$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.mft File: CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.mft (raw, json) Hash identifier: +HK8mneE1wpcwQL/kQuAcZeOnL3zQTH+guKA1jezfcY= Subject key identifier: DA:12:62:1A:51:7F:78:7C:71:6B:5C:53:02:65:D2:02:CA:20:3C:C7 Authority key identifier: CA:C3:A4:F2:1B:C8:F4:DF:A7:4E:85:15:1F:8B:3E:91:67:DA:57:84 Certificate issuer: /CN=CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784 Certificate serial: 350316C0F6187F6F60593A795A7B37F90BFE93D5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 22:11:23 +0000 Manifest this update: Wed 16 Sep 2026 22:06:23 +0000 Manifest next update: Fri 18 Sep 2026 01:01:23 +0000 Files and hashes: 1: 323030313a6466303a663830303a3a2f34382d3438203d3e203538333937.roa (hash: FIEaDVHIseW71OoASUCYpCwzUw7yf/gVIj4IdH47VZ0=) 2: 34332e3234352e3138302e302f32322d3234203d3e203538333937.roa (hash: tc2Aw1xglXhbLRMp6kuTfOMbUtYtC4WfWamomx8fpaI=) 3: CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.crl (hash: WkeR1lL4kl4yG1oP9pz9d59hafBeEkEZGDebsOv1SKU=) 4: 3130332e32332e32302e302f32322d3234203d3e203538333937.roa (hash: oj9tQCvDwCV4p4Hr9N9eWTF7U8CpjCR1vEULrbqMjA8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.crl rsync://rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 01:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:03:16:c0:f6:18:7f:6f:60:59:3a:79:5a:7b:37:f9:0b:fe:93:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784 Validity Not Before: Sep 16 22:06:23 2026 GMT Not After : Sep 18 01:01:23 2026 GMT Subject: CN=DA12621A517F787C716B5C530265D202CA203CC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f1:02:4c:04:5b:7e:a7:32:4f:cb:ed:b1:d1: 21:ee:cf:71:cb:d6:96:a1:a9:d3:97:d0:ed:54:69: 2a:53:bd:91:ee:df:e6:60:af:2c:54:04:f6:6f:7f: a1:7a:16:37:60:5e:2b:37:be:3a:e9:46:56:78:ec: b1:f8:80:23:9a:26:0c:20:49:a0:f4:03:59:7f:49: 6a:d2:26:06:47:1d:4a:5d:bf:66:b0:65:e5:d9:29: fc:23:7a:cf:ad:3e:86:5a:fe:fc:65:39:b0:88:74: 72:3d:19:33:9f:4a:08:42:64:57:6b:fb:fc:d4:bf: 2c:0b:05:fb:07:dc:54:f4:05:8e:51:96:70:f2:43: d8:34:e1:1e:47:bc:16:06:5b:7d:51:54:dc:e6:51: bb:59:ea:1c:ec:ee:0b:6a:26:05:c0:a3:7f:f7:1a: 76:ac:12:1b:26:8c:73:19:ef:20:3e:37:4c:86:28: 2a:86:12:2e:01:0e:19:ad:32:90:a9:96:04:3e:0a: ba:15:c4:d4:dd:bf:bd:ac:a2:4f:48:4c:8e:4a:9e: 11:33:ca:24:82:bc:51:72:01:08:1e:84:62:b4:7e: 63:96:61:04:fc:c3:38:e0:31:10:8f:36:81:89:5b: bf:90:aa:6e:0a:b0:97:39:ec:ab:10:5f:fd:85:38: 76:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:12:62:1A:51:7F:78:7C:71:6B:5C:53:02:65:D2:02:CA:20:3C:C7 X509v3 Authority Key Identifier: keyid:CA:C3:A4:F2:1B:C8:F4:DF:A7:4E:85:15:1F:8B:3E:91:67:DA:57:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:f6:78:3f:86:e1:58:c5:8f:77:a5:2d:88:06:5e:f5:e5:ea: 9b:50:9a:4b:27:5a:2c:87:74:ee:a8:20:9a:e8:f0:82:23:4a: 8b:5c:a5:73:31:65:4d:d8:5a:31:76:91:17:31:13:37:4c:d6: db:12:cd:8e:e8:24:f9:26:24:1c:d4:91:14:4d:35:f5:9d:5a: e1:41:c6:29:25:18:09:61:30:a8:bd:bd:42:09:4b:b2:02:3c: a7:6f:3d:3b:62:5b:21:c8:0a:4e:0d:94:3b:76:0d:d7:22:21: b6:cb:b9:1b:d0:96:83:b4:52:20:2e:36:44:d8:41:41:99:f8: 56:3b:ee:dc:39:e2:fb:79:02:9d:25:7b:55:8a:ec:1e:24:7b: 63:39:cf:68:e5:a0:c9:f0:25:4d:a5:08:04:4b:22:bb:c6:97: 11:0d:ed:8b:6c:fe:45:35:f4:bc:e4:af:6c:25:ab:77:0d:38: e7:9a:03:21:66:f2:36:ab:36:12:99:79:eb:38:69:3d:2b:61: 9a:32:10:19:1b:42:ef:ad:e6:0c:cd:09:22:c8:7a:3b:5b:bd: d5:bd:99:fa:e7:52:7c:55:dd:40:c6:c5:38:b6:e2:fb:35:a2: 25:e8:9a:9c:53:e9:e1:38:f9:bc:7a:5b:50:a0:47:d9:92:69: 30:56:8b:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNQMWwPYYf29gWTp5Wns3+Qv+k9UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FDM0E0RjIxQkM4RjRERkE3NEU4NTE1MUY4QjNFOTE2 N0RBNTc4NDAeFw0yNjA5MTYyMjA2MjNaFw0yNjA5MTgwMTAxMjNaMDMxMTAvBgNV BAMTKERBMTI2MjFBNTE3Rjc4N0M3MTZCNUM1MzAyNjVEMjAyQ0EyMDNDQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv8QJMBFt+pzJPy+2x0SHuz3HL 1pahqdOX0O1UaSpTvZHu3+ZgryxUBPZvf6F6FjdgXis3vjrpRlZ47LH4gCOaJgwg SaD0A1l/SWrSJgZHHUpdv2awZeXZKfwjes+tPoZa/vxlObCIdHI9GTOfSghCZFdr +/zUvywLBfsH3FT0BY5RlnDyQ9g04R5HvBYGW31RVNzmUbtZ6hzs7gtqJgXAo3/3 GnasEhsmjHMZ7yA+N0yGKCqGEi4BDhmtMpCplgQ+CroVxNTdv72sok9ITI5KnhEz yiSCvFFyAQgehGK0fmOWYQT8wzjgMRCPNoGJW7+Qqm4KsJc57KsQX/2FOHZHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2hJiGlF/eHxxa1xTAmXSAsogPMcwHwYDVR0j BBgwFoAUysOk8hvI9N+nToUVH4s+kWfaV4QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDhiOTg3MjItMWNiNC00MGQ0LWFjOGItYzNiY2EyYmNhMjE3LzAvQ0FDM0E0RjIx QkM4RjRERkE3NEU4NTE1MUY4QjNFOTE2N0RBNTc4NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUMzQTRGMjFCQzhGNERGQTc0RTg1MTUxRjhCM0U5MTY3REE1 Nzg0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDhiOTg3MjItMWNiNC00MGQ0LWFj OGItYzNiY2EyYmNhMjE3LzAvQ0FDM0E0RjIxQkM4RjRERkE3NEU4NTE1MUY4QjNF OTE2N0RBNTc4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGf2eD+G4VjFj3elLYgGXvXl6ptQmksnWiyH dO6oIJro8IIjSotcpXMxZU3YWjF2kRcxEzdM1tsSzY7oJPkmJBzUkRRNNfWdWuFB xiklGAlhMKi9vUIJS7ICPKdvPTtiWyHICk4NlDt2DdciIbbLuRvQloO0UiAuNkTY QUGZ+FY77tw54vt5Ap0le1WK7B4ke2M5z2jloMnwJU2lCARLIrvGlxEN7Yts/kU1 9Lzkr2wlq3cNOOeaAyFm8jarNhKZees4aT0rYZoyEBkbQu+t5gzNCSLIejtbvdW9 mfrnUnxV3UDGxTi24vs1oiXompxT6eE4+bx6W1CgR9mSaTBWiyc= -----END CERTIFICATE-----Generated at Thu Sep 17 12:19:26 2026 by rpki-client