$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/996D7371455A834C9B196DACD041DB7C6E779021.mft File: 996D7371455A834C9B196DACD041DB7C6E779021.mft (raw, json) Hash identifier: YAsb1WEDv65Xm3OdSGm9kXKFuqBc9se/KaLGDiz9dbs= Subject key identifier: FF:E1:D2:B8:95:F1:49:8B:58:9F:BD:AC:1D:50:B0:6F:52:CC:1B:17 Authority key identifier: 99:6D:73:71:45:5A:83:4C:9B:19:6D:AC:D0:41:DB:7C:6E:77:90:21 Certificate issuer: /CN=996D7371455A834C9B196DACD041DB7C6E779021 Certificate serial: 79D1684DBCA5834303983C974638329553499F41 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/996D7371455A834C9B196DACD041DB7C6E779021.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/996D7371455A834C9B196DACD041DB7C6E779021.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 06:44:21 +0000 Manifest this update: Wed 23 Sep 2026 06:39:21 +0000 Manifest next update: Thu 24 Sep 2026 09:03:21 +0000 Files and hashes: 1: 3130332e3135382e3139322e302f32342d3234203d3e20313439373035.roa (hash: CbnjGUXd5+J6hJMKbj+3ua0RtVbeM/SLewiagXzRFOs=) 2: 3130332e3135382e3139332e302f32342d3234203d3e20313439373035.roa (hash: y81kh0KeqX5r1jHre6tsGWtKJonbTr6cZ5My00O1C1k=) 3: 996D7371455A834C9B196DACD041DB7C6E779021.crl (hash: SRhpflwZ9N5Yz5yVSCXsyXjpdw9hggy61lJrzB3wZak=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/996D7371455A834C9B196DACD041DB7C6E779021.crl rsync://rpki-rsync.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/996D7371455A834C9B196DACD041DB7C6E779021.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/996D7371455A834C9B196DACD041DB7C6E779021.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 09:03:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:d1:68:4d:bc:a5:83:43:03:98:3c:97:46:38:32:95:53:49:9f:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=996D7371455A834C9B196DACD041DB7C6E779021 Validity Not Before: Sep 23 06:39:21 2026 GMT Not After : Sep 24 09:03:21 2026 GMT Subject: CN=FFE1D2B895F1498B589FBDAC1D50B06F52CC1B17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:98:1b:82:df:80:ec:ab:49:59:65:87:6b:36: 64:fc:81:e4:81:17:17:82:28:4e:1f:fa:16:87:1d: a5:ad:22:90:29:b6:48:46:2e:fa:3f:75:07:19:1c: 41:d1:69:fa:2a:03:ac:31:b9:10:f4:dd:62:0e:f4: 38:00:c2:f9:cf:7a:05:fe:bf:ca:58:82:d8:c8:08: 29:2a:3f:63:09:d2:07:4a:79:db:05:93:fb:93:c0: 42:43:39:e2:06:fe:f7:63:b0:70:b1:41:3d:b0:1a: 7b:b0:0a:d7:f6:50:ce:2c:2b:3c:71:75:8d:7a:17: 56:11:6d:66:4c:bf:ca:cd:1d:fa:ee:32:8b:17:e4: ae:a9:4d:28:3a:df:08:ff:36:58:d2:61:ed:69:67: 44:5f:1f:79:ba:c5:4a:81:57:c0:49:01:e4:b0:75: 29:b4:1c:3d:ca:a3:8b:3e:d5:2b:d7:87:3d:19:79: 9d:18:96:78:fd:43:84:d1:2e:b8:50:09:ea:b6:52: 87:3a:d8:ca:04:96:dd:2a:23:b4:7d:6d:34:eb:aa: 39:de:9b:64:ca:66:56:06:e7:87:97:f9:7d:fd:7e: c8:fd:d2:cc:66:db:b5:48:a9:f0:65:f1:e7:41:11: 2f:1b:7a:30:74:bf:c2:83:86:a0:91:bf:47:56:9a: 87:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:E1:D2:B8:95:F1:49:8B:58:9F:BD:AC:1D:50:B0:6F:52:CC:1B:17 X509v3 Authority Key Identifier: keyid:99:6D:73:71:45:5A:83:4C:9B:19:6D:AC:D0:41:DB:7C:6E:77:90:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/996D7371455A834C9B196DACD041DB7C6E779021.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/996D7371455A834C9B196DACD041DB7C6E779021.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/996D7371455A834C9B196DACD041DB7C6E779021.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:53:17:58:56:df:8f:f7:e7:91:72:0c:4f:29:b9:5d:92:8a: d2:0c:ee:a3:cc:3f:58:ae:3f:fd:96:a5:ff:3a:5c:1e:b1:bb: 84:c8:3b:a7:cd:c9:e2:a4:94:1b:bb:04:7a:ea:c2:60:46:1f: c4:13:eb:ca:ec:7e:a6:58:2a:34:32:9d:0d:d2:ee:f0:18:dd: 5c:30:51:9f:a5:82:9e:01:aa:d2:10:8f:b0:7e:d8:47:f7:09: 53:49:2e:2d:44:ce:a9:fd:8d:21:bd:4e:14:9b:b2:6b:0f:c3: 59:4f:b1:94:f1:ed:34:b4:35:a8:46:47:bf:b3:e1:d4:da:ed: b9:98:39:05:db:32:94:a1:4d:6c:cb:87:74:7a:fe:ae:5b:52: 40:f3:51:ed:50:66:a0:57:d3:1c:02:10:56:47:68:68:25:1a: 00:70:be:88:be:42:71:a8:25:75:ec:78:56:66:f2:5b:9b:2e: 5c:9e:bf:86:4c:ed:7c:27:bb:89:11:bb:8d:06:ae:d6:b9:3e: ad:2f:96:28:a8:3e:6d:2d:4e:e6:6e:0f:b4:cf:5a:38:d3:ab: 1d:e9:d6:37:fd:5a:b9:d4:ae:26:b6:98:4e:1d:e1:f0:c7:b1: 8c:a8:89:45:bf:55:55:58:c6:a5:a4:d9:fb:4e:13:15:f7:81: b9:94:39:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUedFoTbylg0MDmDyXRjgylVNJn0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk2RDczNzE0NTVBODM0QzlCMTk2REFDRDA0MURCN0M2 RTc3OTAyMTAeFw0yNjA5MjMwNjM5MjFaFw0yNjA5MjQwOTAzMjFaMDMxMTAvBgNV BAMTKEZGRTFEMkI4OTVGMTQ5OEI1ODlGQkRBQzFENTBCMDZGNTJDQzFCMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtmBuC34Dsq0lZZYdrNmT8geSB FxeCKE4f+haHHaWtIpAptkhGLvo/dQcZHEHRafoqA6wxuRD03WIO9DgAwvnPegX+ v8pYgtjICCkqP2MJ0gdKedsFk/uTwEJDOeIG/vdjsHCxQT2wGnuwCtf2UM4sKzxx dY16F1YRbWZMv8rNHfruMosX5K6pTSg63wj/NljSYe1pZ0RfH3m6xUqBV8BJAeSw dSm0HD3Ko4s+1SvXhz0ZeZ0Ylnj9Q4TRLrhQCeq2Uoc62MoElt0qI7R9bTTrqjne m2TKZlYG54eX+X39fsj90sxm27VIqfBl8edBES8bejB0v8KDhqCRv0dWmoe7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/+HSuJXxSYtYn72sHVCwb1LMGxcwHwYDVR0j BBgwFoAUmW1zcUVag0ybGW2s0EHbfG53kCEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWI2YzYxNGYtZDBmZi00MWE5LTkyZDAtM2EyMTM1ODE1MzdiLzAvOTk2RDczNzE0 NTVBODM0QzlCMTk2REFDRDA0MURCN0M2RTc3OTAyMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OTZENzM3MTQ1NUE4MzRDOUIxOTZEQUNEMDQxREI3QzZFNzc5 MDIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWI2YzYxNGYtZDBmZi00MWE5LTky ZDAtM2EyMTM1ODE1MzdiLzAvOTk2RDczNzE0NTVBODM0QzlCMTk2REFDRDA0MURC N0M2RTc3OTAyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAVTF1hW34/355FyDE8puV2SitIM7qPMP1iu P/2Wpf86XB6xu4TIO6fNyeKklBu7BHrqwmBGH8QT68rsfqZYKjQynQ3S7vAY3Vww UZ+lgp4BqtIQj7B+2Ef3CVNJLi1Ezqn9jSG9ThSbsmsPw1lPsZTx7TS0NahGR7+z 4dTa7bmYOQXbMpShTWzLh3R6/q5bUkDzUe1QZqBX0xwCEFZHaGglGgBwvoi+QnGo JXXseFZm8lubLlyev4ZM7Xwnu4kRu40Grta5Pq0vliioPm0tTuZuD7TPWjjTqx3p 1jf9WrnUria2mE4d4fDHsYyoiUW/VVVYxqWk2ftOExX3gbmUOas= -----END CERTIFICATE-----Generated at Thu Sep 24 00:08:31 2026 by rpki-client