$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.mft File: CE866CA7A48F4270D861141E8DB83F09E2EF39F6.mft (raw, json) Hash identifier: 60Ofa1u+cNHagxL+LQSCudKiFxTqyvqw3DUv4xI6TF8= Subject key identifier: 69:F7:79:E3:CB:E0:54:73:94:3C:6C:A4:12:D4:F6:BB:1C:D1:F4:D6 Authority key identifier: CE:86:6C:A7:A4:8F:42:70:D8:61:14:1E:8D:B8:3F:09:E2:EF:39:F6 Certificate issuer: /CN=CE866CA7A48F4270D861141E8DB83F09E2EF39F6 Certificate serial: 0F73A9AEA8DA677A35D224020BEFF22C7E502488 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 23:14:19 +0000 Manifest this update: Thu 24 Sep 2026 23:09:19 +0000 Manifest next update: Sat 26 Sep 2026 01:10:19 +0000 Files and hashes: 1: CE866CA7A48F4270D861141E8DB83F09E2EF39F6.crl (hash: ha9DdeCMWAfW2g8ZeZ046YqPExOxyYrZL5oSNJaqhoI=) 2: 3130332e35312e3130332e302f32342d3234203d3e20313339343332.roa (hash: 12S1HOzE8Rs4umiuV1n2mL1hqQ5ALMTa7jdnK3K0btU=) 3: 3130332e3232352e39372e302f32342d3234203d3e20313339343332.roa (hash: mS9PRPKBDmGv104t2c/uWFhRF9qgpc8OIooHFMXaEg4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.crl rsync://rpki-rsync.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 01:10:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:73:a9:ae:a8:da:67:7a:35:d2:24:02:0b:ef:f2:2c:7e:50:24:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE866CA7A48F4270D861141E8DB83F09E2EF39F6 Validity Not Before: Sep 24 23:09:19 2026 GMT Not After : Sep 26 01:10:19 2026 GMT Subject: CN=69F779E3CBE05473943C6CA412D4F6BB1CD1F4D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:bc:f2:25:6a:6c:e6:08:82:c3:78:8b:89:16: aa:76:65:1b:f5:5d:4d:f7:f6:0b:7e:b0:ce:14:c6: 14:86:03:d6:72:5e:d6:6a:d2:1d:b6:e4:85:f4:cc: 7f:61:ac:54:7a:38:cd:f4:46:ea:79:7d:00:ba:f2: 92:e5:60:f9:de:d3:3e:69:a9:bc:f9:b3:4e:6b:9d: c2:ed:8c:bc:6d:ac:0a:ce:ea:3c:97:06:3c:a3:3c: 8f:68:bc:7e:9e:cf:62:69:77:db:f0:38:62:75:a6: 8e:aa:ee:f1:82:d5:6e:e2:e0:da:ea:60:bc:c2:75: ed:5e:67:c7:c5:c9:22:ff:e9:e1:5c:98:5e:c6:f9: 7e:ed:62:c5:b6:3f:02:94:d8:34:bc:53:f3:e5:4d: ec:bc:3a:a7:54:a9:fc:2c:f6:fe:f5:da:46:4f:ec: c7:34:d8:bc:15:13:73:55:d7:38:4f:42:7d:42:36: 05:d7:e1:ec:1a:e2:ef:0b:4d:f0:d2:0a:cc:7e:bd: f7:8f:52:33:77:14:e1:f9:f1:bc:34:68:6e:e6:f2: 6b:f0:2b:c9:a8:f7:50:95:0d:72:cd:07:48:29:4f: 26:2f:de:a6:d1:57:28:67:08:87:20:d7:58:8b:af: da:bf:f5:51:57:7b:ce:ea:62:f5:e7:02:b2:f7:68: aa:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F7:79:E3:CB:E0:54:73:94:3C:6C:A4:12:D4:F6:BB:1C:D1:F4:D6 X509v3 Authority Key Identifier: keyid:CE:86:6C:A7:A4:8F:42:70:D8:61:14:1E:8D:B8:3F:09:E2:EF:39:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:1b:fa:04:bd:2b:ef:89:80:f4:07:12:16:fd:d7:65:e4:94: 85:04:76:0f:5d:c3:a8:da:81:84:74:5d:3c:95:a1:51:76:07: 06:33:3e:6c:cc:0c:cb:18:07:43:6a:91:bf:4e:8e:36:1e:9e: ff:dc:3a:a0:5c:ab:84:e6:1e:ca:77:e3:53:ec:7b:c0:8a:7a: 9d:72:5b:2c:49:62:6a:3f:20:1d:3a:81:20:96:31:b5:6e:af: 93:ae:28:e3:b2:cb:2a:6e:5a:62:21:77:7a:73:1b:1a:c2:d5: 75:72:21:a9:08:16:94:63:fa:16:bf:0b:37:c5:31:0f:f1:13: b9:1d:21:a4:23:0f:0f:33:f1:fc:68:65:e7:fe:22:50:04:86: 47:43:8a:94:08:21:34:5b:10:0c:29:35:b8:23:6f:6a:be:94: 9e:ed:52:4c:14:dc:cd:17:72:5b:ec:1a:a4:62:40:27:ca:eb: ea:5d:10:3d:18:b4:86:02:ef:22:e2:e2:2d:82:72:15:0e:fa: b1:b1:b8:62:31:dd:f7:0e:a8:44:55:ab:53:03:65:7b:6e:9e: 19:87:44:73:27:fb:88:f2:8f:c4:b1:0e:81:50:0e:b9:a2:79: c4:5e:7f:d1:82:9a:18:4a:7d:e4:11:c2:8c:ec:48:dc:d7:c5: fc:c6:27:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD3OprqjaZ3o10iQCC+/yLH5QJIgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U4NjZDQTdBNDhGNDI3MEQ4NjExNDFFOERCODNGMDlF MkVGMzlGNjAeFw0yNjA5MjQyMzA5MTlaFw0yNjA5MjYwMTEwMTlaMDMxMTAvBgNV BAMTKDY5Rjc3OUUzQ0JFMDU0NzM5NDNDNkNBNDEyRDRGNkJCMUNEMUY0RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCevPIlamzmCILDeIuJFqp2ZRv1 XU339gt+sM4UxhSGA9ZyXtZq0h225IX0zH9hrFR6OM30Rup5fQC68pLlYPne0z5p qbz5s05rncLtjLxtrArO6jyXBjyjPI9ovH6ez2Jpd9vwOGJ1po6q7vGC1W7i4Nrq YLzCde1eZ8fFySL/6eFcmF7G+X7tYsW2PwKU2DS8U/PlTey8OqdUqfws9v712kZP 7Mc02LwVE3NV1zhPQn1CNgXX4ewa4u8LTfDSCsx+vfePUjN3FOH58bw0aG7m8mvw K8mo91CVDXLNB0gpTyYv3qbRVyhnCIcg11iLr9q/9VFXe87qYvXnArL3aKq3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUafd548vgVHOUPGykEtT2uxzR9NYwHwYDVR0j BBgwFoAUzoZsp6SPQnDYYRQejbg/CeLvOfYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODc4M2VkMjgtNTg4MS00N2RhLWFlNjYtZTFkYjY3OTQyZWIxLzAvQ0U4NjZDQTdB NDhGNDI3MEQ4NjExNDFFOERCODNGMDlFMkVGMzlGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRTg2NkNBN0E0OEY0MjcwRDg2MTE0MUU4REI4M0YwOUUyRUYz OUY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODc4M2VkMjgtNTg4MS00N2RhLWFl NjYtZTFkYjY3OTQyZWIxLzAvQ0U4NjZDQTdBNDhGNDI3MEQ4NjExNDFFOERCODNG MDlFMkVGMzlGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABUb+gS9K++JgPQHEhb912XklIUEdg9dw6ja gYR0XTyVoVF2BwYzPmzMDMsYB0Nqkb9OjjYenv/cOqBcq4TmHsp341Pse8CKep1y WyxJYmo/IB06gSCWMbVur5OuKOOyyypuWmIhd3pzGxrC1XVyIakIFpRj+ha/CzfF MQ/xE7kdIaQjDw8z8fxoZef+IlAEhkdDipQIITRbEAwpNbgjb2q+lJ7tUkwU3M0X clvsGqRiQCfK6+pdED0YtIYC7yLi4i2CchUO+rGxuGIx3fcOqERVq1MDZXtunhmH RHMn+4jyj8SxDoFQDrmiecRef9GCmhhKfeQRwozsSNzXxfzGJxU= -----END CERTIFICATE-----Generated at Fri Sep 25 05:12:14 2026 by rpki-client