$ rpki-client -vvvf rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.mft File: 100E5A40865841D56C5AB9D0CEE72188077EFAA3.mft (raw, json) Hash identifier: le2EEp2d9JHdjEggXYlsq4ZIv5nXQHxo5wq1sXnNxk8= Subject key identifier: 2C:4F:A4:A1:62:61:C0:16:F7:DA:64:9B:4D:5F:5A:91:2B:40:10:52 Authority key identifier: 10:0E:5A:40:86:58:41:D5:6C:5A:B9:D0:CE:E7:21:88:07:7E:FA:A3 Certificate issuer: /CN=100E5A40865841D56C5AB9D0CEE72188077EFAA3 Certificate serial: 586706AFDAD93EE34D7056CCC367D79C8C744563 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.mft Manifest number: C2 Signing time: Fri 25 Sep 2026 00:51:03 +0000 Manifest this update: Fri 25 Sep 2026 00:46:03 +0000 Manifest next update: Sat 26 Sep 2026 01:46:03 +0000 Files and hashes: 1: 323030313a6466343a6334303a3a2f34382d3438203d3e20313533303639.roa (hash: qQsYjjc0UOS4U0mqMilyLxWp2Jg/oy/EO/6yTd0J1SE=) 2: 100E5A40865841D56C5AB9D0CEE72188077EFAA3.crl (hash: kdinoxnfyH2Hosklopa8zwk4xxIzep7uR66Dht9YB9k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.crl rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:67:06:af:da:d9:3e:e3:4d:70:56:cc:c3:67:d7:9c:8c:74:45:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=100E5A40865841D56C5AB9D0CEE72188077EFAA3 Validity Not Before: Sep 25 00:46:03 2026 GMT Not After : Sep 26 01:46:03 2026 GMT Subject: CN=2C4FA4A16261C016F7DA649B4D5F5A912B401052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ec:b6:9e:f7:d3:2d:1c:56:50:7b:8d:82:24: e2:03:89:51:fc:e2:a0:3d:c1:70:b7:35:d7:50:c1: ae:0d:27:cf:4b:55:17:2e:aa:ed:7a:ca:73:67:76: f8:56:53:e1:d7:13:b4:48:5d:94:10:37:aa:cb:ac: 2b:66:11:80:1e:d9:71:e2:e7:2f:16:86:6e:c5:fc: 6b:da:45:b5:cd:d5:b0:8d:88:66:39:85:26:a4:0a: 10:69:02:03:89:0f:63:91:3b:b4:db:92:1e:d2:05: 4a:1b:5d:35:04:a4:af:c0:cb:b7:e6:c1:14:ee:a6: 13:34:82:5e:6a:b1:48:f3:97:87:53:94:24:f9:18: 48:1d:00:77:96:e6:58:d8:b3:22:7d:1b:e3:2f:d6: 3f:7d:93:24:07:88:04:52:63:3a:c3:77:7b:3a:81: f2:28:c2:30:a5:ea:a6:7c:09:5b:7f:e8:4d:34:26: 8c:fd:d4:40:68:e6:75:d2:ee:26:e3:d2:c0:00:90: 53:e6:93:30:5c:c3:fe:f4:21:68:57:f0:0c:df:80: d9:19:f4:5e:23:3b:4c:7f:33:f7:17:6a:ea:69:be: 0d:fd:77:ec:3d:3a:a1:07:b5:1b:74:83:c3:33:2f: ee:54:de:18:2e:7a:d7:f9:e2:e6:43:a1:6c:06:f6: f7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:4F:A4:A1:62:61:C0:16:F7:DA:64:9B:4D:5F:5A:91:2B:40:10:52 X509v3 Authority Key Identifier: keyid:10:0E:5A:40:86:58:41:D5:6C:5A:B9:D0:CE:E7:21:88:07:7E:FA:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:fd:f4:c1:75:f3:91:87:ca:3d:7a:77:9d:79:d3:da:15:a5: 36:cf:df:8b:cc:eb:3b:29:89:6d:2b:ba:7a:51:95:b0:3d:f6: 3f:63:96:2d:45:7d:fa:0b:2e:7f:ca:1f:17:0b:85:ca:72:ef: 9f:a7:49:18:1f:fc:1d:15:2c:72:fc:ce:b5:2c:55:b0:91:e4: 93:b2:33:07:a4:23:0f:e2:8f:1b:f3:63:37:04:30:5a:7b:07: bf:fb:81:28:2d:e7:0c:12:1b:f8:b1:37:72:97:18:f6:f9:50: 58:f0:e7:80:86:90:2d:d2:41:46:f3:23:5b:e8:df:0e:5e:8e: a8:98:5e:1d:83:4f:30:53:c6:5c:82:3b:e8:fa:17:f8:5b:d2: 6a:04:ed:8c:63:53:d4:7b:80:c1:a5:2c:c4:18:48:40:3a:d7: 8f:ce:73:b3:66:c9:1b:2e:c6:6b:a5:9a:b4:6f:52:d6:1b:d1: e7:15:26:5b:05:49:9b:a8:d7:a8:ea:be:83:1b:67:58:be:da: 1d:f0:7b:1f:37:8f:72:8b:15:4d:82:37:68:b1:86:c8:98:ad: 7f:ff:0c:d3:cc:ed:f1:3b:cf:97:92:17:f1:2f:ce:6f:f1:b0: 5b:c9:26:c2:6e:94:56:36:f0:51:36:ea:8f:a8:ff:f5:9e:4e: 31:9f:5e:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWGcGr9rZPuNNcFbMw2fXnIx0RWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTAwRTVBNDA4NjU4NDFENTZDNUFCOUQwQ0VFNzIxODgw NzdFRkFBMzAeFw0yNjA5MjUwMDQ2MDNaFw0yNjA5MjYwMTQ2MDNaMDMxMTAvBgNV BAMTKDJDNEZBNEExNjI2MUMwMTZGN0RBNjQ5QjRENUY1QTkxMkI0MDEwNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC27Lae99MtHFZQe42CJOIDiVH8 4qA9wXC3NddQwa4NJ89LVRcuqu16ynNndvhWU+HXE7RIXZQQN6rLrCtmEYAe2XHi 5y8Whm7F/GvaRbXN1bCNiGY5hSakChBpAgOJD2ORO7Tbkh7SBUobXTUEpK/Ay7fm wRTuphM0gl5qsUjzl4dTlCT5GEgdAHeW5ljYsyJ9G+Mv1j99kyQHiARSYzrDd3s6 gfIowjCl6qZ8CVt/6E00Joz91EBo5nXS7ibj0sAAkFPmkzBcw/70IWhX8AzfgNkZ 9F4jO0x/M/cXauppvg39d+w9OqEHtRt0g8MzL+5U3hguetf54uZDoWwG9vcZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULE+koWJhwBb32mSbTV9akStAEFIwHwYDVR0j BBgwFoAUEA5aQIZYQdVsWrnQzuchiAd++qMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjM2NTYxZDQtMjNjOC00YzliLTg5MGUtNGYyNjMyZTUyYzk3LzEvMTAwRTVBNDA4 NjU4NDFENTZDNUFCOUQwQ0VFNzIxODgwNzdFRkFBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMDBFNUE0MDg2NTg0MUQ1NkM1QUI5RDBDRUU3MjE4ODA3N0VG QUEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjM2NTYxZDQtMjNjOC00YzliLTg5 MGUtNGYyNjMyZTUyYzk3LzEvMTAwRTVBNDA4NjU4NDFENTZDNUFCOUQwQ0VFNzIx ODgwNzdFRkFBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIb99MF185GHyj16d51509oVpTbP34vM6zsp iW0runpRlbA99j9jli1FffoLLn/KHxcLhcpy75+nSRgf/B0VLHL8zrUsVbCR5JOy MwekIw/ijxvzYzcEMFp7B7/7gSgt5wwSG/ixN3KXGPb5UFjw54CGkC3SQUbzI1vo 3w5ejqiYXh2DTzBTxlyCO+j6F/hb0moE7YxjU9R7gMGlLMQYSEA614/Oc7NmyRsu xmulmrRvUtYb0ecVJlsFSZuo16jqvoMbZ1i+2h3wex83j3KLFU2CN2ixhsiYrX// DNPM7fE7z5eSF/Evzm/xsFvJJsJulFY28FE26o+o//WeTjGfXtY= -----END CERTIFICATE-----Generated at Fri Sep 25 03:45:10 2026 by rpki-client