$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/4063368E83B93018DA72EDEB060702A5F8F9269C.mft File: 4063368E83B93018DA72EDEB060702A5F8F9269C.mft (raw, json) Hash identifier: Qs8hGVRYvNTioQYZ/IlT+hZyE0eaTbjNDUHd9OH2r8w= Subject key identifier: A8:2E:16:BA:75:F6:F6:FE:B4:9F:A6:2A:B5:50:A7:29:53:D9:08:0E Authority key identifier: 40:63:36:8E:83:B9:30:18:DA:72:ED:EB:06:07:02:A5:F8:F9:26:9C Certificate issuer: /CN=4063368E83B93018DA72EDEB060702A5F8F9269C Certificate serial: 33FA143B244621125E43590F3FB63AC2E4593E92 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4063368E83B93018DA72EDEB060702A5F8F9269C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/4063368E83B93018DA72EDEB060702A5F8F9269C.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 09:47:52 +0000 Manifest this update: Fri 25 Sep 2026 09:42:52 +0000 Manifest next update: Sat 26 Sep 2026 10:54:52 +0000 Files and hashes: 1: 3130332e3134372e3136342e302f32332d3234203d3e203137373639.roa (hash: YoPiO/BGRHdiNMspy83HWAqltNlSFq59XV4OA1NunVQ=) 2: 4063368E83B93018DA72EDEB060702A5F8F9269C.crl (hash: qSzgpcHNvHjnHAoAMCNm92P4Mq3OexQyZn+rUGdYIcA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/4063368E83B93018DA72EDEB060702A5F8F9269C.crl rsync://rpki-rsync.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/4063368E83B93018DA72EDEB060702A5F8F9269C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4063368E83B93018DA72EDEB060702A5F8F9269C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 10:54:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:fa:14:3b:24:46:21:12:5e:43:59:0f:3f:b6:3a:c2:e4:59:3e:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4063368E83B93018DA72EDEB060702A5F8F9269C Validity Not Before: Sep 25 09:42:52 2026 GMT Not After : Sep 26 10:54:52 2026 GMT Subject: CN=A82E16BA75F6F6FEB49FA62AB550A72953D9080E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1e:30:4c:c4:15:29:72:29:26:c8:d1:09:7a: 03:8b:e9:d4:24:79:13:59:9c:c2:5a:56:ee:7c:fb: 61:4e:80:9a:09:83:8b:81:30:56:a5:b8:a9:72:fe: 90:f7:2e:1b:d4:37:9b:2b:5a:1b:87:34:5d:e2:4b: bf:47:ad:4e:6e:3d:5a:a7:e4:66:6e:dc:04:04:60: 9c:2d:15:af:b7:64:44:a2:03:ec:fa:1d:8b:9e:b7: 74:e7:44:3d:60:cb:f5:8c:dc:e3:a3:7e:52:3d:d0: 90:41:4d:37:47:f8:6a:3a:44:a0:6e:b3:e1:80:bf: e8:52:fc:aa:e2:a6:07:86:98:e0:c5:d6:31:19:a9: e4:da:11:52:6d:c0:8e:09:a9:93:e4:f6:82:df:9b: 91:7a:7a:53:2a:f3:31:86:45:0e:5c:9c:05:eb:78: 21:a4:4c:c0:54:96:40:93:d1:d7:5d:98:2a:59:5e: af:56:3e:09:de:8c:04:46:60:2b:fa:0e:7b:8d:98: 88:2e:14:2f:02:ce:1a:3e:00:ff:04:55:25:f6:a9: 1f:8d:57:fa:c9:6b:e0:6a:41:8a:b1:61:94:63:4f: a9:be:03:11:bb:9e:5a:70:54:8f:fd:7f:2a:05:15: 69:30:ce:3b:44:b8:43:83:6d:00:c2:72:a1:ad:89: cd:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:2E:16:BA:75:F6:F6:FE:B4:9F:A6:2A:B5:50:A7:29:53:D9:08:0E X509v3 Authority Key Identifier: keyid:40:63:36:8E:83:B9:30:18:DA:72:ED:EB:06:07:02:A5:F8:F9:26:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/4063368E83B93018DA72EDEB060702A5F8F9269C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4063368E83B93018DA72EDEB060702A5F8F9269C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/4063368E83B93018DA72EDEB060702A5F8F9269C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:59:97:40:10:44:d0:8a:49:5d:f0:5a:c2:f1:00:8e:f7:78: e4:d2:04:d3:f1:7b:4c:86:5d:f2:bd:c6:28:a7:ac:93:9f:bd: 37:34:76:7b:00:6c:f4:57:aa:60:8a:e5:57:34:56:e4:c7:b4: 4a:2f:57:74:1a:39:29:df:2e:bd:d0:7d:e5:99:fa:a9:a1:3a: b4:2e:0a:e0:81:3f:02:76:4f:05:db:40:92:dc:f5:b1:41:7c: f4:52:01:8e:6a:70:1d:ae:03:c8:84:1d:5a:f8:77:4c:19:bd: fb:27:9c:f2:58:4b:23:4d:07:f5:cb:32:23:b5:d0:c5:8a:11: 50:0f:82:18:b1:2c:2a:32:cc:a0:d7:f1:5e:fc:0e:1f:fd:2e: 7c:3a:9b:b2:88:b4:37:bb:b9:91:fc:2e:de:15:58:81:3c:9d: 07:5c:31:9a:19:dd:6f:84:e2:92:c8:d0:f0:79:6b:41:5f:64: df:03:03:da:ed:48:56:72:7f:06:b6:e2:6a:30:91:21:7c:1f: e5:54:c2:2d:d2:0c:41:3b:40:a8:fb:d1:a8:0f:c2:c5:12:91: 4c:ef:f6:24:96:f0:03:3c:54:37:ec:b2:82:db:46:8d:86:92: cb:92:0a:5f:6b:02:6c:11:b6:64:72:dd:b4:da:2f:88:af:70: ba:d9:ac:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM/oUOyRGIRJeQ1kPP7Y6wuRZPpIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA2MzM2OEU4M0I5MzAxOERBNzJFREVCMDYwNzAyQTVG OEY5MjY5QzAeFw0yNjA5MjUwOTQyNTJaFw0yNjA5MjYxMDU0NTJaMDMxMTAvBgNV BAMTKEE4MkUxNkJBNzVGNkY2RkVCNDlGQTYyQUI1NTBBNzI5NTNEOTA4MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcHjBMxBUpcikmyNEJegOL6dQk eRNZnMJaVu58+2FOgJoJg4uBMFaluKly/pD3LhvUN5srWhuHNF3iS79HrU5uPVqn 5GZu3AQEYJwtFa+3ZESiA+z6HYuet3TnRD1gy/WM3OOjflI90JBBTTdH+Go6RKBu s+GAv+hS/KripgeGmODF1jEZqeTaEVJtwI4JqZPk9oLfm5F6elMq8zGGRQ5cnAXr eCGkTMBUlkCT0dddmCpZXq9WPgnejARGYCv6DnuNmIguFC8Czho+AP8EVSX2qR+N V/rJa+BqQYqxYZRjT6m+AxG7nlpwVI/9fyoFFWkwzjtEuEODbQDCcqGtic3rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqC4WunX29v60n6YqtVCnKVPZCA4wHwYDVR0j BBgwFoAUQGM2joO5MBjacu3rBgcCpfj5JpwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmU0YzYxYWMtN2I1Yy00ZDk0LWEzNjUtYzQwMjFjMTcwOWM3LzAvNDA2MzM2OEU4 M0I5MzAxOERBNzJFREVCMDYwNzAyQTVGOEY5MjY5Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MDYzMzY4RTgzQjkzMDE4REE3MkVERUIwNjA3MDJBNUY4Rjky NjlDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmU0YzYxYWMtN2I1Yy00ZDk0LWEz NjUtYzQwMjFjMTcwOWM3LzAvNDA2MzM2OEU4M0I5MzAxOERBNzJFREVCMDYwNzAy QTVGOEY5MjY5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFtZl0AQRNCKSV3wWsLxAI73eOTSBNPxe0yG XfK9xiinrJOfvTc0dnsAbPRXqmCK5Vc0VuTHtEovV3QaOSnfLr3QfeWZ+qmhOrQu CuCBPwJ2TwXbQJLc9bFBfPRSAY5qcB2uA8iEHVr4d0wZvfsnnPJYSyNNB/XLMiO1 0MWKEVAPghixLCoyzKDX8V78Dh/9Lnw6m7KItDe7uZH8Lt4VWIE8nQdcMZoZ3W+E 4pLI0PB5a0FfZN8DA9rtSFZyfwa24mowkSF8H+VUwi3SDEE7QKj70agPwsUSkUzv 9iSW8AM8VDfssoLbRo2GksuSCl9rAmwRtmRy3bTaL4ivcLrZrJQ= -----END CERTIFICATE-----Generated at Fri Sep 25 16:35:54 2026 by rpki-client