$ rpki-client -vvvf rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/CD846D565A6E2859697B59C438907050C12DE37D.mft File: CD846D565A6E2859697B59C438907050C12DE37D.mft (raw, json) Hash identifier: NhZBCCTgekouqzOB5GvBcThF5Nr9xH3bgVwey805BUM= Subject key identifier: FE:16:6E:65:10:4B:24:29:A5:64:3D:2B:61:1E:BC:FD:EF:0B:E0:C5 Authority key identifier: CD:84:6D:56:5A:6E:28:59:69:7B:59:C4:38:90:70:50:C1:2D:E3:7D Certificate issuer: /CN=CD846D565A6E2859697B59C438907050C12DE37D Certificate serial: 4C54443EDE5C2074239FCBA5A625AB9BBB7B6B89 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/CD846D565A6E2859697B59C438907050C12DE37D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/CD846D565A6E2859697B59C438907050C12DE37D.mft Manifest number: C7 Signing time: Sun 27 Sep 2026 14:27:31 +0000 Manifest this update: Sun 27 Sep 2026 14:22:31 +0000 Manifest next update: Mon 28 Sep 2026 15:58:31 +0000 Files and hashes: 1: 3231322e3131372e34382e302f32302d3234203d3e203538333736.roa (hash: tagwsSVL2euywnNYgfGcSI37agKbNG24pIwjEJuU+FQ=) 2: CD846D565A6E2859697B59C438907050C12DE37D.crl (hash: 1tIbGPNLSyO9ohme40QCAz20Cau/F6kPLtRTzq0yqo0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/CD846D565A6E2859697B59C438907050C12DE37D.crl rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/CD846D565A6E2859697B59C438907050C12DE37D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/3/CD846D565A6E2859697B59C438907050C12DE37D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 05:30:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:54:44:3e:de:5c:20:74:23:9f:cb:a5:a6:25:ab:9b:bb:7b:6b:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD846D565A6E2859697B59C438907050C12DE37D Validity Not Before: Sep 27 14:22:31 2026 GMT Not After : Sep 28 15:58:31 2026 GMT Subject: CN=FE166E65104B2429A5643D2B611EBCFDEF0BE0C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f0:0b:56:68:d1:89:2b:69:ce:80:b4:08:49: 47:ba:50:d1:c0:f1:e3:82:3f:d2:f1:48:a7:91:1a: 7d:86:bd:3e:1c:77:bd:39:7f:14:9a:e8:ae:a7:a0: c4:6d:e9:0c:5d:1d:a0:ff:5d:ff:c9:92:26:2c:97: b4:86:6b:60:43:a1:a1:3e:59:28:e2:2c:ef:2a:02: 4e:d6:be:30:c4:05:6b:9e:bc:bb:b8:c2:95:be:f7: 97:1c:26:85:9f:45:e4:5f:78:df:d1:9e:9a:6c:03: 0d:49:c8:f2:52:4e:76:ee:b9:b0:97:62:ac:79:ef: 9b:ce:d2:0e:98:c1:91:9c:f0:52:ef:0e:b4:37:37: 48:f1:82:ad:a8:0b:71:79:8c:95:9d:a4:cf:ec:2c: ed:dc:50:f9:61:99:93:b0:1c:0e:c4:f3:1e:e8:4e: b7:db:51:86:cc:12:f9:d7:53:9c:29:31:c0:65:78: 39:29:ec:19:38:8e:a7:83:4f:07:16:d5:b4:aa:55: c4:a0:fb:e3:2a:81:d7:46:81:77:c1:cd:66:a5:a7: b0:41:75:9a:ab:70:dc:3a:74:23:3a:17:46:e0:92: b0:08:91:6e:80:0b:f5:b3:8c:c5:3d:17:b4:0c:94: 1a:8b:ae:b1:01:83:2d:fc:da:1c:69:d3:a0:15:59: 13:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:16:6E:65:10:4B:24:29:A5:64:3D:2B:61:1E:BC:FD:EF:0B:E0:C5 X509v3 Authority Key Identifier: keyid:CD:84:6D:56:5A:6E:28:59:69:7B:59:C4:38:90:70:50:C1:2D:E3:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/CD846D565A6E2859697B59C438907050C12DE37D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/CD846D565A6E2859697B59C438907050C12DE37D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/CD846D565A6E2859697B59C438907050C12DE37D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:14:6f:ed:2d:6f:1d:2a:a3:1e:f9:71:b9:0a:2b:c5:e3:74: d3:ee:4e:9b:9b:de:e5:28:db:a6:58:92:be:ac:ac:64:2d:05: 95:29:18:85:b7:bf:27:42:07:ff:ff:88:44:e7:14:d2:4d:5f: 91:ef:60:39:2e:ca:1d:e2:55:8a:dc:91:e3:85:5b:b9:77:f8: 7c:61:c8:95:79:c8:36:04:b8:d6:df:f6:fc:65:94:09:02:64: 99:50:0e:fe:c8:2b:e0:a7:07:9e:4e:73:70:0e:b4:2e:59:9a: 1c:ae:76:82:3b:cb:cd:bb:6c:94:a6:8e:3b:ac:a0:60:34:79: 3d:02:4f:f4:ee:ab:28:86:8c:b5:1b:0a:6e:5a:12:8e:6f:3a: bd:b4:a0:a6:29:77:c2:52:2e:da:75:42:88:17:6b:d1:bb:8f: 1c:d4:ac:53:c4:46:f0:20:a2:0b:6c:85:07:ad:25:19:da:39: 60:93:d1:d8:17:0e:0e:e3:c9:47:ca:e0:76:9f:61:3b:70:7a: d0:29:09:8e:d6:00:ef:90:00:75:8a:e3:1a:f1:bc:42:02:64: 7d:ee:c9:55:1d:a5:4d:03:0e:bc:cf:11:b6:86:f0:a2:37:68: 17:bd:3e:ea:82:54:1f:37:63:68:e8:a0:19:15:72:3c:b9:01: ff:a8:71:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTFREPt5cIHQjn8ulpiWrm7t7a4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q4NDZENTY1QTZFMjg1OTY5N0I1OUM0Mzg5MDcwNTBD MTJERTM3RDAeFw0yNjA5MjcxNDIyMzFaFw0yNjA5MjgxNTU4MzFaMDMxMTAvBgNV BAMTKEZFMTY2RTY1MTA0QjI0MjlBNTY0M0QyQjYxMUVCQ0ZERUYwQkUwQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCO8AtWaNGJK2nOgLQISUe6UNHA 8eOCP9LxSKeRGn2GvT4cd705fxSa6K6noMRt6QxdHaD/Xf/JkiYsl7SGa2BDoaE+ WSjiLO8qAk7WvjDEBWuevLu4wpW+95ccJoWfReRfeN/RnppsAw1JyPJSTnbuubCX Yqx575vO0g6YwZGc8FLvDrQ3N0jxgq2oC3F5jJWdpM/sLO3cUPlhmZOwHA7E8x7o TrfbUYbMEvnXU5wpMcBleDkp7Bk4jqeDTwcW1bSqVcSg++MqgddGgXfBzWalp7BB dZqrcNw6dCM6F0bgkrAIkW6AC/WzjMU9F7QMlBqLrrEBgy382hxp06AVWRNfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/hZuZRBLJCmlZD0rYR68/e8L4MUwHwYDVR0j BBgwFoAUzYRtVlpuKFlpe1nEOJBwUMEt430wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODkxZDNjMzAtOTVkYy00YjcyLWFlMWItYWQxZTk4YjBlMTc5LzEvQ0Q4NDZENTY1 QTZFMjg1OTY5N0I1OUM0Mzg5MDcwNTBDMTJERTM3RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMy9DRDg0NkQ1NjVBNkUyODU5Njk3QjU5QzQzODkwNzA1MEMxMkRF MzdELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODkxZDNjMzAtOTVkYy00YjcyLWFl MWItYWQxZTk4YjBlMTc5LzEvQ0Q4NDZENTY1QTZFMjg1OTY5N0I1OUM0Mzg5MDcw NTBDMTJERTM3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANgUb+0tbx0qox75cbkKK8XjdNPuTpub3uUo 26ZYkr6srGQtBZUpGIW3vydCB///iETnFNJNX5HvYDkuyh3iVYrckeOFW7l3+Hxh yJV5yDYEuNbf9vxllAkCZJlQDv7IK+CnB55Oc3AOtC5ZmhyudoI7y827bJSmjjus oGA0eT0CT/TuqyiGjLUbCm5aEo5vOr20oKYpd8JSLtp1QogXa9G7jxzUrFPERvAg ogtshQetJRnaOWCT0dgXDg7jyUfK4HafYTtwetApCY7WAO+QAHWK4xrxvEICZH3u yVUdpU0DDrzPEbaG8KI3aBe9PuqCVB83Y2jooBkVcjy5Af+ocUc= -----END CERTIFICATE-----Generated at Sun Sep 27 19:03:09 2026 by rpki-client