$ rpki-client -vvvf rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.mft File: C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.mft (raw, json) Hash identifier: W96bXqo+twbcSNpu8sxMwka/QM5u6FpQqtwyxk+KMtM= Subject key identifier: 0C:DF:3E:32:A7:DF:98:40:1B:12:81:D6:39:C9:6A:14:C3:CD:39:88 Authority key identifier: C7:06:F9:00:08:D6:29:3E:5E:35:C7:B1:7D:D3:B4:14:EE:B9:A0:A0 Certificate issuer: /CN=C706F90008D6293E5E35C7B17DD3B414EEB9A0A0 Certificate serial: 5714DB41B4E32AE950DF311AC1E8AC775E294AD7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.mft Manifest number: C2 Signing time: Fri 25 Sep 2026 00:00:10 +0000 Manifest this update: Thu 24 Sep 2026 23:55:10 +0000 Manifest next update: Sat 26 Sep 2026 01:45:10 +0000 Files and hashes: 1: C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.crl (hash: WVI1qWRb8xEqgUKI2BGxe9+Hh7UL86Zm/1310lgJCnU=) 2: 3130332e3139312e3139362e302f32332d3234203d3e20313439393334.roa (hash: mQKueKTh7A3uQ/utWkeUKce0jX8tikpIauTi7aYCX5o=) 3: 3130332e3139312e3139372e302f32342d3234203d3e20313439393334.roa (hash: IZSn7ER9gKZENb7Yh0xyvq6Sz0bKmm3RwSLw7ctssto=) 4: 3130332e3139312e3139362e302f32342d3234203d3e20313439393334.roa (hash: YUSL8MaAWMcSEFSDLAAA9feKMtSwIZRFYTLiujhrL28=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.crl rsync://rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 01:45:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:14:db:41:b4:e3:2a:e9:50:df:31:1a:c1:e8:ac:77:5e:29:4a:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C706F90008D6293E5E35C7B17DD3B414EEB9A0A0 Validity Not Before: Sep 24 23:55:10 2026 GMT Not After : Sep 26 01:45:10 2026 GMT Subject: CN=0CDF3E32A7DF98401B1281D639C96A14C3CD3988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:aa:65:5b:07:fd:c0:54:20:e9:8c:da:4b:c5: 96:d1:1d:76:d6:73:9b:34:c6:73:3f:cc:19:f8:2d: 39:f9:66:57:0b:17:11:4e:ca:4b:9c:c4:11:a5:0e: 33:51:bd:ba:7e:81:d0:73:cc:79:61:23:21:46:ff: 1b:7d:85:68:50:c1:5f:b1:f1:81:45:b5:41:17:5e: 1d:48:bb:e1:b1:51:a5:98:b3:64:7a:9f:69:41:7e: b3:e2:e8:c7:16:94:dd:c4:b4:94:b6:6f:f4:8a:96: 40:eb:0e:cb:ec:3a:b1:05:3f:a2:4e:4e:90:a8:bf: 89:60:8d:21:e7:71:c6:38:05:7d:0c:24:12:55:84: 12:a8:de:e5:40:a3:b2:9f:cb:8b:6d:34:49:23:17: 26:69:1a:d5:fc:37:b3:91:a0:89:07:12:e0:3a:d7: b2:a8:37:a9:c8:fe:b3:17:17:e6:46:74:c4:41:5e: 98:8d:17:12:6a:8d:88:e2:f6:56:38:a0:1b:aa:be: 95:d3:76:bd:c5:75:83:23:dc:e7:cb:5a:7e:ab:26: ae:ae:9d:a1:b3:5c:f4:ac:41:c7:10:ee:a2:32:67: 68:6b:cf:b3:21:ec:a6:40:cf:8f:6a:f0:c4:fc:78: 47:f8:83:ae:d9:ee:2a:2f:46:69:ee:83:65:db:4d: f7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:DF:3E:32:A7:DF:98:40:1B:12:81:D6:39:C9:6A:14:C3:CD:39:88 X509v3 Authority Key Identifier: keyid:C7:06:F9:00:08:D6:29:3E:5E:35:C7:B1:7D:D3:B4:14:EE:B9:A0:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:15:e6:13:81:41:80:3f:a9:03:16:5c:f7:02:fe:fd:0f:1a: cf:82:08:9a:59:47:2b:46:4a:df:85:73:31:ce:7e:11:cd:27: 65:ef:9a:91:eb:58:1c:30:06:33:2f:23:ee:ef:69:8c:55:c7: a2:1f:ba:e2:4e:e8:ca:8b:e0:78:d6:76:63:d6:71:c6:40:43: f6:04:0c:c3:f5:cf:c9:ab:7e:a0:9a:69:bf:1b:6e:3b:42:e4: b2:3f:f6:c9:90:30:aa:ff:b6:2e:35:46:5b:e9:8d:ce:c0:b3: e6:70:f9:e9:e7:f4:b8:c3:f7:e4:d8:62:78:76:22:62:51:8f: 44:be:2f:d9:e6:9a:22:0a:1f:95:fc:d6:18:40:50:10:96:8d: 23:30:a7:22:13:56:96:0b:ab:d5:e9:57:a1:f2:02:8f:82:21: f3:29:22:84:68:2a:9d:a5:af:9b:dc:9d:91:d7:40:7e:99:73: a8:89:f8:87:dd:02:a4:88:a6:a5:aa:2f:10:9a:92:7b:a9:d1: 2c:f1:1d:a1:60:bf:1f:b7:1b:e1:cc:ac:c8:e3:a6:ee:24:99: 29:22:92:10:61:f9:58:5f:57:fe:81:c8:67:27:9d:01:07:98: 00:bc:2a:df:d3:3e:70:90:ca:01:8b:a4:98:f1:7e:43:2f:30: 44:7a:fd:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVxTbQbTjKulQ3zEaweisd14pStcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzcwNkY5MDAwOEQ2MjkzRTVFMzVDN0IxN0REM0I0MTRF RUI5QTBBMDAeFw0yNjA5MjQyMzU1MTBaFw0yNjA5MjYwMTQ1MTBaMDMxMTAvBgNV BAMTKDBDREYzRTMyQTdERjk4NDAxQjEyODFENjM5Qzk2QTE0QzNDRDM5ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwqmVbB/3AVCDpjNpLxZbRHXbW c5s0xnM/zBn4LTn5ZlcLFxFOykucxBGlDjNRvbp+gdBzzHlhIyFG/xt9hWhQwV+x 8YFFtUEXXh1Iu+GxUaWYs2R6n2lBfrPi6McWlN3EtJS2b/SKlkDrDsvsOrEFP6JO TpCov4lgjSHnccY4BX0MJBJVhBKo3uVAo7Kfy4ttNEkjFyZpGtX8N7ORoIkHEuA6 17KoN6nI/rMXF+ZGdMRBXpiNFxJqjYji9lY4oBuqvpXTdr3FdYMj3OfLWn6rJq6u naGzXPSsQccQ7qIyZ2hrz7Mh7KZAz49q8MT8eEf4g67Z7iovRmnug2XbTfdNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDN8+MqffmEAbEoHWOclqFMPNOYgwHwYDVR0j BBgwFoAUxwb5AAjWKT5eNcexfdO0FO65oKAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzVkNmVmZmYtODViMi00YWY0LTg5YWItNmQ5OGM5NTI3ZGE0LzAvQzcwNkY5MDAw OEQ2MjkzRTVFMzVDN0IxN0REM0I0MTRFRUI5QTBBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNzA2RjkwMDA4RDYyOTNFNUUzNUM3QjE3REQzQjQxNEVFQjlB MEEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzVkNmVmZmYtODViMi00YWY0LTg5 YWItNmQ5OGM5NTI3ZGE0LzAvQzcwNkY5MDAwOEQ2MjkzRTVFMzVDN0IxN0REM0I0 MTRFRUI5QTBBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHYV5hOBQYA/qQMWXPcC/v0PGs+CCJpZRytG St+FczHOfhHNJ2XvmpHrWBwwBjMvI+7vaYxVx6IfuuJO6MqL4HjWdmPWccZAQ/YE DMP1z8mrfqCaab8bbjtC5LI/9smQMKr/ti41Rlvpjc7As+Zw+enn9LjD9+TYYnh2 ImJRj0S+L9nmmiIKH5X81hhAUBCWjSMwpyITVpYLq9XpV6HyAo+CIfMpIoRoKp2l r5vcnZHXQH6Zc6iJ+IfdAqSIpqWqLxCaknup0SzxHaFgvx+3G+HMrMjjpu4kmSki khBh+VhfV/6ByGcnnQEHmAC8Kt/TPnCQygGLpJjxfkMvMER6/cc= -----END CERTIFICATE-----Generated at Fri Sep 25 19:56:01 2026 by rpki-client