$ rpki-client -vvvf rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.mft File: 412965964A4E12BD59BDF602A054F3394E99DC57.mft (raw, json) Hash identifier: PXB20b2nECRhrynrebXSVwBmmbIeV6oyayuTOpbwODk= Subject key identifier: 88:D4:D4:31:3A:EF:55:49:A7:8B:B5:57:DB:0F:95:23:79:8F:4F:0A Authority key identifier: 41:29:65:96:4A:4E:12:BD:59:BD:F6:02:A0:54:F3:39:4E:99:DC:57 Certificate issuer: /CN=412965964A4E12BD59BDF602A054F3394E99DC57 Certificate serial: 7203A4AB0FA98745824259647C6D171F959463CA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/412965964A4E12BD59BDF602A054F3394E99DC57.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.mft Manifest number: C1 Signing time: Fri 25 Sep 2026 06:02:54 +0000 Manifest this update: Fri 25 Sep 2026 05:57:54 +0000 Manifest next update: Sat 26 Sep 2026 08:00:54 +0000 Files and hashes: 1: 412965964A4E12BD59BDF602A054F3394E99DC57.crl (hash: XBFSA8MTrj5nfzSYZGf3TDPxIxaiH8u3P8rOa9f1tz8=) 2: 3130332e362e33342e302f32342d3234203d3e20313332363334.roa (hash: s2Tpgag7FxdnRddbkWVhsKOC3K9zk4kizsUSEDbaWVQ=) 3: 3130332e31382e3131372e302f32342d3234203d3e20313332363334.roa (hash: TwoAdTsM3NEVv7qQwQrrGzyUs0c/Mt2dxvgYNM1lek8=) 4: 3130332e31362e34382e302f32332d3234203d3e20313332363334.roa (hash: uLq3gfPOGWF6ZWj1F9WMmGzvCujMeECGwqgAQGV2Nv4=) 5: 3130332e3232352e3234322e302f32342d3234203d3e20313332363334.roa (hash: SenSDJoyF/7+T+Cte5ij0s1hRLf2P72+k6wabdM015Q=) 6: 3130332e382e3233382e302f32342d3234203d3e20313332363334.roa (hash: PR4TqG8Gt/NDoejWkXR5KiYWrPCc3WE35fh/Jxbvano=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.crl rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/412965964A4E12BD59BDF602A054F3394E99DC57.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 08:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:03:a4:ab:0f:a9:87:45:82:42:59:64:7c:6d:17:1f:95:94:63:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=412965964A4E12BD59BDF602A054F3394E99DC57 Validity Not Before: Sep 25 05:57:54 2026 GMT Not After : Sep 26 08:00:54 2026 GMT Subject: CN=88D4D4313AEF5549A78BB557DB0F9523798F4F0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1f:68:8c:0f:46:68:7b:80:1f:70:c7:9a:6b: 51:2e:b6:1d:93:3d:73:92:33:3b:ff:d8:fb:d7:b0: 91:63:f6:f9:46:4c:45:b8:ad:42:4e:db:9b:83:e1: b8:bf:72:fd:41:e1:06:a1:67:72:c3:57:51:61:f1: f7:3b:38:3c:44:a1:0b:45:fd:4e:da:f3:1a:9f:45: ce:6e:e0:e8:fa:c2:3e:35:25:bf:71:71:27:ad:91: 01:cd:81:7b:41:71:d8:db:4e:82:79:78:cf:65:35: 0f:25:b4:9d:26:96:f8:cc:54:d9:40:bd:12:b1:c0: 8f:02:1d:a3:d3:9a:46:b6:1f:61:8b:18:e3:fd:3c: aa:d2:50:2e:05:5e:30:b5:2e:2f:8e:c7:66:38:59: be:8b:da:e5:8d:a9:c6:4a:4e:89:ab:41:c8:9c:ff: 1c:51:05:c6:3d:cc:1f:be:39:08:c3:6b:bd:34:53: e4:4b:59:3c:65:c7:ff:48:c9:3b:79:17:81:38:9b: 91:f5:13:20:42:4e:e3:db:3e:a4:e2:c3:56:ad:c5: 2e:0c:1f:e7:44:e4:2d:45:b2:b3:ac:2d:8d:f4:8f: f5:11:23:96:7b:91:b4:52:32:0a:f2:d1:c7:4c:e4: 47:72:b6:78:22:64:40:9e:cf:39:dc:be:92:da:14: d5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D4:D4:31:3A:EF:55:49:A7:8B:B5:57:DB:0F:95:23:79:8F:4F:0A X509v3 Authority Key Identifier: keyid:41:29:65:96:4A:4E:12:BD:59:BD:F6:02:A0:54:F3:39:4E:99:DC:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/412965964A4E12BD59BDF602A054F3394E99DC57.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:03:10:cc:51:e8:cf:ef:97:6f:aa:b2:39:ab:0d:e3:10:87: 7d:32:a0:96:e1:65:90:7f:1f:96:f0:8f:22:bc:eb:ab:b9:51: 92:6a:0b:4f:4d:36:01:79:68:44:f9:6d:00:9c:4a:90:2b:4e: e7:ac:75:00:e5:a0:35:00:b5:9a:af:a0:32:45:e3:3d:d4:b5: d3:cb:77:c6:6f:b4:1b:ee:03:02:68:ff:17:5b:11:63:f2:c2: d9:69:ff:0c:b7:05:73:31:30:7c:c6:f7:3d:1b:23:a8:b7:ec: 95:39:38:33:bf:e0:2e:1e:3c:f5:3e:62:86:d4:ec:3b:a0:6b: ed:0c:12:4b:5f:cf:d2:fe:15:e3:74:9c:28:7a:55:94:3c:ab: 7e:c2:7f:03:59:49:15:fc:2d:9c:ca:6f:f9:02:35:7c:ae:b8: 76:e9:52:82:2a:ed:40:34:20:5f:a7:e0:20:81:47:fb:9a:14: d9:fe:1d:df:02:ec:30:9f:0f:1c:d0:7f:8e:ce:ea:97:1c:4e: 17:b9:67:2c:9e:d3:5a:7e:7b:de:62:c5:8e:e4:75:88:6f:ce: e8:7a:e9:eb:4a:32:91:39:5b:70:7f:e2:95:6a:6d:b2:49:de: 8b:28:33:d2:26:9d:93:3c:aa:cc:0a:44:83:da:f3:55:9e:66: 09:fd:90:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcgOkqw+ph0WCQllkfG0XH5WUY8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDEyOTY1OTY0QTRFMTJCRDU5QkRGNjAyQTA1NEYzMzk0 RTk5REM1NzAeFw0yNjA5MjUwNTU3NTRaFw0yNjA5MjYwODAwNTRaMDMxMTAvBgNV BAMTKDg4RDRENDMxM0FFRjU1NDlBNzhCQjU1N0RCMEY5NTIzNzk4RjRGMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoH2iMD0Zoe4AfcMeaa1Euth2T PXOSMzv/2PvXsJFj9vlGTEW4rUJO25uD4bi/cv1B4QahZ3LDV1Fh8fc7ODxEoQtF /U7a8xqfRc5u4Oj6wj41Jb9xcSetkQHNgXtBcdjbToJ5eM9lNQ8ltJ0mlvjMVNlA vRKxwI8CHaPTmka2H2GLGOP9PKrSUC4FXjC1Li+Ox2Y4Wb6L2uWNqcZKTomrQcic /xxRBcY9zB++OQjDa700U+RLWTxlx/9IyTt5F4E4m5H1EyBCTuPbPqTiw1atxS4M H+dE5C1FsrOsLY30j/URI5Z7kbRSMgry0cdM5EdytngiZECezzncvpLaFNUXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiNTUMTrvVUmni7VX2w+VI3mPTwowHwYDVR0j BBgwFoAUQSlllkpOEr1ZvfYCoFTzOU6Z3FcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjBmN2JlMDYtOTY3Mi00NjQxLTk3YmQtOWJmZGY5NTVkZTE3LzAvNDEyOTY1OTY0 QTRFMTJCRDU5QkRGNjAyQTA1NEYzMzk0RTk5REM1Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MTI5NjU5NjRBNEUxMkJENTlCREY2MDJBMDU0RjMzOTRFOTlE QzU3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjBmN2JlMDYtOTY3Mi00NjQxLTk3 YmQtOWJmZGY5NTVkZTE3LzAvNDEyOTY1OTY0QTRFMTJCRDU5QkRGNjAyQTA1NEYz Mzk0RTk5REM1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFgDEMxR6M/vl2+qsjmrDeMQh30yoJbhZZB/ H5bwjyK866u5UZJqC09NNgF5aET5bQCcSpArTuesdQDloDUAtZqvoDJF4z3UtdPL d8ZvtBvuAwJo/xdbEWPywtlp/wy3BXMxMHzG9z0bI6i37JU5ODO/4C4ePPU+YobU 7Duga+0MEktfz9L+FeN0nCh6VZQ8q37CfwNZSRX8LZzKb/kCNXyuuHbpUoIq7UA0 IF+n4CCBR/uaFNn+Hd8C7DCfDxzQf47O6pccThe5Zyye01p+e95ixY7kdYhvzuh6 6etKMpE5W3B/4pVqbbJJ3osoM9ImnZM8qswKRIPa81WeZgn9kHA= -----END CERTIFICATE-----Generated at Fri Sep 25 19:14:15 2026 by rpki-client