$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.mft File: C685EF86C3EED3646B26DDA717952CDBC1AF938B.mft (raw, json) Hash identifier: rIyA0dLCkMlVXzaWQk1xvgcmpVOutOPPEdfAjkIOBoQ= Subject key identifier: D8:A5:78:EC:13:6F:AA:36:EE:51:EB:7E:59:62:BF:D4:1F:58:F9:FE Authority key identifier: C6:85:EF:86:C3:EE:D3:64:6B:26:DD:A7:17:95:2C:DB:C1:AF:93:8B Certificate issuer: /CN=C685EF86C3EED3646B26DDA717952CDBC1AF938B Certificate serial: 7DD7BE01F4917A453156C2EA340B51DD7E16979F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C685EF86C3EED3646B26DDA717952CDBC1AF938B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.mft Manifest number: D5 Signing time: Thu 08 Oct 2026 12:03:03 +0000 Manifest this update: Thu 08 Oct 2026 11:58:03 +0000 Manifest next update: Fri 09 Oct 2026 14:03:03 +0000 Files and hashes: 1: C685EF86C3EED3646B26DDA717952CDBC1AF938B.crl (hash: 5xeWRD3vHResJ9WhPuaF92tqEdimCQNhRfXJBjJwCPw=) 2: 3130332e3136362e36362e302f32332d3234203d3e203137393935.roa (hash: /TEOvHICrNlzqHKdTSQimWH4eZASaMfqjyKyEfSs2B4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.crl rsync://rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C685EF86C3EED3646B26DDA717952CDBC1AF938B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 11:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:d7:be:01:f4:91:7a:45:31:56:c2:ea:34:0b:51:dd:7e:16:97:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C685EF86C3EED3646B26DDA717952CDBC1AF938B Validity Not Before: Oct 8 11:58:03 2026 GMT Not After : Oct 9 14:03:03 2026 GMT Subject: CN=D8A578EC136FAA36EE51EB7E5962BFD41F58F9FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8f:eb:40:ca:c3:a2:b4:3d:37:a4:e5:7a:ad: 95:3f:44:3d:ca:01:62:77:52:38:3d:f3:ae:26:1c: b7:b4:45:21:ac:93:c5:ef:90:d5:b7:0e:1f:30:6b: b9:a4:a0:24:c8:2a:00:fc:33:76:b1:4a:1a:99:9f: 20:2e:82:70:19:11:7e:a0:b7:50:a1:71:6b:b4:6c: ed:5a:f4:86:22:fb:44:51:f2:73:aa:25:fd:51:f6: 48:1a:e5:f2:ad:ec:57:73:12:41:10:96:a4:e5:39: a5:46:8a:c3:99:7d:96:8c:3d:c7:5f:db:d6:be:0c: 60:1c:5a:40:18:3e:e6:39:f1:72:50:41:11:32:61: 2d:bb:4f:af:f3:30:90:e4:db:58:0a:0f:e1:ba:6f: 51:66:ed:b5:0c:9c:e5:cb:a6:5c:fa:a2:2b:3a:8d: 35:be:ec:f6:50:19:f1:42:e0:93:d9:fe:84:e6:7b: 2a:d0:12:ac:71:0f:4c:b2:9f:34:79:7e:d6:26:8b: fc:ef:cb:96:6b:c3:6f:0b:33:61:3e:95:b7:01:a4: 12:97:a2:f0:97:66:49:2c:6a:67:04:f2:fc:95:eb: dd:40:f5:f5:01:51:c1:8b:9b:4f:a0:31:83:f9:ac: 09:09:96:b8:0a:e3:52:12:94:fc:2f:ce:22:d7:58: d1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:A5:78:EC:13:6F:AA:36:EE:51:EB:7E:59:62:BF:D4:1F:58:F9:FE X509v3 Authority Key Identifier: keyid:C6:85:EF:86:C3:EE:D3:64:6B:26:DD:A7:17:95:2C:DB:C1:AF:93:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C685EF86C3EED3646B26DDA717952CDBC1AF938B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:54:ec:89:80:57:db:e0:a8:1a:8c:c9:12:6e:8e:a5:ef:f7: 5b:c8:21:8a:64:25:98:9a:40:66:34:dc:d7:28:34:9a:29:1e: ab:bf:b1:ab:0d:d6:14:1d:c6:72:d6:ba:66:39:3c:fc:b6:c7: cf:45:a1:0b:d7:35:5a:46:ba:e5:d2:4f:f4:42:3e:7f:49:d2: 4f:de:73:7a:98:90:f1:fb:93:b0:5e:dd:92:d9:43:34:3e:8e: 6e:d0:26:c3:62:12:bc:21:03:f3:18:bd:3a:70:78:9a:de:75: 23:10:09:66:a6:00:50:99:99:9b:f2:69:ff:52:20:fc:56:52: e0:50:1e:d2:15:74:52:dc:5a:fc:6a:b9:b9:e6:5c:b1:d3:7c: 8d:3c:06:ce:c7:1a:9c:c7:01:7b:df:eb:ef:4c:af:26:cf:52: 13:d8:43:a8:d0:9b:6f:1b:a9:fa:11:6f:91:83:25:be:66:4b: c3:be:81:ed:dc:9e:7a:f0:43:54:bb:ec:3c:f3:19:c7:0d:a3: f5:6c:35:d0:6f:56:dc:d6:05:84:3d:1d:20:71:5c:94:b0:95: 97:da:81:f6:99:de:d0:9f:13:35:f1:d1:1f:9a:2f:3d:a2:fb: d9:1f:88:bb:21:72:14:59:5d:08:23:15:0e:d8:1d:50:42:d0: 3a:43:d3:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfde+AfSRekUxVsLqNAtR3X4Wl58wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzY4NUVGODZDM0VFRDM2NDZCMjZEREE3MTc5NTJDREJD MUFGOTM4QjAeFw0yNjEwMDgxMTU4MDNaFw0yNjEwMDkxNDAzMDNaMDMxMTAvBgNV BAMTKEQ4QTU3OEVDMTM2RkFBMzZFRTUxRUI3RTU5NjJCRkQ0MUY1OEY5RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+j+tAysOitD03pOV6rZU/RD3K AWJ3Ujg9864mHLe0RSGsk8XvkNW3Dh8wa7mkoCTIKgD8M3axShqZnyAugnAZEX6g t1ChcWu0bO1a9IYi+0RR8nOqJf1R9kga5fKt7FdzEkEQlqTlOaVGisOZfZaMPcdf 29a+DGAcWkAYPuY58XJQQREyYS27T6/zMJDk21gKD+G6b1Fm7bUMnOXLplz6ois6 jTW+7PZQGfFC4JPZ/oTmeyrQEqxxD0yynzR5ftYmi/zvy5Zrw28LM2E+lbcBpBKX ovCXZkksamcE8vyV691A9fUBUcGLm0+gMYP5rAkJlrgK41ISlPwvziLXWNHRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2KV47BNvqjbuUet+WWK/1B9Y+f4wHwYDVR0j BBgwFoAUxoXvhsPu02RrJt2nF5Us28Gvk4swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTU3ZTViMGUtNTk2NC00NjNmLTgwNDEtMzM3ZjgwNTU2NDNjLzAvQzY4NUVGODZD M0VFRDM2NDZCMjZEREE3MTc5NTJDREJDMUFGOTM4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNjg1RUY4NkMzRUVEMzY0NkIyNkREQTcxNzk1MkNEQkMxQUY5 MzhCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTU3ZTViMGUtNTk2NC00NjNmLTgw NDEtMzM3ZjgwNTU2NDNjLzAvQzY4NUVGODZDM0VFRDM2NDZCMjZEREE3MTc5NTJD REJDMUFGOTM4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFhU7ImAV9vgqBqMyRJujqXv91vIIYpkJZia QGY03NcoNJopHqu/sasN1hQdxnLWumY5PPy2x89FoQvXNVpGuuXST/RCPn9J0k/e c3qYkPH7k7Be3ZLZQzQ+jm7QJsNiErwhA/MYvTpweJredSMQCWamAFCZmZvyaf9S IPxWUuBQHtIVdFLcWvxqubnmXLHTfI08Bs7HGpzHAXvf6+9MrybPUhPYQ6jQm28b qfoRb5GDJb5mS8O+ge3cnnrwQ1S77DzzGccNo/VsNdBvVtzWBYQ9HSBxXJSwlZfa gfaZ3tCfEzXx0R+aLz2i+9kfiLshchRZXQgjFQ7YHVBC0DpD0xM= -----END CERTIFICATE-----Generated at Fri Oct 9 02:26:23 2026 by rpki-client