$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.mft File: CD845730E45E4D531071D97C1EDC23DA378D662F.mft (raw, json) Hash identifier: Sobil4QNe311Kt/H282aDP+6us8BgRXXqxS4p07gxyc= Subject key identifier: CD:C3:5F:9B:83:3D:60:6F:8C:BB:8D:76:C7:27:40:A0:CF:87:4C:56 Authority key identifier: CD:84:57:30:E4:5E:4D:53:10:71:D9:7C:1E:DC:23:DA:37:8D:66:2F Certificate issuer: /CN=CD845730E45E4D531071D97C1EDC23DA378D662F Certificate serial: 1696B1696E0E3DF0124BD722800428F088E03959 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD845730E45E4D531071D97C1EDC23DA378D662F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 00:39:21 +0000 Manifest this update: Thu 17 Sep 2026 00:34:21 +0000 Manifest next update: Fri 18 Sep 2026 00:57:21 +0000 Files and hashes: 1: CD845730E45E4D531071D97C1EDC23DA378D662F.crl (hash: mhA7bnyc9BTRZL/HaXzyXenzA74OtApIoGgjHcqjRj4=) 2: 3130332e3131342e35332e302f32342d3234203d3e20313337333439.roa (hash: BgiKJc54U9vx0Bz6VAlgbJ7Gti2eL3QTE9xees67wzA=) 3: 3130332e3131342e35322e302f32342d3234203d3e20313337333439.roa (hash: qBRAe7C40tWA04dsJPNXkwqtoGUaunwx7S+rfFhu9ho=) 4: 3130332e3131342e35322e302f32332d3234203d3e20313337333439.roa (hash: ZyTKIgLUxCGhcIet/CFJoBSXRoiA7e9G+Kr6S5o0mEQ=) 5: 323030313a6466343a663330303a3a2f34382d3438203d3e20313337333439.roa (hash: lb4d9lrnmMWGai0ItqfgLnvKFt7iEuEC2HCE9pUg2nE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.crl rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD845730E45E4D531071D97C1EDC23DA378D662F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 00:57:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:96:b1:69:6e:0e:3d:f0:12:4b:d7:22:80:04:28:f0:88:e0:39:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD845730E45E4D531071D97C1EDC23DA378D662F Validity Not Before: Sep 17 00:34:21 2026 GMT Not After : Sep 18 00:57:21 2026 GMT Subject: CN=CDC35F9B833D606F8CBB8D76C72740A0CF874C56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:99:3c:49:93:35:23:07:5b:68:92:39:93:bf: 07:19:12:e4:d5:4e:34:c5:56:5f:cf:99:a5:ee:f2: 46:34:87:e4:eb:37:ce:88:1b:0f:a2:78:ca:96:f4: ca:4d:d1:7f:0b:87:20:6d:e2:2b:0a:10:75:f7:d3: c2:d4:25:a7:e7:17:65:48:42:e8:17:dd:2b:74:04: 6a:fb:3e:97:30:e3:cc:8b:ff:8f:f1:8f:4a:46:7a: 0e:fb:4c:f8:1b:ff:f4:1d:d6:88:12:e4:01:61:eb: a5:f3:b5:34:8f:da:a0:ce:1b:e1:cc:8a:a4:37:69: 92:5b:2e:a9:03:f1:f6:5e:40:2e:d5:0e:a1:00:91: 78:cf:0b:42:ad:f2:4f:28:65:83:73:91:ef:a7:ba: 03:39:07:ea:33:3b:36:94:96:c6:21:34:29:82:ed: 2f:69:06:11:19:b3:53:3e:0e:47:22:6b:bf:af:19: 35:cf:15:9c:02:8a:3f:a5:b4:ea:32:ae:9d:16:ff: f4:3d:2c:d5:59:77:f7:f7:23:9f:be:27:a1:6e:bb: 9a:8c:f9:d2:fa:ec:03:4e:0b:be:55:b5:7b:ca:4a: e3:a6:ca:6e:2d:10:ca:f3:75:f7:ed:33:10:d4:4f: 6d:bd:fa:00:18:7a:18:d9:c4:62:3c:7a:3b:8d:e9: 81:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:C3:5F:9B:83:3D:60:6F:8C:BB:8D:76:C7:27:40:A0:CF:87:4C:56 X509v3 Authority Key Identifier: keyid:CD:84:57:30:E4:5E:4D:53:10:71:D9:7C:1E:DC:23:DA:37:8D:66:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD845730E45E4D531071D97C1EDC23DA378D662F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:37:8c:62:99:ab:d7:8d:39:76:85:6e:27:7f:de:2b:0d:b5: c0:d7:e7:15:6a:fd:31:9e:00:1b:c8:5c:50:36:60:b2:ca:26: ba:a9:2c:62:6c:b6:2a:c0:02:57:05:bb:31:93:48:42:35:c0: 2a:33:49:e0:63:e0:63:5b:46:c5:0c:fb:55:e0:38:ef:b3:ad: 70:4e:85:bc:58:26:06:89:93:06:77:9d:54:92:ca:c9:36:ae: 89:0b:83:61:11:f1:89:1b:7b:b0:10:9b:55:9b:7b:30:39:b6: a0:98:8c:3e:45:96:68:d4:94:c8:85:ca:f5:c3:2e:c9:c2:a7: a7:a3:b6:6f:59:20:43:59:d0:7c:f7:db:60:18:51:a7:cd:fe: 38:43:91:ef:f4:18:b3:ac:5c:99:33:7e:4b:bb:79:59:c4:77: 7b:f7:51:af:2d:56:3a:f0:38:20:4f:a5:a6:b5:aa:c1:ba:ee: c5:34:09:43:08:99:b1:13:2d:ba:db:d1:32:0d:eb:73:28:f5: 7f:f0:fe:91:92:f6:e0:c7:06:7f:55:c5:df:b4:5b:1d:ee:5a: 6f:f0:c5:61:68:3f:52:5f:c1:bf:31:69:e4:c6:89:8f:f0:1a: 0a:83:c3:e3:55:0a:1d:4c:34:a1:db:b8:9c:c7:b0:27:5c:f5: 62:ae:08:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFpaxaW4OPfASS9cigAQo8IjgOVkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q4NDU3MzBFNDVFNEQ1MzEwNzFEOTdDMUVEQzIzREEz NzhENjYyRjAeFw0yNjA5MTcwMDM0MjFaFw0yNjA5MTgwMDU3MjFaMDMxMTAvBgNV BAMTKENEQzM1RjlCODMzRDYwNkY4Q0JCOEQ3NkM3Mjc0MEEwQ0Y4NzRDNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDmTxJkzUjB1tokjmTvwcZEuTV TjTFVl/PmaXu8kY0h+TrN86IGw+ieMqW9MpN0X8LhyBt4isKEHX308LUJafnF2VI QugX3St0BGr7Ppcw48yL/4/xj0pGeg77TPgb//Qd1ogS5AFh66XztTSP2qDOG+HM iqQ3aZJbLqkD8fZeQC7VDqEAkXjPC0Kt8k8oZYNzke+nugM5B+ozOzaUlsYhNCmC 7S9pBhEZs1M+Dkcia7+vGTXPFZwCij+ltOoyrp0W//Q9LNVZd/f3I5++J6Fuu5qM +dL67ANOC75VtXvKSuOmym4tEMrzdfftMxDUT229+gAYehjZxGI8ejuN6YFrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzcNfm4M9YG+Mu412xydAoM+HTFYwHwYDVR0j BBgwFoAUzYRXMOReTVMQcdl8Htwj2jeNZi8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDA5NjJjNmUtNTk1YS00N2M0LWFhN2MtZWY4ZTc3Y2FlNjQyLzAvQ0Q4NDU3MzBF NDVFNEQ1MzEwNzFEOTdDMUVEQzIzREEzNzhENjYyRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRDg0NTczMEU0NUU0RDUzMTA3MUQ5N0MxRURDMjNEQTM3OEQ2 NjJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDA5NjJjNmUtNTk1YS00N2M0LWFh N2MtZWY4ZTc3Y2FlNjQyLzAvQ0Q4NDU3MzBFNDVFNEQ1MzEwNzFEOTdDMUVEQzIz REEzNzhENjYyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ43jGKZq9eNOXaFbid/3isNtcDX5xVq/TGe ABvIXFA2YLLKJrqpLGJstirAAlcFuzGTSEI1wCozSeBj4GNbRsUM+1XgOO+zrXBO hbxYJgaJkwZ3nVSSysk2rokLg2ER8Ykbe7AQm1WbezA5tqCYjD5FlmjUlMiFyvXD LsnCp6ejtm9ZIENZ0Hz322AYUafN/jhDke/0GLOsXJkzfku7eVnEd3v3Ua8tVjrw OCBPpaa1qsG67sU0CUMImbETLbrb0TIN63Mo9X/w/pGS9uDHBn9Vxd+0Wx3uWm/w xWFoP1Jfwb8xaeTGiY/wGgqDw+NVCh1MNKHbuJzHsCdc9WKuCI8= -----END CERTIFICATE-----Generated at Thu Sep 17 12:33:06 2026 by rpki-client