$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.mft File: C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.mft (raw, json) Hash identifier: 59+Xjzyh0oVu97EwjU3WPGvG7WLQWUaEXAqkyVIbGcw= Subject key identifier: 79:4B:EB:C2:39:E6:CD:26:42:C4:01:4E:60:25:7A:71:82:93:AA:F5 Authority key identifier: C0:FD:03:30:B0:66:5A:32:4B:ED:EF:57:93:F7:3F:D4:FA:6F:30:C1 Certificate issuer: /CN=C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1 Certificate serial: 0DB32960466506B92EF3D0340EFE0F356C4843F0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 04:29:01 +0000 Manifest this update: Thu 17 Sep 2026 04:24:01 +0000 Manifest next update: Fri 18 Sep 2026 05:17:01 +0000 Files and hashes: 1: C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.crl (hash: 9PZ9lpVANODSqMfPESLOKyZ6Rsfe1wsxe5uY5viKqKI=) 2: 3136302e32352e3233362e302f32332d3234203d3e20313533313035.roa (hash: NFuKh4QURKhti5ts/RHCyWk9MjNgIHs/zpDCkdJPOO8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.crl rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:b3:29:60:46:65:06:b9:2e:f3:d0:34:0e:fe:0f:35:6c:48:43:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1 Validity Not Before: Sep 17 04:24:01 2026 GMT Not After : Sep 18 05:17:01 2026 GMT Subject: CN=794BEBC239E6CD2642C4014E60257A718293AAF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c5:65:97:5d:10:39:63:c1:18:00:07:91:a0: ce:6c:0a:49:38:7a:14:42:d6:9d:9b:0d:45:6b:62: f0:2d:46:1c:f1:ce:61:6f:e0:e9:16:c6:4e:27:1e: 69:cb:07:c7:84:e1:1f:fc:1d:a0:06:bd:29:98:42: c0:15:86:ed:84:37:31:fd:c3:9f:04:6e:7d:6a:1d: 4c:d2:03:bf:b8:46:e6:9f:00:16:2c:c6:92:e8:eb: 5e:4f:b3:cb:fa:40:78:35:b1:ee:77:3b:dd:2d:95: bc:04:1f:c1:3c:ff:f4:02:f0:35:ed:79:1e:2c:ee: f7:8d:98:d6:50:0f:21:95:74:61:41:bd:21:00:2c: 9e:0b:f0:1e:ff:e2:d4:18:50:61:1d:81:64:99:a2: cc:a4:d9:06:d3:cf:46:11:7b:43:e1:de:1e:e6:e1: e5:72:c0:af:8b:2e:34:be:f9:ee:78:a4:8e:28:13: 92:56:00:57:d5:2f:54:26:2b:73:f3:65:25:c1:f6: d7:50:61:c6:de:f8:62:8c:20:1e:39:d9:e7:01:47: 2b:07:38:ed:37:21:96:54:67:f3:40:8f:cb:88:ef: 00:94:35:b0:8e:c5:8b:3d:17:92:6d:53:44:cf:b8: 06:83:f2:d2:3a:7b:c5:27:48:73:be:56:4d:2b:5f: 40:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:4B:EB:C2:39:E6:CD:26:42:C4:01:4E:60:25:7A:71:82:93:AA:F5 X509v3 Authority Key Identifier: keyid:C0:FD:03:30:B0:66:5A:32:4B:ED:EF:57:93:F7:3F:D4:FA:6F:30:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:11:e3:f9:33:75:d9:c9:5f:1f:1e:01:af:15:77:dd:68:8e: af:ca:92:f6:56:6c:90:e1:76:ad:f3:df:37:91:13:c3:4a:a1: 69:c0:7e:f1:21:c7:4d:27:12:fb:d9:56:47:da:19:0d:7e:12: 22:bc:84:62:1a:38:82:7e:92:de:fe:80:32:b9:08:a3:1c:ab: 76:e3:df:83:8c:43:40:dd:c1:dc:24:48:55:6a:bd:55:2e:fd: 4a:89:83:29:1e:c8:23:ce:fa:30:9d:4b:20:59:b6:25:a7:8a: 63:80:5b:11:71:ce:5b:3e:c3:0d:cc:fb:bc:ba:4b:c6:02:a0: 81:af:32:62:ed:40:f9:45:ae:4b:33:da:4b:d9:58:71:89:89: ab:86:fb:4e:5b:71:8a:a6:90:f3:57:0e:54:65:ce:fb:fd:94: df:a3:9a:7d:7d:8a:a6:05:67:04:ad:88:87:1b:14:a7:c2:b0: 57:6e:ab:0f:1f:dd:b3:49:cf:e2:7d:9b:0d:f2:5b:cf:44:95: a2:41:bc:da:47:15:1f:a5:c6:ca:c6:fd:0d:d5:f0:3f:99:cc: 39:5b:86:c7:4f:6d:70:7f:40:04:f8:ee:22:54:38:d3:bb:ca: b5:63:21:4d:ea:71:ee:7b:4a:7b:60:fb:7d:f3:64:86:b9:79: b7:66:db:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDbMpYEZlBrku89A0Dv4PNWxIQ/AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBGRDAzMzBCMDY2NUEzMjRCRURFRjU3OTNGNzNGRDRG QTZGMzBDMTAeFw0yNjA5MTcwNDI0MDFaFw0yNjA5MTgwNTE3MDFaMDMxMTAvBgNV BAMTKDc5NEJFQkMyMzlFNkNEMjY0MkM0MDE0RTYwMjU3QTcxODI5M0FBRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFxWWXXRA5Y8EYAAeRoM5sCkk4 ehRC1p2bDUVrYvAtRhzxzmFv4OkWxk4nHmnLB8eE4R/8HaAGvSmYQsAVhu2ENzH9 w58Ebn1qHUzSA7+4RuafABYsxpLo615Ps8v6QHg1se53O90tlbwEH8E8//QC8DXt eR4s7veNmNZQDyGVdGFBvSEALJ4L8B7/4tQYUGEdgWSZosyk2QbTz0YRe0Ph3h7m 4eVywK+LLjS++e54pI4oE5JWAFfVL1QmK3PzZSXB9tdQYcbe+GKMIB452ecBRysH OO03IZZUZ/NAj8uI7wCUNbCOxYs9F5JtU0TPuAaD8tI6e8UnSHO+Vk0rX0ALAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeUvrwjnmzSZCxAFOYCV6cYKTqvUwHwYDVR0j BBgwFoAUwP0DMLBmWjJL7e9Xk/c/1PpvMMEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGVjMmExYWMtNWFlNC00N2FkLThkYjEtNjUyYzdmM2Y3ZThmLzAvQzBGRDAzMzBC MDY2NUEzMjRCRURFRjU3OTNGNzNGRDRGQTZGMzBDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DMEZEMDMzMEIwNjY1QTMyNEJFREVGNTc5M0Y3M0ZENEZBNkYz MEMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGVjMmExYWMtNWFlNC00N2FkLThk YjEtNjUyYzdmM2Y3ZThmLzAvQzBGRDAzMzBCMDY2NUEzMjRCRURFRjU3OTNGNzNG RDRGQTZGMzBDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGIR4/kzddnJXx8eAa8Vd91ojq/KkvZWbJDh dq3z3zeRE8NKoWnAfvEhx00nEvvZVkfaGQ1+EiK8hGIaOIJ+kt7+gDK5CKMcq3bj 34OMQ0DdwdwkSFVqvVUu/UqJgykeyCPO+jCdSyBZtiWnimOAWxFxzls+ww3M+7y6 S8YCoIGvMmLtQPlFrksz2kvZWHGJiauG+05bcYqmkPNXDlRlzvv9lN+jmn19iqYF ZwStiIcbFKfCsFduqw8f3bNJz+J9mw3yW89ElaJBvNpHFR+lxsrG/Q3V8D+ZzDlb hsdPbXB/QAT47iJUONO7yrVjIU3qce57Sntg+33zZIa5ebdm280= -----END CERTIFICATE-----Generated at Thu Sep 17 14:21:38 2026 by rpki-client