$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.mft File: CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.mft (raw, json) Hash identifier: 3UAs+ytWj0WCdkkAV9dI6tjEAqeS6QWWP5h4mWQNrT0= Subject key identifier: B7:2E:DF:4B:99:B4:15:9B:73:3B:C0:F1:92:B9:BB:47:F3:61:2E:94 Authority key identifier: CD:0A:24:B4:D5:08:D4:3D:8C:25:BB:8E:C5:D4:4F:77:E1:3A:51:A6 Certificate issuer: /CN=CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6 Certificate serial: 1B4B37609D5EA07F252EE9BAB4DB8D0957B62220 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 18:21:52 +0000 Manifest this update: Wed 16 Sep 2026 18:16:52 +0000 Manifest next update: Thu 17 Sep 2026 21:14:52 +0000 Files and hashes: 1: 3130332e3138392e3136362e302f32332d3233203d3e20313439383835.roa (hash: Pb1HhX9vGzRzwD3eC7x1KFYFFDBS8WYJS934upf4BBQ=) 2: CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.crl (hash: nu+lSz4t8If9fcAGPR21e2InNtSZ8N0qMeOlhnApHjA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.crl rsync://rpki-rsync.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 21:14:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:4b:37:60:9d:5e:a0:7f:25:2e:e9:ba:b4:db:8d:09:57:b6:22:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6 Validity Not Before: Sep 16 18:16:52 2026 GMT Not After : Sep 17 21:14:52 2026 GMT Subject: CN=B72EDF4B99B4159B733BC0F192B9BB47F3612E94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c6:dc:68:2c:6a:cc:ce:69:fd:0b:f9:97:f6: 8c:e2:e3:e0:8a:64:62:e2:82:e4:24:57:74:e5:94: b4:61:8a:a6:15:22:f3:36:a3:db:6b:b8:50:d1:13: 2c:27:b5:d5:c1:01:8d:eb:4d:37:07:02:aa:2b:e8: 33:e9:84:a8:97:5c:17:41:69:07:6a:b6:87:f2:07: 40:62:25:30:fd:58:f1:b5:10:10:2a:34:be:87:2d: 78:88:fa:37:97:89:7d:f4:74:11:14:48:42:fd:a1: 47:6e:48:33:a1:cd:79:f1:9b:f7:91:97:ad:9c:4b: a5:4d:f9:aa:30:cb:61:3b:04:ad:c4:51:4d:1a:09: 2c:8c:98:cc:44:28:c7:46:97:a2:f9:9b:8c:ea:27: 9d:87:18:e2:63:f6:b1:23:7c:17:46:d3:9f:50:c1: cd:a4:90:0e:18:f9:d8:95:71:cc:a4:0b:58:63:92: b0:91:95:d6:ac:76:1e:eb:70:2f:69:cb:fb:a0:7d: 91:ac:2a:e4:30:2d:3a:6c:be:1a:d1:cd:e7:41:9f: ae:a4:75:9c:5c:ad:9e:02:b7:58:7a:db:0d:b8:0f: 00:bf:54:7d:3c:e0:e6:01:6d:e2:e4:42:59:df:6a: e5:89:80:bd:56:0f:b7:84:d4:c9:17:fb:0c:bc:1b: 9e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:2E:DF:4B:99:B4:15:9B:73:3B:C0:F1:92:B9:BB:47:F3:61:2E:94 X509v3 Authority Key Identifier: keyid:CD:0A:24:B4:D5:08:D4:3D:8C:25:BB:8E:C5:D4:4F:77:E1:3A:51:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:79:4f:b2:45:a9:d4:d5:d0:68:df:b5:d3:ad:c8:58:a2:f9: 44:67:67:aa:4c:e1:ef:bc:f6:9a:ec:64:e4:de:6e:1b:19:f6: ec:46:b1:1c:b4:0d:9d:a1:16:17:92:9e:84:d6:c9:c0:70:00: 22:09:d9:2d:91:d7:84:39:54:a0:9d:2d:ab:db:58:e8:f2:bd: 19:7e:4b:c8:b0:1e:97:57:05:bc:47:ce:21:a9:7d:ec:ea:ad: ff:ee:48:82:e3:7f:77:c4:cc:66:ce:1e:a5:fa:6a:70:1f:3c: 6b:a9:20:90:7d:a6:b4:54:48:c7:fd:6c:b9:39:d9:3c:72:db: c7:d9:47:e4:86:67:a8:1e:c4:d1:b7:05:67:ce:b9:99:52:bb: 87:75:d2:f8:b1:c3:24:7f:6b:61:a3:3d:de:15:0b:da:92:c6: 22:ac:5e:a4:de:8a:f0:ae:54:f8:9b:3e:c5:f5:3d:72:92:e5: c7:1a:2e:d4:1e:d5:fe:2d:4f:be:5c:96:04:22:1a:01:6e:aa: 3b:64:6a:d3:6c:ef:f0:e5:2c:3a:47:c9:40:e9:48:6e:c3:84: 1f:62:34:d3:d8:5b:12:99:4c:9f:43:3f:12:cd:28:05:1d:32: 6e:34:ec:03:97:0e:0c:79:a4:9c:ef:82:99:cd:bb:00:72:13: 19:1a:a9:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG0s3YJ1eoH8lLum6tNuNCVe2IiAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QwQTI0QjRENTA4RDQzRDhDMjVCQjhFQzVENDRGNzdF MTNBNTFBNjAeFw0yNjA5MTYxODE2NTJaFw0yNjA5MTcyMTE0NTJaMDMxMTAvBgNV BAMTKEI3MkVERjRCOTlCNDE1OUI3MzNCQzBGMTkyQjlCQjQ3RjM2MTJFOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDixtxoLGrMzmn9C/mX9ozi4+CK ZGLiguQkV3TllLRhiqYVIvM2o9truFDREywntdXBAY3rTTcHAqor6DPphKiXXBdB aQdqtofyB0BiJTD9WPG1EBAqNL6HLXiI+jeXiX30dBEUSEL9oUduSDOhzXnxm/eR l62cS6VN+aowy2E7BK3EUU0aCSyMmMxEKMdGl6L5m4zqJ52HGOJj9rEjfBdG059Q wc2kkA4Y+diVccykC1hjkrCRldasdh7rcC9py/ugfZGsKuQwLTpsvhrRzedBn66k dZxcrZ4Ct1h62w24DwC/VH084OYBbeLkQlnfauWJgL1WD7eE1MkX+wy8G56rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUty7fS5m0FZtzO8Dxkrm7R/NhLpQwHwYDVR0j BBgwFoAUzQoktNUI1D2MJbuOxdRPd+E6UaYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWUzMGFjNjQtMGYxMy00MTYyLTk2OGYtYWZlNWNjNzE0Y2Y2LzAvQ0QwQTI0QjRE NTA4RDQzRDhDMjVCQjhFQzVENDRGNzdFMTNBNTFBNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRDBBMjRCNEQ1MDhENDNEOEMyNUJCOEVDNUQ0NEY3N0UxM0E1 MUE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWUzMGFjNjQtMGYxMy00MTYyLTk2 OGYtYWZlNWNjNzE0Y2Y2LzAvQ0QwQTI0QjRENTA4RDQzRDhDMjVCQjhFQzVENDRG NzdFMTNBNTFBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEl5T7JFqdTV0GjftdOtyFii+URnZ6pM4e+8 9prsZOTebhsZ9uxGsRy0DZ2hFheSnoTWycBwACIJ2S2R14Q5VKCdLavbWOjyvRl+ S8iwHpdXBbxHziGpfezqrf/uSILjf3fEzGbOHqX6anAfPGupIJB9prRUSMf9bLk5 2Txy28fZR+SGZ6gexNG3BWfOuZlSu4d10vixwyR/a2GjPd4VC9qSxiKsXqTeivCu VPibPsX1PXKS5ccaLtQe1f4tT75clgQiGgFuqjtkatNs7/DlLDpHyUDpSG7DhB9i NNPYWxKZTJ9DPxLNKAUdMm407AOXDgx5pJzvgpnNuwByExkaqfQ= -----END CERTIFICATE-----Generated at Thu Sep 17 10:50:09 2026 by rpki-client