$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/C352DFD797F0814103500130B1A6B6876355C3DF.mft File: C352DFD797F0814103500130B1A6B6876355C3DF.mft (raw, json) Hash identifier: di383ZCkC5VEESYFHxU1Nmga8Rg7zRpr0B4M6kzVo0A= Subject key identifier: 47:EC:26:22:1C:42:0F:D4:C2:C8:7A:8E:A2:BF:2D:7E:CE:3F:85:0D Authority key identifier: C3:52:DF:D7:97:F0:81:41:03:50:01:30:B1:A6:B6:87:63:55:C3:DF Certificate issuer: /CN=C352DFD797F0814103500130B1A6B6876355C3DF Certificate serial: 75D36E3451708C876699DC13A62D4C053F759C12 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C352DFD797F0814103500130B1A6B6876355C3DF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/C352DFD797F0814103500130B1A6B6876355C3DF.mft Manifest number: EB Signing time: Sat 24 Oct 2026 03:48:51 +0000 Manifest this update: Sat 24 Oct 2026 03:43:51 +0000 Manifest next update: Sun 25 Oct 2026 07:29:51 +0000 Files and hashes: 1: 3130332e3138382e3234392e302f32342d3234203d3e20313439393038.roa (hash: zyRn7jFyehFEgsKHr+RevPoVMdyoLH00YGiqg3O4fKo=) 2: C352DFD797F0814103500130B1A6B6876355C3DF.crl (hash: fcu5HsMbA/KN+HEG1YpuaPVYKyCwHP7094xMGdOgP0U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/C352DFD797F0814103500130B1A6B6876355C3DF.crl rsync://rpki-rsync.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/C352DFD797F0814103500130B1A6B6876355C3DF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C352DFD797F0814103500130B1A6B6876355C3DF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:d3:6e:34:51:70:8c:87:66:99:dc:13:a6:2d:4c:05:3f:75:9c:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C352DFD797F0814103500130B1A6B6876355C3DF Validity Not Before: Oct 24 03:43:51 2026 GMT Not After : Oct 25 07:29:51 2026 GMT Subject: CN=47EC26221C420FD4C2C87A8EA2BF2D7ECE3F850D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d1:e4:b9:ea:df:4a:8f:79:d3:d0:4a:fc:c5: 1b:e5:54:9e:e0:74:8d:03:84:8d:de:2a:ee:60:b8: b9:8d:89:62:e6:21:27:ee:b0:6f:5b:3f:b9:74:14: b5:13:49:ea:ac:51:88:91:a8:54:45:ff:8a:54:79: a5:c5:75:10:41:0d:e0:04:12:62:ae:8e:79:92:4e: 8c:fb:30:46:9c:17:2b:b9:3a:c6:1f:f4:fc:44:3f: 5a:f8:b0:6c:d1:cb:3c:13:6f:0f:81:ee:be:dc:de: af:a6:9b:5e:7b:ba:8e:ab:65:cd:7f:99:2a:12:4c: ae:37:27:ff:66:35:3a:30:f3:a0:dc:7e:6c:4c:14: f0:ea:9f:4f:59:b1:fc:e7:5e:4d:4b:f9:17:6f:b0: fa:35:99:f3:2c:6a:29:d9:47:d0:87:45:83:67:3a: 7a:61:8e:20:f4:8f:df:8a:38:4f:2f:ae:be:6e:7a: 01:18:23:ca:75:13:e0:f2:b6:34:b2:bc:9c:c5:32: 13:8a:03:dd:10:38:7e:03:08:ab:e8:d6:6a:fa:1b: 94:14:2c:a6:04:0c:ea:41:6f:37:5c:80:51:5f:6b: e8:52:c1:b2:d4:54:56:5c:dd:42:c8:30:6f:f8:1c: 1b:ab:af:bd:d2:e0:53:96:fe:73:80:21:66:a7:c4: a8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:EC:26:22:1C:42:0F:D4:C2:C8:7A:8E:A2:BF:2D:7E:CE:3F:85:0D X509v3 Authority Key Identifier: keyid:C3:52:DF:D7:97:F0:81:41:03:50:01:30:B1:A6:B6:87:63:55:C3:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/C352DFD797F0814103500130B1A6B6876355C3DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C352DFD797F0814103500130B1A6B6876355C3DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/C352DFD797F0814103500130B1A6B6876355C3DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:7e:9d:cf:db:c0:b7:24:1d:68:67:29:6d:89:12:1f:77:bc: c3:b1:43:c5:dc:ee:7d:a2:a3:b4:ff:cd:8f:e0:47:cc:35:81: fd:39:55:c2:57:cb:ff:86:70:59:64:e2:f4:33:3a:56:0d:13: 0d:86:27:7e:77:3b:46:81:73:d2:49:a8:fd:5c:fc:dc:e4:50: 2d:ae:8b:a7:dd:9d:31:2a:23:17:12:1d:3e:3e:fe:5b:66:da: ea:c1:c3:81:9e:16:57:8e:f4:91:63:fd:13:dd:c8:9a:79:b4: bc:4a:0f:cf:26:33:35:5d:47:54:ff:10:67:53:ae:71:ba:56: 9f:7d:a4:87:ff:48:1c:ab:bb:75:5a:87:5e:fb:8d:cd:9d:61: 91:41:3a:d2:f4:8d:42:20:14:d8:4a:d6:50:74:1c:5d:e2:a3: f7:76:c7:8d:75:86:7d:8c:04:ee:50:e0:d8:00:8d:24:c6:78: 92:d8:56:f7:6f:5b:8a:41:25:76:f3:23:f4:ad:73:c4:83:07: c9:c7:8c:19:6e:ba:d8:61:91:fe:94:df:3f:4e:ef:67:d9:e2: 8d:42:b3:1f:d2:40:6c:b1:9d:0d:94:a8:26:1d:2f:e8:35:1f: 14:12:49:c6:64:bf:17:ce:42:fb:a0:c1:9c:86:c5:d6:bb:48: a1:c4:9f:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUddNuNFFwjIdmmdwTpi1MBT91nBIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM1MkRGRDc5N0YwODE0MTAzNTAwMTMwQjFBNkI2ODc2 MzU1QzNERjAeFw0yNjEwMjQwMzQzNTFaFw0yNjEwMjUwNzI5NTFaMDMxMTAvBgNV BAMTKDQ3RUMyNjIyMUM0MjBGRDRDMkM4N0E4RUEyQkYyRDdFQ0UzRjg1MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc0eS56t9Kj3nT0Er8xRvlVJ7g dI0DhI3eKu5guLmNiWLmISfusG9bP7l0FLUTSeqsUYiRqFRF/4pUeaXFdRBBDeAE EmKujnmSToz7MEacFyu5OsYf9PxEP1r4sGzRyzwTbw+B7r7c3q+mm157uo6rZc1/ mSoSTK43J/9mNTow86DcfmxMFPDqn09ZsfznXk1L+RdvsPo1mfMsainZR9CHRYNn OnphjiD0j9+KOE8vrr5uegEYI8p1E+DytjSyvJzFMhOKA90QOH4DCKvo1mr6G5QU LKYEDOpBbzdcgFFfa+hSwbLUVFZc3ULIMG/4HBurr73S4FOW/nOAIWanxKgFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR+wmIhxCD9TCyHqOor8tfs4/hQ0wHwYDVR0j BBgwFoAUw1Lf15fwgUEDUAEwsaa2h2NVw98wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzQ2N2VjMzMtNWE3Mi00YzY1LTlmZDMtNjZlZjg0NzkzOTRkLzAvQzM1MkRGRDc5 N0YwODE0MTAzNTAwMTMwQjFBNkI2ODc2MzU1QzNERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMzUyREZENzk3RjA4MTQxMDM1MDAxMzBCMUE2QjY4NzYzNTVD M0RGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzQ2N2VjMzMtNWE3Mi00YzY1LTlm ZDMtNjZlZjg0NzkzOTRkLzAvQzM1MkRGRDc5N0YwODE0MTAzNTAwMTMwQjFBNkI2 ODc2MzU1QzNERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGV+nc/bwLckHWhnKW2JEh93vMOxQ8Xc7n2i o7T/zY/gR8w1gf05VcJXy/+GcFlk4vQzOlYNEw2GJ353O0aBc9JJqP1c/NzkUC2u i6fdnTEqIxcSHT4+/ltm2urBw4GeFleO9JFj/RPdyJp5tLxKD88mMzVdR1T/EGdT rnG6Vp99pIf/SByru3Vah177jc2dYZFBOtL0jUIgFNhK1lB0HF3io/d2x411hn2M BO5Q4NgAjSTGeJLYVvdvW4pBJXbzI/Stc8SDB8nHjBluuthhkf6U3z9O72fZ4o1C sx/SQGyxnQ2UqCYdL+g1HxQSScZkvxfOQvugwZyGxda7SKHEn44= -----END CERTIFICATE-----Generated at Sat Oct 24 20:43:50 2026 by rpki-client