Certificate issuer: /CN=C858999BCD42FDA190703525FA3DB0036EF8DC4B Certificate serial: 6248C15DAEB2F4079618ACA044B7B0AD6A26B2E6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C858999BCD42FDA190703525FA3DB0036EF8DC4B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/C858999BCD42FDA190703525FA3DB0036EF8DC4B.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 22:01:09 +0000 Manifest this update: Wed 16 Sep 2026 21:56:09 +0000 Manifest next update: Thu 17 Sep 2026 23:11:09 +0000 Files and hashes: 1: 3130332e3136312e3136322e302f32342d3234203d3e20313431363136.roa (hash: XztwHCHvbhSLiUv5Dcefs2qJFPWKrlIiunIE1+CwfUw=) 2: C858999BCD42FDA190703525FA3DB0036EF8DC4B.crl (hash: Bh46Gm4efxiklHA2OOml4R1WaYaXWKgSsEqyPrRyap4=) 3: 3130332e3136312e3136332e302f32342d3234203d3e20313431363136.roa (hash: q3yJjhYDYiQshTjZtvHBXc0EumicuvHb+zQLM8AeoEQ=) 4: 3130332e3136312e3136322e302f32332d3233203d3e20313431363136.roa (hash: fWxyuXffWj1jqvHAsWNRbofSjd5DXyF8+uTLX0AR1zI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/C858999BCD42FDA190703525FA3DB0036EF8DC4B.crl rsync://rpki-rsync.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/C858999BCD42FDA190703525FA3DB0036EF8DC4B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C858999BCD42FDA190703525FA3DB0036EF8DC4B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 23:11:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:48:c1:5d:ae:b2:f4:07:96:18:ac:a0:44:b7:b0:ad:6a:26:b2:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C858999BCD42FDA190703525FA3DB0036EF8DC4B Validity Not Before: Sep 16 21:56:09 2026 GMT Not After : Sep 17 23:11:09 2026 GMT Subject: CN=16D342AE9D374BB69782E764064BC004040636BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:68:7b:57:c7:10:8c:88:91:dd:b2:a4:2f:cc: a2:4a:c7:a5:5a:29:87:5f:de:4c:24:4b:41:98:69: b5:91:0a:06:e9:dd:ac:f6:71:3d:10:90:24:b3:53: 6b:c2:be:ea:c7:80:1a:7b:ab:22:46:f9:c3:75:16: 37:46:8d:d8:1d:66:49:dc:28:9d:86:3b:52:b4:b1: 13:d2:14:71:4b:2f:b2:f0:c6:36:44:b5:9a:d8:9d: 45:6a:81:98:ab:cf:f3:15:12:02:90:f8:ca:81:ba: d2:6d:af:3a:ba:93:03:55:df:8d:3b:af:8a:9a:85: b0:d7:5a:bf:c4:c9:26:3d:b4:17:9d:62:b6:cf:56: 9f:e4:48:a9:17:ab:c5:44:65:7b:b6:9d:c0:cd:de: 56:88:7e:6f:f2:0e:7d:19:40:98:5c:b6:fa:d7:c5: 1f:1e:e1:58:7d:99:07:ac:13:bd:69:a5:4d:68:be: 97:96:ad:12:d1:c2:3c:c4:04:91:a7:d0:70:1b:93: 74:98:63:a5:b5:93:2c:ec:92:25:f9:0b:7a:e0:a7: 3b:cf:08:d6:56:98:91:5e:e3:c5:c7:f8:8b:bf:1a: 97:df:8b:fd:90:cf:8b:79:54:18:11:6b:0f:d8:78: 1b:2d:89:19:89:27:15:82:cd:aa:79:6e:b1:d9:26: 58:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:D3:42:AE:9D:37:4B:B6:97:82:E7:64:06:4B:C0:04:04:06:36:BA X509v3 Authority Key Identifier: keyid:C8:58:99:9B:CD:42:FD:A1:90:70:35:25:FA:3D:B0:03:6E:F8:DC:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/C858999BCD42FDA190703525FA3DB0036EF8DC4B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C858999BCD42FDA190703525FA3DB0036EF8DC4B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/C858999BCD42FDA190703525FA3DB0036EF8DC4B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:e2:18:2f:5a:68:a3:58:2a:f5:78:3b:14:a7:02:74:4a:c0: c7:d1:d1:cd:0d:a1:1e:75:fc:4d:7c:17:c4:b9:eb:1e:64:a5: dd:bd:8e:b2:3c:40:1e:67:01:b0:fa:f9:7b:38:3a:ef:ea:12: c6:11:07:7c:2b:5b:c6:8b:cb:d9:f4:f6:e2:cd:2e:2d:a0:1a: f4:c3:48:cd:f6:68:f8:66:c1:9c:7f:1e:b0:43:ea:a7:c9:c1: 95:80:92:ff:82:4b:26:b7:06:b2:06:a6:d1:20:77:6c:67:01: 27:8c:4f:8f:bf:10:3c:08:5b:19:69:f8:66:59:34:23:b6:80: 7e:ba:fc:4b:69:61:4d:37:d4:2b:17:ea:6d:90:d3:7c:10:85: b1:e1:c5:d9:b9:9d:11:17:f1:0d:3a:7e:44:e9:99:86:6f:7a: 3f:38:b8:48:b1:de:91:b8:a7:4d:e2:1d:7f:cb:f1:fd:93:22: 27:cd:4c:5d:5e:78:96:5e:06:0f:84:a2:1e:01:72:b1:86:31: 9c:65:64:c0:05:13:25:fc:f6:ee:40:c3:7b:1a:0f:9b:19:d5: a9:78:24:2a:2b:a4:56:77:84:c2:97:0d:7d:12:a7:93:3e:ee: ad:34:cc:1a:ce:39:ab:ef:70:b6:a3:9c:87:1a:d9:df:64:ff: 2a:b8:22:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYkjBXa6y9AeWGKygRLewrWomsuYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg1ODk5OUJDRDQyRkRBMTkwNzAzNTI1RkEzREIwMDM2 RUY4REM0QjAeFw0yNjA5MTYyMTU2MDlaFw0yNjA5MTcyMzExMDlaMDMxMTAvBgNV BAMTKDE2RDM0MkFFOUQzNzRCQjY5NzgyRTc2NDA2NEJDMDA0MDQwNjM2QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKaHtXxxCMiJHdsqQvzKJKx6Va KYdf3kwkS0GYabWRCgbp3az2cT0QkCSzU2vCvurHgBp7qyJG+cN1FjdGjdgdZknc KJ2GO1K0sRPSFHFLL7LwxjZEtZrYnUVqgZirz/MVEgKQ+MqButJtrzq6kwNV3407 r4qahbDXWr/EySY9tBedYrbPVp/kSKkXq8VEZXu2ncDN3laIfm/yDn0ZQJhctvrX xR8e4Vh9mQesE71ppU1ovpeWrRLRwjzEBJGn0HAbk3SYY6W1kyzskiX5C3rgpzvP CNZWmJFe48XH+Iu/Gpffi/2Qz4t5VBgRaw/YeBstiRmJJxWCzap5brHZJlhnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFtNCrp03S7aXgudkBkvABAQGNrowHwYDVR0j BBgwFoAUyFiZm81C/aGQcDUl+j2wA2743EswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQwOTRkM2UtMDg5Yy00YzY4LTgwYTItNTZiNWNiZmMxMDNkLzAvQzg1ODk5OUJD RDQyRkRBMTkwNzAzNTI1RkEzREIwMDM2RUY4REM0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DODU4OTk5QkNENDJGREExOTA3MDM1MjVGQTNEQjAwMzZFRjhE QzRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWQwOTRkM2UtMDg5Yy00YzY4LTgw YTItNTZiNWNiZmMxMDNkLzAvQzg1ODk5OUJDRDQyRkRBMTkwNzAzNTI1RkEzREIw MDM2RUY4REM0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEPiGC9aaKNYKvV4OxSnAnRKwMfR0c0NoR51 /E18F8S56x5kpd29jrI8QB5nAbD6+Xs4Ou/qEsYRB3wrW8aLy9n09uLNLi2gGvTD SM32aPhmwZx/HrBD6qfJwZWAkv+CSya3BrIGptEgd2xnASeMT4+/EDwIWxlp+GZZ NCO2gH66/EtpYU031CsX6m2Q03wQhbHhxdm5nREX8Q06fkTpmYZvej84uEix3pG4 p03iHX/L8f2TIifNTF1eeJZeBg+Eoh4BcrGGMZxlZMAFEyX89u5Aw3saD5sZ1al4 JCorpFZ3hMKXDX0Sp5M+7q00zBrOOavvcLajnIca2d9k/yq4Iig= -----END CERTIFICATE-----Generated at Thu Sep 17 15:07:45 2026 by rpki-client