$ rpki-client -vvvf rpki-rsync.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.mft File: C8647EDF5EFDE971229F5D76818B3957AA6D8A14.mft (raw, json) Hash identifier: 9DwXADW8vr0w8t/uHXi3ibzwtSryt3RvjyCmsLc/BkA= Subject key identifier: 56:05:0E:30:85:B9:92:25:4C:F6:1C:0F:BC:83:C3:A9:F1:A4:50:71 Authority key identifier: C8:64:7E:DF:5E:FD:E9:71:22:9F:5D:76:81:8B:39:57:AA:6D:8A:14 Certificate issuer: /CN=C8647EDF5EFDE971229F5D76818B3957AA6D8A14 Certificate serial: 5EFBEF513EC02F2ADB223DB8C25AF0E3DC70CFDC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 18:28:28 +0000 Manifest this update: Thu 24 Sep 2026 18:23:28 +0000 Manifest next update: Fri 25 Sep 2026 20:46:28 +0000 Files and hashes: 1: 3130332e3138342e31372e302f32342d3234203d3e20313439333135.roa (hash: 1Jb72gV9Cql494HOmw4p+CcUceiPzhX48HtoigKm8xc=) 2: 3130332e3138342e31372e302f32342d3234203d3e20313530343739.roa (hash: pBKVlpjSQfisARzQp/uCxR6vxT0fT2aUvnTqNxA3JGc=) 3: 3130332e3138342e31362e302f32342d3234203d3e20313439333135.roa (hash: oRViKlwXLb62v1XHH/P9v9PE35BuLaTpbEgB9nVLGXo=) 4: C8647EDF5EFDE971229F5D76818B3957AA6D8A14.crl (hash: mfDX0AJ/848Slif6vOkYfMsRqjg8qAzDEOahDvc2Tsg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.crl rsync://rpki-rsync.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 20:46:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:fb:ef:51:3e:c0:2f:2a:db:22:3d:b8:c2:5a:f0:e3:dc:70:cf:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8647EDF5EFDE971229F5D76818B3957AA6D8A14 Validity Not Before: Sep 24 18:23:28 2026 GMT Not After : Sep 25 20:46:28 2026 GMT Subject: CN=56050E3085B992254CF61C0FBC83C3A9F1A45071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:4a:6b:c4:cc:8a:13:60:a1:80:37:b4:53:f3: b9:60:95:1a:ca:51:29:96:8d:72:f1:a6:b7:2f:c2: 6f:2f:9c:30:01:7f:75:33:9f:73:f2:92:de:25:c5: fc:a1:4c:76:f1:94:44:fe:d8:e1:90:cb:6d:e5:77: 74:e7:24:69:99:04:31:84:2b:54:d2:3f:86:a1:63: ce:b4:84:25:cb:7c:4c:31:da:20:c9:08:78:a4:71: 96:4c:e2:0f:c7:1e:a9:35:b1:52:93:31:f2:70:32: 11:93:6f:6b:6e:a5:2b:8f:fc:be:f3:e7:f5:e5:74: 4e:19:67:02:a2:97:53:0a:ff:e5:91:7f:ca:47:d4: e8:64:c4:32:b0:1c:c5:2f:ac:01:c3:78:44:b6:34: 4d:3d:5d:3b:a1:7e:5d:06:ac:1b:61:cd:fe:62:02: ef:c4:63:33:9b:9d:0f:d9:a8:a2:de:a8:97:4b:7a: 87:b4:81:dc:25:e0:68:d5:b9:0e:67:3b:75:13:11: 08:d8:da:ba:e6:ab:38:a1:dd:56:05:a5:95:52:ae: 14:da:e2:57:68:99:59:13:27:00:ff:9a:3b:5b:2b: 40:45:56:4d:e5:46:b0:76:7c:e1:da:3c:05:42:2a: 3e:31:d7:41:96:a2:08:d6:06:89:84:69:db:c9:1d: bf:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:05:0E:30:85:B9:92:25:4C:F6:1C:0F:BC:83:C3:A9:F1:A4:50:71 X509v3 Authority Key Identifier: keyid:C8:64:7E:DF:5E:FD:E9:71:22:9F:5D:76:81:8B:39:57:AA:6D:8A:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:ca:18:9e:d1:20:c7:22:69:13:84:dc:5b:90:e4:cc:d4:05: 89:a4:57:10:ef:42:16:04:4d:d8:c5:7f:6c:63:bd:f4:b4:6f: 01:da:a6:4d:41:2b:dd:fa:75:3b:df:4f:5b:80:dd:11:ec:47: 50:11:92:31:fe:a4:dc:74:39:d0:da:fc:1a:e9:fa:27:cf:34: a8:66:f2:ef:e2:40:e9:9c:cc:51:ad:d3:4e:38:93:64:47:6b: c4:3e:dd:0a:cb:16:6d:67:6b:d9:fa:4b:b4:67:21:08:ad:30: 2b:42:51:f4:eb:27:6a:0c:c7:cd:88:0a:96:a9:b5:9e:c9:68: f3:b6:15:55:39:15:71:a0:45:51:76:1a:88:2c:50:cb:11:96: f8:5c:79:76:af:56:06:fb:61:4f:5f:2d:9a:d0:90:f8:d5:cc: 2a:1b:bd:d8:71:cb:17:89:37:04:5f:ae:2c:df:9e:ae:e0:b9: 8a:87:48:53:1e:be:6e:3f:a2:a9:2e:36:13:67:5b:a5:38:2f: 60:ea:2b:57:4f:87:7c:13:38:5e:df:c7:19:87:2d:45:00:ea: 5e:18:06:23:7f:37:84:0d:db:4c:5a:ac:cd:10:07:0e:ea:a2: 3c:e1:97:8b:77:14:85:19:e6:bd:73:98:4d:72:cc:be:e8:f0: 0f:cb:02:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXvvvUT7ALyrbIj24wlrw49xwz9wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg2NDdFREY1RUZERTk3MTIyOUY1RDc2ODE4QjM5NTdB QTZEOEExNDAeFw0yNjA5MjQxODIzMjhaFw0yNjA5MjUyMDQ2MjhaMDMxMTAvBgNV BAMTKDU2MDUwRTMwODVCOTkyMjU0Q0Y2MUMwRkJDODNDM0E5RjFBNDUwNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZSmvEzIoTYKGAN7RT87lglRrK USmWjXLxprcvwm8vnDABf3Uzn3Pykt4lxfyhTHbxlET+2OGQy23ld3TnJGmZBDGE K1TSP4ahY860hCXLfEwx2iDJCHikcZZM4g/HHqk1sVKTMfJwMhGTb2tupSuP/L7z 5/XldE4ZZwKil1MK/+WRf8pH1OhkxDKwHMUvrAHDeES2NE09XTuhfl0GrBthzf5i Au/EYzObnQ/ZqKLeqJdLeoe0gdwl4GjVuQ5nO3UTEQjY2rrmqzih3VYFpZVSrhTa 4ldomVkTJwD/mjtbK0BFVk3lRrB2fOHaPAVCKj4x10GWogjWBomEadvJHb+3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVgUOMIW5kiVM9hwPvIPDqfGkUHEwHwYDVR0j BBgwFoAUyGR+31796XEin112gYs5V6ptihQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjVkMzhiNDItYjdjMi00MmI2LWEyZmMtNjc1ZGEyNTRjNzc2LzAvQzg2NDdFREY1 RUZERTk3MTIyOUY1RDc2ODE4QjM5NTdBQTZEOEExNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DODY0N0VERjVFRkRFOTcxMjI5RjVENzY4MThCMzk1N0FBNkQ4 QTE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjVkMzhiNDItYjdjMi00MmI2LWEy ZmMtNjc1ZGEyNTRjNzc2LzAvQzg2NDdFREY1RUZERTk3MTIyOUY1RDc2ODE4QjM5 NTdBQTZEOEExNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABvKGJ7RIMciaROE3FuQ5MzUBYmkVxDvQhYE TdjFf2xjvfS0bwHapk1BK936dTvfT1uA3RHsR1ARkjH+pNx0OdDa/Brp+ifPNKhm 8u/iQOmczFGt0044k2RHa8Q+3QrLFm1na9n6S7RnIQitMCtCUfTrJ2oMx82ICpap tZ7JaPO2FVU5FXGgRVF2GogsUMsRlvhceXavVgb7YU9fLZrQkPjVzCobvdhxyxeJ NwRfrizfnq7guYqHSFMevm4/oqkuNhNnW6U4L2DqK1dPh3wTOF7fxxmHLUUA6l4Y BiN/N4QN20xarM0QBw7qojzhl4t3FIUZ5r1zmE1yzL7o8A/LAnw= -----END CERTIFICATE-----Generated at Fri Sep 25 14:32:15 2026 by rpki-client