$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/CDAD8AE64850B7306026A1B46FF84D08284104C9.mft File: CDAD8AE64850B7306026A1B46FF84D08284104C9.mft (raw, json) Hash identifier: x8EFgaFAmlISgrKzuWeSskch1AqN/qaYtXFaWeD3tD4= Subject key identifier: C4:A4:46:C1:60:60:F9:2C:53:82:CF:A5:83:AF:E7:A4:3E:2F:2E:BD Authority key identifier: CD:AD:8A:E6:48:50:B7:30:60:26:A1:B4:6F:F8:4D:08:28:41:04:C9 Certificate issuer: /CN=CDAD8AE64850B7306026A1B46FF84D08284104C9 Certificate serial: 6372800D55B8BCC16EFAC9502CB421C1545F08C4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDAD8AE64850B7306026A1B46FF84D08284104C9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/CDAD8AE64850B7306026A1B46FF84D08284104C9.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 19:04:37 +0000 Manifest this update: Wed 23 Sep 2026 18:59:37 +0000 Manifest next update: Thu 24 Sep 2026 22:55:37 +0000 Files and hashes: 1: CDAD8AE64850B7306026A1B46FF84D08284104C9.crl (hash: NtXiV6ZbXkcieMTv0EMcPunj9BL4E6DatH4fVlGKXmc=) 2: 3130332e3136392e3235322e302f32332d3234203d3e203137393935.roa (hash: Rie1EWmYCW5AS7gherk1HJqeE5vY8I4Pjrh2HLZJQzM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/CDAD8AE64850B7306026A1B46FF84D08284104C9.crl rsync://rpki-rsync.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/CDAD8AE64850B7306026A1B46FF84D08284104C9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDAD8AE64850B7306026A1B46FF84D08284104C9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 22:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:72:80:0d:55:b8:bc:c1:6e:fa:c9:50:2c:b4:21:c1:54:5f:08:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDAD8AE64850B7306026A1B46FF84D08284104C9 Validity Not Before: Sep 23 18:59:37 2026 GMT Not After : Sep 24 22:55:37 2026 GMT Subject: CN=C4A446C16060F92C5382CFA583AFE7A43E2F2EBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:48:de:4c:e9:10:ab:7f:e5:62:3a:32:3e:cf: 02:3b:90:91:6d:23:87:29:1b:0f:de:15:7e:f4:a0: ac:f1:ee:62:92:96:27:a1:f1:96:7d:0e:cf:04:f1: f6:58:bc:63:07:67:47:77:2f:f9:9a:d4:d1:07:91: e4:1d:8b:22:ca:f1:52:48:db:ec:20:d6:93:d1:0b: 57:9d:6b:70:52:60:2d:f9:2d:32:a0:c1:7f:49:3e: 9f:58:8e:c6:a7:33:c8:d9:4e:9d:f7:8b:84:5c:71: 18:86:8c:d7:61:c2:1a:cc:80:24:65:40:ed:42:5b: 90:d9:35:c1:02:97:5e:6e:90:46:8d:dd:66:31:b5: 60:d1:64:f4:70:92:d1:10:a2:0c:ee:ff:c6:3e:1d: b5:4e:83:74:9b:be:4b:72:e8:e7:23:32:5c:23:93: d0:93:ad:4a:b6:39:13:fd:8b:b0:4c:21:fc:8d:a9: ef:f1:89:2e:b7:d2:e4:91:9c:c3:8d:75:94:31:8d: a9:08:5c:a0:b0:9a:5c:dd:1f:09:84:9c:b3:86:8f: 4a:b7:c4:85:8d:31:1d:f7:1d:92:cf:50:b3:76:1a: be:23:21:94:0e:1d:46:1e:12:77:bd:5a:b3:43:41: 0c:79:ce:cd:ee:5d:5a:27:83:a7:93:34:df:c5:5c: cc:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A4:46:C1:60:60:F9:2C:53:82:CF:A5:83:AF:E7:A4:3E:2F:2E:BD X509v3 Authority Key Identifier: keyid:CD:AD:8A:E6:48:50:B7:30:60:26:A1:B4:6F:F8:4D:08:28:41:04:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/CDAD8AE64850B7306026A1B46FF84D08284104C9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDAD8AE64850B7306026A1B46FF84D08284104C9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/CDAD8AE64850B7306026A1B46FF84D08284104C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:e5:65:6f:1f:34:8e:3e:54:75:41:c6:9c:f6:7e:2e:3d:50: 1a:c7:20:38:6f:86:a2:13:bd:8d:27:6d:f2:6d:ec:4b:1e:1c: a7:a8:85:1c:f6:32:44:f9:38:dc:21:bf:af:d3:3c:64:1a:d4: 32:bd:a5:12:fb:43:42:e6:67:5b:48:4b:c5:f5:a3:93:2d:c6: fd:de:65:64:12:49:6e:68:2a:48:68:be:70:a3:de:41:81:dc: 1c:7a:37:e4:8d:f1:c0:fc:51:bb:9b:01:48:a2:24:ea:bf:4c: 52:4e:4b:e0:fc:fd:96:dc:77:88:3d:13:1f:32:3c:0a:2f:aa: d4:b0:ca:78:cd:39:5b:16:b1:25:0e:cc:88:5b:55:d0:50:bb: 6c:4e:fa:59:ee:15:84:c3:ac:48:e2:a6:25:0e:34:64:57:26: 92:7f:20:33:a2:4c:b2:60:76:6b:d7:b2:b6:43:58:56:ff:90: 84:9a:88:f4:09:53:e5:f3:9c:5a:2d:98:b9:23:c5:0d:32:5c: 91:c4:74:9a:0f:6a:e4:40:41:31:27:45:e7:41:68:d8:4f:5b: 59:a0:90:e9:3c:c3:2e:1e:68:47:e9:29:d0:75:8d:6a:63:f4: f5:1a:80:f9:2c:51:a7:62:56:c3:ee:b1:c9:b2:31:72:99:12: 5f:98:d4:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY3KADVW4vMFu+slQLLQhwVRfCMQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RBRDhBRTY0ODUwQjczMDYwMjZBMUI0NkZGODREMDgy ODQxMDRDOTAeFw0yNjA5MjMxODU5MzdaFw0yNjA5MjQyMjU1MzdaMDMxMTAvBgNV BAMTKEM0QTQ0NkMxNjA2MEY5MkM1MzgyQ0ZBNTgzQUZFN0E0M0UyRjJFQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZSN5M6RCrf+ViOjI+zwI7kJFt I4cpGw/eFX70oKzx7mKSlieh8ZZ9Ds8E8fZYvGMHZ0d3L/ma1NEHkeQdiyLK8VJI 2+wg1pPRC1eda3BSYC35LTKgwX9JPp9YjsanM8jZTp33i4RccRiGjNdhwhrMgCRl QO1CW5DZNcECl15ukEaN3WYxtWDRZPRwktEQogzu/8Y+HbVOg3Sbvkty6OcjMlwj k9CTrUq2ORP9i7BMIfyNqe/xiS630uSRnMONdZQxjakIXKCwmlzdHwmEnLOGj0q3 xIWNMR33HZLPULN2Gr4jIZQOHUYeEne9WrNDQQx5zs3uXVong6eTNN/FXMw7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxKRGwWBg+SxTgs+lg6/npD4vLr0wHwYDVR0j BBgwFoAUza2K5khQtzBgJqG0b/hNCChBBMkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWI4YzU0M2MtZGUxZi00ZWY0LTkyYjEtNjg1NTZmZjEzMWEzLzAvQ0RBRDhBRTY0 ODUwQjczMDYwMjZBMUI0NkZGODREMDgyODQxMDRDOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DREFEOEFFNjQ4NTBCNzMwNjAyNkExQjQ2RkY4NEQwODI4NDEw NEM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWI4YzU0M2MtZGUxZi00ZWY0LTky YjEtNjg1NTZmZjEzMWEzLzAvQ0RBRDhBRTY0ODUwQjczMDYwMjZBMUI0NkZGODRE MDgyODQxMDRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB7lZW8fNI4+VHVBxpz2fi49UBrHIDhvhqIT vY0nbfJt7EseHKeohRz2MkT5ONwhv6/TPGQa1DK9pRL7Q0LmZ1tIS8X1o5Mtxv3e ZWQSSW5oKkhovnCj3kGB3Bx6N+SN8cD8UbubAUiiJOq/TFJOS+D8/Zbcd4g9Ex8y PAovqtSwynjNOVsWsSUOzIhbVdBQu2xO+lnuFYTDrEjipiUONGRXJpJ/IDOiTLJg dmvXsrZDWFb/kISaiPQJU+XznFotmLkjxQ0yXJHEdJoPauRAQTEnRedBaNhPW1mg kOk8wy4eaEfpKdB1jWpj9PUagPksUadiVsPuscmyMXKZEl+Y1JU= -----END CERTIFICATE-----Generated at Thu Sep 24 12:28:14 2026 by rpki-client