$ rpki-client -vvvf rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/CD846D565A6E2859697B59C438907050C12DE37D.mft File: CD846D565A6E2859697B59C438907050C12DE37D.mft (raw, json) Hash identifier: 3AxkvaDhep9rWBt/4ffbvAU7mTJAYgXDzbf0HdTlQ2M= Subject key identifier: 39:2E:98:A6:61:BF:BC:F4:BF:0E:ED:2C:62:FB:46:95:D3:ED:AD:A0 Authority key identifier: CD:84:6D:56:5A:6E:28:59:69:7B:59:C4:38:90:70:50:C1:2D:E3:7D Certificate issuer: /CN=CD846D565A6E2859697B59C438907050C12DE37D Certificate serial: 51ECEB182D560EA5F3B6BDD94E8289BFCBCB4093 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/CD846D565A6E2859697B59C438907050C12DE37D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/CD846D565A6E2859697B59C438907050C12DE37D.mft Manifest number: DB Signing time: Mon 12 Oct 2026 17:48:35 +0000 Manifest this update: Mon 12 Oct 2026 17:43:34 +0000 Manifest next update: Tue 13 Oct 2026 19:40:34 +0000 Files and hashes: 1: CD846D565A6E2859697B59C438907050C12DE37D.crl (hash: yIeHYu/DFA6JCinV+tRCJ52K7llVIEb35IPsKKqIkss=) 2: 3231322e3131372e34382e302f32302d3234203d3e203538333736.roa (hash: tagwsSVL2euywnNYgfGcSI37agKbNG24pIwjEJuU+FQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/CD846D565A6E2859697B59C438907050C12DE37D.crl rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/CD846D565A6E2859697B59C438907050C12DE37D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/3/CD846D565A6E2859697B59C438907050C12DE37D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 19:40:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:ec:eb:18:2d:56:0e:a5:f3:b6:bd:d9:4e:82:89:bf:cb:cb:40:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD846D565A6E2859697B59C438907050C12DE37D Validity Not Before: Oct 12 17:43:34 2026 GMT Not After : Oct 13 19:40:34 2026 GMT Subject: CN=392E98A661BFBCF4BF0EED2C62FB4695D3EDADA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f2:d1:4c:03:f6:06:b6:a4:b6:d3:cf:df:7d: 98:be:90:cc:13:d4:1d:60:5f:99:14:66:a5:b6:0e: 85:67:38:a0:06:88:2c:79:9e:b1:23:b1:f0:6f:53: 9f:dd:53:31:59:8e:5d:83:d7:30:dc:dd:d6:72:a0: 6c:86:85:f6:0d:24:46:cb:45:a3:d2:cd:02:ca:bb: d8:1d:13:ae:1f:88:e7:d8:0c:14:6f:78:3a:f4:1d: e3:79:81:45:fa:8c:03:8a:8b:d7:48:50:2c:63:55: f6:09:4d:51:19:6b:c4:b2:dd:ed:d7:6b:10:de:27: a0:ae:12:3a:3f:9d:75:13:76:63:bc:ff:8b:6d:19: 31:08:15:29:bc:36:94:ae:29:59:d8:dc:07:6b:71: a8:1f:2a:90:d2:00:cd:1c:64:a0:07:d4:2a:16:d6: bc:d5:42:f8:62:3b:03:a1:b6:00:d2:1a:21:32:72: 05:d8:c7:de:f3:58:16:81:1e:47:8c:31:45:93:7d: 16:de:2a:d4:b4:51:e0:5a:2e:9d:c4:86:26:e2:78: b5:80:9c:96:94:18:2c:45:7c:79:0c:07:0f:8b:59: d1:0f:62:54:71:7d:e7:2a:d5:f8:7d:39:ed:d0:bd: ba:bc:83:0c:c4:ad:87:8e:1f:29:4d:29:d3:b1:cf: 4d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:2E:98:A6:61:BF:BC:F4:BF:0E:ED:2C:62:FB:46:95:D3:ED:AD:A0 X509v3 Authority Key Identifier: keyid:CD:84:6D:56:5A:6E:28:59:69:7B:59:C4:38:90:70:50:C1:2D:E3:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/CD846D565A6E2859697B59C438907050C12DE37D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/CD846D565A6E2859697B59C438907050C12DE37D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/CD846D565A6E2859697B59C438907050C12DE37D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:35:19:60:9a:8b:a2:6a:da:2c:fa:c2:6c:5d:a4:ab:10:c4: e3:6f:52:50:00:fa:3c:26:0a:82:dd:bd:a2:10:69:50:c1:92: 36:be:7c:d8:38:0d:e2:a5:50:d6:3f:72:75:78:d1:9d:7d:1f: c7:62:7d:9a:d0:d8:09:ba:3c:50:58:8a:45:2a:b0:f9:e1:ab: 41:09:e9:a4:74:d8:cf:5d:97:6a:02:54:03:32:17:18:c5:65: d8:78:dc:c6:7c:8e:a1:98:35:3a:c9:f4:db:9e:49:8d:da:da: 3b:18:4a:4a:29:a2:aa:07:41:0a:f0:3f:fc:20:be:e6:81:18: 84:29:0f:d4:c8:cf:dc:59:65:07:5f:c7:d1:d7:81:dd:b8:f4: 9e:2b:78:e1:62:14:b0:39:18:e7:5f:84:a6:eb:28:39:e9:51: 7c:17:8f:1e:c8:07:e6:21:ad:de:6b:dd:ca:d8:ab:58:fb:ec: f0:7d:cc:8f:ef:ac:d5:9f:46:0c:a4:e9:8f:79:f9:a1:c0:a1: 0b:25:09:6d:49:2f:3e:ff:a0:1b:3c:ed:ed:50:8d:72:5d:7e: 18:9a:03:70:a1:fc:21:ec:6f:c4:e0:88:90:48:9d:6e:1e:80: 88:7a:f5:0e:4a:05:f0:0f:94:d5:46:da:06:44:96:f1:1a:f5: 53:53:51:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUezrGC1WDqXztr3ZToKJv8vLQJMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q4NDZENTY1QTZFMjg1OTY5N0I1OUM0Mzg5MDcwNTBD MTJERTM3RDAeFw0yNjEwMTIxNzQzMzRaFw0yNjEwMTMxOTQwMzRaMDMxMTAvBgNV BAMTKDM5MkU5OEE2NjFCRkJDRjRCRjBFRUQyQzYyRkI0Njk1RDNFREFEQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn8tFMA/YGtqS208/ffZi+kMwT 1B1gX5kUZqW2DoVnOKAGiCx5nrEjsfBvU5/dUzFZjl2D1zDc3dZyoGyGhfYNJEbL RaPSzQLKu9gdE64fiOfYDBRveDr0HeN5gUX6jAOKi9dIUCxjVfYJTVEZa8Sy3e3X axDeJ6CuEjo/nXUTdmO8/4ttGTEIFSm8NpSuKVnY3AdrcagfKpDSAM0cZKAH1CoW 1rzVQvhiOwOhtgDSGiEycgXYx97zWBaBHkeMMUWTfRbeKtS0UeBaLp3EhibieLWA nJaUGCxFfHkMBw+LWdEPYlRxfecq1fh9Oe3Qvbq8gwzErYeOHylNKdOxz037AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOS6YpmG/vPS/Du0sYvtGldPtraAwHwYDVR0j BBgwFoAUzYRtVlpuKFlpe1nEOJBwUMEt430wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODkxZDNjMzAtOTVkYy00YjcyLWFlMWItYWQxZTk4YjBlMTc5LzEvQ0Q4NDZENTY1 QTZFMjg1OTY5N0I1OUM0Mzg5MDcwNTBDMTJERTM3RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMy9DRDg0NkQ1NjVBNkUyODU5Njk3QjU5QzQzODkwNzA1MEMxMkRF MzdELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODkxZDNjMzAtOTVkYy00YjcyLWFl MWItYWQxZTk4YjBlMTc5LzEvQ0Q4NDZENTY1QTZFMjg1OTY5N0I1OUM0Mzg5MDcw NTBDMTJERTM3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAc1GWCai6Jq2iz6wmxdpKsQxONvUlAA+jwm CoLdvaIQaVDBkja+fNg4DeKlUNY/cnV40Z19H8difZrQ2Am6PFBYikUqsPnhq0EJ 6aR02M9dl2oCVAMyFxjFZdh43MZ8jqGYNTrJ9NueSY3a2jsYSkopoqoHQQrwP/wg vuaBGIQpD9TIz9xZZQdfx9HXgd249J4reOFiFLA5GOdfhKbrKDnpUXwXjx7IB+Yh rd5r3crYq1j77PB9zI/vrNWfRgyk6Y95+aHAoQslCW1JLz7/oBs87e1QjXJdfhia A3Ch/CHsb8TgiJBInW4egIh69Q5KBfAPlNVG2gZElvEa9VNTUX0= -----END CERTIFICATE-----Generated at Tue Oct 13 05:57:10 2026 by rpki-client