$ rpki-client -vvvf rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.mft File: C8D24ADF5C7432E5E3C1D5988774107A717F827B.mft (raw, json) Hash identifier: 9Dbepw6IWk+sxrxfIIhpLwM12KRVKH6k05ouC7z2+Ms= Subject key identifier: F4:F1:18:39:32:F4:D3:DD:4E:5C:50:B8:CC:DC:90:5B:BD:06:3C:CB Authority key identifier: C8:D2:4A:DF:5C:74:32:E5:E3:C1:D5:98:87:74:10:7A:71:7F:82:7B Certificate issuer: /CN=C8D24ADF5C7432E5E3C1D5988774107A717F827B Certificate serial: 797C32E120E2AE7171FE3E1AB58265EE3863B6F7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D24ADF5C7432E5E3C1D5988774107A717F827B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.mft Manifest number: C3 Signing time: Sat 26 Sep 2026 00:35:55 +0000 Manifest this update: Sat 26 Sep 2026 00:30:55 +0000 Manifest next update: Sun 27 Sep 2026 02:26:55 +0000 Files and hashes: 1: C8D24ADF5C7432E5E3C1D5988774107A717F827B.crl (hash: TXe1gut5rq1sTRxmEkGPRNwsS0MBHHWjpTmhOx2BR4w=) 2: 323430313a666363303a3a2f33322d3332203d3e203535363939.roa (hash: T5iXYEZsEylyp3JdGzhmtU2Kjr1HhNQabu6sAc+svIA=) 3: 3130332e3130342e31322e302f32322d3232203d3e203535363939.roa (hash: yHStdJOfwpXotUrFqNRyBFcevnLpf2rHuaCz1qS9rN0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.crl rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D24ADF5C7432E5E3C1D5988774107A717F827B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:7c:32:e1:20:e2:ae:71:71:fe:3e:1a:b5:82:65:ee:38:63:b6:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8D24ADF5C7432E5E3C1D5988774107A717F827B Validity Not Before: Sep 26 00:30:55 2026 GMT Not After : Sep 27 02:26:55 2026 GMT Subject: CN=F4F1183932F4D3DD4E5C50B8CCDC905BBD063CCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:90:98:c7:74:85:7f:ec:64:ac:ba:8f:61:19: e0:e8:a0:cd:c4:f1:77:65:ee:cc:3d:86:8f:ad:02: f1:ed:ea:21:06:c5:9d:4a:70:72:7a:84:65:d1:f2: 15:04:a0:a1:c6:b6:f2:7a:90:64:8a:24:54:d7:a7: 15:08:a8:03:40:d9:33:5f:b8:ee:69:60:b2:2d:81: 2e:f0:71:e6:df:26:78:29:0a:e0:5a:27:33:f8:28: 10:8f:e3:eb:2a:a5:15:1a:f9:02:5a:0a:dd:e9:6e: 73:6c:8d:34:2c:ca:fc:19:aa:43:0b:a0:8c:4d:81: 87:79:a7:0b:bd:c9:74:a1:2e:56:76:11:8f:10:b1: 1e:07:57:bc:47:fc:0a:1c:8f:80:65:0c:e0:7f:76: 46:6d:e7:46:19:95:a1:e6:9c:e8:bf:dd:c7:f6:cf: 00:92:a3:bf:fc:c5:34:8b:98:6c:f3:df:e3:3c:b4: 8e:98:58:fa:8a:5e:54:72:ac:65:a6:dc:3f:d2:70: 1f:4b:5f:63:eb:fb:5f:9a:01:ee:82:d2:1a:6a:ea: b3:a3:3a:3c:72:4f:62:9c:70:cf:67:3a:8e:a9:01: c2:06:d7:a6:08:64:8e:74:7b:5a:70:48:22:92:52: 64:2c:f9:09:e8:55:b7:1b:56:4f:7e:96:f0:e3:88: 80:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:F1:18:39:32:F4:D3:DD:4E:5C:50:B8:CC:DC:90:5B:BD:06:3C:CB X509v3 Authority Key Identifier: keyid:C8:D2:4A:DF:5C:74:32:E5:E3:C1:D5:98:87:74:10:7A:71:7F:82:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D24ADF5C7432E5E3C1D5988774107A717F827B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:7b:7d:f2:5c:f1:83:a1:d4:a0:ce:94:dd:38:ef:8a:3f:23: 62:14:35:ea:e0:8d:0d:42:63:37:e1:96:50:c4:eb:23:cb:af: 35:63:22:56:60:9b:e5:12:bc:f2:2e:09:3c:8b:be:00:4b:ca: d4:77:9a:1f:40:3a:09:6b:0c:6a:0e:f6:49:a8:d0:07:73:57: 1d:7e:7f:e2:6b:ab:04:67:c4:f2:37:f9:98:00:bc:2d:e6:fb: 75:33:19:36:9b:a4:5f:bf:4c:58:e2:a9:b1:81:31:81:b4:e1: 20:75:11:43:47:28:45:61:5e:5d:d2:66:ce:c2:b3:8d:26:2f: b5:07:f9:99:2a:2a:dd:cb:45:4d:6e:39:7f:ef:01:e3:42:41: b3:7f:ec:f1:de:f5:08:13:e8:7e:1a:1d:69:ae:64:98:58:44: 38:df:81:45:da:d0:4a:0f:55:45:b0:01:42:c6:41:dd:ea:c9: 90:ca:74:de:ba:ba:35:35:f2:db:2f:69:58:ce:87:1e:cc:55: 43:68:00:b9:99:60:27:0e:7c:02:a7:a5:aa:0e:c3:09:1f:c2: 68:16:87:6a:e9:c8:2a:f6:10:0a:3d:2b:41:f1:f8:f1:25:25: 48:83:05:79:74:73:32:8e:e2:f0:40:c2:b1:11:59:71:4b:29: d3:69:f2:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeXwy4SDirnFx/j4atYJl7jhjtvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhEMjRBREY1Qzc0MzJFNUUzQzFENTk4ODc3NDEwN0E3 MTdGODI3QjAeFw0yNjA5MjYwMDMwNTVaFw0yNjA5MjcwMjI2NTVaMDMxMTAvBgNV BAMTKEY0RjExODM5MzJGNEQzREQ0RTVDNTBCOENDREM5MDVCQkQwNjNDQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIkJjHdIV/7GSsuo9hGeDooM3E 8Xdl7sw9ho+tAvHt6iEGxZ1KcHJ6hGXR8hUEoKHGtvJ6kGSKJFTXpxUIqANA2TNf uO5pYLItgS7wcebfJngpCuBaJzP4KBCP4+sqpRUa+QJaCt3pbnNsjTQsyvwZqkML oIxNgYd5pwu9yXShLlZ2EY8QsR4HV7xH/Aocj4BlDOB/dkZt50YZlaHmnOi/3cf2 zwCSo7/8xTSLmGzz3+M8tI6YWPqKXlRyrGWm3D/ScB9LX2Pr+1+aAe6C0hpq6rOj OjxyT2KccM9nOo6pAcIG16YIZI50e1pwSCKSUmQs+QnoVbcbVk9+lvDjiIBFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9PEYOTL0091OXFC4zNyQW70GPMswHwYDVR0j BBgwFoAUyNJK31x0MuXjwdWYh3QQenF/gnswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjZhZDA5ZjMtMDAyMy00NDQ1LTg0MTYtNWNiZGUxM2ZkZDQwLzAvQzhEMjRBREY1 Qzc0MzJFNUUzQzFENTk4ODc3NDEwN0E3MTdGODI3Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOEQyNEFERjVDNzQzMkU1RTNDMUQ1OTg4Nzc0MTA3QTcxN0Y4 MjdCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjZhZDA5ZjMtMDAyMy00NDQ1LTg0 MTYtNWNiZGUxM2ZkZDQwLzAvQzhEMjRBREY1Qzc0MzJFNUUzQzFENTk4ODc3NDEw N0E3MTdGODI3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAF7ffJc8YOh1KDOlN0474o/I2IUNergjQ1C YzfhllDE6yPLrzVjIlZgm+USvPIuCTyLvgBLytR3mh9AOglrDGoO9kmo0AdzVx1+ f+JrqwRnxPI3+ZgAvC3m+3UzGTabpF+/TFjiqbGBMYG04SB1EUNHKEVhXl3SZs7C s40mL7UH+ZkqKt3LRU1uOX/vAeNCQbN/7PHe9QgT6H4aHWmuZJhYRDjfgUXa0EoP VUWwAULGQd3qyZDKdN66ujU18tsvaVjOhx7MVUNoALmZYCcOfAKnpaoOwwkfwmgW h2rpyCr2EAo9K0Hx+PElJUiDBXl0czKO4vBAwrERWXFLKdNp8oo= -----END CERTIFICATE-----Generated at Sat Sep 26 03:31:50 2026 by rpki-client