$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/12215616BDEA90F45AB43FFCB676AA254601358F.mft File: 12215616BDEA90F45AB43FFCB676AA254601358F.mft (raw, json) Hash identifier: miKVbrqmvsLu0xwuRJkB6Acskyt6bWI09LmWOKtUhSs= Subject key identifier: 86:78:D4:BD:57:00:9F:A8:B0:3F:34:B9:7D:49:FF:0C:0F:B1:F6:55 Authority key identifier: 12:21:56:16:BD:EA:90:F4:5A:B4:3F:FC:B6:76:AA:25:46:01:35:8F Certificate issuer: /CN=12215616BDEA90F45AB43FFCB676AA254601358F Certificate serial: 2B4AA2F923B95013FF553BDBEEB51356F22112CE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12215616BDEA90F45AB43FFCB676AA254601358F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/12215616BDEA90F45AB43FFCB676AA254601358F.mft Manifest number: CD Signing time: Sun 04 Oct 2026 00:25:34 +0000 Manifest this update: Sun 04 Oct 2026 00:20:34 +0000 Manifest next update: Mon 05 Oct 2026 02:18:34 +0000 Files and hashes: 1: 3130332e3137342e3132332e302f32342d3234203d3e20313437303936.roa (hash: 19Gxe0C+BqrJZYT7+O9ydX/09JgmXPG6bcNyUMxys/Q=) 2: 3130332e3137342e3132322e302f32342d3234203d3e20313437303936.roa (hash: BIL+aGZm0f2cNvuuhG7zFnc4Iz00ZUgKA3IGqeW+Vp0=) 3: 3130332e3137342e3132322e302f32332d3233203d3e20313437303936.roa (hash: gTzJVLzwHZfB2XlD0ZDAGkf7sC4mGSUZJV6Nnni5S1g=) 4: 12215616BDEA90F45AB43FFCB676AA254601358F.crl (hash: iVLmShXfUf1sYGAoD3J4JPeJb6rGTZ79bcN3JL9T7RQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/12215616BDEA90F45AB43FFCB676AA254601358F.crl rsync://rpki-rsync.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/12215616BDEA90F45AB43FFCB676AA254601358F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12215616BDEA90F45AB43FFCB676AA254601358F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 02:18:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:4a:a2:f9:23:b9:50:13:ff:55:3b:db:ee:b5:13:56:f2:21:12:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12215616BDEA90F45AB43FFCB676AA254601358F Validity Not Before: Oct 4 00:20:34 2026 GMT Not After : Oct 5 02:18:34 2026 GMT Subject: CN=8678D4BD57009FA8B03F34B97D49FF0C0FB1F655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:42:b2:ae:64:97:9e:dc:c3:44:f3:71:86:47: 46:8d:48:82:b5:0b:a8:f9:86:a4:ea:1c:59:c6:c2: 8c:a7:7b:0d:79:bc:d3:76:49:f7:46:b6:38:81:23: 61:32:4b:41:7e:1a:4e:fe:a0:ec:fb:16:e2:53:cc: 20:88:08:45:ea:5f:1e:92:a9:6a:3a:d9:d2:82:04: 9b:3b:27:2e:9a:f0:f0:be:15:eb:f8:dd:52:74:85: b7:fc:17:a1:77:4e:aa:66:50:e1:25:3a:54:0c:1f: 1d:2f:16:c1:8c:4e:be:11:7a:4f:b0:e9:dc:ee:ba: e5:e3:83:9f:c0:76:0d:7a:b5:49:f8:7f:b2:78:d2: 9e:e7:5b:fe:62:9d:e9:a6:ee:e4:1c:7a:6e:c4:e0: 65:ae:49:b6:e7:32:6d:19:b2:1f:a0:a1:06:08:5b: 37:b9:a2:66:4f:ee:db:7c:8d:be:ec:d4:dd:bc:46: d8:7e:f9:43:0d:95:27:d3:5a:f8:c1:c2:fc:a3:a3: 9c:43:bb:65:e7:6a:14:cb:f9:55:10:5c:ba:1d:8c: 99:b8:58:43:7f:a7:9d:90:79:8f:e9:1f:ff:21:e5: af:4f:02:ca:f7:b7:78:3d:6f:03:3c:93:e6:ba:0c: 71:ef:d4:46:da:2c:17:83:f7:50:e7:1f:c0:cd:f3: c8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:78:D4:BD:57:00:9F:A8:B0:3F:34:B9:7D:49:FF:0C:0F:B1:F6:55 X509v3 Authority Key Identifier: keyid:12:21:56:16:BD:EA:90:F4:5A:B4:3F:FC:B6:76:AA:25:46:01:35:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/12215616BDEA90F45AB43FFCB676AA254601358F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12215616BDEA90F45AB43FFCB676AA254601358F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/12215616BDEA90F45AB43FFCB676AA254601358F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:9d:4a:04:48:c5:c8:18:c1:44:ff:3a:cc:20:37:81:80:47: 93:2e:21:77:f8:9e:b2:d3:29:e5:f4:e1:12:04:c7:c3:0c:a0: 1d:ee:1d:45:88:f9:db:4d:3d:9d:de:05:62:90:53:f5:35:2e: 88:7b:c1:48:c9:f6:7c:7f:bf:1f:a6:8c:59:44:c0:56:33:ba: 5b:02:33:e9:1b:c4:5f:05:78:e9:d6:55:68:59:bc:24:4f:07: 16:4d:62:45:3d:78:c9:cc:5d:9f:06:36:0c:b1:51:6d:ad:e9: 8f:5a:5c:05:e6:3f:eb:4c:bd:aa:02:1e:fe:c8:ae:eb:c6:7d: e8:20:a0:f7:1d:69:96:88:97:7c:6c:e5:a7:1c:63:d8:6f:15: 9f:7f:a7:97:4f:3d:cb:c2:0b:00:da:61:a6:76:ea:5c:7d:33: eb:91:66:97:c8:8c:32:3d:24:fb:2c:9d:d0:3b:a6:9d:83:fd: e4:0a:99:e7:0d:e4:4d:a6:ec:86:84:e0:b4:fa:a4:a8:5f:34: 67:3e:bb:b5:cf:be:81:cc:a8:ba:39:fb:c5:fc:02:cf:a2:2f: 73:eb:a8:cb:df:3e:73:a5:f0:10:99:f6:57:99:e5:d7:f6:56: c8:3a:32:04:36:3f:a9:60:f2:00:c1:22:89:00:1a:90:f0:26: 06:4a:ae:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK0qi+SO5UBP/VTvb7rUTVvIhEs4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTIyMTU2MTZCREVBOTBGNDVBQjQzRkZDQjY3NkFBMjU0 NjAxMzU4RjAeFw0yNjEwMDQwMDIwMzRaFw0yNjEwMDUwMjE4MzRaMDMxMTAvBgNV BAMTKDg2NzhENEJENTcwMDlGQThCMDNGMzRCOTdENDlGRjBDMEZCMUY2NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpQrKuZJee3MNE83GGR0aNSIK1 C6j5hqTqHFnGwoynew15vNN2SfdGtjiBI2EyS0F+Gk7+oOz7FuJTzCCICEXqXx6S qWo62dKCBJs7Jy6a8PC+Fev43VJ0hbf8F6F3TqpmUOElOlQMHx0vFsGMTr4Rek+w 6dzuuuXjg5/Adg16tUn4f7J40p7nW/5inemm7uQcem7E4GWuSbbnMm0Zsh+goQYI Wze5omZP7tt8jb7s1N28Rth++UMNlSfTWvjBwvyjo5xDu2XnahTL+VUQXLodjJm4 WEN/p52QeY/pH/8h5a9PAsr3t3g9bwM8k+a6DHHv1EbaLBeD91DnH8DN88gVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhnjUvVcAn6iwPzS5fUn/DA+x9lUwHwYDVR0j BBgwFoAUEiFWFr3qkPRatD/8tnaqJUYBNY8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjI3MzAyN2EtMDk2Yi00ZTk1LWE2NTYtZGFiZTk4YWM2ZjZkLzAvMTIyMTU2MTZC REVBOTBGNDVBQjQzRkZDQjY3NkFBMjU0NjAxMzU4Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMjIxNTYxNkJERUE5MEY0NUFCNDNGRkNCNjc2QUEyNTQ2MDEz NThGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjI3MzAyN2EtMDk2Yi00ZTk1LWE2 NTYtZGFiZTk4YWM2ZjZkLzAvMTIyMTU2MTZCREVBOTBGNDVBQjQzRkZDQjY3NkFB MjU0NjAxMzU4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACedSgRIxcgYwUT/OswgN4GAR5MuIXf4nrLT KeX04RIEx8MMoB3uHUWI+dtNPZ3eBWKQU/U1Loh7wUjJ9nx/vx+mjFlEwFYzulsC M+kbxF8FeOnWVWhZvCRPBxZNYkU9eMnMXZ8GNgyxUW2t6Y9aXAXmP+tMvaoCHv7I ruvGfeggoPcdaZaIl3xs5accY9hvFZ9/p5dPPcvCCwDaYaZ26lx9M+uRZpfIjDI9 JPssndA7pp2D/eQKmecN5E2m7IaE4LT6pKhfNGc+u7XPvoHMqLo5+8X8As+iL3Pr qMvfPnOl8BCZ9leZ5df2Vsg6MgQ2P6lg8gDBIokAGpDwJgZKrg8= -----END CERTIFICATE-----Generated at Sun Oct 4 08:35:09 2026 by rpki-client