$ rpki-client -vvvf rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.mft File: C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.mft (raw, json) Hash identifier: +x8ElfWwsG2fSrG12U6E2gZxkAR6f8NOLASJkjQZR9c= Subject key identifier: 31:2B:5F:74:4F:59:AE:2A:89:EC:96:97:28:03:62:C1:BC:00:E4:6D Authority key identifier: C0:43:3C:FC:2E:06:4A:77:FD:CB:37:B4:9C:2C:93:C4:D0:A0:52:6C Certificate issuer: /CN=C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C Certificate serial: 5DD5DAF19521E972ED580DE124461882C670B8C7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.mft Manifest number: B1 Signing time: Thu 10 Sep 2026 12:58:01 +0000 Manifest this update: Thu 10 Sep 2026 12:53:01 +0000 Manifest next update: Fri 11 Sep 2026 15:56:01 +0000 Files and hashes: 1: C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.crl (hash: mKoNpnD25UQDJ3TkeJQwe+i6bdaB2sS642Yk0nf7Wqw=) 2: 323030313a6466373a353330303a3a2f34382d3438203d3e20313338313135.roa (hash: +rxATWvogOmG58QtPOl3t5ZnCAWvuClI+FAmj6pibBE=) 3: 3130332e3134372e3135342e302f32342d3234203d3e20313338313135.roa (hash: hbxsy5rYM2ui/y8kSQK8vRtJw5Os4ztQgliynYBu9Sg=) 4: 3130332e3132362e3232362e302f32342d3234203d3e20313338313135.roa (hash: 67eHKrfnUV+o5bdh8AJ2qRePKkWRvK0EPB7qFbO8S2g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.crl rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 11:56:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:d5:da:f1:95:21:e9:72:ed:58:0d:e1:24:46:18:82:c6:70:b8:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C Validity Not Before: Sep 10 12:53:01 2026 GMT Not After : Sep 11 15:56:01 2026 GMT Subject: CN=312B5F744F59AE2A89EC9697280362C1BC00E46D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:86:6b:fe:98:fb:45:fc:e7:ad:d8:8e:34:5d: bb:95:f2:76:6e:b9:31:e9:b8:09:1d:d1:fa:aa:de: f8:c6:ae:eb:b9:58:96:73:ce:7a:96:f1:d4:14:6b: ef:36:9f:94:e6:7c:e9:b8:14:81:fd:c1:7f:f5:d0: df:5c:fa:9a:b7:0f:c2:f0:1d:71:bd:fb:4f:55:e7: d8:06:c7:ab:02:9f:9c:2b:f3:2b:7d:f6:e4:c0:05: 16:f0:bc:45:9e:06:6a:c9:cf:62:e5:4f:cd:f7:a7: 7b:f3:60:37:0e:35:11:5e:71:6b:27:12:2f:86:4c: fe:81:31:81:42:d3:4e:82:83:e4:c2:96:98:b6:3d: cb:62:d4:0f:e1:c6:73:ba:6a:6c:75:1e:8a:b5:1b: 73:22:5c:c4:ab:e1:20:41:90:8c:01:79:e3:64:7c: 98:38:42:a4:75:26:b7:31:12:9b:3c:e0:d9:88:2c: 7e:ab:88:94:0f:84:27:ac:92:9a:2c:3c:84:8a:8e: d7:59:e2:08:3e:c8:ac:39:e8:78:a5:2b:38:6b:30: 1c:b2:e2:df:2e:5d:4a:77:94:37:1b:a2:78:9e:c8: 29:87:fa:4c:2b:c0:5a:ce:00:f5:78:e8:90:0b:c6: 8d:4b:b9:ba:73:f0:0d:5c:4d:96:c1:91:15:fa:8c: cc:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:2B:5F:74:4F:59:AE:2A:89:EC:96:97:28:03:62:C1:BC:00:E4:6D X509v3 Authority Key Identifier: keyid:C0:43:3C:FC:2E:06:4A:77:FD:CB:37:B4:9C:2C:93:C4:D0:A0:52:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:00:93:8d:a4:00:05:9d:30:3e:1f:94:05:4d:12:2f:c0:54: 27:2f:c6:8c:7a:04:09:f5:22:e3:ff:fe:dd:07:bd:b5:d4:d1: 48:0b:30:12:27:60:af:34:10:32:56:44:ab:f6:1d:22:19:5e: 52:50:49:bf:d9:09:fb:f4:e2:75:8e:04:07:fc:1c:ff:51:3a: 20:70:ee:6b:85:cb:33:f5:66:c2:a1:67:1e:7c:c4:04:3d:2a: 4d:67:2e:94:47:75:f6:78:08:87:b5:41:5c:84:f7:c3:92:70: 30:3f:1e:94:dc:0a:1d:7c:d3:12:2c:86:60:b2:18:71:5e:98: 80:46:ed:26:cd:e7:66:e2:d5:10:b2:49:2c:2f:35:2a:54:1c: 5f:c1:35:6e:ce:f5:c5:28:f5:7a:49:d8:66:05:83:35:71:ba: 76:4e:1d:38:6c:d8:d8:4c:f9:58:45:45:b5:d6:17:a7:e8:83: c2:8f:87:b3:aa:51:a0:62:4f:0e:c7:bd:cb:bd:8c:17:da:a8: b6:68:a2:49:95:7d:30:ef:77:ab:83:c4:c7:f1:1a:e2:9d:3b: cc:c2:ef:b8:fa:e7:10:05:ac:e0:06:bd:10:d7:39:d5:10:32: b1:03:e9:d8:0e:ca:1b:ae:c5:0b:42:0a:5b:26:f7:fc:7d:1e: 7a:fa:ab:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXdXa8ZUh6XLtWA3hJEYYgsZwuMcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA0MzNDRkMyRTA2NEE3N0ZEQ0IzN0I0OUMyQzkzQzRE MEEwNTI2QzAeFw0yNjA5MTAxMjUzMDFaFw0yNjA5MTExNTU2MDFaMDMxMTAvBgNV BAMTKDMxMkI1Rjc0NEY1OUFFMkE4OUVDOTY5NzI4MDM2MkMxQkMwMEU0NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDChmv+mPtF/Oet2I40XbuV8nZu uTHpuAkd0fqq3vjGruu5WJZzznqW8dQUa+82n5TmfOm4FIH9wX/10N9c+pq3D8Lw HXG9+09V59gGx6sCn5wr8yt99uTABRbwvEWeBmrJz2LlT833p3vzYDcONRFecWsn Ei+GTP6BMYFC006Cg+TClpi2Pcti1A/hxnO6amx1Hoq1G3MiXMSr4SBBkIwBeeNk fJg4QqR1JrcxEps84NmILH6riJQPhCeskposPISKjtdZ4gg+yKw56HilKzhrMByy 4t8uXUp3lDcbonieyCmH+kwrwFrOAPV46JALxo1Lubpz8A1cTZbBkRX6jMzbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMStfdE9ZriqJ7JaXKANiwbwA5G0wHwYDVR0j BBgwFoAUwEM8/C4GSnf9yze0nCyTxNCgUmwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjRjZjYzMmQtZDYxYS00ODI2LWI1NzItOWYxOTQ4YWU1ODBjLzAvQzA0MzNDRkMy RTA2NEE3N0ZEQ0IzN0I0OUMyQzkzQzREMEEwNTI2Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMDQzM0NGQzJFMDY0QTc3RkRDQjM3QjQ5QzJDOTNDNEQwQTA1 MjZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjRjZjYzMmQtZDYxYS00ODI2LWI1 NzItOWYxOTQ4YWU1ODBjLzAvQzA0MzNDRkMyRTA2NEE3N0ZEQ0IzN0I0OUMyQzkz QzREMEEwNTI2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAsAk42kAAWdMD4flAVNEi/AVCcvxox6BAn1 IuP//t0HvbXU0UgLMBInYK80EDJWRKv2HSIZXlJQSb/ZCfv04nWOBAf8HP9ROiBw 7muFyzP1ZsKhZx58xAQ9Kk1nLpRHdfZ4CIe1QVyE98OScDA/HpTcCh180xIshmCy GHFemIBG7SbN52bi1RCySSwvNSpUHF/BNW7O9cUo9XpJ2GYFgzVxunZOHThs2NhM +VhFRbXWF6fog8KPh7OqUaBiTw7Hvcu9jBfaqLZookmVfTDvd6uDxMfxGuKdO8zC 77j65xAFrOAGvRDXOdUQMrED6dgOyhuuxQtCClsm9/x9Hnr6q1g= -----END CERTIFICATE-----Generated at Thu Sep 10 20:33:12 2026 by rpki-client