$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/C0DF2950676479309D2FBC873ADFE7F5B6058640.mft File: C0DF2950676479309D2FBC873ADFE7F5B6058640.mft (raw, json) Hash identifier: /MsXLCsNW0z+ncmlJtVbJmFdUPIc0Ffa/OXVrjJ9C2E= Subject key identifier: 3D:CA:0E:56:DD:DE:CD:DD:73:FB:27:D9:AC:7F:A6:30:60:9F:6D:5E Authority key identifier: C0:DF:29:50:67:64:79:30:9D:2F:BC:87:3A:DF:E7:F5:B6:05:86:40 Certificate issuer: /CN=C0DF2950676479309D2FBC873ADFE7F5B6058640 Certificate serial: 1D08E8FCBF4F373B5804D362FF372A345A8E871B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0DF2950676479309D2FBC873ADFE7F5B6058640.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/C0DF2950676479309D2FBC873ADFE7F5B6058640.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 03:17:31 +0000 Manifest this update: Thu 17 Sep 2026 03:12:31 +0000 Manifest next update: Fri 18 Sep 2026 06:41:31 +0000 Files and hashes: 1: 3130332e3135322e35322e302f32342d3234203d3e20313431303532.roa (hash: ajRVgGN4gMUd4j39yvek6vpf46EiM5S4d3QDYc3oIa4=) 2: C0DF2950676479309D2FBC873ADFE7F5B6058640.crl (hash: zD6AbN5vymLn4YpbPNmTISIfrYOkUWZEDBA60bvei9o=) 3: 323030313a6466333a663738303a3a2f34382d3438203d3e20313431303532.roa (hash: W26Vx4nLZMqxpvpr3m/RYSVAUYlrlFX1e6tV2N6J5ys=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/C0DF2950676479309D2FBC873ADFE7F5B6058640.crl rsync://rpki-rsync.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/C0DF2950676479309D2FBC873ADFE7F5B6058640.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0DF2950676479309D2FBC873ADFE7F5B6058640.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:08:e8:fc:bf:4f:37:3b:58:04:d3:62:ff:37:2a:34:5a:8e:87:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0DF2950676479309D2FBC873ADFE7F5B6058640 Validity Not Before: Sep 17 03:12:31 2026 GMT Not After : Sep 18 06:41:31 2026 GMT Subject: CN=3DCA0E56DDDECDDD73FB27D9AC7FA630609F6D5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:44:62:55:d5:57:63:28:c2:81:aa:8f:61:0b: 34:3f:69:88:7d:97:d5:ee:82:ee:07:77:28:64:c6: 48:6c:b1:65:dc:ec:26:3f:fb:c6:81:db:fa:95:bf: 6f:7f:f5:a1:c0:18:7c:a6:92:05:25:f2:c0:85:40: b7:b4:f8:9f:fd:7b:5e:7b:a0:7e:5a:4b:2c:f8:fe: d1:45:af:72:e1:b5:b0:63:2f:be:f5:95:62:41:bc: 97:a2:06:0e:8a:1a:12:16:f3:8e:ba:f2:99:91:a1: e4:5c:69:18:42:b9:c6:75:23:bc:bb:4a:17:f0:5e: 98:65:13:06:a0:30:da:ba:f6:f0:16:6e:95:a7:10: 1e:2a:6e:f9:f2:bc:c2:b7:52:d1:33:39:9b:89:b7: e0:4c:85:e5:16:9c:c2:6d:df:5a:6d:b5:36:e1:61: d5:7c:c4:d4:8b:a6:44:d3:62:af:79:36:c6:c0:a7: 41:f6:1a:7a:a1:61:d7:c6:0f:68:19:a9:39:bc:51: 55:e0:77:90:ad:f5:0e:ea:87:d3:5b:dc:dd:da:e5: a2:03:1c:cb:0b:07:e5:27:fd:43:39:c6:99:8a:2c: b7:54:04:7b:44:67:2d:72:f9:89:d2:bc:58:51:4f: ef:81:1d:8f:67:a4:f4:2b:cd:df:1a:80:04:ea:37: df:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:CA:0E:56:DD:DE:CD:DD:73:FB:27:D9:AC:7F:A6:30:60:9F:6D:5E X509v3 Authority Key Identifier: keyid:C0:DF:29:50:67:64:79:30:9D:2F:BC:87:3A:DF:E7:F5:B6:05:86:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/C0DF2950676479309D2FBC873ADFE7F5B6058640.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0DF2950676479309D2FBC873ADFE7F5B6058640.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/C0DF2950676479309D2FBC873ADFE7F5B6058640.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:e2:e1:75:65:4a:d4:bd:cc:fa:24:71:d2:d5:0e:14:12:e0: 79:00:35:7a:21:59:cd:00:47:e6:2d:b5:82:5f:2b:ae:90:f6: 5b:6d:6d:32:78:bd:fc:9b:aa:27:bd:31:d6:a3:0e:95:3a:ed: 82:1c:70:93:67:03:07:e8:38:d0:25:c9:b8:c6:9e:9f:0e:eb: 50:69:c2:10:e2:ee:0c:32:e9:7f:5b:d3:ef:db:35:bc:75:55: 29:32:80:3e:a6:72:c4:4d:f0:55:67:7a:f2:27:bd:0a:fb:57: 0e:a8:84:fd:93:b6:74:63:ad:16:9a:b2:7a:61:86:1a:68:06: 20:82:c9:59:c4:1b:a5:b9:bd:f8:a6:46:20:fa:34:cf:67:53: 45:68:65:8e:8a:c2:97:21:31:81:38:96:e3:ab:fc:04:fd:fc: 74:b7:1a:4e:0f:60:bf:1f:e7:92:d6:6c:99:57:1f:1c:b9:a7: 53:34:95:0e:2f:6a:47:bd:10:cd:9c:fe:4d:c1:3d:6a:65:5b: 95:a9:40:d8:a2:33:9b:69:ec:00:f1:3d:73:ed:46:37:87:ab: 45:2b:ea:26:8f:99:5f:97:4b:ae:a9:fd:63:2a:de:10:7a:fe: 63:a8:ef:8c:5c:3e:67:e9:f0:60:c7:49:9b:5f:b3:64:6d:2e: 04:ed:9c:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHQjo/L9PNztYBNNi/zcqNFqOhxswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBERjI5NTA2NzY0NzkzMDlEMkZCQzg3M0FERkU3RjVC NjA1ODY0MDAeFw0yNjA5MTcwMzEyMzFaFw0yNjA5MTgwNjQxMzFaMDMxMTAvBgNV BAMTKDNEQ0EwRTU2RERERUNEREQ3M0ZCMjdEOUFDN0ZBNjMwNjA5RjZENUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4RGJV1VdjKMKBqo9hCzQ/aYh9 l9Xugu4HdyhkxkhssWXc7CY/+8aB2/qVv29/9aHAGHymkgUl8sCFQLe0+J/9e157 oH5aSyz4/tFFr3LhtbBjL771lWJBvJeiBg6KGhIW84668pmRoeRcaRhCucZ1I7y7 ShfwXphlEwagMNq69vAWbpWnEB4qbvnyvMK3UtEzOZuJt+BMheUWnMJt31pttTbh YdV8xNSLpkTTYq95NsbAp0H2GnqhYdfGD2gZqTm8UVXgd5Ct9Q7qh9Nb3N3a5aID HMsLB+Un/UM5xpmKLLdUBHtEZy1y+YnSvFhRT++BHY9npPQrzd8agATqN987AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPcoOVt3ezd1z+yfZrH+mMGCfbV4wHwYDVR0j BBgwFoAUwN8pUGdkeTCdL7yHOt/n9bYFhkAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTg0NGUxYjItOTNjNi00OGFlLTk2Y2MtZWQ4MzgyOWY1YTIwLzAvQzBERjI5NTA2 NzY0NzkzMDlEMkZCQzg3M0FERkU3RjVCNjA1ODY0MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMERGMjk1MDY3NjQ3OTMwOUQyRkJDODczQURGRTdGNUI2MDU4 NjQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTg0NGUxYjItOTNjNi00OGFlLTk2 Y2MtZWQ4MzgyOWY1YTIwLzAvQzBERjI5NTA2NzY0NzkzMDlEMkZCQzg3M0FERkU3 RjVCNjA1ODY0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC3i4XVlStS9zPokcdLVDhQS4HkANXohWc0A R+YttYJfK66Q9lttbTJ4vfybqie9MdajDpU67YIccJNnAwfoONAlybjGnp8O61Bp whDi7gwy6X9b0+/bNbx1VSkygD6mcsRN8FVnevInvQr7Vw6ohP2TtnRjrRaasnph hhpoBiCCyVnEG6W5vfimRiD6NM9nU0VoZY6KwpchMYE4luOr/AT9/HS3Gk4PYL8f 55LWbJlXHxy5p1M0lQ4vake9EM2c/k3BPWplW5WpQNiiM5tp7ADxPXPtRjeHq0Ur 6iaPmV+XS66p/WMq3hB6/mOo74xcPmfp8GDHSZtfs2RtLgTtnOw= -----END CERTIFICATE-----Generated at Thu Sep 17 09:16:27 2026 by rpki-client