$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.mft File: 8076C56477B8FD54606E8F7BB95C1BCD953296A6.mft (raw, json) Hash identifier: n4GQWORL4KBXZAMGdoBWw0aEJVO1NfeX7yyQbjLgt58= Subject key identifier: C1:5D:37:E5:6E:50:B2:49:7C:65:39:58:CF:6E:F1:33:D6:45:17:28 Authority key identifier: 80:76:C5:64:77:B8:FD:54:60:6E:8F:7B:B9:5C:1B:CD:95:32:96:A6 Certificate issuer: /CN=8076C56477B8FD54606E8F7BB95C1BCD953296A6 Certificate serial: 553AF06430378677F570AA3404ACCA1263A12AA0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 23:34:42 +0000 Manifest this update: Thu 24 Sep 2026 23:29:42 +0000 Manifest next update: Sat 26 Sep 2026 01:51:42 +0000 Files and hashes: 1: AS139994.roa (hash: yvMW+tHCsBkuY1gG/yGlJ6JOSC3lCz//Xfli/4HGudE=) 2: AS24203.roa (hash: elsc0fS7A3LxkWGHoyme7eZUKOvhFf04i/z5CF+hz8c=) 3: AS17885.roa (hash: QDIkXwtnGbligvAEMFVpJlik2NMuLqD9yutNqqC9tvo=) 4: 8076C56477B8FD54606E8F7BB95C1BCD953296A6.crl (hash: oi55T//8dHqSTkwWVht9KZVmAmMPzLlwdD/HzNOzubk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.crl rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:3a:f0:64:30:37:86:77:f5:70:aa:34:04:ac:ca:12:63:a1:2a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8076C56477B8FD54606E8F7BB95C1BCD953296A6 Validity Not Before: Sep 24 23:29:42 2026 GMT Not After : Sep 26 01:51:42 2026 GMT Subject: CN=C15D37E56E50B2497C653958CF6EF133D6451728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5b:ed:9f:da:d7:8a:fd:93:3f:d6:51:11:92: a4:9c:6c:38:a1:a7:75:d3:ec:a5:eb:13:50:80:9b: d1:e8:f3:e5:64:0d:55:b7:73:2a:d9:96:cf:1d:9e: 99:57:9e:19:e9:a4:82:1c:28:55:50:7e:19:a0:8a: 63:89:c7:2e:32:8a:36:96:4d:f5:9f:a6:2a:62:cf: 4e:c1:99:6a:7b:ac:fc:23:b7:8e:a7:29:03:05:f0: f0:d0:4d:9c:fd:23:eb:f8:cc:40:81:a2:5e:bc:27: da:31:ff:49:69:0b:7a:4a:18:84:61:6c:53:a7:ed: 55:61:37:82:40:62:86:26:58:1c:91:a8:d8:d4:c5: a8:13:78:76:88:8e:90:ed:5e:7d:51:e8:69:74:80: 72:42:3a:86:29:39:5e:3b:bc:ca:09:83:a6:51:37: 53:b8:62:98:5e:4d:99:4f:dd:72:86:e9:5f:f7:53: 42:ef:4a:c6:46:1f:3f:db:33:44:cb:3b:88:62:90: 82:54:58:f1:76:10:ba:69:f8:f8:8f:06:10:01:b8: 7f:d3:c5:6c:fb:98:57:1d:be:b3:51:9f:53:10:53: fd:ed:18:5a:d3:c9:8b:d0:a6:f5:48:02:c1:66:46: 98:03:4e:30:93:da:ec:24:05:62:52:a0:dc:66:c4: 21:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:5D:37:E5:6E:50:B2:49:7C:65:39:58:CF:6E:F1:33:D6:45:17:28 X509v3 Authority Key Identifier: keyid:80:76:C5:64:77:B8:FD:54:60:6E:8F:7B:B9:5C:1B:CD:95:32:96:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:fc:c5:43:9b:2c:ba:3e:46:9b:cd:ab:df:a4:80:14:8f:e6: f1:fe:e3:76:c9:05:b2:71:0d:99:a4:f8:7a:eb:af:65:7a:b5: 0f:82:10:55:dc:ae:96:b7:a3:3e:17:14:c1:fd:4e:0a:f8:8a: 88:36:05:63:be:ae:65:39:fc:d4:36:bd:92:f1:12:9a:29:79: 5f:09:92:e0:51:2e:c3:98:49:c0:a1:17:a3:59:0b:84:27:03: b5:46:a8:80:e5:f2:7b:31:e2:81:a4:63:e8:fc:ab:65:a7:63: 57:a6:a1:bb:cb:be:fa:05:cc:17:7b:d3:99:ef:79:9a:59:3b: 04:de:33:de:15:37:b1:2e:59:94:17:c1:ff:55:42:77:52:e2: 43:ba:50:bb:f8:ce:b8:df:68:00:24:fd:72:b4:fe:10:2e:b9: 1f:cc:16:db:1f:1c:bf:a8:44:47:e8:7d:c1:30:55:2b:a5:9b: 29:be:08:a6:06:a3:35:4a:30:9d:87:97:d6:00:c7:88:84:82: cb:d1:18:90:20:2b:da:32:84:80:86:63:29:68:ab:9a:75:51: 81:12:49:e6:85:f6:54:c2:a9:88:99:13:77:4d:fe:ea:04:20: 59:8c:5b:d5:4f:a2:64:b5:cc:cc:fd:e2:14:ba:01:b3:07:90: 3e:43:da:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVTrwZDA3hnf1cKo0BKzKEmOhKqAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA3NkM1NjQ3N0I4RkQ1NDYwNkU4RjdCQjk1QzFCQ0Q5 NTMyOTZBNjAeFw0yNjA5MjQyMzI5NDJaFw0yNjA5MjYwMTUxNDJaMDMxMTAvBgNV BAMTKEMxNUQzN0U1NkU1MEIyNDk3QzY1Mzk1OENGNkVGMTMzRDY0NTE3MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzW+2f2teK/ZM/1lERkqScbDih p3XT7KXrE1CAm9Ho8+VkDVW3cyrZls8dnplXnhnppIIcKFVQfhmgimOJxy4yijaW TfWfpipiz07BmWp7rPwjt46nKQMF8PDQTZz9I+v4zECBol68J9ox/0lpC3pKGIRh bFOn7VVhN4JAYoYmWByRqNjUxagTeHaIjpDtXn1R6Gl0gHJCOoYpOV47vMoJg6ZR N1O4YpheTZlP3XKG6V/3U0LvSsZGHz/bM0TLO4hikIJUWPF2ELpp+PiPBhABuH/T xWz7mFcdvrNRn1MQU/3tGFrTyYvQpvVIAsFmRpgDTjCT2uwkBWJSoNxmxCFDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwV035W5Qskl8ZTlYz27xM9ZFFygwHwYDVR0j BBgwFoAUgHbFZHe4/VRgbo97uVwbzZUylqYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGJkYjFlMGEtYTRlYy00OWRiLWJlODktOGQ3ZTdmYzJjMjI3LzEvODA3NkM1NjQ3 N0I4RkQ1NDYwNkU4RjdCQjk1QzFCQ0Q5NTMyOTZBNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MDc2QzU2NDc3QjhGRDU0NjA2RThGN0JCOTVDMUJDRDk1MzI5 NkE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl ODktOGQ3ZTdmYzJjMjI3LzEvODA3NkM1NjQ3N0I4RkQ1NDYwNkU4RjdCQjk1QzFC Q0Q5NTMyOTZBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACj8xUObLLo+RpvNq9+kgBSP5vH+43bJBbJx DZmk+Hrrr2V6tQ+CEFXcrpa3oz4XFMH9Tgr4iog2BWO+rmU5/NQ2vZLxEpopeV8J kuBRLsOYScChF6NZC4QnA7VGqIDl8nsx4oGkY+j8q2WnY1emobvLvvoFzBd705nv eZpZOwTeM94VN7EuWZQXwf9VQndS4kO6ULv4zrjfaAAk/XK0/hAuuR/MFtsfHL+o REfofcEwVSulmym+CKYGozVKMJ2Hl9YAx4iEgsvRGJAgK9oyhICGYyloq5p1UYES SeaF9lTCqYiZE3dN/uoEIFmMW9VPomS1zMz94hS6AbMHkD5D2lM= -----END CERTIFICATE-----Generated at Fri Sep 25 02:34:39 2026 by rpki-client