$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/10305EB1D756B8E205948FA9D96C07D30D5559C6.mft File: 10305EB1D756B8E205948FA9D96C07D30D5559C6.mft (raw, json) Hash identifier: KypAqaJ9IPz1mU3Eh82uK5TMbWn1Dpfw2FfbCM88UvE= Subject key identifier: AD:0F:5F:61:57:C0:98:B5:F3:A0:B4:72:BC:64:57:C4:D7:E8:F4:A8 Authority key identifier: 10:30:5E:B1:D7:56:B8:E2:05:94:8F:A9:D9:6C:07:D3:0D:55:59:C6 Certificate issuer: /CN=10305EB1D756B8E205948FA9D96C07D30D5559C6 Certificate serial: 577E379377BF3A359B922FAA21BD1465B79AE6BC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10305EB1D756B8E205948FA9D96C07D30D5559C6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/10305EB1D756B8E205948FA9D96C07D30D5559C6.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 04:18:50 +0000 Manifest this update: Thu 17 Sep 2026 04:13:50 +0000 Manifest next update: Fri 18 Sep 2026 06:28:50 +0000 Files and hashes: 1: 3131302e39322e37342e302f32332d3234203d3e203538333835.roa (hash: G6PGQreB8GGiXWbjNuIkvOBqamEXNRruYXzWZ5ntbWM=) 2: 3130332e3234362e3136392e302f32342d3234203d3e203538333835.roa (hash: wzVp735bfnp8XDnpMDExEB2u8d/EmF9ou01fz223/d4=) 3: 3130332e32382e3231382e302f32342d3234203d3e203538333835.roa (hash: w+xTBuxDVGZDvJln2gWD2TMLIgtp2a/JxAVQQSe/MJc=) 4: 10305EB1D756B8E205948FA9D96C07D30D5559C6.crl (hash: /Evr9VTOTzjjjWtG+4TFPp7q+kL4XLY7pSdMnKagvSI=) 5: 3130332e32332e3131362e302f32332d3234203d3e203538333835.roa (hash: xg8S5Jz4WdUD3Z66GOwGk02Rpx5TvYnlOCLFL6/urQw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/10305EB1D756B8E205948FA9D96C07D30D5559C6.crl rsync://rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/10305EB1D756B8E205948FA9D96C07D30D5559C6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10305EB1D756B8E205948FA9D96C07D30D5559C6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 06:28:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:7e:37:93:77:bf:3a:35:9b:92:2f:aa:21:bd:14:65:b7:9a:e6:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10305EB1D756B8E205948FA9D96C07D30D5559C6 Validity Not Before: Sep 17 04:13:50 2026 GMT Not After : Sep 18 06:28:50 2026 GMT Subject: CN=AD0F5F6157C098B5F3A0B472BC6457C4D7E8F4A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:bf:cd:a3:93:e7:89:57:1b:2d:3e:8b:84:0f: e3:2b:f1:28:bd:8c:3e:20:12:fc:a3:f7:1b:61:d4: 46:55:2a:d2:ec:a2:78:59:18:f1:22:c9:5e:b5:9d: 9b:bb:0b:97:10:14:b3:13:ab:16:b6:79:32:2d:da: 20:46:65:3d:0a:ec:25:c6:a0:2f:37:02:94:97:4e: 91:5e:37:a2:36:51:20:59:70:c8:f0:a2:49:6e:2a: 02:00:e0:c5:24:ac:2d:d7:d2:cb:73:25:be:5b:4e: 3f:b0:0e:ba:36:c3:28:20:ea:e9:51:0f:44:20:ec: 2d:a8:a5:43:f6:5b:8d:34:e3:7d:ca:55:bc:8b:b6: 6a:d4:34:c4:5b:6a:1d:3d:f2:71:92:08:16:c5:26: 35:a2:c5:87:78:b8:fd:72:de:50:51:27:95:ea:91: c1:65:2a:f2:76:21:16:92:5b:c5:87:d6:0d:37:7d: 58:ca:58:c1:4f:9e:93:83:ea:46:9b:02:53:41:f5: 63:02:7c:e9:00:f2:06:63:b1:af:60:0c:d7:7c:2d: 64:12:ae:3c:77:b8:46:d9:07:1a:84:ee:c6:ca:2f: 9c:6f:d9:04:34:0c:bf:b3:3a:52:df:61:4f:3a:79: 85:d9:84:63:d3:5d:b0:ad:db:72:09:ac:13:da:c1: 3d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:0F:5F:61:57:C0:98:B5:F3:A0:B4:72:BC:64:57:C4:D7:E8:F4:A8 X509v3 Authority Key Identifier: keyid:10:30:5E:B1:D7:56:B8:E2:05:94:8F:A9:D9:6C:07:D3:0D:55:59:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/10305EB1D756B8E205948FA9D96C07D30D5559C6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10305EB1D756B8E205948FA9D96C07D30D5559C6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/10305EB1D756B8E205948FA9D96C07D30D5559C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:c5:13:e9:19:20:13:ae:25:48:98:82:7a:c1:9e:91:71:d7: a5:21:9c:be:de:9f:8f:e0:5a:26:cc:61:d0:0a:91:5d:99:84: 4c:f7:ee:39:4a:1a:0a:bd:58:8a:b5:06:df:c0:0d:e0:f1:38: f7:74:ba:31:e8:3e:8f:23:b9:f5:57:41:be:16:47:cb:90:1b: 6c:7c:a8:ed:04:61:1b:68:4f:44:04:e7:43:49:f9:c8:87:3e: 7d:1f:f5:d3:a4:9e:74:f2:12:29:bf:0b:90:9e:49:90:87:0b: e7:d5:6e:72:2d:9a:26:1c:c2:06:0f:54:55:4b:a4:b6:8d:a8: 55:8e:f1:48:c4:cf:78:ab:75:79:41:d6:93:95:05:52:e3:bf: 8c:9a:ec:70:12:a0:37:0e:f7:ac:0c:44:c3:44:19:12:cc:cf: 0d:84:53:dc:4d:80:67:4b:c9:d7:d4:cf:9f:9c:d8:8a:c9:df: 23:f2:67:23:9e:6e:7d:88:c7:0d:f1:0e:b0:6b:dc:29:dc:9f: b2:a7:e9:4d:88:c9:63:3e:b9:84:94:d4:b0:10:bf:79:a7:cb: 9e:7a:54:1f:78:33:62:9d:b4:94:b0:9e:1b:78:04:00:b1:50: 0e:1b:f0:26:54:77:f8:66:f1:44:c5:e1:21:4f:ff:74:da:10: ef:36:a4:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV343k3e/OjWbki+qIb0UZbea5rwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTAzMDVFQjFENzU2QjhFMjA1OTQ4RkE5RDk2QzA3RDMw RDU1NTlDNjAeFw0yNjA5MTcwNDEzNTBaFw0yNjA5MTgwNjI4NTBaMDMxMTAvBgNV BAMTKEFEMEY1RjYxNTdDMDk4QjVGM0EwQjQ3MkJDNjQ1N0M0RDdFOEY0QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIv82jk+eJVxstPouED+Mr8Si9 jD4gEvyj9xth1EZVKtLsonhZGPEiyV61nZu7C5cQFLMTqxa2eTIt2iBGZT0K7CXG oC83ApSXTpFeN6I2USBZcMjwokluKgIA4MUkrC3X0stzJb5bTj+wDro2wygg6ulR D0Qg7C2opUP2W400433KVbyLtmrUNMRbah098nGSCBbFJjWixYd4uP1y3lBRJ5Xq kcFlKvJ2IRaSW8WH1g03fVjKWMFPnpOD6kabAlNB9WMCfOkA8gZjsa9gDNd8LWQS rjx3uEbZBxqE7sbKL5xv2QQ0DL+zOlLfYU86eYXZhGPTXbCt23IJrBPawT3XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrQ9fYVfAmLXzoLRyvGRXxNfo9KgwHwYDVR0j BBgwFoAUEDBesddWuOIFlI+p2WwH0w1VWcYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDM5MjUzODgtMzVjNi00MWQ3LTlkYzQtZGI0ZDExOGQxMzVhLzAvMTAzMDVFQjFE NzU2QjhFMjA1OTQ4RkE5RDk2QzA3RDMwRDU1NTlDNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMDMwNUVCMUQ3NTZCOEUyMDU5NDhGQTlEOTZDMDdEMzBENTU1 OUM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDM5MjUzODgtMzVjNi00MWQ3LTlk YzQtZGI0ZDExOGQxMzVhLzAvMTAzMDVFQjFENzU2QjhFMjA1OTQ4RkE5RDk2QzA3 RDMwRDU1NTlDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE/FE+kZIBOuJUiYgnrBnpFx16UhnL7en4/g WibMYdAKkV2ZhEz37jlKGgq9WIq1Bt/ADeDxOPd0ujHoPo8jufVXQb4WR8uQG2x8 qO0EYRtoT0QE50NJ+ciHPn0f9dOknnTyEim/C5CeSZCHC+fVbnItmiYcwgYPVFVL pLaNqFWO8UjEz3irdXlB1pOVBVLjv4ya7HASoDcO96wMRMNEGRLMzw2EU9xNgGdL ydfUz5+c2IrJ3yPyZyOebn2Ixw3xDrBr3Cncn7Kn6U2IyWM+uYSU1LAQv3mny556 VB94M2KdtJSwnht4BACxUA4b8CZUd/hm8UTF4SFP/3TaEO82pBg= -----END CERTIFICATE-----Generated at Thu Sep 17 09:31:30 2026 by rpki-client