$ rpki-client -vvvf rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.mft File: 04C8EF6F5260FDA06661D9E95304572B8E7C4993.mft (raw, json) Hash identifier: YAGcLjmZzwSuXF6v1n6eRAedz1lCruLoq8A1+ygfNY4= Subject key identifier: 22:9A:46:93:0A:E6:F8:6E:0F:7B:25:B6:34:0C:E8:B1:74:53:E4:6C Authority key identifier: 04:C8:EF:6F:52:60:FD:A0:66:61:D9:E9:53:04:57:2B:8E:7C:49:93 Certificate issuer: /CN=04C8EF6F5260FDA06661D9E95304572B8E7C4993 Certificate serial: 5FFF7BB0AFD03E705482C2F0C194DF39B9ABBF3C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04C8EF6F5260FDA06661D9E95304572B8E7C4993.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.mft Manifest number: C0 Signing time: Thu 24 Sep 2026 02:54:16 +0000 Manifest this update: Thu 24 Sep 2026 02:49:16 +0000 Manifest next update: Fri 25 Sep 2026 02:57:16 +0000 Files and hashes: 1: 323430313a316430303a3a2f33322d3332203d3e203338353035.roa (hash: U8aX+Se6czCWSw8AT++C8Q2LboeUeYibiDJAjvnWwyg=) 2: 323430313a316430303a323a3a2f34382d3438203d3e203338353035.roa (hash: FB0gJNbI9gb2zm9vAMp0QwCkUB/Jt+h+ezAWp0ZQAY4=) 3: 3130332e3233332e3134322e302f32332d3234203d3e203338353035.roa (hash: oVIkdyLyFS+O6KZi8z7bLz7e36SBDG2DA+r6DHbMRLY=) 4: 3230332e3135332e3132322e302f32332d3234203d3e203338353035.roa (hash: X3p+VR9fHu2hyTBK0FsVrH6VXDfYDH8j4Zpx8G4MzCs=) 5: 3230332e3135332e3132302e302f32332d3234203d3e203338353035.roa (hash: D63R0HJY3dfFSWeAvX/hnIAUP8j3QRAbibvDX3rchmw=) 6: 323430313a316430303a3a2f34382d3438203d3e203338353035.roa (hash: +N9+uIvrbV+jDpFQEoLWVMjE7Tiq4ZoJyUrk8aQRIxU=) 7: 04C8EF6F5260FDA06661D9E95304572B8E7C4993.crl (hash: l9wC4JfSprzKOcza8gboGNkGFJHcDphwVF1DrVTOp7s=) 8: 3230332e3135332e3132342e302f32332d3234203d3e203338353035.roa (hash: mnaX8OyQaRRI+TIyOqMa6qm7Y6uLOjvzrF8R5k5MsjU=) 9: 323430313a316430303a313a3a2f34382d3438203d3e203338353035.roa (hash: HsxEHeytaLeXbzMYkGNZ4CxQC7x6cG09R70sugNWXM0=) 10: 323430313a316430303a3a2f33322d3438203d3e203338353035.roa (hash: 6BMdJfjQOk6ZMP+r3PWXA1452jn4jTz5h082fXgG9S4=) 11: 3230332e3135332e3132362e302f32332d3234203d3e203338353035.roa (hash: E7icouKmlM2nRKVKG7S5JwzSzIgKbeMao7gLF/MZ7HU=) 12: 3135302e3130372e3130342e302f32332d3234203d3e20313432333933.roa (hash: DkvTwpRqRkCZlooRpiKY2+Wy5hBTCQFkxeE1RiY6Adw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.crl rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04C8EF6F5260FDA06661D9E95304572B8E7C4993.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 02:57:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:ff:7b:b0:af:d0:3e:70:54:82:c2:f0:c1:94:df:39:b9:ab:bf:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04C8EF6F5260FDA06661D9E95304572B8E7C4993 Validity Not Before: Sep 24 02:49:16 2026 GMT Not After : Sep 25 02:57:16 2026 GMT Subject: CN=229A46930AE6F86E0F7B25B6340CE8B17453E46C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:08:a6:be:57:1b:b7:87:fc:3a:10:2a:e3:4c: 7a:79:9d:42:29:1a:03:bb:0a:ae:ae:6b:97:dd:3d: 13:ee:9a:37:c2:8c:1a:62:16:9d:80:e0:72:59:22: dd:8c:a2:b3:a2:56:1c:6a:02:10:8a:bc:f8:ac:c7: 8d:e7:f9:77:08:4a:0a:b7:25:e2:95:b3:51:77:7c: a0:cf:8c:8f:37:c0:9e:71:1f:99:53:3d:1a:97:aa: 03:c2:97:58:77:15:88:5d:0b:54:3c:86:4a:d4:a7: d1:db:bc:cd:34:2c:a0:56:aa:0b:25:da:98:34:8d: 8e:a9:a0:f2:67:9f:b2:72:50:3b:23:9f:ef:9c:ad: 18:ba:2d:85:29:13:b1:02:ab:7f:48:bb:90:62:c5: f1:c1:20:a0:38:c4:af:d7:e1:02:0e:20:5a:1d:2e: 37:53:4c:b1:a0:a7:ec:27:a1:75:fb:fc:f8:08:3e: f8:fb:03:47:5e:ba:d5:1a:91:7a:9a:12:94:7d:12: 32:20:45:e1:33:32:93:f7:c5:5f:2a:d8:af:b2:2f: 4a:bb:d4:70:d4:8f:8a:b7:c8:ad:d5:ec:bf:fe:22: 8b:b5:4b:23:99:69:9c:5a:22:1c:14:0d:29:2e:b3: 85:ed:a9:e9:21:96:17:de:ad:09:57:8e:7b:ff:c3: b3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:9A:46:93:0A:E6:F8:6E:0F:7B:25:B6:34:0C:E8:B1:74:53:E4:6C X509v3 Authority Key Identifier: keyid:04:C8:EF:6F:52:60:FD:A0:66:61:D9:E9:53:04:57:2B:8E:7C:49:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04C8EF6F5260FDA06661D9E95304572B8E7C4993.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:e6:98:5e:45:04:0f:23:fe:ee:d3:2e:77:00:69:ee:21:66: 41:84:6d:0f:d4:1c:d5:f1:37:53:90:98:2d:5d:fc:7b:59:91: 91:89:ac:62:ee:cf:c2:24:f9:3e:b0:0b:e8:6e:17:56:d5:a9: 89:a4:0a:ca:43:71:8c:ac:ea:92:1d:44:d7:5c:44:6b:e8:6f: 0b:f7:0b:6e:08:ee:39:00:8a:c5:f8:86:00:43:b0:ad:af:d3: c5:de:17:4f:67:49:25:7e:07:2c:03:c7:1e:ac:fc:b5:6e:86: 5b:34:1b:15:9c:48:b9:3b:84:c7:1b:7a:6e:01:3d:7a:6d:2d: cb:a2:73:86:9f:d3:5f:60:d7:dd:96:95:c5:10:bf:84:37:38: c9:3c:ee:48:27:0c:5a:6f:04:1e:ba:12:fa:d9:a3:2d:79:3a: 89:22:ae:21:bb:f6:a5:38:f1:8b:7a:1e:08:54:02:7e:66:08: 1a:be:23:84:30:e4:db:30:0e:b5:55:6c:55:c9:b1:f4:9c:21: 8d:9e:89:fc:8f:bf:00:e9:02:ad:ee:51:28:a5:6e:0d:06:13: b4:d9:e1:41:14:6f:57:d4:3c:1c:1d:f9:4f:c4:cc:a9:e3:12: 5a:f1:13:65:e1:e5:f7:fb:fc:29:00:7b:5f:b8:91:10:aa:f4: 11:a7:84:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX/97sK/QPnBUgsLwwZTfObmrvzwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDRDOEVGNkY1MjYwRkRBMDY2NjFEOUU5NTMwNDU3MkI4 RTdDNDk5MzAeFw0yNjA5MjQwMjQ5MTZaFw0yNjA5MjUwMjU3MTZaMDMxMTAvBgNV BAMTKDIyOUE0NjkzMEFFNkY4NkUwRjdCMjVCNjM0MENFOEIxNzQ1M0U0NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZCKa+Vxu3h/w6ECrjTHp5nUIp GgO7Cq6ua5fdPRPumjfCjBpiFp2A4HJZIt2MorOiVhxqAhCKvPisx43n+XcISgq3 JeKVs1F3fKDPjI83wJ5xH5lTPRqXqgPCl1h3FYhdC1Q8hkrUp9HbvM00LKBWqgsl 2pg0jY6poPJnn7JyUDsjn++crRi6LYUpE7ECq39Iu5BixfHBIKA4xK/X4QIOIFod LjdTTLGgp+wnoXX7/PgIPvj7A0deutUakXqaEpR9EjIgReEzMpP3xV8q2K+yL0q7 1HDUj4q3yK3V7L/+Iou1SyOZaZxaIhwUDSkus4XtqekhlhferQlXjnv/w7OFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIppGkwrm+G4PeyW2NAzosXRT5GwwHwYDVR0j BBgwFoAUBMjvb1Jg/aBmYdnpUwRXK458SZMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODNkMDc4NmQtM2QzZS00NWI3LTk2NjUtOGQ0NzRmZDE0YWVhLzAvMDRDOEVGNkY1 MjYwRkRBMDY2NjFEOUU5NTMwNDU3MkI4RTdDNDk5My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNEM4RUY2RjUyNjBGREEwNjY2MUQ5RTk1MzA0NTcyQjhFN0M0 OTkzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODNkMDc4NmQtM2QzZS00NWI3LTk2 NjUtOGQ0NzRmZDE0YWVhLzAvMDRDOEVGNkY1MjYwRkRBMDY2NjFEOUU5NTMwNDU3 MkI4RTdDNDk5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ/mmF5FBA8j/u7TLncAae4hZkGEbQ/UHNXx N1OQmC1d/HtZkZGJrGLuz8Ik+T6wC+huF1bVqYmkCspDcYys6pIdRNdcRGvobwv3 C24I7jkAisX4hgBDsK2v08XeF09nSSV+BywDxx6s/LVuhls0GxWcSLk7hMcbem4B PXptLcuic4af019g192WlcUQv4Q3OMk87kgnDFpvBB66EvrZoy15OokiriG79qU4 8Yt6HghUAn5mCBq+I4Qw5NswDrVVbFXJsfScIY2eifyPvwDpAq3uUSilbg0GE7TZ 4UEUb1fUPBwd+U/EzKnjElrxE2Xh5ff7/CkAe1+4kRCq9BGnhOc= -----END CERTIFICATE-----Generated at Thu Sep 24 17:19:12 2026 by rpki-client