$ rpki-client -vvvf rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.mft File: C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.mft (raw, json) Hash identifier: GgFzy8F0IaFPgYu9Y+y0G1el+4VYmF+ZIAijDjXWhwg= Subject key identifier: 71:2C:4C:A9:1E:72:04:B3:8F:5F:E6:EC:23:07:41:28:2E:0D:7A:24 Authority key identifier: C0:43:3C:FC:2E:06:4A:77:FD:CB:37:B4:9C:2C:93:C4:D0:A0:52:6C Certificate issuer: /CN=C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C Certificate serial: 0EB2D37C7490CF731E06AE9C7A52690015C0ED90 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.mft Manifest number: C3 Signing time: Wed 23 Sep 2026 19:45:23 +0000 Manifest this update: Wed 23 Sep 2026 19:40:23 +0000 Manifest next update: Thu 24 Sep 2026 20:50:23 +0000 Files and hashes: 1: 323030313a6466373a353330303a3a2f34382d3438203d3e20313338313135.roa (hash: +rxATWvogOmG58QtPOl3t5ZnCAWvuClI+FAmj6pibBE=) 2: 3130332e3134372e3135342e302f32342d3234203d3e20313338313135.roa (hash: hbxsy5rYM2ui/y8kSQK8vRtJw5Os4ztQgliynYBu9Sg=) 3: 3130332e3132362e3232362e302f32342d3234203d3e20313338313135.roa (hash: 67eHKrfnUV+o5bdh8AJ2qRePKkWRvK0EPB7qFbO8S2g=) 4: C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.crl (hash: wubHuL4LmMvew4n6iE/IHoC/uG7H8+xXIq1GA8LLbcs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.crl rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 20:50:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:b2:d3:7c:74:90:cf:73:1e:06:ae:9c:7a:52:69:00:15:c0:ed:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C Validity Not Before: Sep 23 19:40:23 2026 GMT Not After : Sep 24 20:50:23 2026 GMT Subject: CN=712C4CA91E7204B38F5FE6EC230741282E0D7A24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:93:da:6d:3a:42:32:d9:67:7e:ad:fe:3a:10: 6a:e4:19:66:ee:a6:a9:f0:ab:60:a7:08:91:f4:42: 71:92:b7:8f:4a:d8:6f:8b:bb:b5:b5:b2:22:ce:27: e0:52:18:4c:bc:43:b5:a3:45:6a:68:6b:f2:58:bf: 2b:3f:c4:f7:21:43:72:a2:12:e0:5c:0d:11:83:1c: be:dd:16:62:69:18:2f:59:d5:8b:5f:25:c2:3f:b4: 6a:83:7c:73:e1:ae:d9:e4:3c:32:1d:30:b7:ad:21: 28:aa:db:98:e7:df:a1:da:f4:2c:9a:e3:c5:0c:fd: 03:6c:25:df:62:cb:6c:aa:e1:c1:63:23:c3:d0:ff: 27:e2:03:6b:45:52:02:bd:ed:b4:f0:25:2a:73:16: 25:41:a7:7b:b4:b8:a7:04:60:a5:15:79:c6:f1:e6: 79:69:d6:b3:b0:57:2c:fb:fd:57:ed:ea:e6:96:e4: 95:c6:13:97:85:36:35:2b:75:21:62:fa:5e:fb:55: 60:67:b0:7c:74:6f:4c:91:e6:1f:f9:3d:a4:61:e2: c5:97:b2:20:da:34:02:64:57:bd:a5:4c:ca:b1:13: 19:0b:b5:72:3b:8c:ce:a9:26:f7:87:bf:16:4c:00: d7:97:d7:dd:bf:01:94:fc:f9:1c:96:cf:93:43:dd: 3f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:2C:4C:A9:1E:72:04:B3:8F:5F:E6:EC:23:07:41:28:2E:0D:7A:24 X509v3 Authority Key Identifier: keyid:C0:43:3C:FC:2E:06:4A:77:FD:CB:37:B4:9C:2C:93:C4:D0:A0:52:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:af:1b:70:04:1e:74:f1:c1:cf:ff:96:72:2b:4e:e8:fc:a9: 9c:e6:4f:a6:b0:8d:1b:b0:bf:31:5e:84:48:a6:d7:3f:4c:b8: c6:e1:81:76:f7:e8:00:72:4c:b2:7d:70:d9:49:ce:30:bf:ed: 80:c0:43:de:0a:b5:c1:e6:08:0a:6a:06:c2:61:e1:04:e8:35: 2e:19:a5:d1:5d:ea:bf:65:51:7d:e2:94:75:47:03:95:75:6a: 44:02:5a:d2:06:89:3b:2d:2f:97:ae:02:7d:41:f2:60:6c:dd: b5:6c:4a:22:0a:27:3f:f7:e3:e7:f6:62:80:ef:3b:c7:00:8b: 81:fc:3e:67:f1:40:d8:bf:b8:d8:18:61:e8:89:c2:6c:30:5c: 89:69:45:e9:fd:90:36:49:41:2f:63:54:46:06:b2:44:b6:54: 85:c7:04:0f:5b:44:dd:a2:8a:d5:11:d4:3b:d3:19:26:31:ed: b7:34:f8:d2:4b:63:b7:c0:88:f6:9b:fa:81:de:3a:d7:07:77: 04:6e:82:75:06:24:49:78:14:db:6b:10:cc:a1:c7:0c:5d:2a: 53:0c:9d:78:65:91:df:62:8a:9e:9c:84:09:4b:7a:76:eb:64: 02:3e:dd:f1:12:c6:48:e3:d6:29:a2:18:bb:01:f5:2c:53:6a: 5d:e5:97:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDrLTfHSQz3MeBq6celJpABXA7ZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA0MzNDRkMyRTA2NEE3N0ZEQ0IzN0I0OUMyQzkzQzRE MEEwNTI2QzAeFw0yNjA5MjMxOTQwMjNaFw0yNjA5MjQyMDUwMjNaMDMxMTAvBgNV BAMTKDcxMkM0Q0E5MUU3MjA0QjM4RjVGRTZFQzIzMDc0MTI4MkUwRDdBMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVk9ptOkIy2Wd+rf46EGrkGWbu pqnwq2CnCJH0QnGSt49K2G+Lu7W1siLOJ+BSGEy8Q7WjRWpoa/JYvys/xPchQ3Ki EuBcDRGDHL7dFmJpGC9Z1YtfJcI/tGqDfHPhrtnkPDIdMLetISiq25jn36Ha9Cya 48UM/QNsJd9iy2yq4cFjI8PQ/yfiA2tFUgK97bTwJSpzFiVBp3u0uKcEYKUVecbx 5nlp1rOwVyz7/Vft6uaW5JXGE5eFNjUrdSFi+l77VWBnsHx0b0yR5h/5PaRh4sWX siDaNAJkV72lTMqxExkLtXI7jM6pJveHvxZMANeX192/AZT8+RyWz5ND3T/vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcSxMqR5yBLOPX+bsIwdBKC4NeiQwHwYDVR0j BBgwFoAUwEM8/C4GSnf9yze0nCyTxNCgUmwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjRjZjYzMmQtZDYxYS00ODI2LWI1NzItOWYxOTQ4YWU1ODBjLzAvQzA0MzNDRkMy RTA2NEE3N0ZEQ0IzN0I0OUMyQzkzQzREMEEwNTI2Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMDQzM0NGQzJFMDY0QTc3RkRDQjM3QjQ5QzJDOTNDNEQwQTA1 MjZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjRjZjYzMmQtZDYxYS00ODI2LWI1 NzItOWYxOTQ4YWU1ODBjLzAvQzA0MzNDRkMyRTA2NEE3N0ZEQ0IzN0I0OUMyQzkz QzREMEEwNTI2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHuvG3AEHnTxwc//lnIrTuj8qZzmT6awjRuw vzFehEim1z9MuMbhgXb36AByTLJ9cNlJzjC/7YDAQ94KtcHmCApqBsJh4QToNS4Z pdFd6r9lUX3ilHVHA5V1akQCWtIGiTstL5euAn1B8mBs3bVsSiIKJz/34+f2YoDv O8cAi4H8PmfxQNi/uNgYYeiJwmwwXIlpRen9kDZJQS9jVEYGskS2VIXHBA9bRN2i itUR1DvTGSYx7bc0+NJLY7fAiPab+oHeOtcHdwRugnUGJEl4FNtrEMyhxwxdKlMM nXhlkd9iip6chAlLenbrZAI+3fESxkjj1imiGLsB9SxTal3ll6c= -----END CERTIFICATE-----Generated at Thu Sep 24 07:03:47 2026 by rpki-client