$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/C23B134220A7B95B81DCC83D8D7E06A5510A549E.mft File: C23B134220A7B95B81DCC83D8D7E06A5510A549E.mft (raw, json) Hash identifier: I/xLsrEoFXv6Q6fp5wRAyQpXz6nUmqJDQrcYadUFNXA= Subject key identifier: 8F:BC:E8:29:0A:43:BD:18:ED:05:2E:7E:CA:86:51:C5:21:C6:B1:92 Authority key identifier: C2:3B:13:42:20:A7:B9:5B:81:DC:C8:3D:8D:7E:06:A5:51:0A:54:9E Certificate issuer: /CN=C23B134220A7B95B81DCC83D8D7E06A5510A549E Certificate serial: 3E78CA0CDE16629D1D0043B74DD60D9FE457FD76 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23B134220A7B95B81DCC83D8D7E06A5510A549E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/C23B134220A7B95B81DCC83D8D7E06A5510A549E.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 02:48:47 +0000 Manifest this update: Fri 25 Sep 2026 02:43:47 +0000 Manifest next update: Sat 26 Sep 2026 03:55:47 +0000 Files and hashes: 1: 323030313a6466323a383163303a3a2f34382d3438203d3e20313432333839.roa (hash: 6fSlTUT4FE6vxiMFjSI/8DBq6Z1TAZClCEVauizzEWY=) 2: 3130332e3137322e3134342e302f32342d3234203d3e20313432333839.roa (hash: 7G6gzgziJNADnBWRinmQJqfiu0VElTbunaLLh9HunCE=) 3: C23B134220A7B95B81DCC83D8D7E06A5510A549E.crl (hash: m79/OAXBKk7LH8PRP64E2XdalN2yBC4fAp29imb3isw=) 4: 3130332e3137382e3132352e302f32342d3234203d3e20313432333839.roa (hash: /19J6lbfu3WuykzZIAFXcyc9WvzK7MOPaoDjJFgPDAo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/C23B134220A7B95B81DCC83D8D7E06A5510A549E.crl rsync://rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/C23B134220A7B95B81DCC83D8D7E06A5510A549E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23B134220A7B95B81DCC83D8D7E06A5510A549E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 03:55:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:78:ca:0c:de:16:62:9d:1d:00:43:b7:4d:d6:0d:9f:e4:57:fd:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C23B134220A7B95B81DCC83D8D7E06A5510A549E Validity Not Before: Sep 25 02:43:47 2026 GMT Not After : Sep 26 03:55:47 2026 GMT Subject: CN=8FBCE8290A43BD18ED052E7ECA8651C521C6B192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:5e:d8:11:d7:10:e4:47:94:ff:83:c5:ac:dc: e9:a7:7c:49:3b:66:07:49:9f:b4:c8:0f:df:ce:61: 34:9f:17:5b:f5:5b:9e:bf:bf:4a:96:22:e5:a6:fd: 25:fb:71:70:4b:d1:fa:da:44:c3:58:12:51:66:e2: b9:83:b1:5b:79:ed:59:af:f8:ee:8d:13:2b:27:11: 98:2e:e4:81:13:ef:77:d4:06:a3:40:e1:8b:b8:eb: 56:eb:a9:f2:ea:c3:ec:b8:91:f3:29:de:c1:d1:71: c3:11:4d:90:3f:44:4d:0b:ae:b0:3c:55:0e:db:d8: 58:c2:7b:ee:f4:7f:aa:50:82:74:1d:42:dd:5b:f9: 28:f4:4b:6e:96:bb:d4:69:2e:08:f9:98:42:ad:ea: ec:93:b5:5b:5a:2f:55:e1:ef:83:0d:95:4a:70:35: 67:9c:d5:f8:18:d1:ed:18:fb:d2:c3:a5:fb:5a:e3: a6:ab:8c:e6:82:4a:d9:9c:a8:6e:eb:ed:56:27:7e: 75:32:11:5b:cb:bb:2a:26:42:25:f0:db:57:bf:e2: fd:ca:bc:e6:46:41:7e:95:3c:bc:6f:24:05:41:09: 6d:5e:4b:b3:c4:ac:2e:68:06:e2:5c:5f:3a:c8:dc: 2b:89:e2:e6:24:f2:33:b5:35:48:16:05:02:1a:e8: 65:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:BC:E8:29:0A:43:BD:18:ED:05:2E:7E:CA:86:51:C5:21:C6:B1:92 X509v3 Authority Key Identifier: keyid:C2:3B:13:42:20:A7:B9:5B:81:DC:C8:3D:8D:7E:06:A5:51:0A:54:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/C23B134220A7B95B81DCC83D8D7E06A5510A549E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23B134220A7B95B81DCC83D8D7E06A5510A549E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/C23B134220A7B95B81DCC83D8D7E06A5510A549E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:46:25:cd:79:fe:f7:aa:3d:23:ae:36:47:3b:dd:15:b2:9f: 0e:6d:7f:91:74:65:c3:fe:8a:e8:24:e5:43:f7:30:f2:62:93: b8:e9:6a:8c:d6:da:d5:a1:26:a3:14:5e:c8:40:61:2e:43:85: 57:52:08:cb:77:31:d6:53:93:dc:c4:80:2d:68:f3:cd:76:19: 3a:9e:ad:d2:1e:f1:0e:23:5a:53:96:c1:10:f6:72:57:13:a7: f0:ab:b7:07:9d:ad:ab:1e:d2:10:7c:2c:67:d6:7a:4e:12:54: 40:e2:e7:7f:3c:43:d0:7f:48:73:f4:b1:53:b2:97:29:1c:b4: b9:eb:c5:44:f0:24:50:90:8b:5c:c1:c3:19:48:bc:34:64:f0: eb:96:ac:57:e6:8b:44:e0:91:bd:62:41:d0:7c:70:38:ed:ba: 45:ca:85:2e:ac:f3:45:5f:e8:76:a1:10:41:46:71:04:99:90: 9e:9a:3a:04:29:ce:3c:1f:fd:17:d5:1d:88:6c:1d:63:5b:6c: 42:54:fc:8d:fc:ba:6b:2f:9c:1b:40:19:8c:a7:24:77:61:3f: 52:d4:ce:1d:fb:e7:b9:86:19:a2:07:74:0d:c8:b6:bc:b9:9f: 1d:bd:79:e6:ae:4e:a6:69:df:6f:56:38:b8:cf:b3:94:f6:7c: c7:06:8a:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPnjKDN4WYp0dAEO3TdYNn+RX/XYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIzQjEzNDIyMEE3Qjk1QjgxRENDODNEOEQ3RTA2QTU1 MTBBNTQ5RTAeFw0yNjA5MjUwMjQzNDdaFw0yNjA5MjYwMzU1NDdaMDMxMTAvBgNV BAMTKDhGQkNFODI5MEE0M0JEMThFRDA1MkU3RUNBODY1MUM1MjFDNkIxOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfXtgR1xDkR5T/g8Ws3OmnfEk7 ZgdJn7TID9/OYTSfF1v1W56/v0qWIuWm/SX7cXBL0fraRMNYElFm4rmDsVt57Vmv +O6NEysnEZgu5IET73fUBqNA4Yu461brqfLqw+y4kfMp3sHRccMRTZA/RE0LrrA8 VQ7b2FjCe+70f6pQgnQdQt1b+Sj0S26Wu9RpLgj5mEKt6uyTtVtaL1Xh74MNlUpw NWec1fgY0e0Y+9LDpfta46arjOaCStmcqG7r7VYnfnUyEVvLuyomQiXw21e/4v3K vOZGQX6VPLxvJAVBCW1eS7PErC5oBuJcXzrI3CuJ4uYk8jO1NUgWBQIa6GUtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj7zoKQpDvRjtBS5+yoZRxSHGsZIwHwYDVR0j BBgwFoAUwjsTQiCnuVuB3Mg9jX4GpVEKVJ4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGQ3OWU3YTctMWFhZS00ZTUyLWJhYzMtOGY3YzY3YWUwYTA0LzAvQzIzQjEzNDIy MEE3Qjk1QjgxRENDODNEOEQ3RTA2QTU1MTBBNTQ5RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMjNCMTM0MjIwQTdCOTVCODFEQ0M4M0Q4RDdFMDZBNTUxMEE1 NDlFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGQ3OWU3YTctMWFhZS00ZTUyLWJh YzMtOGY3YzY3YWUwYTA0LzAvQzIzQjEzNDIyMEE3Qjk1QjgxRENDODNEOEQ3RTA2 QTU1MTBBNTQ5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK9GJc15/veqPSOuNkc73RWynw5tf5F0ZcP+ iugk5UP3MPJik7jpaozW2tWhJqMUXshAYS5DhVdSCMt3MdZTk9zEgC1o8812GTqe rdIe8Q4jWlOWwRD2clcTp/Crtwedrase0hB8LGfWek4SVEDi5388Q9B/SHP0sVOy lykctLnrxUTwJFCQi1zBwxlIvDRk8OuWrFfmi0Tgkb1iQdB8cDjtukXKhS6s80Vf 6HahEEFGcQSZkJ6aOgQpzjwf/RfVHYhsHWNbbEJU/I38umsvnBtAGYynJHdhP1LU zh3757mGGaIHdA3Itry5nx29eeauTqZp329WOLjPs5T2fMcGijQ= -----END CERTIFICATE-----Generated at Fri Sep 25 17:16:08 2026 by rpki-client