$ rpki-client -vvvf rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.mft File: C8C1A31E42E799E9EDC0FAB813163052945845AC.mft (raw, json) Hash identifier: NjixFSmPf00gL00KO9IXX97dQMd3JATNeRSPqIqaPFI= Subject key identifier: E5:D9:9C:76:C2:23:21:41:4C:27:BD:95:F2:4A:FA:24:2D:03:41:D6 Authority key identifier: C8:C1:A3:1E:42:E7:99:E9:ED:C0:FA:B8:13:16:30:52:94:58:45:AC Certificate issuer: /CN=C8C1A31E42E799E9EDC0FAB813163052945845AC Certificate serial: 14E719FC36B16DE0E93F0A321BA335DAA8ACC541 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8C1A31E42E799E9EDC0FAB813163052945845AC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.mft Manifest number: D1 Signing time: Sun 04 Oct 2026 08:30:33 +0000 Manifest this update: Sun 04 Oct 2026 08:25:33 +0000 Manifest next update: Mon 05 Oct 2026 09:25:33 +0000 Files and hashes: 1: 323430373a373263303a3a2f33322d3332203d3e203538383230.roa (hash: QTf5TvW/sGJCtiqjYOWSFSyqMXy6xLfUyzA5Wf2VFMo=) 2: 323430373a373263303a3a2f33322d3438203d3e203538383230.roa (hash: FEgS5ex34lgarvKtqbdAVQc0toy/dLHosJymf/4jCzU=) 3: C8C1A31E42E799E9EDC0FAB813163052945845AC.crl (hash: pgWhvPBCbnl+fqEXEq4IvgVLg6onhRUpRVQVMq1kNi8=) 4: 3130332e3135322e39322e302f32332d3234203d3e20313338383630.roa (hash: UWH9gD1/4ElZU52MCqktUtjxRojq4daDEIdWkUnok2k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.crl rsync://rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8C1A31E42E799E9EDC0FAB813163052945845AC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 02:40:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:e7:19:fc:36:b1:6d:e0:e9:3f:0a:32:1b:a3:35:da:a8:ac:c5:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8C1A31E42E799E9EDC0FAB813163052945845AC Validity Not Before: Oct 4 08:25:33 2026 GMT Not After : Oct 5 09:25:33 2026 GMT Subject: CN=E5D99C76C22321414C27BD95F24AFA242D0341D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fe:d2:be:c3:b8:9c:1e:16:82:9c:4a:20:4e: 71:3e:01:1a:43:2c:85:ea:1c:74:64:2c:ed:21:27: 7d:20:aa:33:77:15:af:7c:b0:f2:62:c5:5e:35:e8: ab:6b:57:a9:7d:60:d1:45:e3:dc:85:c5:9f:58:b9: 50:67:f8:15:1f:02:91:27:f1:15:f7:7c:d0:ce:ca: 6d:3a:99:3a:e2:fe:3c:90:f3:e2:db:47:e8:42:a2: 57:32:e7:4c:e6:aa:65:82:a7:b6:c1:3d:0a:e1:10: c1:32:2f:97:d8:88:a5:68:d0:86:eb:f9:cf:83:05: c5:fd:c6:f8:8e:bd:9c:d9:9f:97:ea:d1:7f:d2:1b: 7e:09:48:29:bb:6b:08:fc:d6:9c:44:d2:b8:1b:69: 7a:c0:e9:62:17:ba:4a:b5:b8:3d:76:69:ac:1c:85: 06:4c:fb:bf:41:23:60:e1:58:c6:d1:8c:9c:9c:88: 67:99:f8:7b:89:d7:c4:46:97:0d:be:54:d3:89:16: 60:d5:5a:4b:2a:de:95:38:86:d2:48:5f:90:3e:3c: c9:67:ac:5b:c8:46:23:41:24:0e:3a:b5:30:91:ce: 4d:dc:cb:f2:ac:84:2f:5b:bd:bd:d5:85:57:a1:8d: 08:e5:2b:93:10:e8:a5:92:87:8c:6d:d2:38:b1:1f: 67:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:D9:9C:76:C2:23:21:41:4C:27:BD:95:F2:4A:FA:24:2D:03:41:D6 X509v3 Authority Key Identifier: keyid:C8:C1:A3:1E:42:E7:99:E9:ED:C0:FA:B8:13:16:30:52:94:58:45:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8C1A31E42E799E9EDC0FAB813163052945845AC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:76:95:10:bb:2c:cd:08:70:cf:e7:c2:cc:a5:ab:7e:c2:e8: ed:f4:29:bd:3f:29:c8:7c:6b:7d:36:ab:f7:d8:61:c8:66:39: bf:3c:a6:8b:ae:b6:6e:a7:78:aa:92:57:00:c3:fe:d1:1a:b4: d2:a9:a5:9c:9b:8c:58:5e:2c:d5:1d:97:97:8c:19:04:ee:54: 47:29:8c:94:51:dc:32:29:d8:86:c4:de:5c:17:2a:be:53:05: 51:31:41:e0:f8:72:d0:17:31:bd:a4:03:9a:85:05:95:54:18: 6e:f7:64:0b:5c:b0:3f:84:b8:11:ca:dc:ba:1a:3e:2f:38:b4: 9b:d0:bb:4e:54:a4:e0:d6:51:33:f2:1d:3a:f5:ac:5a:d3:12: 9c:fb:89:7c:da:97:2e:86:1d:52:33:83:18:1d:9b:af:d5:3e: 74:e8:d9:1f:0b:c4:ba:af:91:51:52:c7:c8:f1:cb:57:30:8a: 68:1d:5f:c3:bd:12:54:de:63:5e:48:2d:65:10:78:32:6b:50: 6b:f8:1e:07:69:f4:48:2e:03:0f:c6:d1:80:bc:85:8c:ae:8e: fe:48:73:52:54:dd:fc:fd:6d:40:33:78:1d:2b:2d:1b:a7:72: c9:c4:1e:60:f9:72:72:18:57:bb:6c:7d:35:89:c8:b6:0c:d1: d8:a2:74:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFOcZ/DaxbeDpPwoyG6M12qisxUEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhDMUEzMUU0MkU3OTlFOUVEQzBGQUI4MTMxNjMwNTI5 NDU4NDVBQzAeFw0yNjEwMDQwODI1MzNaFw0yNjEwMDUwOTI1MzNaMDMxMTAvBgNV BAMTKEU1RDk5Qzc2QzIyMzIxNDE0QzI3QkQ5NUYyNEFGQTI0MkQwMzQxRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO/tK+w7icHhaCnEogTnE+ARpD LIXqHHRkLO0hJ30gqjN3Fa98sPJixV416KtrV6l9YNFF49yFxZ9YuVBn+BUfApEn 8RX3fNDOym06mTri/jyQ8+LbR+hColcy50zmqmWCp7bBPQrhEMEyL5fYiKVo0Ibr +c+DBcX9xviOvZzZn5fq0X/SG34JSCm7awj81pxE0rgbaXrA6WIXukq1uD12aawc hQZM+79BI2DhWMbRjJyciGeZ+HuJ18RGlw2+VNOJFmDVWksq3pU4htJIX5A+PMln rFvIRiNBJA46tTCRzk3cy/KshC9bvb3VhVehjQjlK5MQ6KWSh4xt0jixH2fRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5dmcdsIjIUFMJ72V8kr6JC0DQdYwHwYDVR0j BBgwFoAUyMGjHkLnmentwPq4ExYwUpRYRawwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzhjOWMyNTItZjdjYS00ZGQ1LTg4ZjYtMjJhZGRjODkzNGIzLzAvQzhDMUEzMUU0 MkU3OTlFOUVEQzBGQUI4MTMxNjMwNTI5NDU4NDVBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOEMxQTMxRTQyRTc5OUU5RURDMEZBQjgxMzE2MzA1Mjk0NTg0 NUFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzhjOWMyNTItZjdjYS00ZGQ1LTg4 ZjYtMjJhZGRjODkzNGIzLzAvQzhDMUEzMUU0MkU3OTlFOUVEQzBGQUI4MTMxNjMw NTI5NDU4NDVBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJ2lRC7LM0IcM/nwsylq37C6O30Kb0/Kch8 a302q/fYYchmOb88pouutm6neKqSVwDD/tEatNKppZybjFheLNUdl5eMGQTuVEcp jJRR3DIp2IbE3lwXKr5TBVExQeD4ctAXMb2kA5qFBZVUGG73ZAtcsD+EuBHK3Loa Pi84tJvQu05UpODWUTPyHTr1rFrTEpz7iXzaly6GHVIzgxgdm6/VPnTo2R8LxLqv kVFSx8jxy1cwimgdX8O9ElTeY15ILWUQeDJrUGv4Hgdp9EguAw/G0YC8hYyujv5I c1JU3fz9bUAzeB0rLRuncsnEHmD5cnIYV7tsfTWJyLYM0diidNw= -----END CERTIFICATE-----Generated at Sun Oct 4 18:38:05 2026 by rpki-client