$ rpki-client -vvvf rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/5338904940BF82A8EFF37162A1BAE6B91FCB673C.mft File: 5338904940BF82A8EFF37162A1BAE6B91FCB673C.mft (raw, json) Hash identifier: KFgb+Hw29oJWbSA7GVFlHh1BBrZR/lSuyfUeQhLsAJw= Subject key identifier: CC:9C:8D:1C:D9:30:90:32:C9:83:C6:CC:1B:ED:80:E3:0A:9B:66:4F Authority key identifier: 53:38:90:49:40:BF:82:A8:EF:F3:71:62:A1:BA:E6:B9:1F:CB:67:3C Certificate issuer: /CN=5338904940BF82A8EFF37162A1BAE6B91FCB673C Certificate serial: 3F60C3BE644301A54E458EE051A35F8724E9C6A8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5338904940BF82A8EFF37162A1BAE6B91FCB673C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/5338904940BF82A8EFF37162A1BAE6B91FCB673C.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 21:02:06 +0000 Manifest this update: Wed 23 Sep 2026 20:57:06 +0000 Manifest next update: Fri 25 Sep 2026 00:29:06 +0000 Files and hashes: 1: 5338904940BF82A8EFF37162A1BAE6B91FCB673C.crl (hash: 06J1Jnusa40UilVIsKyxMx7kOAV9aXLcUrwulyzVHf0=) 2: 323030313a6466333a643234303a3a2f34382d3438203d3e20313336303839.roa (hash: ln/cutFyRprFz8dtBUFO3cjX8Yn8fKNHUiK0Pk7iFOE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/5338904940BF82A8EFF37162A1BAE6B91FCB673C.crl rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/5338904940BF82A8EFF37162A1BAE6B91FCB673C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5338904940BF82A8EFF37162A1BAE6B91FCB673C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 00:29:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:60:c3:be:64:43:01:a5:4e:45:8e:e0:51:a3:5f:87:24:e9:c6:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5338904940BF82A8EFF37162A1BAE6B91FCB673C Validity Not Before: Sep 23 20:57:06 2026 GMT Not After : Sep 25 00:29:06 2026 GMT Subject: CN=CC9C8D1CD9309032C983C6CC1BED80E30A9B664F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:85:4f:68:e0:e1:52:55:d2:55:40:88:17:cf: 27:1f:fb:2a:43:0d:63:35:6f:fd:93:0a:19:8e:79: fd:da:2f:3b:c6:d9:d4:32:72:9d:74:cf:f9:03:00: 45:bd:66:ad:14:2f:39:c0:5b:ad:d2:a2:15:ca:0a: 40:8a:4f:3c:4b:a5:c3:3a:0a:44:85:e4:f8:b9:9f: 94:13:0c:34:06:46:c6:fa:7a:a8:a8:5a:99:d7:a9: dd:d9:25:f1:1f:61:c2:86:78:77:2c:87:e6:58:3d: 3a:6a:30:ab:08:04:44:1f:f8:a2:c5:82:c3:fc:64: 5d:34:69:8f:13:4e:36:82:6d:4d:bd:aa:38:36:b9: 3d:d3:b0:53:f1:c7:33:79:ed:c6:48:99:1f:6c:3a: 5b:7a:a7:c2:0a:c9:ff:16:d9:f0:02:fe:40:92:9b: ac:59:c8:4f:5e:ba:1a:1f:62:2e:8c:4c:02:d8:58: eb:72:c4:3f:97:d2:26:fc:b8:fd:f6:6c:31:ff:ac: ba:90:dc:e4:ce:28:f5:8a:56:99:e2:61:6c:fd:46: 58:70:7d:ce:80:65:2e:30:0a:15:c6:df:3c:42:cc: fd:8c:7b:4a:8d:aa:9c:b5:94:11:44:fc:fc:3e:de: 29:9b:01:94:42:4f:ca:9f:0a:6f:55:93:20:62:cb: 09:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:9C:8D:1C:D9:30:90:32:C9:83:C6:CC:1B:ED:80:E3:0A:9B:66:4F X509v3 Authority Key Identifier: keyid:53:38:90:49:40:BF:82:A8:EF:F3:71:62:A1:BA:E6:B9:1F:CB:67:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/5338904940BF82A8EFF37162A1BAE6B91FCB673C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5338904940BF82A8EFF37162A1BAE6B91FCB673C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/5338904940BF82A8EFF37162A1BAE6B91FCB673C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:4b:19:f6:0d:0a:82:f2:3d:9f:3f:93:54:2f:8c:2c:de:37: 80:1b:ae:69:f6:53:a4:2a:5d:b7:a4:37:e3:33:61:fa:90:90: b0:99:69:62:4b:83:b7:16:23:9c:00:73:8c:33:7b:44:30:af: 0b:e7:f5:be:c4:0e:02:b0:52:38:88:c7:9c:ad:65:db:39:bd: 81:f1:0d:23:97:db:57:e9:6f:1e:c0:91:75:5b:95:66:97:b7: 38:7a:a2:7d:68:00:69:33:1f:26:84:29:fe:4e:d4:f8:fe:27: e3:15:01:6a:22:6c:90:c6:35:d0:ed:7a:e4:ad:21:28:45:00: 87:89:72:59:ee:cb:62:60:fb:ff:c0:72:37:38:30:df:45:5f: 21:72:db:52:98:14:02:db:4b:bb:66:1b:8f:0e:df:75:13:6f: 8c:9c:13:e9:f3:66:dc:a9:91:61:35:b4:3c:18:8b:18:ec:dd: a2:40:02:8e:37:17:ca:5a:cb:34:2d:6b:e7:52:b3:c2:8a:ef: af:61:9b:ff:63:e3:2c:db:48:73:98:11:cb:20:31:47:27:66: bd:e3:6b:26:85:86:3a:bf:fd:a1:7e:07:e8:c8:97:c8:20:d1: c0:01:41:6a:74:2d:cc:ff:39:68:d7:8b:60:84:12:73:2e:fd: af:f5:f5:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP2DDvmRDAaVORY7gUaNfhyTpxqgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMzODkwNDk0MEJGODJBOEVGRjM3MTYyQTFCQUU2Qjkx RkNCNjczQzAeFw0yNjA5MjMyMDU3MDZaFw0yNjA5MjUwMDI5MDZaMDMxMTAvBgNV BAMTKENDOUM4RDFDRDkzMDkwMzJDOTgzQzZDQzFCRUQ4MEUzMEE5QjY2NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLhU9o4OFSVdJVQIgXzycf+ypD DWM1b/2TChmOef3aLzvG2dQycp10z/kDAEW9Zq0ULznAW63SohXKCkCKTzxLpcM6 CkSF5Pi5n5QTDDQGRsb6eqioWpnXqd3ZJfEfYcKGeHcsh+ZYPTpqMKsIBEQf+KLF gsP8ZF00aY8TTjaCbU29qjg2uT3TsFPxxzN57cZImR9sOlt6p8IKyf8W2fAC/kCS m6xZyE9euhofYi6MTALYWOtyxD+X0ib8uP32bDH/rLqQ3OTOKPWKVpniYWz9Rlhw fc6AZS4wChXG3zxCzP2Me0qNqpy1lBFE/Pw+3imbAZRCT8qfCm9VkyBiywkjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzJyNHNkwkDLJg8bMG+2A4wqbZk8wHwYDVR0j BBgwFoAUUziQSUC/gqjv83FiobrmuR/LZzwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTRlZDhkNmMtZjBmYS00N2NjLWFlYWEtYjRlM2VlMTE2ODgyLzEvNTMzODkwNDk0 MEJGODJBOEVGRjM3MTYyQTFCQUU2QjkxRkNCNjczQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MzM4OTA0OTQwQkY4MkE4RUZGMzcxNjJBMUJBRTZCOTFGQ0I2 NzNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTRlZDhkNmMtZjBmYS00N2NjLWFl YWEtYjRlM2VlMTE2ODgyLzEvNTMzODkwNDk0MEJGODJBOEVGRjM3MTYyQTFCQUU2 QjkxRkNCNjczQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKBLGfYNCoLyPZ8/k1QvjCzeN4Abrmn2U6Qq XbekN+MzYfqQkLCZaWJLg7cWI5wAc4wze0Qwrwvn9b7EDgKwUjiIx5ytZds5vYHx DSOX21fpbx7AkXVblWaXtzh6on1oAGkzHyaEKf5O1Pj+J+MVAWoibJDGNdDteuSt IShFAIeJclnuy2Jg+//Acjc4MN9FXyFy21KYFALbS7tmG48O33UTb4ycE+nzZtyp kWE1tDwYixjs3aJAAo43F8payzQta+dSs8KK769hm/9j4yzbSHOYEcsgMUcnZr3j ayaFhjq//aF+B+jIl8gg0cABQWp0Lcz/OWjXi2CEEnMu/a/19Tk= -----END CERTIFICATE-----Generated at Thu Sep 24 10:27:48 2026 by rpki-client