$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.mft File: C03D5C36BA12143F61D38A8EBDDB69F3B5990721.mft (raw, json) Hash identifier: X9SMpMl6Gos+SQ2UJUdeoKQZoK6v3oY2MrGIjpCKozs= Subject key identifier: E2:8B:A4:8D:8F:87:02:A2:3E:E6:6E:5D:F0:28:AF:E6:15:E9:F5:E3 Authority key identifier: C0:3D:5C:36:BA:12:14:3F:61:D3:8A:8E:BD:DB:69:F3:B5:99:07:21 Certificate issuer: /CN=C03D5C36BA12143F61D38A8EBDDB69F3B5990721 Certificate serial: 38E9D603655D1E92E2CF2DC190E1639B6A50B688 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 05:40:29 +0000 Manifest this update: Thu 17 Sep 2026 05:35:29 +0000 Manifest next update: Fri 18 Sep 2026 09:27:29 +0000 Files and hashes: 1: 3135372e31352e3137342e302f32342d3234203d3e20313532333739.roa (hash: 7fMJt0M4VQARtwl7gUUn1d68a36tK2tjagq7bmrxvDM=) 2: C03D5C36BA12143F61D38A8EBDDB69F3B5990721.crl (hash: whfpFIi24ZrrtaytXrlop8io4rhWNW0smfEw+8Oweqk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.crl rsync://rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:e9:d6:03:65:5d:1e:92:e2:cf:2d:c1:90:e1:63:9b:6a:50:b6:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C03D5C36BA12143F61D38A8EBDDB69F3B5990721 Validity Not Before: Sep 17 05:35:29 2026 GMT Not After : Sep 18 09:27:29 2026 GMT Subject: CN=E28BA48D8F8702A23EE66E5DF028AFE615E9F5E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b8:51:e7:2f:52:c7:da:51:32:95:94:63:6e: fe:ad:93:64:c3:b6:7e:2a:bc:7c:48:a4:95:a7:b6: 44:27:9f:eb:7b:5d:42:ed:cd:f2:e2:b1:f4:8f:42: ae:ab:98:e4:1b:7d:4f:25:a9:3e:a0:26:f2:31:d2: 46:35:d7:b0:06:5b:a2:eb:70:05:cc:90:7e:48:40: 4d:f2:0c:31:1b:50:0c:13:d5:99:98:cb:6c:a1:3b: 20:2c:79:21:99:f9:5a:b1:58:bc:c7:7f:7b:fb:91: 0e:e4:7a:53:13:d9:f0:17:cf:5e:c4:28:75:ed:f7: d5:6b:ec:f5:99:3a:6b:c6:d0:f6:bd:76:50:78:34: 25:bb:68:bc:d3:79:4e:58:03:95:99:f8:f2:37:af: 57:0e:33:83:0d:18:76:16:ef:5d:4a:67:32:29:09: f8:72:d0:5a:0e:62:a5:82:2a:02:8a:f6:3c:1b:e4: d0:a0:6a:fd:ab:81:7c:6d:8c:5e:e0:10:06:fa:9d: 41:ad:ba:a9:a0:01:a1:87:b7:de:d2:73:27:ad:f8: 17:c3:04:c3:e0:9e:5c:a9:81:eb:42:b5:c4:cc:41: 41:ac:9c:27:c2:1d:dd:08:4f:59:8b:7d:50:f2:94: 6b:33:f3:82:ac:23:ab:9a:d2:b9:7c:95:54:c3:92: b5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:8B:A4:8D:8F:87:02:A2:3E:E6:6E:5D:F0:28:AF:E6:15:E9:F5:E3 X509v3 Authority Key Identifier: keyid:C0:3D:5C:36:BA:12:14:3F:61:D3:8A:8E:BD:DB:69:F3:B5:99:07:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:b8:d8:42:94:0b:57:09:a1:9d:3c:11:37:65:87:6b:e9:94: 90:1b:36:cb:37:1c:95:7b:48:04:98:6c:be:9e:3e:eb:84:e4: 13:6f:5d:f0:1d:cb:2d:74:e5:0d:8a:d8:bc:91:60:15:18:44: 40:e7:b0:bf:b3:87:76:15:c8:d1:be:32:ce:af:f0:5a:5b:5f: 24:e2:56:b8:8e:31:9b:c1:f9:9c:94:6a:29:0a:d0:7b:d4:61: 93:0a:af:e9:5f:4b:c5:49:b7:64:f1:a7:97:d5:4d:f6:38:aa: 7f:a1:83:a4:0e:5a:03:2e:10:24:d1:7a:95:11:03:13:bc:e6: a1:c3:e9:b5:37:13:7c:33:e0:c3:e7:f5:ef:e3:a8:84:45:e2: 89:d2:75:fe:28:f5:c7:c9:e2:3a:a1:a5:30:d3:8b:bc:65:42: 61:cc:86:64:09:02:c2:60:70:e7:4c:9f:d3:32:c1:1a:f2:78: a1:b3:f7:46:5c:95:d6:6c:13:32:a4:67:aa:e7:e9:ce:5d:74: 71:46:9c:54:5c:8b:d8:53:53:4a:2e:f1:52:f8:59:31:58:17: 56:80:bc:d5:39:24:7c:11:64:41:8d:51:cb:8e:a9:a0:bb:df: f8:4a:28:01:6c:37:b2:f6:88:07:43:fd:73:2a:c6:73:e4:b5: b7:76:6b:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOOnWA2VdHpLizy3BkOFjm2pQtogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzAzRDVDMzZCQTEyMTQzRjYxRDM4QThFQkREQjY5RjNC NTk5MDcyMTAeFw0yNjA5MTcwNTM1MjlaFw0yNjA5MTgwOTI3MjlaMDMxMTAvBgNV BAMTKEUyOEJBNDhEOEY4NzAyQTIzRUU2NkU1REYwMjhBRkU2MTVFOUY1RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1uFHnL1LH2lEylZRjbv6tk2TD tn4qvHxIpJWntkQnn+t7XULtzfLisfSPQq6rmOQbfU8lqT6gJvIx0kY117AGW6Lr cAXMkH5IQE3yDDEbUAwT1ZmYy2yhOyAseSGZ+VqxWLzHf3v7kQ7kelMT2fAXz17E KHXt99Vr7PWZOmvG0Pa9dlB4NCW7aLzTeU5YA5WZ+PI3r1cOM4MNGHYW711KZzIp Cfhy0FoOYqWCKgKK9jwb5NCgav2rgXxtjF7gEAb6nUGtuqmgAaGHt97Scyet+BfD BMPgnlypgetCtcTMQUGsnCfCHd0IT1mLfVDylGsz84KsI6ua0rl8lVTDkrVpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4oukjY+HAqI+5m5d8Civ5hXp9eMwHwYDVR0j BBgwFoAUwD1cNroSFD9h04qOvdtp87WZByEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWIwMDI5OTItYWNiMi00Zjc3LTk5N2QtMzIxN2VhZDk5YmI1LzAvQzAzRDVDMzZC QTEyMTQzRjYxRDM4QThFQkREQjY5RjNCNTk5MDcyMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DMDNENUMzNkJBMTIxNDNGNjFEMzhBOEVCRERCNjlGM0I1OTkw NzIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWIwMDI5OTItYWNiMi00Zjc3LTk5 N2QtMzIxN2VhZDk5YmI1LzAvQzAzRDVDMzZCQTEyMTQzRjYxRDM4QThFQkREQjY5 RjNCNTk5MDcyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJe42EKUC1cJoZ08ETdlh2vplJAbNss3HJV7 SASYbL6ePuuE5BNvXfAdyy105Q2K2LyRYBUYREDnsL+zh3YVyNG+Ms6v8FpbXyTi VriOMZvB+ZyUaikK0HvUYZMKr+lfS8VJt2Txp5fVTfY4qn+hg6QOWgMuECTRepUR AxO85qHD6bU3E3wz4MPn9e/jqIRF4onSdf4o9cfJ4jqhpTDTi7xlQmHMhmQJAsJg cOdMn9MywRryeKGz90ZcldZsEzKkZ6rn6c5ddHFGnFRci9hTU0ou8VL4WTFYF1aA vNU5JHwRZEGNUcuOqaC73/hKKAFsN7L2iAdD/XMqxnPktbd2ayo= -----END CERTIFICATE-----Generated at Thu Sep 17 10:45:59 2026 by rpki-client