$ rpki-client -vvvf rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/540972006EC4D1CE0EDDC7DA11D1419F672816A7.mft File: 540972006EC4D1CE0EDDC7DA11D1419F672816A7.mft (raw, json) Hash identifier: gIGsNuHXAD014DGWuKLvdZf2F8vnWwTRXrLwxvDKB9k= Subject key identifier: C0:44:2E:22:F3:58:9A:65:0F:D4:5C:2E:6F:A2:E9:FD:22:E0:13:A7 Authority key identifier: 54:09:72:00:6E:C4:D1:CE:0E:DD:C7:DA:11:D1:41:9F:67:28:16:A7 Certificate issuer: /CN=540972006EC4D1CE0EDDC7DA11D1419F672816A7 Certificate serial: 11531B06CA9C2865D79B300E41003F6C58D63CC6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/540972006EC4D1CE0EDDC7DA11D1419F672816A7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/540972006EC4D1CE0EDDC7DA11D1419F672816A7.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 10:28:34 +0000 Manifest this update: Thu 24 Sep 2026 10:23:34 +0000 Manifest next update: Fri 25 Sep 2026 12:47:34 +0000 Files and hashes: 1: 540972006EC4D1CE0EDDC7DA11D1419F672816A7.crl (hash: zzPXXB0XWIep8x50t7sfCHFuDdi74Yte4gnxjesu6iI=) 2: 3130332e38362e3131372e302f32342d3234203d3e20313530353532.roa (hash: AhYVMQlTuT7zbTcLfZGNm75C7shQlDWThwFiJD95reg=) 3: 3130332e38362e3131362e302f32332d3233203d3e20313530353532.roa (hash: Tk0zLG1Hphe7t1mTq1IIDbrzYp4b0d3efGQx1H0ipCc=) 4: 3130332e38362e3131362e302f32342d3234203d3e20313530353532.roa (hash: KN9wGn1zXozmZ3RfAUGCtuXPuU4nroC30cpkr7J9mHQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/540972006EC4D1CE0EDDC7DA11D1419F672816A7.crl rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/540972006EC4D1CE0EDDC7DA11D1419F672816A7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/540972006EC4D1CE0EDDC7DA11D1419F672816A7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:53:1b:06:ca:9c:28:65:d7:9b:30:0e:41:00:3f:6c:58:d6:3c:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=540972006EC4D1CE0EDDC7DA11D1419F672816A7 Validity Not Before: Sep 24 10:23:34 2026 GMT Not After : Sep 25 12:47:34 2026 GMT Subject: CN=C0442E22F3589A650FD45C2E6FA2E9FD22E013A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:7c:fe:dc:2e:42:b3:93:f9:11:f7:73:03:28: a3:30:5a:0b:25:af:96:ec:eb:73:ad:96:19:96:88: 47:65:d5:6f:4e:f9:07:5e:e1:53:34:a3:5c:a6:0f: 9d:e7:2e:35:f0:1e:3d:23:4b:de:ed:93:16:f8:7b: ba:cd:e2:72:17:e9:7a:d0:c3:94:a4:14:51:7c:6d: 2a:0e:2f:c7:13:92:cf:c0:56:49:5e:6f:2e:18:c7: 00:48:b3:6b:8d:9f:23:dd:b7:df:bd:3b:19:26:f5: c5:48:06:af:1c:6c:db:53:1d:d1:80:04:ed:78:91: f6:2c:51:75:fc:09:9c:88:e4:94:af:19:3b:5e:8e: b2:c4:6c:8c:f8:ff:3f:a0:dd:88:c7:92:00:b2:cf: 5b:5f:e8:5b:83:12:db:db:90:11:22:40:8f:65:fc: 04:98:a7:df:63:eb:a0:ac:8e:22:e5:3c:d7:97:03: 63:ee:a1:67:58:c0:cb:ed:ce:7e:90:ec:c7:d3:7f: 39:86:aa:2c:c5:db:2f:ac:b6:f9:17:71:88:c3:3a: 25:67:fc:98:5d:bc:b0:3a:0d:f9:46:18:1e:a3:f6: d7:bc:df:5a:ec:2e:8f:42:1f:3f:9e:ea:ff:0d:53: b4:fa:2f:97:4e:3e:a8:53:20:07:a2:95:7d:2c:40: ad:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:44:2E:22:F3:58:9A:65:0F:D4:5C:2E:6F:A2:E9:FD:22:E0:13:A7 X509v3 Authority Key Identifier: keyid:54:09:72:00:6E:C4:D1:CE:0E:DD:C7:DA:11:D1:41:9F:67:28:16:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/540972006EC4D1CE0EDDC7DA11D1419F672816A7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/540972006EC4D1CE0EDDC7DA11D1419F672816A7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/540972006EC4D1CE0EDDC7DA11D1419F672816A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:85:0d:39:26:76:6b:ec:d4:e8:32:32:d4:a0:93:77:cc:5b: 7e:b4:1b:7a:51:74:e7:07:86:4a:03:f2:db:26:ec:37:1c:8a: 30:27:16:36:ce:08:68:ae:f9:62:30:68:b6:e9:a1:9f:62:66: 30:bb:a2:66:e8:42:a8:51:08:02:f1:43:da:5f:5e:d7:af:a8: 89:c4:8d:23:13:ea:23:8d:7e:4a:d3:a4:2d:13:f3:b2:98:00: c0:6d:4c:ef:4b:7b:be:cc:fb:db:70:de:b6:41:8c:85:69:ad: 50:41:fd:b0:9e:ce:29:c4:0c:8d:6a:ca:13:a3:b4:75:6d:46: 12:95:33:6b:5b:0a:de:59:2f:fe:9b:5d:54:4c:53:0c:2b:8f: 74:ff:3c:a8:c2:64:f7:fb:81:51:6c:60:33:13:bc:6e:8c:78: 83:97:b0:5b:94:39:9b:42:74:31:71:fb:ea:27:e1:97:1d:80: 41:99:78:4b:58:7a:96:c9:5b:e2:a0:7d:29:15:f3:11:a6:cf: ed:51:92:2c:9e:c2:16:a0:3a:8c:29:f0:63:4b:0d:91:71:a3: 98:fb:e0:75:c6:c5:5c:d3:a3:87:19:ea:c3:61:e8:9b:06:bf: 6f:4d:63:02:45:82:89:30:16:73:a4:65:72:3c:02:80:96:69: e7:b7:4e:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEVMbBsqcKGXXmzAOQQA/bFjWPMYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQwOTcyMDA2RUM0RDFDRTBFRERDN0RBMTFEMTQxOUY2 NzI4MTZBNzAeFw0yNjA5MjQxMDIzMzRaFw0yNjA5MjUxMjQ3MzRaMDMxMTAvBgNV BAMTKEMwNDQyRTIyRjM1ODlBNjUwRkQ0NUMyRTZGQTJFOUZEMjJFMDEzQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhfP7cLkKzk/kR93MDKKMwWgsl r5bs63OtlhmWiEdl1W9O+Qde4VM0o1ymD53nLjXwHj0jS97tkxb4e7rN4nIX6XrQ w5SkFFF8bSoOL8cTks/AVkleby4YxwBIs2uNnyPdt9+9Oxkm9cVIBq8cbNtTHdGA BO14kfYsUXX8CZyI5JSvGTtejrLEbIz4/z+g3YjHkgCyz1tf6FuDEtvbkBEiQI9l /ASYp99j66CsjiLlPNeXA2PuoWdYwMvtzn6Q7MfTfzmGqizF2y+stvkXcYjDOiVn /JhdvLA6DflGGB6j9te831rsLo9CHz+e6v8NU7T6L5dOPqhTIAeilX0sQK27AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwEQuIvNYmmUP1Fwub6Lp/SLgE6cwHwYDVR0j BBgwFoAUVAlyAG7E0c4O3cfaEdFBn2coFqcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODk3MThmNmItYjUxNi00M2FlLWI1ODktODNhMjVmYWEzMGJlLzAvNTQwOTcyMDA2 RUM0RDFDRTBFRERDN0RBMTFEMTQxOUY2NzI4MTZBNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NDA5NzIwMDZFQzREMUNFMEVEREM3REExMUQxNDE5RjY3Mjgx NkE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODk3MThmNmItYjUxNi00M2FlLWI1 ODktODNhMjVmYWEzMGJlLzAvNTQwOTcyMDA2RUM0RDFDRTBFRERDN0RBMTFEMTQx OUY2NzI4MTZBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG+FDTkmdmvs1OgyMtSgk3fMW360G3pRdOcH hkoD8tsm7DccijAnFjbOCGiu+WIwaLbpoZ9iZjC7omboQqhRCALxQ9pfXtevqInE jSMT6iONfkrTpC0T87KYAMBtTO9Le77M+9tw3rZBjIVprVBB/bCezinEDI1qyhOj tHVtRhKVM2tbCt5ZL/6bXVRMUwwrj3T/PKjCZPf7gVFsYDMTvG6MeIOXsFuUOZtC dDFx++on4ZcdgEGZeEtYepbJW+KgfSkV8xGmz+1RkiyewhagOowp8GNLDZFxo5j7 4HXGxVzTo4cZ6sNh6JsGv29NYwJFgokwFnOkZXI8AoCWaee3Tg8= -----END CERTIFICATE-----Generated at Thu Sep 24 13:20:33 2026 by rpki-client