$ rpki-client -vvvf rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.mft File: 03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.mft (raw, json) Hash identifier: spsTR7JtIHgeyw/3uOHVQdrkGYVe3FKKX8a5D39Qp9I= Subject key identifier: 75:E1:F0:6A:09:4A:A9:E0:0D:9B:2A:17:67:94:C3:84:2F:A3:90:F5 Authority key identifier: 03:CE:E5:EC:F5:D8:2A:C4:35:BB:82:56:96:0A:60:65:A0:A4:EC:90 Certificate issuer: /CN=03CEE5ECF5D82AC435BB8256960A6065A0A4EC90 Certificate serial: 181FEF6675042D07F21A6D2334DD3BA196D3E7FE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 17:17:20 +0000 Manifest this update: Wed 23 Sep 2026 17:12:20 +0000 Manifest next update: Thu 24 Sep 2026 18:58:20 +0000 Files and hashes: 1: 03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.crl (hash: sanduxt0v9Ii+h+JZjM5K8ZUtJbegUDe29Thm5wcl0s=) 2: 3230322e39302e3139382e302f32342d3234203d3e203338373739.roa (hash: W701XnzRp68q2ju50V8LTfQrMyEFAxYNvXNJc+815TM=) 3: 3230322e39302e3139392e302f32342d3234203d3e203338373739.roa (hash: bAYJsjQtRu+aYVmaWgkshTJ01ed0qF6a1B1HjXmthuw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.crl rsync://rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 18:58:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:1f:ef:66:75:04:2d:07:f2:1a:6d:23:34:dd:3b:a1:96:d3:e7:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03CEE5ECF5D82AC435BB8256960A6065A0A4EC90 Validity Not Before: Sep 23 17:12:20 2026 GMT Not After : Sep 24 18:58:20 2026 GMT Subject: CN=75E1F06A094AA9E00D9B2A176794C3842FA390F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8f:b6:97:c6:11:6d:59:60:4c:90:36:ca:b0: 0a:e6:7d:c2:41:5f:3c:69:79:97:65:59:34:d9:02: 58:54:5d:2f:a9:b4:af:f7:03:75:c8:6a:dd:9f:b6: df:94:83:04:73:d9:0d:30:40:a7:5e:f4:28:28:05: 6d:ed:0c:bb:ba:7f:85:e9:bb:71:3f:7a:f8:c1:31: 67:ba:d9:7b:f2:dd:70:7a:c5:8a:98:e4:52:5c:05: 07:e2:65:c5:9e:4e:e4:98:86:2d:fb:7f:ac:09:e0: bf:be:61:ef:38:4d:73:af:95:4d:e7:27:d6:e0:86: fa:43:39:af:a5:8a:bd:22:b2:41:18:96:fc:48:87: 82:f5:0b:df:3c:13:bc:ca:d3:e6:fe:7b:92:46:c2: 59:84:bf:74:5b:58:1c:83:27:b0:5b:51:5f:65:0b: 9c:cb:24:89:76:fa:30:35:a4:19:ac:02:c8:f3:d3: 0e:44:67:9b:fd:82:60:70:4f:a9:e7:37:0d:5b:3e: b1:9e:ad:3e:04:43:e0:b8:5c:d0:82:61:49:5e:e0: de:50:bd:4e:a0:87:7e:47:48:8c:16:1d:8a:3b:fb: 0d:bd:a7:69:6b:15:2a:c6:e6:0c:65:01:9c:21:f1: 44:5f:85:45:de:ea:a6:ed:93:06:c6:6b:23:ca:7e: 8c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:E1:F0:6A:09:4A:A9:E0:0D:9B:2A:17:67:94:C3:84:2F:A3:90:F5 X509v3 Authority Key Identifier: keyid:03:CE:E5:EC:F5:D8:2A:C4:35:BB:82:56:96:0A:60:65:A0:A4:EC:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:e2:86:3c:27:20:af:ff:2b:9a:74:a6:ba:b1:fa:ba:fe:3a: 0a:24:d2:d8:8d:8b:fe:22:86:df:32:bb:80:7a:c0:59:4c:71: d2:da:b2:b4:69:8e:9d:eb:97:8c:ca:11:b8:5b:3d:5e:85:df: d1:e4:39:db:31:86:c3:0d:17:85:e7:89:6f:10:6f:06:05:f0: 29:9c:6c:88:0e:6c:ab:99:04:60:b0:7a:1c:cf:df:a0:5f:26: 9d:60:67:2a:ff:36:c7:ef:0a:ba:33:0b:01:be:23:bc:60:c9: 40:ab:f9:a7:fa:0f:2a:4b:95:11:ae:40:e7:63:41:f3:19:6a: e4:af:c6:e4:3c:d5:b8:3a:c8:ab:1b:69:39:f1:66:bd:ec:2c: ab:7c:44:ac:fd:3f:a5:b5:82:b9:78:9a:40:40:aa:ee:3a:63: 80:2c:31:28:e5:5a:ed:fc:84:70:42:f1:46:bc:6b:69:4f:15: 79:96:2c:8e:b9:08:df:49:4d:78:a6:8b:17:ba:ad:8e:d5:66: db:81:73:75:0c:b8:3e:32:33:1a:49:2a:4f:35:a4:b7:01:d7: 85:1d:02:d0:41:67:7a:20:24:0b:12:5e:03:47:9b:09:bf:85: 99:ba:86:7b:fa:bd:61:81:ff:19:ae:d3:76:78:0d:51:a7:bf: ca:55:ca:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGB/vZnUELQfyGm0jNN07oZbT5/4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNDRUU1RUNGNUQ4MkFDNDM1QkI4MjU2OTYwQTYwNjVB MEE0RUM5MDAeFw0yNjA5MjMxNzEyMjBaFw0yNjA5MjQxODU4MjBaMDMxMTAvBgNV BAMTKDc1RTFGMDZBMDk0QUE5RTAwRDlCMkExNzY3OTRDMzg0MkZBMzkwRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+j7aXxhFtWWBMkDbKsArmfcJB XzxpeZdlWTTZAlhUXS+ptK/3A3XIat2ftt+UgwRz2Q0wQKde9CgoBW3tDLu6f4Xp u3E/evjBMWe62Xvy3XB6xYqY5FJcBQfiZcWeTuSYhi37f6wJ4L++Ye84TXOvlU3n J9bghvpDOa+lir0iskEYlvxIh4L1C988E7zK0+b+e5JGwlmEv3RbWByDJ7BbUV9l C5zLJIl2+jA1pBmsAsjz0w5EZ5v9gmBwT6nnNw1bPrGerT4EQ+C4XNCCYUle4N5Q vU6gh35HSIwWHYo7+w29p2lrFSrG5gxlAZwh8URfhUXe6qbtkwbGayPKfoznAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdeHwaglKqeANmyoXZ5TDhC+jkPUwHwYDVR0j BBgwFoAUA87l7PXYKsQ1u4JWlgpgZaCk7JAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzRlMWYzNzAtZjMxZi00N2VkLThhNDEtYjI4YmM4ZGFmNDM1LzAvMDNDRUU1RUNG NUQ4MkFDNDM1QkI4MjU2OTYwQTYwNjVBMEE0RUM5MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wM0NFRTVFQ0Y1RDgyQUM0MzVCQjgyNTY5NjBBNjA2NUEwQTRF QzkwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzRlMWYzNzAtZjMxZi00N2VkLThh NDEtYjI4YmM4ZGFmNDM1LzAvMDNDRUU1RUNGNUQ4MkFDNDM1QkI4MjU2OTYwQTYw NjVBMEE0RUM5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIHihjwnIK//K5p0prqx+rr+Ogok0tiNi/4i ht8yu4B6wFlMcdLasrRpjp3rl4zKEbhbPV6F39HkOdsxhsMNF4XniW8QbwYF8Cmc bIgObKuZBGCwehzP36BfJp1gZyr/NsfvCrozCwG+I7xgyUCr+af6DypLlRGuQOdj QfMZauSvxuQ81bg6yKsbaTnxZr3sLKt8RKz9P6W1grl4mkBAqu46Y4AsMSjlWu38 hHBC8Ua8a2lPFXmWLI65CN9JTXimixe6rY7VZtuBc3UMuD4yMxpJKk81pLcB14Ud AtBBZ3ogJAsSXgNHmwm/hZm6hnv6vWGB/xmu03Z4DVGnv8pVyoA= -----END CERTIFICATE-----Generated at Thu Sep 24 10:19:15 2026 by rpki-client