$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/D85622299CA02E9652CA0DB7304F71B950BF346D.mft File: D85622299CA02E9652CA0DB7304F71B950BF346D.mft (raw, json) Hash identifier: UBV58YVE/vDIn6mGo9n9sAKUciETBahSH6RIg3IX9Eo= Subject key identifier: E7:42:3E:D4:74:0B:D7:F9:78:D4:BC:8E:CF:4B:D4:7E:EB:ED:EA:42 Authority key identifier: D8:56:22:29:9C:A0:2E:96:52:CA:0D:B7:30:4F:71:B9:50:BF:34:6D Certificate issuer: /CN=D85622299CA02E9652CA0DB7304F71B950BF346D Certificate serial: 114C7967CABC5E66083ACFD013C2C81D690A96C3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85622299CA02E9652CA0DB7304F71B950BF346D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/D85622299CA02E9652CA0DB7304F71B950BF346D.mft Manifest number: C4 Signing time: Sat 26 Sep 2026 09:21:21 +0000 Manifest this update: Sat 26 Sep 2026 09:16:21 +0000 Manifest next update: Sun 27 Sep 2026 11:47:21 +0000 Files and hashes: 1: D85622299CA02E9652CA0DB7304F71B950BF346D.crl (hash: cBVwz/CDg6FZi91Kf7/M8Yb9/7iqWMs6NTR+EExDPiI=) 2: 323430313a613565303a3a2f33322d3438203d3e20313532383130.roa (hash: EjCZCWM26KDivUXMEfL07ocLZOd7dbm1FkmvXFA+kQY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/D85622299CA02E9652CA0DB7304F71B950BF346D.crl rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/D85622299CA02E9652CA0DB7304F71B950BF346D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85622299CA02E9652CA0DB7304F71B950BF346D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 11:47:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:4c:79:67:ca:bc:5e:66:08:3a:cf:d0:13:c2:c8:1d:69:0a:96:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D85622299CA02E9652CA0DB7304F71B950BF346D Validity Not Before: Sep 26 09:16:21 2026 GMT Not After : Sep 27 11:47:21 2026 GMT Subject: CN=E7423ED4740BD7F978D4BC8ECF4BD47EEBEDEA42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4d:76:0e:10:3d:c8:6f:a1:80:30:af:f1:a6: 2c:77:c9:aa:0e:7d:cc:9f:16:54:3a:1d:7c:ef:c2: 10:ea:a0:1c:99:27:0e:a2:b7:48:69:05:07:84:01: a0:dc:89:94:6e:f4:b9:0f:f0:0f:1d:a2:c1:11:68: c6:53:c4:85:cd:e2:25:a5:6f:a0:f7:54:91:68:e1: d4:51:da:55:b8:99:e6:ee:e4:43:5a:ac:a9:75:c8: 78:20:6a:0b:6d:8e:ef:f1:1c:cc:c3:d1:4b:02:89: d5:3b:0f:40:ba:4c:ee:71:72:16:f4:74:86:28:74: b4:53:50:f4:c3:df:68:20:65:af:75:29:8e:0d:ba: c2:66:2f:09:02:82:ce:7c:e5:a9:14:78:79:10:dd: 83:36:fa:a8:05:08:69:96:2d:57:10:79:e1:b7:3e: 3b:f6:d4:ee:fb:f6:0e:88:65:9e:4f:c7:68:3b:ef: 7f:21:dc:2e:b4:42:4f:7d:77:3d:97:9f:81:bf:f4: 07:34:8e:b3:22:eb:00:ae:28:88:41:6f:a0:2a:1b: 44:6c:90:08:da:64:e6:50:66:bc:51:4d:32:e2:71: eb:94:32:6e:c0:e4:75:86:19:7f:f4:35:05:18:e1: c3:c4:ca:96:a4:fc:d8:43:0a:9a:8b:2c:10:a2:61: fb:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:42:3E:D4:74:0B:D7:F9:78:D4:BC:8E:CF:4B:D4:7E:EB:ED:EA:42 X509v3 Authority Key Identifier: keyid:D8:56:22:29:9C:A0:2E:96:52:CA:0D:B7:30:4F:71:B9:50:BF:34:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/D85622299CA02E9652CA0DB7304F71B950BF346D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85622299CA02E9652CA0DB7304F71B950BF346D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/D85622299CA02E9652CA0DB7304F71B950BF346D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:43:bd:60:ae:c6:58:ad:e7:f0:93:65:a9:8d:55:89:c1:dc: 3c:d5:3e:91:61:c5:07:6b:a7:95:63:bc:85:8d:70:4d:bf:49: 92:96:5b:66:71:27:32:17:cb:26:3e:15:58:98:bf:78:d9:39: 07:80:0f:33:f6:9d:ee:34:a3:45:90:c4:cd:f9:f8:91:ee:27: f5:f5:6d:43:03:58:85:7d:23:7f:c0:67:3e:81:0d:06:62:95: 1e:a2:03:8b:14:80:7a:31:23:cc:f9:4a:d4:d8:5b:af:b0:b0: b6:c5:63:9d:f2:03:c6:ce:a9:3f:b8:36:fd:40:19:9b:7a:1d: ec:d3:19:14:94:3f:8e:66:02:82:1e:02:23:5b:da:73:76:02: 07:78:5b:86:c4:72:68:43:5e:04:d0:9d:f4:e7:fa:cb:ec:4e: 3d:36:50:4f:40:ea:ea:15:31:28:4f:fd:75:bf:78:bc:73:0a: 9d:57:b2:d5:b9:78:30:b3:ce:a4:5b:fa:53:8b:35:6e:24:5e: 21:60:5e:7e:d3:4e:0b:ab:8d:1f:8f:74:79:55:7a:af:8b:8c: ca:49:e1:0e:17:80:8f:d8:de:47:aa:11:04:05:ac:85:99:ae: 21:3e:19:6c:50:0d:99:9f:81:a6:4e:e3:a9:e2:58:a8:97:62: 01:ef:64:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEUx5Z8q8XmYIOs/QE8LIHWkKlsMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1NjIyMjk5Q0EwMkU5NjUyQ0EwREI3MzA0RjcxQjk1 MEJGMzQ2RDAeFw0yNjA5MjYwOTE2MjFaFw0yNjA5MjcxMTQ3MjFaMDMxMTAvBgNV BAMTKEU3NDIzRUQ0NzQwQkQ3Rjk3OEQ0QkM4RUNGNEJENDdFRUJFREVBNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiTXYOED3Ib6GAMK/xpix3yaoO fcyfFlQ6HXzvwhDqoByZJw6it0hpBQeEAaDciZRu9LkP8A8dosERaMZTxIXN4iWl b6D3VJFo4dRR2lW4mebu5ENarKl1yHggagttju/xHMzD0UsCidU7D0C6TO5xchb0 dIYodLRTUPTD32ggZa91KY4NusJmLwkCgs585akUeHkQ3YM2+qgFCGmWLVcQeeG3 Pjv21O779g6IZZ5Px2g7738h3C60Qk99dz2Xn4G/9Ac0jrMi6wCuKIhBb6AqG0Rs kAjaZOZQZrxRTTLiceuUMm7A5HWGGX/0NQUY4cPEypak/NhDCpqLLBCiYfuFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU50I+1HQL1/l41LyOz0vUfuvt6kIwHwYDVR0j BBgwFoAU2FYiKZygLpZSyg23ME9xuVC/NG0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODQ3NTMzOGQtN2FjYi00YWE3LWJlZGMtZDY0NTlmZDEzNTA0LzEvRDg1NjIyMjk5 Q0EwMkU5NjUyQ0EwREI3MzA0RjcxQjk1MEJGMzQ2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODU2MjIyOTlDQTAyRTk2NTJDQTBEQjczMDRGNzFCOTUwQkYz NDZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODQ3NTMzOGQtN2FjYi00YWE3LWJl ZGMtZDY0NTlmZDEzNTA0LzEvRDg1NjIyMjk5Q0EwMkU5NjUyQ0EwREI3MzA0Rjcx Qjk1MEJGMzQ2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADZDvWCuxlit5/CTZamNVYnB3DzVPpFhxQdr p5VjvIWNcE2/SZKWW2ZxJzIXyyY+FViYv3jZOQeADzP2ne40o0WQxM35+JHuJ/X1 bUMDWIV9I3/AZz6BDQZilR6iA4sUgHoxI8z5StTYW6+wsLbFY53yA8bOqT+4Nv1A GZt6HezTGRSUP45mAoIeAiNb2nN2Agd4W4bEcmhDXgTQnfTn+svsTj02UE9A6uoV MShP/XW/eLxzCp1XstW5eDCzzqRb+lOLNW4kXiFgXn7TTgurjR+PdHlVeq+LjMpJ 4Q4XgI/Y3keqEQQFrIWZriE+GWxQDZmfgaZO46niWKiXYgHvZAs= -----END CERTIFICATE-----Generated at Sat Sep 26 19:04:23 2026 by rpki-client