$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.mft File: C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.mft (raw, json) Hash identifier: dqkzMqYutZp0xkVBPZiLnQChBOQhuinVtEZm6UyA+mE= Subject key identifier: 2B:8E:B9:24:91:6A:07:5E:E9:23:36:65:78:5F:41:A3:0B:6C:BA:6B Authority key identifier: C2:04:09:5D:0D:FA:29:CA:02:22:F4:C1:BE:5E:6A:9C:7F:E5:B5:CC Certificate issuer: /CN=C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC Certificate serial: 1BD3FBD2EDD848A07CAFC788843EA1BD0CF5A662 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 22:47:07 +0000 Manifest this update: Wed 16 Sep 2026 22:42:07 +0000 Manifest next update: Thu 17 Sep 2026 23:36:07 +0000 Files and hashes: 1: C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.crl (hash: ucbFeGzhKAgIyvKOU9jU0eoyxyCxe1J1q+hRo1zQLPg=) 2: 3135372e31302e3138312e302f32342d3234203d3e20313532333439.roa (hash: R6QK9+MoLmzsMre1Y9YXqP/L5rUmbxfvyX6TdZV81Yk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.crl rsync://rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 23:36:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:d3:fb:d2:ed:d8:48:a0:7c:af:c7:88:84:3e:a1:bd:0c:f5:a6:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC Validity Not Before: Sep 16 22:42:07 2026 GMT Not After : Sep 17 23:36:07 2026 GMT Subject: CN=2B8EB924916A075EE9233665785F41A30B6CBA6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6d:97:3d:61:80:d3:af:8d:ec:e5:02:ca:4a: 20:20:9b:45:b2:2b:63:5b:1f:38:ee:15:c5:34:26: f9:37:f0:07:64:4e:c4:2e:9e:b5:0e:d5:6e:f5:3a: be:ed:63:28:84:fd:ff:93:ad:64:0e:92:35:8d:32: d4:56:70:f0:c5:2b:de:86:4c:1d:d9:e7:33:45:45: 60:c5:d0:7d:56:7c:b3:4d:11:11:1a:06:82:c6:ea: 04:cd:ea:eb:e3:86:90:67:47:f6:93:e6:97:2f:08: 47:54:dc:56:6e:08:5c:8f:9e:5d:93:01:5f:f8:cb: f2:35:fa:21:4c:f0:c0:c0:29:da:cb:36:84:00:68: a3:9d:aa:6d:78:45:0f:4b:1f:36:a6:32:7c:07:00: 62:ac:86:d1:cf:fc:8c:a5:7a:c0:b3:94:b8:7b:72: 1d:04:1e:9b:35:59:5d:2e:1e:dd:be:92:f3:cc:fb: ed:89:99:20:a1:bb:89:d2:6e:d6:5f:2f:38:1b:33: e1:48:e7:b3:78:d1:1d:0e:61:bf:07:5b:96:b9:37: c4:43:73:46:53:80:69:83:9f:9b:ed:fb:15:4c:73: 2e:28:78:cb:d2:07:ad:ba:ef:dc:32:9d:0c:5b:03: b4:fb:a5:4f:5a:1e:6f:89:b1:8e:b7:ef:4c:f9:e9: ef:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:8E:B9:24:91:6A:07:5E:E9:23:36:65:78:5F:41:A3:0B:6C:BA:6B X509v3 Authority Key Identifier: keyid:C2:04:09:5D:0D:FA:29:CA:02:22:F4:C1:BE:5E:6A:9C:7F:E5:B5:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:5b:ba:bd:10:74:70:09:5b:cc:b1:1a:4b:55:b2:95:ef:6c: 41:b0:f2:91:d2:52:d0:cb:03:15:72:b2:0b:24:f9:ed:ba:0d: d7:a9:eb:36:d0:8f:2e:d9:ab:43:94:cc:43:a7:3d:79:e0:00: 10:6d:0d:f5:17:13:3e:42:06:09:1f:81:d9:b0:5e:6f:44:ee: ae:1b:9a:3d:87:aa:01:a8:b3:11:1c:74:10:26:2b:da:12:d6: 4c:8d:b2:af:41:e9:12:e1:f4:bb:c9:af:d6:27:7e:60:80:fe: d0:b1:97:a9:15:ec:ad:2e:6b:e9:02:98:1c:85:5f:4e:fb:97: 45:6c:53:fb:40:14:11:2c:c8:80:37:66:b0:03:c0:76:3d:39: 65:51:c6:5e:32:1f:4b:22:f7:eb:1b:4b:7d:99:e3:b5:02:2b: d6:ac:28:b8:cd:8f:4d:8e:66:e7:43:18:39:e5:3e:08:0a:50: ec:9a:27:fe:64:d0:ef:2a:b6:79:98:88:f7:7e:9b:bf:5a:d4: d1:20:bb:7a:31:07:0b:9c:b0:c7:ab:04:ad:f8:77:f9:82:15: 63:9f:67:16:a0:22:c8:72:17:9d:a5:34:e4:07:3f:96:ee:10: a7:86:8f:a2:3c:db:1a:63:32:0e:c5:64:19:3f:ac:37:7f:3b: e3:57:46:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG9P70u3YSKB8r8eIhD6hvQz1pmIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIwNDA5NUQwREZBMjlDQTAyMjJGNEMxQkU1RTZBOUM3 RkU1QjVDQzAeFw0yNjA5MTYyMjQyMDdaFw0yNjA5MTcyMzM2MDdaMDMxMTAvBgNV BAMTKDJCOEVCOTI0OTE2QTA3NUVFOTIzMzY2NTc4NUY0MUEzMEI2Q0JBNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKbZc9YYDTr43s5QLKSiAgm0Wy K2NbHzjuFcU0Jvk38AdkTsQunrUO1W71Or7tYyiE/f+TrWQOkjWNMtRWcPDFK96G TB3Z5zNFRWDF0H1WfLNNEREaBoLG6gTN6uvjhpBnR/aT5pcvCEdU3FZuCFyPnl2T AV/4y/I1+iFM8MDAKdrLNoQAaKOdqm14RQ9LHzamMnwHAGKshtHP/IylesCzlLh7 ch0EHps1WV0uHt2+kvPM++2JmSChu4nSbtZfLzgbM+FI57N40R0OYb8HW5a5N8RD c0ZTgGmDn5vt+xVMcy4oeMvSB62679wynQxbA7T7pU9aHm+JsY6370z56e/7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK465JJFqB17pIzZleF9BowtsumswHwYDVR0j BBgwFoAUwgQJXQ36KcoCIvTBvl5qnH/ltcwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjkwZDAyNjUtMmNjMS00NjNkLTk0OGItY2RlZDEzYTIwMjk1LzAvQzIwNDA5NUQw REZBMjlDQTAyMjJGNEMxQkU1RTZBOUM3RkU1QjVDQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DMjA0MDk1RDBERkEyOUNBMDIyMkY0QzFCRTVFNkE5QzdGRTVC NUNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjkwZDAyNjUtMmNjMS00NjNkLTk0 OGItY2RlZDEzYTIwMjk1LzAvQzIwNDA5NUQwREZBMjlDQTAyMjJGNEMxQkU1RTZB OUM3RkU1QjVDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFtbur0QdHAJW8yxGktVspXvbEGw8pHSUtDL AxVysgsk+e26Ddep6zbQjy7Zq0OUzEOnPXngABBtDfUXEz5CBgkfgdmwXm9E7q4b mj2HqgGosxEcdBAmK9oS1kyNsq9B6RLh9LvJr9YnfmCA/tCxl6kV7K0ua+kCmByF X077l0VsU/tAFBEsyIA3ZrADwHY9OWVRxl4yH0si9+sbS32Z47UCK9asKLjNj02O ZudDGDnlPggKUOyaJ/5k0O8qtnmYiPd+m79a1NEgu3oxBwucsMerBK34d/mCFWOf ZxagIshyF52lNOQHP5buEKeGj6I82xpjMg7FZBk/rDd/O+NXRmY= -----END CERTIFICATE-----Generated at Thu Sep 17 13:57:44 2026 by rpki-client