$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.mft File: C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.mft (raw, json) Hash identifier: t7A/Q5YZquI4VdkzlEQB+dTILIdZDuOGqZbgMZjc0a4= Subject key identifier: FE:F4:7A:4D:64:0E:58:78:F8:F6:2D:76:0C:3A:F4:2E:43:BE:D0:5C Authority key identifier: C2:D6:F5:B6:33:70:10:04:FE:FA:E2:24:34:8B:98:C8:C5:AF:5D:E4 Certificate issuer: /CN=C2D6F5B633701004FEFAE224348B98C8C5AF5DE4 Certificate serial: 3B01682019574A742B36E4EB789ABF85963C9111 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 00:24:04 +0000 Manifest this update: Thu 17 Sep 2026 00:19:04 +0000 Manifest next update: Fri 18 Sep 2026 04:13:04 +0000 Files and hashes: 1: C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.crl (hash: TwGGNHepEqthmW7JkaVx1I59iEWJm48O4XUYzpJVIqI=) 2: 3130332e39392e32372e302f32342d3234203d3e20313530323739.roa (hash: Ufj1irifhgIIf9Z+cJ8JRj8meHiqH+Kv6sNyd7Vy/bM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.crl rsync://rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:13:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:01:68:20:19:57:4a:74:2b:36:e4:eb:78:9a:bf:85:96:3c:91:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2D6F5B633701004FEFAE224348B98C8C5AF5DE4 Validity Not Before: Sep 17 00:19:04 2026 GMT Not After : Sep 18 04:13:04 2026 GMT Subject: CN=FEF47A4D640E5878F8F62D760C3AF42E43BED05C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0b:b2:9d:f1:c0:11:c2:71:0b:16:68:b6:4d: e3:8d:ed:46:b2:42:47:a3:66:e3:65:71:e1:c2:0c: e7:d7:05:8e:dc:5a:0e:c2:44:a5:19:77:97:01:c5: aa:5a:72:94:3c:61:ac:b1:d4:8c:3e:f2:28:c4:39: a5:39:29:6f:60:cb:f8:ee:4c:09:02:76:31:5c:5e: 0d:45:71:89:eb:1e:ba:a1:df:85:61:7e:4d:ac:28: ca:49:ef:d9:5b:d1:2b:dd:bf:14:1f:ab:7b:7e:82: b9:0b:b5:08:69:85:90:e8:06:6e:7d:de:e3:a2:f1: 9b:18:30:e9:f5:06:d5:9c:27:f6:ef:0b:b3:f5:37: 69:58:0e:a4:ea:20:a2:b1:32:3f:ec:0e:7a:c4:d1: ae:65:59:1b:dc:bc:78:f9:fa:b1:bc:5a:20:e6:76: 80:3c:a8:96:f3:93:60:19:1e:23:24:9b:1a:75:a3: 7d:11:3d:f7:e2:71:45:e1:a2:df:f3:34:0c:64:ce: da:c2:3b:42:8a:d5:da:85:76:df:7e:66:ba:ff:7a: 4a:7d:00:6c:4b:b7:91:ff:fe:ed:53:88:cd:a4:0f: 7b:37:ea:dc:73:c6:be:0c:03:6e:82:56:ae:45:bb: e3:25:b8:86:1f:f9:cc:34:77:3f:d5:80:1e:a0:df: cf:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F4:7A:4D:64:0E:58:78:F8:F6:2D:76:0C:3A:F4:2E:43:BE:D0:5C X509v3 Authority Key Identifier: keyid:C2:D6:F5:B6:33:70:10:04:FE:FA:E2:24:34:8B:98:C8:C5:AF:5D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:9d:fd:7b:83:18:55:2c:46:d1:96:21:80:5a:9a:14:f7:e8: b8:23:9b:27:26:47:a1:da:6b:aa:af:42:f6:1e:43:19:a5:9d: 48:6c:61:52:68:ec:1a:ba:1f:21:db:65:27:30:40:e6:14:b8: ad:b6:77:43:e2:59:c3:42:b5:e1:5b:fc:52:d7:d1:4e:15:3e: 14:64:ac:62:f2:07:e8:b2:f9:ca:76:c8:f2:aa:ae:84:c6:2a: 0a:1c:b1:27:d1:89:f5:c1:4e:68:97:be:81:86:84:65:fb:c4: b1:72:da:5d:93:37:19:6c:5d:8b:aa:cf:52:86:ad:11:4f:09: be:02:b9:28:60:0d:d2:92:a1:bf:99:5a:c6:53:af:e1:a6:61: b5:3d:d9:cd:b6:6c:51:94:8b:21:48:1d:39:cb:4c:2f:96:47: e2:8f:16:e4:c9:7d:f3:27:26:6f:03:a2:fa:43:98:af:e6:12: 23:16:5e:4c:bb:5e:8d:e7:49:da:6c:cc:25:61:ac:fd:c8:75: 0c:8c:87:ff:3d:19:57:1f:11:95:3d:af:b5:3c:a2:e6:75:e0: 39:02:df:fd:51:aa:81:a5:93:d7:58:97:ff:28:62:f2:c0:02: 09:5c:a3:a0:64:64:1b:3f:fa:3e:0d:41:3c:6f:43:b5:d7:ae: 5a:37:0e:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOwFoIBlXSnQrNuTreJq/hZY8kREwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJENkY1QjYzMzcwMTAwNEZFRkFFMjI0MzQ4Qjk4QzhD NUFGNURFNDAeFw0yNjA5MTcwMDE5MDRaFw0yNjA5MTgwNDEzMDRaMDMxMTAvBgNV BAMTKEZFRjQ3QTRENjQwRTU4NzhGOEY2MkQ3NjBDM0FGNDJFNDNCRUQwNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgC7Kd8cARwnELFmi2TeON7Uay QkejZuNlceHCDOfXBY7cWg7CRKUZd5cBxapacpQ8Yayx1Iw+8ijEOaU5KW9gy/ju TAkCdjFcXg1FcYnrHrqh34Vhfk2sKMpJ79lb0SvdvxQfq3t+grkLtQhphZDoBm59 3uOi8ZsYMOn1BtWcJ/bvC7P1N2lYDqTqIKKxMj/sDnrE0a5lWRvcvHj5+rG8WiDm doA8qJbzk2AZHiMkmxp1o30RPfficUXhot/zNAxkztrCO0KK1dqFdt9+Zrr/ekp9 AGxLt5H//u1TiM2kD3s36txzxr4MA26CVq5Fu+MluIYf+cw0dz/VgB6g389HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/vR6TWQOWHj49i12DDr0LkO+0FwwHwYDVR0j BBgwFoAUwtb1tjNwEAT++uIkNIuYyMWvXeQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjA5NzZlMjYtOTUxMy00OGZmLTlmN2YtZWEzZmRjZjNlMmU4LzAvQzJENkY1QjYz MzcwMTAwNEZFRkFFMjI0MzQ4Qjk4QzhDNUFGNURFNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMkQ2RjVCNjMzNzAxMDA0RkVGQUUyMjQzNDhCOThDOEM1QUY1 REU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjA5NzZlMjYtOTUxMy00OGZmLTlm N2YtZWEzZmRjZjNlMmU4LzAvQzJENkY1QjYzMzcwMTAwNEZFRkFFMjI0MzQ4Qjk4 QzhDNUFGNURFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACCd/XuDGFUsRtGWIYBamhT36LgjmycmR6Ha a6qvQvYeQxmlnUhsYVJo7Bq6HyHbZScwQOYUuK22d0PiWcNCteFb/FLX0U4VPhRk rGLyB+iy+cp2yPKqroTGKgocsSfRifXBTmiXvoGGhGX7xLFy2l2TNxlsXYuqz1KG rRFPCb4CuShgDdKSob+ZWsZTr+GmYbU92c22bFGUiyFIHTnLTC+WR+KPFuTJffMn Jm8DovpDmK/mEiMWXky7Xo3nSdpszCVhrP3IdQyMh/89GVcfEZU9r7U8ouZ14DkC 3/1RqoGlk9dYl/8oYvLAAglco6BkZBs/+j4NQTxvQ7XXrlo3DvI= -----END CERTIFICATE-----Generated at Thu Sep 17 10:44:53 2026 by rpki-client