$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/994E7625F275D75C44DFB4A7ADF4842506F11789.mft File: 994E7625F275D75C44DFB4A7ADF4842506F11789.mft (raw, json) Hash identifier: ku6GArta0Rb8K/041wSaU3bAXIHhECssri+X+S15/AU= Subject key identifier: 26:2A:07:87:E9:A3:A8:BA:35:46:C8:39:6B:09:2E:8B:95:DF:28:39 Authority key identifier: 99:4E:76:25:F2:75:D7:5C:44:DF:B4:A7:AD:F4:84:25:06:F1:17:89 Certificate issuer: /CN=994E7625F275D75C44DFB4A7ADF4842506F11789 Certificate serial: 2CC99C7A05F8545C3AB998752208A1E108DCDA28 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/994E7625F275D75C44DFB4A7ADF4842506F11789.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/994E7625F275D75C44DFB4A7ADF4842506F11789.mft Manifest number: C5 Signing time: Sun 27 Sep 2026 05:46:39 +0000 Manifest this update: Sun 27 Sep 2026 05:41:39 +0000 Manifest next update: Mon 28 Sep 2026 08:00:39 +0000 Files and hashes: 1: 323030313a6466333a653563303a3a2f34382d3438203d3e20313430343233.roa (hash: r8HkCpINzf8MUL+ZwgRHMLjx/E/uKIxBx07xyWJ8oXY=) 2: 994E7625F275D75C44DFB4A7ADF4842506F11789.crl (hash: /RNmVcyyHYXWjHzP7l6Lu/rauHOzCgM2jYg++gulksk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/994E7625F275D75C44DFB4A7ADF4842506F11789.crl rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/994E7625F275D75C44DFB4A7ADF4842506F11789.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/994E7625F275D75C44DFB4A7ADF4842506F11789.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:55:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:c9:9c:7a:05:f8:54:5c:3a:b9:98:75:22:08:a1:e1:08:dc:da:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994E7625F275D75C44DFB4A7ADF4842506F11789 Validity Not Before: Sep 27 05:41:39 2026 GMT Not After : Sep 28 08:00:39 2026 GMT Subject: CN=262A0787E9A3A8BA3546C8396B092E8B95DF2839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b9:fb:3a:74:4c:ce:21:d4:55:e2:e7:ac:f4: 2d:b8:3f:bd:a5:e6:12:f7:ec:97:c5:f7:a6:e7:d7: 3a:10:29:94:dd:97:85:2e:cb:87:79:0e:55:ee:df: 5e:12:21:69:fb:c9:4b:f5:a8:d1:13:03:97:74:63: e4:93:7e:ea:12:b8:d0:44:06:fe:44:f4:40:08:0c: 45:02:de:77:b4:76:7d:44:4e:fd:2a:57:a4:b7:f1: bd:de:25:b4:52:3d:aa:e4:5e:11:1d:65:67:84:87: 91:75:65:c0:f5:28:20:40:20:8c:82:31:d2:80:d6: ca:ba:07:40:68:8f:f1:98:64:9d:fa:e1:bb:82:26: 05:af:99:32:92:62:3d:7d:ae:77:cc:57:a2:b0:33: e3:c9:19:51:b5:36:0c:bb:40:2a:6e:b4:c7:3e:c0: db:98:e6:37:4f:5b:20:f5:90:a7:88:13:56:94:fe: 1a:85:ea:ff:11:64:92:b6:f8:de:67:71:2e:c6:45: 80:98:8f:2a:33:10:20:f2:bc:7a:3a:e5:06:93:7f: 6d:4c:d0:1c:13:dc:4a:02:d5:a8:7d:fe:04:8c:2c: b3:8a:41:8e:b8:a8:3d:6b:5a:ca:f8:85:e0:f4:bf: 29:5c:0c:92:c4:a7:84:d5:e1:69:c0:db:f3:f3:98: bb:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:2A:07:87:E9:A3:A8:BA:35:46:C8:39:6B:09:2E:8B:95:DF:28:39 X509v3 Authority Key Identifier: keyid:99:4E:76:25:F2:75:D7:5C:44:DF:B4:A7:AD:F4:84:25:06:F1:17:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/994E7625F275D75C44DFB4A7ADF4842506F11789.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/994E7625F275D75C44DFB4A7ADF4842506F11789.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/994E7625F275D75C44DFB4A7ADF4842506F11789.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:f1:38:86:fb:25:b0:8a:5e:5c:a3:57:98:31:d3:7d:2f:18: dc:57:12:8a:e9:91:f6:82:46:94:5b:67:a9:36:eb:86:7e:6f: 7b:f2:d2:64:2f:2f:0c:19:b1:00:f3:1e:55:73:f1:28:13:2f: 6b:2c:11:7c:c2:06:8c:5f:72:d5:c0:fa:11:6f:aa:7a:f7:6d: f6:cd:e4:53:09:95:7b:e2:78:15:75:2b:c3:6d:02:59:0d:ab: a8:5c:5c:4e:0b:fa:01:32:43:93:3a:ee:50:e4:a2:73:b4:86: bc:2a:ba:c3:9c:61:80:ee:54:a1:3c:2e:2b:ce:c2:63:fc:53: 78:20:0e:62:e0:92:ec:14:a7:0a:c1:47:24:6d:99:87:c0:88: f9:0e:87:95:cc:b5:10:93:fa:59:b0:03:8e:b3:d6:ba:79:95: b0:e2:41:f3:a2:6a:61:d9:7e:f8:11:aa:88:31:f8:0b:a2:52: 19:65:bb:62:69:c9:e0:d1:bf:22:33:38:17:2b:f7:e4:b5:01: 4d:ff:81:bf:11:7d:21:b6:0b:a9:b4:98:40:ca:e7:39:32:b3: b1:f1:ff:2c:72:f0:d3:31:bf:f7:3b:63:d7:c7:85:35:10:1a: 26:79:f7:e9:40:6d:d9:ab:2d:f7:25:b3:bc:a4:6e:25:6d:c9: 7a:85:ed:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULMmcegX4VFw6uZh1Igih4Qjc2igwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk0RTc2MjVGMjc1RDc1QzQ0REZCNEE3QURGNDg0MjUw NkYxMTc4OTAeFw0yNjA5MjcwNTQxMzlaFw0yNjA5MjgwODAwMzlaMDMxMTAvBgNV BAMTKDI2MkEwNzg3RTlBM0E4QkEzNTQ2QzgzOTZCMDkyRThCOTVERjI4MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYufs6dEzOIdRV4ues9C24P72l 5hL37JfF96bn1zoQKZTdl4Uuy4d5DlXu314SIWn7yUv1qNETA5d0Y+STfuoSuNBE Bv5E9EAIDEUC3ne0dn1ETv0qV6S38b3eJbRSParkXhEdZWeEh5F1ZcD1KCBAIIyC MdKA1sq6B0Boj/GYZJ364buCJgWvmTKSYj19rnfMV6KwM+PJGVG1Ngy7QCputMc+ wNuY5jdPWyD1kKeIE1aU/hqF6v8RZJK2+N5ncS7GRYCYjyozECDyvHo65QaTf21M 0BwT3EoC1ah9/gSMLLOKQY64qD1rWsr4heD0vylcDJLEp4TV4WnA2/PzmLv1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJioHh+mjqLo1Rsg5awkui5XfKDkwHwYDVR0j BBgwFoAUmU52JfJ111xE37SnrfSEJQbxF4kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGVjNjc3ZmQtZDU2OS00Y2M1LWE1NjMtOWIwZjI0OGIxYWYxLzEvOTk0RTc2MjVG Mjc1RDc1QzQ0REZCNEE3QURGNDg0MjUwNkYxMTc4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OTRFNzYyNUYyNzVENzVDNDRERkI0QTdBREY0ODQyNTA2RjEx Nzg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGVjNjc3ZmQtZDU2OS00Y2M1LWE1 NjMtOWIwZjI0OGIxYWYxLzEvOTk0RTc2MjVGMjc1RDc1QzQ0REZCNEE3QURGNDg0 MjUwNkYxMTc4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFHxOIb7JbCKXlyjV5gx030vGNxXEorpkfaC RpRbZ6k264Z+b3vy0mQvLwwZsQDzHlVz8SgTL2ssEXzCBoxfctXA+hFvqnr3bfbN 5FMJlXvieBV1K8NtAlkNq6hcXE4L+gEyQ5M67lDkonO0hrwqusOcYYDuVKE8LivO wmP8U3ggDmLgkuwUpwrBRyRtmYfAiPkOh5XMtRCT+lmwA46z1rp5lbDiQfOiamHZ fvgRqogx+AuiUhllu2JpyeDRvyIzOBcr9+S1AU3/gb8RfSG2C6m0mEDK5zkys7Hx /yxy8NMxv/c7Y9fHhTUQGiZ59+lAbdmrLfcls7ykbiVtyXqF7To= -----END CERTIFICATE-----Generated at Sun Sep 27 18:09:00 2026 by rpki-client