$ rpki-client -vvvf rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.mft File: C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.mft (raw, json) Hash identifier: 1PvhcLwn4omQXB71ruzYs9856AriRpu59aAnceXX7ls= Subject key identifier: 94:80:57:DB:7F:13:3A:5E:B4:9A:1A:77:E9:E5:59:12:D2:5C:77:DB Authority key identifier: C0:43:3C:FC:2E:06:4A:77:FD:CB:37:B4:9C:2C:93:C4:D0:A0:52:6C Certificate issuer: /CN=C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C Certificate serial: 43EA3F43200CEE6D97174872183E89ED6BD45431 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.mft Manifest number: C5 Signing time: Fri 25 Sep 2026 07:19:51 +0000 Manifest this update: Fri 25 Sep 2026 07:14:51 +0000 Manifest next update: Sat 26 Sep 2026 07:57:51 +0000 Files and hashes: 1: 3130332e3132362e3232362e302f32342d3234203d3e20313338313135.roa (hash: 67eHKrfnUV+o5bdh8AJ2qRePKkWRvK0EPB7qFbO8S2g=) 2: 3130332e3134372e3135342e302f32342d3234203d3e20313338313135.roa (hash: hbxsy5rYM2ui/y8kSQK8vRtJw5Os4ztQgliynYBu9Sg=) 3: 323030313a6466373a353330303a3a2f34382d3438203d3e20313338313135.roa (hash: +rxATWvogOmG58QtPOl3t5ZnCAWvuClI+FAmj6pibBE=) 4: C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.crl (hash: mt1OP+gqTvTWQJg5sVVG34RTdUi3AYWThVMM3VPyLew=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.crl rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 07:57:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:ea:3f:43:20:0c:ee:6d:97:17:48:72:18:3e:89:ed:6b:d4:54:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C Validity Not Before: Sep 25 07:14:51 2026 GMT Not After : Sep 26 07:57:51 2026 GMT Subject: CN=948057DB7F133A5EB49A1A77E9E55912D25C77DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:55:c8:f0:5f:63:94:99:a0:34:39:4d:48:4a: fb:1d:ce:00:69:36:52:4d:3c:23:9e:30:e8:21:44: 26:a9:10:f1:3e:51:0d:af:2a:26:50:12:32:69:8b: 43:43:ef:4e:df:ca:d6:07:1c:16:e9:f5:ed:45:1f: df:05:e1:5f:23:00:3b:c4:37:91:f0:a4:6a:d6:d9: 2b:6e:73:78:84:c6:9b:8b:a7:cd:5e:a2:fa:82:ee: 98:88:16:a0:64:44:b7:13:e0:e4:96:ab:20:dc:99: 16:57:9c:e6:10:19:75:5c:6d:84:39:b6:03:33:6f: ed:72:04:13:fb:29:11:b0:52:73:a4:e1:13:0a:4e: 63:99:72:76:34:13:5e:79:d7:a8:1b:e3:fd:a7:75: 2a:09:bb:c3:00:b5:2b:ae:6c:38:4e:ce:b2:9d:9a: 52:e7:e0:f8:82:fc:f5:92:0a:da:23:a0:7c:6a:7e: 07:6f:94:72:05:06:03:37:42:99:82:c0:89:7f:3d: 7d:7e:85:21:c2:42:6a:b7:bb:e4:4d:77:89:40:af: a2:db:58:c3:71:25:77:22:85:ed:d1:e4:cf:f5:91: 8c:19:c8:0e:b3:2d:38:22:85:22:ce:5c:5c:30:09: 1a:4c:fa:db:69:6e:3c:66:46:f1:cc:03:b4:87:8b: f0:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:80:57:DB:7F:13:3A:5E:B4:9A:1A:77:E9:E5:59:12:D2:5C:77:DB X509v3 Authority Key Identifier: keyid:C0:43:3C:FC:2E:06:4A:77:FD:CB:37:B4:9C:2C:93:C4:D0:A0:52:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:26:0c:2e:48:6a:ef:d3:8d:15:97:30:96:0c:0b:df:79:ca: d5:6b:82:af:cd:02:b2:f4:9c:fc:89:c0:4b:d8:aa:fb:31:5a: 79:b4:a1:fa:89:16:7a:4c:14:47:dc:6b:d2:35:92:88:79:ba: 42:d9:71:4a:f9:d6:6a:67:1e:68:5b:2f:26:11:14:3f:4b:b4: f0:f2:04:a9:5f:b5:9c:e0:d7:bc:b2:5b:2f:f3:9b:7c:96:d7: 31:16:f1:0a:03:28:eb:0f:14:e6:d3:57:2c:d0:58:e6:ae:c5: df:fa:56:f8:55:2e:48:2f:11:7b:d5:b2:19:a6:f9:d9:a8:6c: 9b:ca:48:8f:1f:15:d1:44:18:fa:f6:0b:a6:45:a9:ee:09:d3: 28:3e:ba:15:a8:e2:0f:fe:de:36:bd:6b:eb:a3:13:a9:3b:0b: d6:96:a3:01:f5:0c:77:80:a1:d8:0d:30:4e:19:d3:00:7a:0b: d6:c9:ea:6a:7a:8a:72:c1:24:dc:85:12:1a:f8:84:6a:2d:d0: c4:1b:a4:cf:f9:ee:05:c6:c4:44:89:2a:7d:e6:58:99:57:3f: 73:bf:de:1d:83:38:5e:dc:82:f6:fd:bf:29:b0:45:fc:75:45: da:5e:32:4a:8f:c4:61:ab:92:31:7f:49:a1:9d:7e:7d:79:de: 76:1d:92:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ+o/QyAM7m2XF0hyGD6J7WvUVDEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA0MzNDRkMyRTA2NEE3N0ZEQ0IzN0I0OUMyQzkzQzRE MEEwNTI2QzAeFw0yNjA5MjUwNzE0NTFaFw0yNjA5MjYwNzU3NTFaMDMxMTAvBgNV BAMTKDk0ODA1N0RCN0YxMzNBNUVCNDlBMUE3N0U5RTU1OTEyRDI1Qzc3REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbVcjwX2OUmaA0OU1ISvsdzgBp NlJNPCOeMOghRCapEPE+UQ2vKiZQEjJpi0ND707fytYHHBbp9e1FH98F4V8jADvE N5HwpGrW2Stuc3iExpuLp81eovqC7piIFqBkRLcT4OSWqyDcmRZXnOYQGXVcbYQ5 tgMzb+1yBBP7KRGwUnOk4RMKTmOZcnY0E15516gb4/2ndSoJu8MAtSuubDhOzrKd mlLn4PiC/PWSCtojoHxqfgdvlHIFBgM3QpmCwIl/PX1+hSHCQmq3u+RNd4lAr6Lb WMNxJXcihe3R5M/1kYwZyA6zLTgihSLOXFwwCRpM+ttpbjxmRvHMA7SHi/D1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlIBX238TOl60mhp36eVZEtJcd9swHwYDVR0j BBgwFoAUwEM8/C4GSnf9yze0nCyTxNCgUmwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjRjZjYzMmQtZDYxYS00ODI2LWI1NzItOWYxOTQ4YWU1ODBjLzAvQzA0MzNDRkMy RTA2NEE3N0ZEQ0IzN0I0OUMyQzkzQzREMEEwNTI2Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMDQzM0NGQzJFMDY0QTc3RkRDQjM3QjQ5QzJDOTNDNEQwQTA1 MjZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjRjZjYzMmQtZDYxYS00ODI2LWI1 NzItOWYxOTQ4YWU1ODBjLzAvQzA0MzNDRkMyRTA2NEE3N0ZEQ0IzN0I0OUMyQzkz QzREMEEwNTI2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKsmDC5Iau/TjRWXMJYMC995ytVrgq/NArL0 nPyJwEvYqvsxWnm0ofqJFnpMFEfca9I1koh5ukLZcUr51mpnHmhbLyYRFD9LtPDy BKlftZzg17yyWy/zm3yW1zEW8QoDKOsPFObTVyzQWOauxd/6VvhVLkgvEXvVshmm +dmobJvKSI8fFdFEGPr2C6ZFqe4J0yg+uhWo4g/+3ja9a+ujE6k7C9aWowH1DHeA odgNME4Z0wB6C9bJ6mp6inLBJNyFEhr4hGot0MQbpM/57gXGxESJKn3mWJlXP3O/ 3h2DOF7cgvb9vymwRfx1RdpeMkqPxGGrkjF/SaGdfn153nYdkuo= -----END CERTIFICATE-----Generated at Fri Sep 25 23:50:52 2026 by rpki-client