$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.mft File: CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.mft (raw, json) Hash identifier: CBNADfYt5SSbEuZftQDVfMifvIRHEVLo3nRcAUGEPBA= Subject key identifier: E4:E4:DE:D2:01:0A:64:A0:45:2C:F0:8F:38:C0:AF:75:C2:CB:C5:95 Authority key identifier: CD:47:4E:79:16:37:1A:E6:AC:CF:87:42:2C:4E:A8:D4:E5:3D:1E:D1 Certificate issuer: /CN=CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1 Certificate serial: 02B3995C714216E47475AC6D408C5E681074A8AA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.mft Manifest number: BA Signing time: Thu 17 Sep 2026 11:27:43 +0000 Manifest this update: Thu 17 Sep 2026 11:22:43 +0000 Manifest next update: Fri 18 Sep 2026 11:45:43 +0000 Files and hashes: 1: 3130332e35342e38322e302f32342d3234203d3e20313530353132.roa (hash: wOpjCYu2B/2dvfL2/p92TM51IsDnzUPICTzMvcgVUFY=) 2: CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.crl (hash: 7SZyCW+FIa4jwVwCLlhnxYpEJvAvT/21n10KY4snawY=) 3: 3130332e35342e38332e302f32342d3234203d3e20313530353132.roa (hash: yc9l1FWLsdkyL80KmG/CENv1nMl40+rlvUGHbaIRcrU=) 4: 3130332e35342e38322e302f32332d3233203d3e20313530353132.roa (hash: bbQqob1JTbWw2rvNr6s3TBx3HaklMvpVDZzpBLfCECs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.crl rsync://rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:b3:99:5c:71:42:16:e4:74:75:ac:6d:40:8c:5e:68:10:74:a8:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1 Validity Not Before: Sep 17 11:22:43 2026 GMT Not After : Sep 18 11:45:43 2026 GMT Subject: CN=E4E4DED2010A64A0452CF08F38C0AF75C2CBC595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:dd:72:75:25:43:7e:5d:54:1f:48:58:27:4b: 3d:b6:e4:fa:d7:d7:03:85:74:ee:18:41:25:32:25: 79:77:00:3f:71:5a:3a:de:e3:6b:2b:db:fe:30:c7: b3:fb:b2:df:56:05:cb:91:92:57:f3:e4:a9:92:6f: d1:fe:87:11:b9:72:1e:af:82:90:42:39:90:5d:ad: 45:0c:c8:bb:cc:81:17:28:47:2a:7a:af:f4:4b:db: 55:ee:28:86:f1:05:e0:98:54:76:b6:61:fc:fc:d1: ae:36:30:c4:5a:e1:0b:01:41:49:88:e7:ac:9b:c6: 33:03:91:20:8b:c2:a2:e5:e9:d0:5e:6f:91:21:ba: 2b:c2:c3:60:01:98:06:1d:9b:5f:93:57:a7:fe:6a: c4:65:74:b7:7c:e3:2a:ab:82:6a:84:c1:e2:f8:c8: 11:72:72:cf:fb:a9:f9:d4:bf:32:8e:4f:9b:c8:a9: 21:46:50:93:12:34:e9:5a:d1:42:aa:ed:f1:3a:89: c0:2a:f5:c8:db:f6:3c:d8:7b:67:26:73:0f:95:db: 15:57:27:2e:8f:4f:ad:37:17:5e:d9:a3:cc:52:62: 6b:8c:d3:d6:7a:3c:ff:ee:5b:4f:da:a5:cc:6f:1d: bf:fa:c9:38:39:a2:35:b8:5c:cb:69:d2:94:df:13: 5e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:E4:DE:D2:01:0A:64:A0:45:2C:F0:8F:38:C0:AF:75:C2:CB:C5:95 X509v3 Authority Key Identifier: keyid:CD:47:4E:79:16:37:1A:E6:AC:CF:87:42:2C:4E:A8:D4:E5:3D:1E:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:fa:9a:68:f8:1a:b6:7e:3a:9b:3e:96:fd:14:dd:f4:c1:8c: a6:76:ce:f5:df:a4:5d:88:2c:59:01:0b:52:e8:30:15:24:ca: ac:a2:6c:c2:53:bc:29:35:25:bf:3c:8b:f5:8c:11:03:93:e6: 80:c6:84:51:ea:1a:59:de:b8:f7:ad:bf:7a:81:62:77:a5:ec: 3d:08:6d:11:6c:9b:4e:66:49:34:00:09:dd:fd:af:c7:f2:ec: 8e:ab:30:7f:5e:b3:3a:26:88:27:39:88:0d:1a:73:4f:89:d2: b0:79:93:c6:b6:9f:e7:67:63:4c:ee:a8:78:0d:a4:a2:97:09: 0d:4a:4c:b6:3c:39:26:ee:6b:bc:83:3e:f8:f5:4b:47:5e:1d: fd:74:d2:91:d2:94:a5:5b:b4:42:d0:d4:1e:dc:85:a7:a5:1a: bd:73:0c:ed:30:ac:90:9e:64:5a:72:7a:9a:aa:d2:2e:56:a6: f0:1e:9b:77:cc:fa:5a:f5:2f:5b:75:53:5c:2a:12:eb:e0:a9: df:af:d5:58:ca:42:b4:48:03:ca:b5:3d:76:13:f5:d0:ed:22: 3d:98:b3:da:49:eb:23:35:64:64:75:7d:c1:8a:0f:c1:ae:de: 4c:1b:b0:35:1e:06:64:c0:b0:82:9a:24:2b:b8:07:ee:70:9a: 74:f5:42:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUArOZXHFCFuR0daxtQIxeaBB0qKowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q0NzRFNzkxNjM3MUFFNkFDQ0Y4NzQyMkM0RUE4RDRF NTNEMUVEMTAeFw0yNjA5MTcxMTIyNDNaFw0yNjA5MTgxMTQ1NDNaMDMxMTAvBgNV BAMTKEU0RTRERUQyMDEwQTY0QTA0NTJDRjA4RjM4QzBBRjc1QzJDQkM1OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCI3XJ1JUN+XVQfSFgnSz225PrX 1wOFdO4YQSUyJXl3AD9xWjre42sr2/4wx7P7st9WBcuRklfz5KmSb9H+hxG5ch6v gpBCOZBdrUUMyLvMgRcoRyp6r/RL21XuKIbxBeCYVHa2Yfz80a42MMRa4QsBQUmI 56ybxjMDkSCLwqLl6dBeb5EhuivCw2ABmAYdm1+TV6f+asRldLd84yqrgmqEweL4 yBFycs/7qfnUvzKOT5vIqSFGUJMSNOla0UKq7fE6icAq9cjb9jzYe2cmcw+V2xVX Jy6PT603F17Zo8xSYmuM09Z6PP/uW0/apcxvHb/6yTg5ojW4XMtp0pTfE17jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5OTe0gEKZKBFLPCPOMCvdcLLxZUwHwYDVR0j BBgwFoAUzUdOeRY3Guasz4dCLE6o1OU9HtEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZThkZTk0NjMtNjhhNy00NjJkLTk0MDgtYTdjMzljZTZlOGZmLzAvQ0Q0NzRFNzkx NjM3MUFFNkFDQ0Y4NzQyMkM0RUE4RDRFNTNEMUVEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRDQ3NEU3OTE2MzcxQUU2QUNDRjg3NDIyQzRFQThENEU1M0Qx RUQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZThkZTk0NjMtNjhhNy00NjJkLTk0 MDgtYTdjMzljZTZlOGZmLzAvQ0Q0NzRFNzkxNjM3MUFFNkFDQ0Y4NzQyMkM0RUE4 RDRFNTNEMUVEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIT6mmj4GrZ+Ops+lv0U3fTBjKZ2zvXfpF2I LFkBC1LoMBUkyqyibMJTvCk1Jb88i/WMEQOT5oDGhFHqGlneuPetv3qBYnel7D0I bRFsm05mSTQACd39r8fy7I6rMH9eszomiCc5iA0ac0+J0rB5k8a2n+dnY0zuqHgN pKKXCQ1KTLY8OSbua7yDPvj1S0deHf100pHSlKVbtELQ1B7chaelGr1zDO0wrJCe ZFpyepqq0i5WpvAem3fM+lr1L1t1U1wqEuvgqd+v1VjKQrRIA8q1PXYT9dDtIj2Y s9pJ6yM1ZGR1fcGKD8Gu3kwbsDUeBmTAsIKaJCu4B+5wmnT1Qos= -----END CERTIFICATE-----Generated at Thu Sep 17 14:28:16 2026 by rpki-client