$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/C8D04547C334902622C8D7CF29F3F1DC8B435B28.mft File: C8D04547C334902622C8D7CF29F3F1DC8B435B28.mft (raw, json) Hash identifier: irXevTySGi0Q+0HnCyyNTobWaAqma54MCTGwVDYDAdE= Subject key identifier: 68:7F:81:7C:3B:7C:76:EF:AB:BC:76:42:BE:4F:67:70:8B:32:3D:27 Authority key identifier: C8:D0:45:47:C3:34:90:26:22:C8:D7:CF:29:F3:F1:DC:8B:43:5B:28 Certificate issuer: /CN=C8D04547C334902622C8D7CF29F3F1DC8B435B28 Certificate serial: 34D280088DC0998E17CF897D4539E0045EB9E597 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D04547C334902622C8D7CF29F3F1DC8B435B28.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/C8D04547C334902622C8D7CF29F3F1DC8B435B28.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 14:13:43 +0000 Manifest this update: Wed 23 Sep 2026 14:08:43 +0000 Manifest next update: Thu 24 Sep 2026 17:28:43 +0000 Files and hashes: 1: C8D04547C334902622C8D7CF29F3F1DC8B435B28.crl (hash: p+gxx1pelNgFi05BeZo9YBZocAvCqkLz22B0aF2Ieew=) 2: 3130332e39352e3136302e302f32332d3234203d3e20313336313236.roa (hash: C54NnNs4f4gmLL9qO83WVBxOgZKL0rmUD589emvzz4I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/C8D04547C334902622C8D7CF29F3F1DC8B435B28.crl rsync://rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/C8D04547C334902622C8D7CF29F3F1DC8B435B28.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D04547C334902622C8D7CF29F3F1DC8B435B28.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 17:28:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:d2:80:08:8d:c0:99:8e:17:cf:89:7d:45:39:e0:04:5e:b9:e5:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8D04547C334902622C8D7CF29F3F1DC8B435B28 Validity Not Before: Sep 23 14:08:43 2026 GMT Not After : Sep 24 17:28:43 2026 GMT Subject: CN=687F817C3B7C76EFABBC7642BE4F67708B323D27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:61:52:fb:ff:37:91:1b:35:1f:84:6e:1a:05: ae:c3:9c:3a:54:c6:a5:33:df:ca:88:77:4f:85:87: d1:2c:c4:4e:5a:f5:dc:6f:62:73:a5:b1:26:10:0c: a8:83:4d:b6:b8:3f:d2:07:a0:fe:8d:c8:d6:32:dc: e8:30:62:f8:fc:2d:94:07:97:1f:a2:44:55:80:11: 26:a0:51:a2:6c:8b:bd:57:6b:9b:b5:d0:b4:de:b3: 92:fc:b2:e2:fb:20:c9:89:42:5d:b3:bd:0d:0c:a5: 81:35:f7:b2:59:9d:a3:11:db:b6:23:57:d0:fb:1a: e7:53:3c:e4:d9:99:fc:ac:51:a8:af:cf:2c:96:e8: 9e:d2:22:36:ca:33:a7:38:9e:c1:dc:bd:f3:e0:3a: b1:e7:66:e5:11:6d:f1:c4:1c:25:51:bb:49:35:77: 2c:4f:fc:bd:07:b1:cb:b3:49:80:fb:c5:3b:ea:16: 82:14:76:51:09:fd:81:2e:b4:15:b1:53:61:e6:ca: 53:89:77:9c:37:fe:aa:01:55:63:2e:56:ea:17:83: 7b:87:d1:68:f2:d5:a6:60:52:08:ac:e3:4c:28:96: 31:59:2b:0e:5d:88:83:31:d1:08:25:5a:b5:73:7f: f9:33:76:4e:9c:73:b0:fd:99:fb:63:76:40:47:d5: 1d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:7F:81:7C:3B:7C:76:EF:AB:BC:76:42:BE:4F:67:70:8B:32:3D:27 X509v3 Authority Key Identifier: keyid:C8:D0:45:47:C3:34:90:26:22:C8:D7:CF:29:F3:F1:DC:8B:43:5B:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/C8D04547C334902622C8D7CF29F3F1DC8B435B28.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D04547C334902622C8D7CF29F3F1DC8B435B28.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/C8D04547C334902622C8D7CF29F3F1DC8B435B28.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:bc:fd:a4:57:73:04:29:75:d5:2f:cd:14:69:83:31:e4:bb: 41:4c:9a:6e:1c:fd:a2:65:0f:34:a1:99:be:01:e5:ab:75:f8: 00:0e:bd:43:d8:98:d1:b7:a2:19:13:eb:13:76:13:3d:7a:df: 53:a2:93:6d:0f:01:90:2d:7b:5d:e9:08:fd:0a:03:8d:17:92: 34:7b:f9:fa:6d:31:45:25:b3:11:4a:4e:a4:6c:ea:3d:de:84: 96:53:29:4a:dc:7b:bd:6a:94:36:f2:cb:84:af:bc:1e:d6:68: 5b:5f:f3:83:5d:94:8f:37:a3:76:3a:d2:03:15:35:26:d6:c3: c9:13:64:b4:42:b8:59:a7:52:eb:28:2b:34:bd:cb:0d:66:a3: 5b:fc:aa:67:4f:82:62:b2:b4:b1:5a:81:08:be:25:4c:35:ac: 70:e5:31:63:af:40:a8:e9:2a:22:08:6c:0a:b4:04:2a:12:63: 5a:31:15:49:2c:9c:e9:33:26:de:c7:46:1a:4c:45:c9:c5:17: a4:38:d5:5e:9f:9d:b4:66:c1:89:f8:42:28:30:d9:f4:11:1c: 61:d6:de:10:0b:c0:50:58:21:af:46:ae:c9:1e:a2:c4:d1:46: fb:45:a3:75:c5:6e:92:69:83:b0:f3:6a:87:6b:da:86:46:b1: c1:46:4b:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNNKACI3AmY4Xz4l9RTngBF655ZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhEMDQ1NDdDMzM0OTAyNjIyQzhEN0NGMjlGM0YxREM4 QjQzNUIyODAeFw0yNjA5MjMxNDA4NDNaFw0yNjA5MjQxNzI4NDNaMDMxMTAvBgNV BAMTKDY4N0Y4MTdDM0I3Qzc2RUZBQkJDNzY0MkJFNEY2NzcwOEIzMjNEMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuYVL7/zeRGzUfhG4aBa7DnDpU xqUz38qId0+Fh9EsxE5a9dxvYnOlsSYQDKiDTba4P9IHoP6NyNYy3OgwYvj8LZQH lx+iRFWAESagUaJsi71Xa5u10LTes5L8suL7IMmJQl2zvQ0MpYE197JZnaMR27Yj V9D7GudTPOTZmfysUaivzyyW6J7SIjbKM6c4nsHcvfPgOrHnZuURbfHEHCVRu0k1 dyxP/L0HscuzSYD7xTvqFoIUdlEJ/YEutBWxU2HmylOJd5w3/qoBVWMuVuoXg3uH 0Wjy1aZgUgis40woljFZKw5diIMx0QglWrVzf/kzdk6cc7D9mftjdkBH1R0dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaH+BfDt8du+rvHZCvk9ncIsyPScwHwYDVR0j BBgwFoAUyNBFR8M0kCYiyNfPKfPx3ItDWygwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGE3NWQzNzEtMThjNy00OGRmLThmNjEtMWQ0MDRiNjQ2NDEzLzAvQzhEMDQ1NDdD MzM0OTAyNjIyQzhEN0NGMjlGM0YxREM4QjQzNUIyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOEQwNDU0N0MzMzQ5MDI2MjJDOEQ3Q0YyOUYzRjFEQzhCNDM1 QjI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGE3NWQzNzEtMThjNy00OGRmLThm NjEtMWQ0MDRiNjQ2NDEzLzAvQzhEMDQ1NDdDMzM0OTAyNjIyQzhEN0NGMjlGM0Yx REM4QjQzNUIyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALW8/aRXcwQpddUvzRRpgzHku0FMmm4c/aJl DzShmb4B5at1+AAOvUPYmNG3ohkT6xN2Ez1631Oik20PAZAte13pCP0KA40XkjR7 +fptMUUlsxFKTqRs6j3ehJZTKUrce71qlDbyy4SvvB7WaFtf84NdlI83o3Y60gMV NSbWw8kTZLRCuFmnUusoKzS9yw1mo1v8qmdPgmKytLFagQi+JUw1rHDlMWOvQKjp KiIIbAq0BCoSY1oxFUksnOkzJt7HRhpMRcnFF6Q41V6fnbRmwYn4Qigw2fQRHGHW 3hALwFBYIa9GrskeosTRRvtFo3XFbpJpg7Dzaodr2oZGscFGS2M= -----END CERTIFICATE-----Generated at Wed Sep 23 22:23:57 2026 by rpki-client