$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.mft File: C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.mft (raw, json) Hash identifier: Dfw5lWxp2MWxfUxg/xmqUtJfOjxG3FAImfW5CE3qMQo= Subject key identifier: B8:EB:D2:23:79:A2:6F:66:DC:D3:1A:75:E0:9B:C5:FC:01:91:78:07 Authority key identifier: C1:DC:78:2A:98:D3:C6:27:17:02:25:6C:CC:BD:AC:64:F6:EE:AB:8B Certificate issuer: /CN=C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B Certificate serial: 5B09FB4CA1295C9309DE5CA9B5D0F7E34EC816E3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 21:56:01 +0000 Manifest this update: Wed 16 Sep 2026 21:51:01 +0000 Manifest next update: Thu 17 Sep 2026 22:58:01 +0000 Files and hashes: 1: 323430343a326338303a3a2f33322d3438203d3e20313334363433.roa (hash: xWKM6w+YSqs8CfkUMCmv6mPauJooeyQJc7wELxHZfDg=) 2: C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.crl (hash: 2++fdL0OxArFTERRtlvYldbuICQdPJh/cvpLVG0plNc=) 3: 3130332e3230372e39362e302f32322d3234203d3e20313334363433.roa (hash: wsXzxXCk1I7Qrxi94/hj3J6ZauZ6tEjgsgeblQtUnRE=) 4: 3130332e3230372e39362e302f32322d3234203d3e20313430343730.roa (hash: Xv3thArRVC/1LFshdjbWa2Y+Md6/zXlchWEGOIatNuo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.crl rsync://rpki-rsync.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 22:58:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:09:fb:4c:a1:29:5c:93:09:de:5c:a9:b5:d0:f7:e3:4e:c8:16:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B Validity Not Before: Sep 16 21:51:01 2026 GMT Not After : Sep 17 22:58:01 2026 GMT Subject: CN=B8EBD22379A26F66DCD31A75E09BC5FC01917807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f2:c9:c0:83:0e:09:62:3a:65:27:a6:ac:20: cd:53:84:9b:40:34:ff:5e:3d:db:e0:38:7e:e1:ff: 0f:fe:f1:18:dc:02:e9:0c:b7:55:85:df:7c:d8:75: 77:93:cc:38:38:2e:77:99:3c:6f:48:c5:64:e3:da: 0a:2b:75:8a:a6:86:50:f1:c7:3c:73:7d:4d:e0:85: 23:85:61:d9:2a:83:29:b3:fd:87:fb:ed:ca:43:6a: d9:7b:17:0b:95:fa:62:bd:f8:48:d0:73:e3:26:38: 25:35:0d:c6:e7:e7:54:6f:4b:49:d1:e6:31:44:32: d8:67:b9:d7:67:c4:fe:62:38:67:5c:b7:fa:00:e2: f1:ce:b5:27:04:3e:8b:b9:5f:64:9f:fe:30:6d:b4: a2:17:c6:4d:d7:4b:9d:5b:e3:7d:f2:61:a4:85:d3: 6f:32:60:65:d7:fb:e5:a0:d6:c7:1f:2b:8b:66:52: 53:fc:36:fb:9c:60:1d:cd:40:f5:27:95:04:56:b9: 6b:f2:0a:21:f9:e9:63:a2:a0:61:90:9e:19:47:71: be:2c:2e:ba:0a:75:19:b2:1d:f1:9f:05:ef:3c:c7: 12:97:82:f4:54:6e:0e:92:7d:49:8d:d8:9e:15:f6: dd:bb:0b:a6:54:1f:5f:94:bc:71:65:c4:43:2e:a9: 48:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:EB:D2:23:79:A2:6F:66:DC:D3:1A:75:E0:9B:C5:FC:01:91:78:07 X509v3 Authority Key Identifier: keyid:C1:DC:78:2A:98:D3:C6:27:17:02:25:6C:CC:BD:AC:64:F6:EE:AB:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:1e:b0:fc:bc:9b:97:ca:c2:fc:f1:46:79:5a:df:19:b5:e9: 42:ac:bd:89:ae:e3:15:58:db:80:b4:06:a0:45:db:f0:b7:74: 7b:75:d5:ff:68:38:12:e8:73:9f:2d:ae:8c:00:78:0e:bc:c4: 6c:64:e6:9b:ef:99:78:ff:7b:d8:28:d3:59:c1:37:ac:f7:37: bf:9e:5f:e4:50:ad:d9:0d:da:0e:d8:ef:4a:96:c2:ca:f3:fa: 69:54:b3:b8:02:a4:f7:c7:98:7b:10:3a:07:08:2e:da:0a:97: 25:c4:45:8d:c7:49:39:2e:6f:f8:a7:b1:52:77:bd:2b:5e:66: 99:a7:5c:28:2c:b9:66:2a:5b:6b:f7:04:cc:1a:45:67:01:66: 72:94:ef:e4:5e:e4:49:9d:83:d7:a6:4d:7c:a1:8f:b3:32:8e: a0:56:ca:54:c9:c1:c2:4e:32:cc:09:c2:a6:f9:38:06:a0:62: ec:13:b9:65:54:9e:45:4b:94:57:90:bd:76:5e:87:bf:ec:12: 5b:c6:19:7a:18:51:bb:34:7e:81:fb:41:b4:e5:46:cb:73:ab: 3e:38:d3:ed:d1:3a:8d:6c:11:45:d0:44:ba:ab:e1:56:58:3a: dc:95:9c:3b:b4:ff:28:fa:cd:e0:8c:04:74:70:5a:0b:a1:e9: 8b:d2:65:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWwn7TKEpXJMJ3lyptdD3407IFuMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFEQzc4MkE5OEQzQzYyNzE3MDIyNTZDQ0NCREFDNjRG NkVFQUI4QjAeFw0yNjA5MTYyMTUxMDFaFw0yNjA5MTcyMjU4MDFaMDMxMTAvBgNV BAMTKEI4RUJEMjIzNzlBMjZGNjZEQ0QzMUE3NUUwOUJDNUZDMDE5MTc4MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo8snAgw4JYjplJ6asIM1ThJtA NP9ePdvgOH7h/w/+8RjcAukMt1WF33zYdXeTzDg4LneZPG9IxWTj2gordYqmhlDx xzxzfU3ghSOFYdkqgymz/Yf77cpDatl7FwuV+mK9+EjQc+MmOCU1Dcbn51RvS0nR 5jFEMthnuddnxP5iOGdct/oA4vHOtScEPou5X2Sf/jBttKIXxk3XS51b433yYaSF 028yYGXX++Wg1scfK4tmUlP8NvucYB3NQPUnlQRWuWvyCiH56WOioGGQnhlHcb4s LroKdRmyHfGfBe88xxKXgvRUbg6SfUmN2J4V9t27C6ZUH1+UvHFlxEMuqUh3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuOvSI3mib2bc0xp14JvF/AGReAcwHwYDVR0j BBgwFoAUwdx4KpjTxicXAiVszL2sZPbuq4swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjI2ZTQ1NjQtNDhmMi00M2I1LTg1MDUtOTNiNDk4ZTdkOGFiLzAvQzFEQzc4MkE5 OEQzQzYyNzE3MDIyNTZDQ0NCREFDNjRGNkVFQUI4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMURDNzgyQTk4RDNDNjI3MTcwMjI1NkNDQ0JEQUM2NEY2RUVB QjhCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjI2ZTQ1NjQtNDhmMi00M2I1LTg1 MDUtOTNiNDk4ZTdkOGFiLzAvQzFEQzc4MkE5OEQzQzYyNzE3MDIyNTZDQ0NCREFD NjRGNkVFQUI4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHcesPy8m5fKwvzxRnla3xm16UKsvYmu4xVY 24C0BqBF2/C3dHt11f9oOBLoc58trowAeA68xGxk5pvvmXj/e9go01nBN6z3N7+e X+RQrdkN2g7Y70qWwsrz+mlUs7gCpPfHmHsQOgcILtoKlyXERY3HSTkub/insVJ3 vSteZpmnXCgsuWYqW2v3BMwaRWcBZnKU7+Re5Emdg9emTXyhj7MyjqBWylTJwcJO MswJwqb5OAagYuwTuWVUnkVLlFeQvXZeh7/sElvGGXoYUbs0foH7QbTlRstzqz44 0+3ROo1sEUXQRLqr4VZYOtyVnDu0/yj6zeCMBHRwWguh6YvSZa8= -----END CERTIFICATE-----Generated at Thu Sep 17 09:22:54 2026 by rpki-client