$ rpki-client -vvvf rpki-rsync.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/933548F08767775D7B028BD1D8A8C0B6B7D86E93.mft File: 933548F08767775D7B028BD1D8A8C0B6B7D86E93.mft (raw, json) Hash identifier: Mny/URa5N/g4BjPhoBoB7YjqBGUCpmPI5UjvUhWb8Yg= Subject key identifier: 8D:B8:CE:B9:1A:0A:9D:16:1A:52:00:63:EF:15:15:8B:CB:35:B3:DA Authority key identifier: 93:35:48:F0:87:67:77:5D:7B:02:8B:D1:D8:A8:C0:B6:B7:D8:6E:93 Certificate issuer: /CN=933548F08767775D7B028BD1D8A8C0B6B7D86E93 Certificate serial: 6EAB7CE81DE6A781E065444AC9D54B2FEC5A8A2F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/933548F08767775D7B028BD1D8A8C0B6B7D86E93.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/933548F08767775D7B028BD1D8A8C0B6B7D86E93.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 18:08:27 +0000 Manifest this update: Wed 23 Sep 2026 18:03:27 +0000 Manifest next update: Thu 24 Sep 2026 21:59:27 +0000 Files and hashes: 1: 933548F08767775D7B028BD1D8A8C0B6B7D86E93.crl (hash: PFzv4HVGAAX7Xve/qYLjFOWnzCk4DlbwN8Fgdc1QkOE=) 2: 3130332e3136342e35372e302f32342d3234203d3e20313431393033.roa (hash: 95qI5TTOif1MY2iIjk3ZkvKBiCiEWOUsXhE4Y/1tZsk=) 3: 3130332e3136342e35362e302f32332d3233203d3e20313431393033.roa (hash: Y8+QftugPZbHwSkPpvPN8/JuYMkdCrQIqoTMc5y/xEM=) 4: 3130332e3136342e35362e302f32342d3234203d3e20313431393033.roa (hash: zoDD4RhxLX2w3djQTafSQhXib0k+dFwrPjaxCZF6N3M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/933548F08767775D7B028BD1D8A8C0B6B7D86E93.crl rsync://rpki-rsync.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/933548F08767775D7B028BD1D8A8C0B6B7D86E93.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/933548F08767775D7B028BD1D8A8C0B6B7D86E93.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 19:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:ab:7c:e8:1d:e6:a7:81:e0:65:44:4a:c9:d5:4b:2f:ec:5a:8a:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=933548F08767775D7B028BD1D8A8C0B6B7D86E93 Validity Not Before: Sep 23 18:03:27 2026 GMT Not After : Sep 24 21:59:27 2026 GMT Subject: CN=8DB8CEB91A0A9D161A520063EF15158BCB35B3DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ba:01:25:58:2d:f6:a1:7e:e9:a8:28:f0:d3: 98:d4:73:45:6b:bc:5f:d4:d2:8f:6e:b8:df:27:e2: 4c:f3:64:52:fe:b7:e9:44:b1:f3:b7:9d:3d:10:d0: 9e:79:16:c0:a1:e0:08:5c:ec:22:8b:b5:f3:0f:e0: 46:9a:e8:7b:2a:33:4e:3f:c1:67:70:92:7b:14:4c: 72:c7:42:9e:ef:4a:09:0a:df:8f:a5:3a:d0:4a:b7: 9c:14:70:1c:77:91:16:1a:2d:82:c3:fd:78:49:7e: 23:e2:2a:8f:ac:aa:dc:0e:40:f8:98:23:86:db:02: cc:21:37:10:1b:b2:71:8a:08:3c:ed:a6:2b:5d:58: b1:d4:44:d8:5f:9b:b8:65:c4:08:d4:fe:49:d9:d3: 82:db:e1:9e:78:45:7e:70:96:bd:a4:14:1e:61:a5: 55:65:ba:f1:c4:60:bf:b1:cf:4f:29:38:c6:1e:cd: 85:ad:48:c4:15:1f:c5:83:d7:da:c3:0d:b6:82:4d: fa:ec:ce:82:16:82:79:d3:e6:ba:88:45:ba:07:79: b8:61:5a:99:a7:de:23:14:e3:33:b6:7c:a7:af:0a: 21:b2:6a:f4:ab:ab:ad:3a:8f:47:a2:d5:0d:07:cb: c0:39:a5:69:a6:0c:1e:9a:37:8b:93:e0:a4:d8:4b: d7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:B8:CE:B9:1A:0A:9D:16:1A:52:00:63:EF:15:15:8B:CB:35:B3:DA X509v3 Authority Key Identifier: keyid:93:35:48:F0:87:67:77:5D:7B:02:8B:D1:D8:A8:C0:B6:B7:D8:6E:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/933548F08767775D7B028BD1D8A8C0B6B7D86E93.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/933548F08767775D7B028BD1D8A8C0B6B7D86E93.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/933548F08767775D7B028BD1D8A8C0B6B7D86E93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:10:d6:db:1c:d1:30:40:0a:c8:96:5d:5d:64:b6:13:ef:7b: e4:2a:80:6c:14:37:d9:63:72:05:d0:2c:cb:30:fe:66:dd:02: b6:a9:62:1b:fd:16:13:94:99:81:c0:20:44:53:fe:3b:22:7f: af:df:eb:9c:75:12:c5:84:fe:5c:3a:8d:24:da:9a:a9:25:62: 6a:10:18:a0:61:37:54:c2:5b:fc:fb:c6:1d:d2:c9:3e:11:c7: 8b:35:a8:ec:17:1a:72:8b:b6:a4:7d:16:3e:79:ed:c8:24:f1: aa:cd:55:f3:a2:15:5c:11:4a:ca:d5:cf:4f:b0:87:20:03:ae: 7e:d6:a5:96:62:c2:3d:ca:b8:a2:2d:9a:08:2e:7e:0a:f9:e8: a9:af:8d:0c:39:55:cc:f8:60:0d:d6:b8:0d:6c:37:9c:67:30: 3d:39:7f:01:2c:ac:62:bd:9e:16:02:9f:99:16:7c:f9:d4:d6: f6:12:64:be:9a:62:c4:fd:bc:a9:4c:9c:25:81:23:5f:7b:83: 7b:b4:43:80:50:ad:f0:e4:46:0d:71:d1:25:91:61:f2:58:0a: a5:7a:d0:8d:83:84:b1:89:3a:da:9b:cc:77:21:89:d3:66:c4: b3:5d:34:91:e8:6d:37:da:dd:af:9d:de:63:bf:42:66:63:5d: 1b:91:eb:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbqt86B3mp4HgZURKydVLL+xaii8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTMzNTQ4RjA4NzY3Nzc1RDdCMDI4QkQxRDhBOEMwQjZC N0Q4NkU5MzAeFw0yNjA5MjMxODAzMjdaFw0yNjA5MjQyMTU5MjdaMDMxMTAvBgNV BAMTKDhEQjhDRUI5MUEwQTlEMTYxQTUyMDA2M0VGMTUxNThCQ0IzNUIzREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZugElWC32oX7pqCjw05jUc0Vr vF/U0o9uuN8n4kzzZFL+t+lEsfO3nT0Q0J55FsCh4Ahc7CKLtfMP4Eaa6HsqM04/ wWdwknsUTHLHQp7vSgkK34+lOtBKt5wUcBx3kRYaLYLD/XhJfiPiKo+sqtwOQPiY I4bbAswhNxAbsnGKCDztpitdWLHURNhfm7hlxAjU/knZ04Lb4Z54RX5wlr2kFB5h pVVluvHEYL+xz08pOMYezYWtSMQVH8WD19rDDbaCTfrszoIWgnnT5rqIRboHebhh Wpmn3iMU4zO2fKevCiGyavSrq606j0ei1Q0Hy8A5pWmmDB6aN4uT4KTYS9dXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjbjOuRoKnRYaUgBj7xUVi8s1s9owHwYDVR0j BBgwFoAUkzVI8Idnd117AovR2KjAtrfYbpMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTdjZDUxMWYtYWZmZi00ZmVjLTg3MjQtZDQxMTlmODkxZGYyLzAvOTMzNTQ4RjA4 NzY3Nzc1RDdCMDI4QkQxRDhBOEMwQjZCN0Q4NkU5My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MzM1NDhGMDg3Njc3NzVEN0IwMjhCRDFEOEE4QzBCNkI3RDg2 RTkzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTdjZDUxMWYtYWZmZi00ZmVjLTg3 MjQtZDQxMTlmODkxZGYyLzAvOTMzNTQ4RjA4NzY3Nzc1RDdCMDI4QkQxRDhBOEMw QjZCN0Q4NkU5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIEQ1tsc0TBACsiWXV1kthPve+QqgGwUN9lj cgXQLMsw/mbdArapYhv9FhOUmYHAIERT/jsif6/f65x1EsWE/lw6jSTamqklYmoQ GKBhN1TCW/z7xh3SyT4Rx4s1qOwXGnKLtqR9Fj557cgk8arNVfOiFVwRSsrVz0+w hyADrn7WpZZiwj3KuKItmggufgr56KmvjQw5Vcz4YA3WuA1sN5xnMD05fwEsrGK9 nhYCn5kWfPnU1vYSZL6aYsT9vKlMnCWBI197g3u0Q4BQrfDkRg1x0SWRYfJYCqV6 0I2DhLGJOtqbzHchidNmxLNdNJHobTfa3a+d3mO/QmZjXRuR62Q= -----END CERTIFICATE-----Generated at Wed Sep 23 21:57:07 2026 by rpki-client