$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.mft File: 84EE64DA51082B30948D12F6E14B8EBCF1D658D1.mft (raw, json) Hash identifier: KHha8N6xwt+91kxScTHkhQQ5b68l8yM+BJaeoK/9qV4= Subject key identifier: 81:41:D4:66:1F:D9:AE:8A:B6:C8:0C:C7:B7:82:F0:0A:CB:62:41:98 Authority key identifier: 84:EE:64:DA:51:08:2B:30:94:8D:12:F6:E1:4B:8E:BC:F1:D6:58:D1 Certificate issuer: /CN=84EE64DA51082B30948D12F6E14B8EBCF1D658D1 Certificate serial: 396159732A6ADF5F6CF4B4B93F089CEF3B631884 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.mft Manifest number: C2 Signing time: Fri 25 Sep 2026 02:18:02 +0000 Manifest this update: Fri 25 Sep 2026 02:13:02 +0000 Manifest next update: Sat 26 Sep 2026 04:08:02 +0000 Files and hashes: 1: 84EE64DA51082B30948D12F6E14B8EBCF1D658D1.crl (hash: rqjj1KEC1/DZz1ZewDzU1TNv0pOUd/YXbyJvQRA0FJw=) 2: 3130332e3137382e3137342e302f32332d3234203d3e20313337333331.roa (hash: WmY+n1lGNZlUUH5ZggQpvj8af92oWZ8YbeF8/QwNgtQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.crl rsync://rpki-rsync.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 04:08:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:61:59:73:2a:6a:df:5f:6c:f4:b4:b9:3f:08:9c:ef:3b:63:18:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84EE64DA51082B30948D12F6E14B8EBCF1D658D1 Validity Not Before: Sep 25 02:13:02 2026 GMT Not After : Sep 26 04:08:02 2026 GMT Subject: CN=8141D4661FD9AE8AB6C80CC7B782F00ACB624198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3e:96:0c:3e:c8:2d:85:a3:ee:73:a7:b2:1b: 89:6a:03:94:bf:81:6d:3e:3a:8e:9a:12:d5:e4:8b: 8d:55:76:bc:a8:56:c2:ad:df:ec:8a:94:4b:47:94: dc:2f:9b:5e:04:02:3d:03:7a:a4:20:e6:0a:4c:f0: 23:bb:18:a8:d9:ef:b3:e2:83:3b:63:75:c9:31:01: 9e:6d:7e:6f:08:b5:9e:02:6b:89:af:87:39:96:3b: a0:1b:87:1c:e3:1b:32:20:61:de:21:02:92:f2:ca: ed:b5:bb:9d:c3:b1:15:b4:ef:c0:d1:f4:e9:55:c2: 38:ee:6a:fb:32:f9:6b:a5:27:81:ed:96:9c:97:ee: c8:19:9b:ba:56:b8:db:ef:aa:f3:12:b2:4f:c0:d7: ab:eb:42:a3:29:67:7c:35:19:6d:1f:85:34:61:f3: d8:2f:1d:86:c9:d9:f8:7e:3a:92:a9:de:0b:f7:34: a4:81:6d:08:73:d4:1a:c3:43:3a:cc:8b:ce:c8:e6: 0c:c1:0f:a3:73:5c:24:97:09:b7:a2:ca:e5:b0:05: 93:d7:a2:ce:02:b2:c6:52:76:a6:01:a1:4a:15:8b: d6:ab:68:48:0c:6b:f7:04:7a:2a:a8:40:cf:e1:50: 39:6a:81:30:20:f5:37:a7:c4:26:57:ea:b7:bd:46: 8d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:41:D4:66:1F:D9:AE:8A:B6:C8:0C:C7:B7:82:F0:0A:CB:62:41:98 X509v3 Authority Key Identifier: keyid:84:EE:64:DA:51:08:2B:30:94:8D:12:F6:E1:4B:8E:BC:F1:D6:58:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:36:0b:18:95:6f:fc:95:c9:b2:cf:c6:f8:fb:81:44:3d:93: 23:ce:df:98:bc:14:ce:44:5c:dc:6d:ac:c6:28:38:e0:a5:0b: c3:06:4a:d8:69:2e:ce:94:61:68:96:9f:fd:2d:7b:1a:50:22: 90:35:66:d5:6c:04:85:41:08:32:8d:6d:b3:20:cf:df:eb:39: 8e:d0:6d:ae:69:ea:53:46:94:83:85:95:18:98:eb:56:5f:ca: a8:9a:a6:a6:32:be:f9:83:b2:22:5f:07:fa:2e:2d:30:c9:ae: 43:67:f6:f3:a5:1d:97:a1:58:ed:aa:41:47:84:7b:69:5e:cb: d0:f4:1a:95:6c:69:2e:27:67:e7:4a:8a:7a:98:50:e9:60:ac: 42:f9:81:88:96:a3:89:43:5b:ae:1a:5e:e0:bd:73:1d:2a:9f: ef:f4:2c:e5:61:bf:a5:da:ed:10:9d:62:9b:c5:a7:03:2a:a1: 6a:73:c3:03:79:19:48:65:71:91:c5:4a:77:a6:1a:07:a0:4c: 19:c5:71:84:26:9c:3f:53:d0:31:de:20:38:a9:2a:ef:4f:e8: be:14:83:e9:75:7e:e9:a5:ab:23:15:68:e5:be:c0:c4:f7:7d: 4b:86:9d:f0:15:d9:5b:4f:a8:b9:c8:b8:3a:c0:07:d1:37:df: 6a:8b:fc:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOWFZcypq319s9LS5Pwic7ztjGIQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODRFRTY0REE1MTA4MkIzMDk0OEQxMkY2RTE0QjhFQkNG MUQ2NThEMTAeFw0yNjA5MjUwMjEzMDJaFw0yNjA5MjYwNDA4MDJaMDMxMTAvBgNV BAMTKDgxNDFENDY2MUZEOUFFOEFCNkM4MENDN0I3ODJGMDBBQ0I2MjQxOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdPpYMPsgthaPuc6eyG4lqA5S/ gW0+Oo6aEtXki41VdryoVsKt3+yKlEtHlNwvm14EAj0DeqQg5gpM8CO7GKjZ77Pi gztjdckxAZ5tfm8ItZ4Ca4mvhzmWO6AbhxzjGzIgYd4hApLyyu21u53DsRW078DR 9OlVwjjuavsy+WulJ4HtlpyX7sgZm7pWuNvvqvMSsk/A16vrQqMpZ3w1GW0fhTRh 89gvHYbJ2fh+OpKp3gv3NKSBbQhz1BrDQzrMi87I5gzBD6NzXCSXCbeiyuWwBZPX os4CssZSdqYBoUoVi9araEgMa/cEeiqoQM/hUDlqgTAg9TenxCZX6re9Ro2JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgUHUZh/Zroq2yAzHt4LwCstiQZgwHwYDVR0j BBgwFoAUhO5k2lEIKzCUjRL24UuOvPHWWNEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmQ3ZjllZjQtZjk5Zi00NGZmLWI5NjgtNzBkNDUyNGQ3MjA3LzAvODRFRTY0REE1 MTA4MkIzMDk0OEQxMkY2RTE0QjhFQkNGMUQ2NThEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NEVFNjREQTUxMDgyQjMwOTQ4RDEyRjZFMTRCOEVCQ0YxRDY1 OEQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmQ3ZjllZjQtZjk5Zi00NGZmLWI5 NjgtNzBkNDUyNGQ3MjA3LzAvODRFRTY0REE1MTA4MkIzMDk0OEQxMkY2RTE0QjhF QkNGMUQ2NThEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACM2CxiVb/yVybLPxvj7gUQ9kyPO35i8FM5E XNxtrMYoOOClC8MGSthpLs6UYWiWn/0texpQIpA1ZtVsBIVBCDKNbbMgz9/rOY7Q ba5p6lNGlIOFlRiY61ZfyqiapqYyvvmDsiJfB/ouLTDJrkNn9vOlHZehWO2qQUeE e2ley9D0GpVsaS4nZ+dKinqYUOlgrEL5gYiWo4lDW64aXuC9cx0qn+/0LOVhv6Xa 7RCdYpvFpwMqoWpzwwN5GUhlcZHFSnemGgegTBnFcYQmnD9T0DHeIDipKu9P6L4U g+l1fumlqyMVaOW+wMT3fUuGnfAV2VtPqLnIuDrAB9E332qL/FQ= -----END CERTIFICATE-----Generated at Fri Sep 25 14:18:47 2026 by rpki-client