$ rpki-client -vvvf rpki-rsync.idnic.net/repo/03ba0d38-ca62-4c2b-90e2-8eeeeb831860/0/0893307338D8D7BA55CC0C06279150A0C9FAC6CA.mft File: 0893307338D8D7BA55CC0C06279150A0C9FAC6CA.mft (raw, json) Hash identifier: /US4G9H11TJ3jgvSOfe2+Xg3AXqUaIL2dEFWMiUW5TE= Subject key identifier: DA:5E:2E:DF:3A:AC:CF:4F:CA:C8:53:BE:0A:59:A8:40:20:1B:90:32 Authority key identifier: 08:93:30:73:38:D8:D7:BA:55:CC:0C:06:27:91:50:A0:C9:FA:C6:CA Certificate issuer: /CN=0893307338D8D7BA55CC0C06279150A0C9FAC6CA Certificate serial: 1470A44E1C3809C14B9F86E7801DB004D54DCA22 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0893307338D8D7BA55CC0C06279150A0C9FAC6CA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/03ba0d38-ca62-4c2b-90e2-8eeeeb831860/0/0893307338D8D7BA55CC0C06279150A0C9FAC6CA.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 19:50:03 +0000 Manifest this update: Thu 24 Sep 2026 19:45:03 +0000 Manifest next update: Fri 25 Sep 2026 22:27:03 +0000 Files and hashes: 1: 0893307338D8D7BA55CC0C06279150A0C9FAC6CA.crl (hash: WypRaTCzwGNq0cT9nkkbUpcrD7mQ7xwPH+ipMQ9Pzmo=) 2: 3130332e3139382e312e302f32342d3234203d3e20313530393436.roa (hash: quvbYNmn/O14F1WsMTm8aak0xPXGeYxU82kt65bFRhY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/03ba0d38-ca62-4c2b-90e2-8eeeeb831860/0/0893307338D8D7BA55CC0C06279150A0C9FAC6CA.crl rsync://rpki-rsync.idnic.net/repo/03ba0d38-ca62-4c2b-90e2-8eeeeb831860/0/0893307338D8D7BA55CC0C06279150A0C9FAC6CA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0893307338D8D7BA55CC0C06279150A0C9FAC6CA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 22:27:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:70:a4:4e:1c:38:09:c1:4b:9f:86:e7:80:1d:b0:04:d5:4d:ca:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0893307338D8D7BA55CC0C06279150A0C9FAC6CA Validity Not Before: Sep 24 19:45:03 2026 GMT Not After : Sep 25 22:27:03 2026 GMT Subject: CN=DA5E2EDF3AACCF4FCAC853BE0A59A840201B9032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1b:9b:f7:2b:a9:af:cb:26:b6:44:10:a7:38: 99:17:ca:25:53:ed:3b:76:0b:57:81:44:a2:eb:9d: 9a:d9:4a:4d:6d:ca:8c:22:36:fb:af:13:a5:a2:2a: 51:1f:13:53:7f:43:a9:67:33:d6:01:f4:2d:35:06: 03:2b:e0:d5:b5:f3:14:a3:54:44:51:c3:95:00:b7: c8:d4:e1:c0:07:09:00:fc:ac:26:6e:ef:80:fe:c5: 25:3b:b2:a8:f8:2f:3c:89:e7:24:29:2b:1b:5d:a8: 7e:f1:91:6b:df:99:50:0c:22:9d:83:6d:a0:3e:b1: 47:5f:9f:b2:83:31:41:3e:b8:c2:63:21:99:82:c9: 7a:3d:2c:56:dd:c7:f9:c9:b8:b1:fa:f7:c5:43:e1: 02:ec:3e:6b:2d:db:b6:78:f1:05:ec:90:8f:46:d8: 76:90:b4:57:13:e3:51:06:69:f2:c6:5f:fa:9a:a4: a8:fc:c2:60:36:61:66:d8:72:ec:dc:8d:19:b1:12: 06:c8:7d:10:7c:e7:45:db:7b:07:26:15:64:d0:92: 22:de:fc:8e:68:e7:43:c3:8d:fe:a3:a7:8d:db:05: 65:4d:08:43:20:59:05:d6:e9:c7:68:b1:0b:07:6b: 70:2d:9c:1e:ac:9c:bf:3c:e8:b4:0c:47:29:31:4d: e5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:5E:2E:DF:3A:AC:CF:4F:CA:C8:53:BE:0A:59:A8:40:20:1B:90:32 X509v3 Authority Key Identifier: keyid:08:93:30:73:38:D8:D7:BA:55:CC:0C:06:27:91:50:A0:C9:FA:C6:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/03ba0d38-ca62-4c2b-90e2-8eeeeb831860/0/0893307338D8D7BA55CC0C06279150A0C9FAC6CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0893307338D8D7BA55CC0C06279150A0C9FAC6CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/03ba0d38-ca62-4c2b-90e2-8eeeeb831860/0/0893307338D8D7BA55CC0C06279150A0C9FAC6CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:29:db:72:7b:72:48:84:79:4d:df:4c:3b:e4:7c:c8:9a:b1: 89:ca:64:71:53:74:5c:84:07:ac:99:15:90:ac:78:77:e4:66: 03:c2:5f:3b:5b:08:a2:06:e0:bf:0e:44:e4:11:3a:64:a9:0d: fa:8a:56:ea:bb:45:b4:90:67:34:64:15:28:99:11:53:67:66: 98:f4:d9:aa:c6:14:8f:95:99:b7:a4:5b:be:89:3d:06:df:2f: 5d:06:56:e8:79:da:f2:6c:7a:3a:7e:85:f3:a7:c1:ff:15:ad: e8:76:0a:27:e3:f4:76:ca:32:34:e6:3d:4c:5e:4c:86:43:a7: a0:18:34:8c:8e:ca:09:b4:85:0e:7e:5c:bf:7a:1e:f9:8a:67: e2:22:ef:41:87:ee:51:44:97:2e:35:92:36:7e:e1:6b:50:e4: fa:1f:ed:16:bd:b9:cb:0c:4e:20:1c:ae:85:7e:95:50:95:03: fb:92:ae:81:20:67:d2:e5:b6:34:a1:9a:df:98:c5:a7:a2:9e: e0:af:ae:b1:bd:69:a8:73:8c:c5:e8:a6:ba:8a:b7:38:a4:5a: 26:c7:aa:5d:93:a7:64:09:33:54:d3:27:ce:e1:1d:66:b9:5e: 94:fa:bf:3f:37:fe:c9:a0:a6:80:04:7c:33:76:a8:3a:59:3a: cb:45:eb:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFHCkThw4CcFLn4bngB2wBNVNyiIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg5MzMwNzMzOEQ4RDdCQTU1Q0MwQzA2Mjc5MTUwQTBD OUZBQzZDQTAeFw0yNjA5MjQxOTQ1MDNaFw0yNjA5MjUyMjI3MDNaMDMxMTAvBgNV BAMTKERBNUUyRURGM0FBQ0NGNEZDQUM4NTNCRTBBNTlBODQwMjAxQjkwMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRG5v3K6mvyya2RBCnOJkXyiVT 7Tt2C1eBRKLrnZrZSk1tyowiNvuvE6WiKlEfE1N/Q6lnM9YB9C01BgMr4NW18xSj VERRw5UAt8jU4cAHCQD8rCZu74D+xSU7sqj4LzyJ5yQpKxtdqH7xkWvfmVAMIp2D baA+sUdfn7KDMUE+uMJjIZmCyXo9LFbdx/nJuLH698VD4QLsPmst27Z48QXskI9G 2HaQtFcT41EGafLGX/qapKj8wmA2YWbYcuzcjRmxEgbIfRB850XbewcmFWTQkiLe /I5o50PDjf6jp43bBWVNCEMgWQXW6cdosQsHa3AtnB6snL886LQMRykxTeXTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2l4u3zqsz0/KyFO+ClmoQCAbkDIwHwYDVR0j BBgwFoAUCJMwczjY17pVzAwGJ5FQoMn6xsowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDNiYTBkMzgtY2E2Mi00YzJiLTkwZTItOGVlZWViODMxODYwLzAvMDg5MzMwNzMz OEQ4RDdCQTU1Q0MwQzA2Mjc5MTUwQTBDOUZBQzZDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wODkzMzA3MzM4RDhEN0JBNTVDQzBDMDYyNzkxNTBBMEM5RkFD NkNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDNiYTBkMzgtY2E2Mi00YzJiLTkw ZTItOGVlZWViODMxODYwLzAvMDg5MzMwNzMzOEQ4RDdCQTU1Q0MwQzA2Mjc5MTUw QTBDOUZBQzZDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABkp23J7ckiEeU3fTDvkfMiasYnKZHFTdFyE B6yZFZCseHfkZgPCXztbCKIG4L8OROQROmSpDfqKVuq7RbSQZzRkFSiZEVNnZpj0 2arGFI+VmbekW76JPQbfL10GVuh52vJsejp+hfOnwf8Vreh2Cifj9HbKMjTmPUxe TIZDp6AYNIyOygm0hQ5+XL96HvmKZ+Ii70GH7lFEly41kjZ+4WtQ5Pof7Ra9ucsM TiAcroV+lVCVA/uSroEgZ9LltjShmt+YxaeinuCvrrG9aahzjMXoprqKtzikWibH ql2Tp2QJM1TTJ87hHWa5XpT6vz83/smgpoAEfDN2qDpZOstF65U= -----END CERTIFICATE-----Generated at Fri Sep 25 07:02:02 2026 by rpki-client