$ rpki-client -vvvf rpki-rsync.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/993E93A0664A9D902D978F3596929ADCAC0D2885.mft File: 993E93A0664A9D902D978F3596929ADCAC0D2885.mft (raw, json) Hash identifier: zodTY88L6MJ1n0QXdOLlmAu8yZG7LgXASZOQquPJ5Jc= Subject key identifier: 55:8A:AA:D9:5D:82:E5:F9:0F:23:84:DB:09:85:64:97:9A:26:2A:AA Authority key identifier: 99:3E:93:A0:66:4A:9D:90:2D:97:8F:35:96:92:9A:DC:AC:0D:28:85 Certificate issuer: /CN=993E93A0664A9D902D978F3596929ADCAC0D2885 Certificate serial: 49E82C9CA14BB4F614EB40BE065BBFC4B6729EFB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/993E93A0664A9D902D978F3596929ADCAC0D2885.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/993E93A0664A9D902D978F3596929ADCAC0D2885.mft Manifest number: CA Signing time: Wed 30 Sep 2026 17:47:51 +0000 Manifest this update: Wed 30 Sep 2026 17:42:51 +0000 Manifest next update: Thu 01 Oct 2026 18:10:51 +0000 Files and hashes: 1: 3130332e35332e3138342e302f32332d3234203d3e203633383734.roa (hash: 5aAX0IVwi9Xgk1AjsNPK5oymgMFcjVvUxV24RP5spu8=) 2: 3130332e38352e3131362e302f32332d3234203d3e203633383734.roa (hash: poDQZ/2rD8eLtkNhMBfgdpUsz7sf37vpupMVDHqtCB8=) 3: 993E93A0664A9D902D978F3596929ADCAC0D2885.crl (hash: FOcsmuR+jCeyh/lO9kRg55a6MfKeeLMDypajgkM90hs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/993E93A0664A9D902D978F3596929ADCAC0D2885.crl rsync://rpki-rsync.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/993E93A0664A9D902D978F3596929ADCAC0D2885.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/993E93A0664A9D902D978F3596929ADCAC0D2885.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 18:10:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:e8:2c:9c:a1:4b:b4:f6:14:eb:40:be:06:5b:bf:c4:b6:72:9e:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=993E93A0664A9D902D978F3596929ADCAC0D2885 Validity Not Before: Sep 30 17:42:51 2026 GMT Not After : Oct 1 18:10:51 2026 GMT Subject: CN=558AAAD95D82E5F90F2384DB098564979A262AAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:89:39:ac:0e:1a:62:8a:28:f7:55:be:49:63: 4d:31:1c:d3:72:41:f5:8c:1e:43:5c:7f:f7:7f:93: bd:a8:8b:0b:82:22:54:68:38:73:39:ff:ad:95:2e: bb:0e:b1:7b:9a:33:67:bf:26:e2:16:6e:97:2c:48: 78:73:fc:05:17:e4:08:36:2c:da:be:82:b3:4c:bc: 60:87:a7:14:57:67:cd:12:06:8c:8c:15:b1:9d:a0: 04:f0:c1:02:fc:e4:10:16:0f:02:17:f6:ef:ff:31: a7:34:fc:14:c6:68:d2:66:18:7a:30:5d:c5:71:50: e4:71:2f:b8:89:8c:4c:d4:51:95:19:d5:d9:11:66: 93:0e:ca:cf:23:84:7b:fd:57:5b:c3:c4:3b:5e:38: 8d:40:46:9f:53:12:0a:cd:6d:e9:25:59:59:be:86: 30:f0:7d:c7:81:70:ed:17:ef:70:f8:52:4d:4c:5c: be:e0:2b:b0:63:47:01:e7:40:90:d4:13:37:17:eb: 71:99:63:93:a4:c8:81:ba:8a:69:3e:96:c2:59:26: 9d:28:39:41:4f:2c:49:e4:dd:c0:c8:d8:37:a1:19: 28:1d:a2:34:6c:fc:a4:44:47:08:0c:9b:b2:50:4c: cd:4d:fb:fd:60:1c:96:8b:14:1a:24:49:6b:8e:da: 87:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:8A:AA:D9:5D:82:E5:F9:0F:23:84:DB:09:85:64:97:9A:26:2A:AA X509v3 Authority Key Identifier: keyid:99:3E:93:A0:66:4A:9D:90:2D:97:8F:35:96:92:9A:DC:AC:0D:28:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/993E93A0664A9D902D978F3596929ADCAC0D2885.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/993E93A0664A9D902D978F3596929ADCAC0D2885.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/993E93A0664A9D902D978F3596929ADCAC0D2885.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:57:2a:48:fb:aa:b2:42:6f:d3:db:e2:71:b4:d0:37:cd:9d: dc:2a:2c:d0:05:78:4d:82:97:9c:34:b8:82:e9:12:0f:1e:4d: f7:d2:3c:35:59:d6:36:e7:ef:88:a1:93:e4:ab:21:67:1d:c1: 31:1b:8d:b6:31:f9:57:f4:4f:8b:d4:bd:5b:22:ce:ad:31:ba: 8e:5a:a5:4b:ce:f9:55:bb:c4:fa:ac:c7:d7:18:45:42:16:64: 23:47:c7:89:6c:15:c5:7c:09:e0:05:1a:cf:49:03:f5:d9:5e: bf:c6:44:32:15:38:66:fa:a3:f4:14:d4:c7:ff:de:9f:9c:8a: d4:4c:6f:1b:76:83:72:0c:be:42:5f:0e:4e:79:f1:c3:68:ce: 6c:57:93:04:e5:ed:d6:a5:a0:32:b6:a3:72:4d:e3:85:f8:92: 87:84:74:68:81:1c:25:64:be:c0:71:ab:5b:c0:68:f1:90:2d: 50:bc:5a:a9:63:c5:b4:b4:38:fa:9c:8b:48:99:0f:ea:2b:f5: 8e:a8:f4:29:0e:88:05:e4:3a:b5:6c:07:4f:56:df:f1:1f:1c: 2b:58:18:29:b4:49:4c:bd:92:10:10:3a:c0:9b:a0:57:ed:5c: 20:9e:d1:d7:51:74:89:f8:40:ef:d6:11:9b:0d:cb:89:1c:19: 2a:b4:11:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSegsnKFLtPYU60C+Blu/xLZynvswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTkzRTkzQTA2NjRBOUQ5MDJEOTc4RjM1OTY5MjlBRENB QzBEMjg4NTAeFw0yNjA5MzAxNzQyNTFaFw0yNjEwMDExODEwNTFaMDMxMTAvBgNV BAMTKDU1OEFBQUQ5NUQ4MkU1RjkwRjIzODREQjA5ODU2NDk3OUEyNjJBQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTiTmsDhpiiij3Vb5JY00xHNNy QfWMHkNcf/d/k72oiwuCIlRoOHM5/62VLrsOsXuaM2e/JuIWbpcsSHhz/AUX5Ag2 LNq+grNMvGCHpxRXZ80SBoyMFbGdoATwwQL85BAWDwIX9u//Mac0/BTGaNJmGHow XcVxUORxL7iJjEzUUZUZ1dkRZpMOys8jhHv9V1vDxDteOI1ARp9TEgrNbeklWVm+ hjDwfceBcO0X73D4Uk1MXL7gK7BjRwHnQJDUEzcX63GZY5OkyIG6imk+lsJZJp0o OUFPLEnk3cDI2DehGSgdojRs/KRERwgMm7JQTM1N+/1gHJaLFBokSWuO2odRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVYqq2V2C5fkPI4TbCYVkl5omKqowHwYDVR0j BBgwFoAUmT6ToGZKnZAtl481lpKa3KwNKIUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTBlODg3NzQtODQ0Zi00NjE2LThiZDAtZGMzMTM5Mjg3MzBjLzAvOTkzRTkzQTA2 NjRBOUQ5MDJEOTc4RjM1OTY5MjlBRENBQzBEMjg4NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OTNFOTNBMDY2NEE5RDkwMkQ5NzhGMzU5NjkyOUFEQ0FDMEQy ODg1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTBlODg3NzQtODQ0Zi00NjE2LThi ZDAtZGMzMTM5Mjg3MzBjLzAvOTkzRTkzQTA2NjRBOUQ5MDJEOTc4RjM1OTY5MjlB RENBQzBEMjg4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEtXKkj7qrJCb9Pb4nG00DfNndwqLNAFeE2C l5w0uILpEg8eTffSPDVZ1jbn74ihk+SrIWcdwTEbjbYx+Vf0T4vUvVsizq0xuo5a pUvO+VW7xPqsx9cYRUIWZCNHx4lsFcV8CeAFGs9JA/XZXr/GRDIVOGb6o/QU1Mf/ 3p+citRMbxt2g3IMvkJfDk558cNozmxXkwTl7daloDK2o3JN44X4koeEdGiBHCVk vsBxq1vAaPGQLVC8WqljxbS0OPqci0iZD+or9Y6o9CkOiAXkOrVsB09W3/EfHCtY GCm0SUy9khAQOsCboFftXCCe0ddRdIn4QO/WEZsNy4kcGSq0EYI= -----END CERTIFICATE-----Generated at Thu Oct 1 10:46:30 2026 by rpki-client