$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.mft File: 5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.mft (raw, json) Hash identifier: /7VIBd+VFPgFgRmBvaBMx84P0cCs/9YL+ijZd8U0Y8E= Subject key identifier: B6:CE:40:D4:85:68:B3:BC:2A:16:95:E4:A3:15:1B:79:BA:91:F4:C7 Authority key identifier: 53:00:D0:EE:C7:A2:1A:AF:AD:61:B6:E4:08:28:CB:BA:7C:03:C8:49 Certificate issuer: /CN=5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849 Certificate serial: 3688C7A7CA33447B77C298DCCB99B29946C139AA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 18:38:46 +0000 Manifest this update: Thu 24 Sep 2026 18:33:46 +0000 Manifest next update: Fri 25 Sep 2026 20:14:46 +0000 Files and hashes: 1: 5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.crl (hash: i1HsNiXT93oBmcQkMITg3U1sXwWqU9JsaLcCTe/T3ZU=) 2: 3130332e3136322e3135332e302f32342d3234203d3e20313431363630.roa (hash: d/lQ7Oz9/jWtBq0Ck1NBYGMJFkT573cCc0+ynKJPdok=) 3: 3130332e3136322e3135322e302f32342d3234203d3e20313431363630.roa (hash: 1t9yzNFOj0CAbODcXUQcoM9eYOKr+Gim4y4R0hZm1ws=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.crl rsync://rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:88:c7:a7:ca:33:44:7b:77:c2:98:dc:cb:99:b2:99:46:c1:39:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849 Validity Not Before: Sep 24 18:33:46 2026 GMT Not After : Sep 25 20:14:46 2026 GMT Subject: CN=B6CE40D48568B3BC2A1695E4A3151B79BA91F4C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8f:e2:be:66:c8:14:9f:19:63:8f:e8:4a:93: 8d:2c:60:ca:c2:dd:f0:d9:5e:64:ff:16:75:52:cd: 8d:5c:9c:55:73:a5:9a:7b:d7:02:80:1d:bc:33:e9: fb:64:e8:01:65:e9:46:8a:29:64:c1:68:e1:be:35: e1:e5:fb:4a:6f:f4:ee:ea:0a:f8:20:ad:83:8b:d9: 72:fa:8c:d7:f2:21:e5:35:50:1a:ac:85:5d:ad:2a: b0:dc:1d:5a:b4:7e:48:4b:b5:da:8d:43:d1:42:b4: ad:b3:f6:80:6d:3c:05:6a:44:91:4f:6d:39:e3:ec: 87:db:ab:10:29:cd:56:dd:db:06:63:19:b0:68:39: 4c:e7:90:1f:6f:d6:fd:d4:c3:f5:dc:a9:1f:bc:c5: b1:c1:dc:94:ec:19:7e:e9:e6:56:2a:8d:01:43:96: 05:a1:9a:b2:21:6e:8f:da:17:18:f4:42:1a:c3:6a: d7:d2:ff:f4:3d:8b:42:42:f2:4e:47:b1:62:f0:e6: 8e:23:12:19:49:e3:4e:62:97:d6:c8:a8:d5:c7:4d: 52:e4:e9:27:e4:73:3e:91:9b:13:06:a7:1b:65:0d: f7:d5:6e:e8:64:d0:cc:4f:cd:37:fd:e0:ee:dc:2f: 06:1b:c2:84:69:90:e6:bc:41:39:20:68:96:80:6b: ca:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:CE:40:D4:85:68:B3:BC:2A:16:95:E4:A3:15:1B:79:BA:91:F4:C7 X509v3 Authority Key Identifier: keyid:53:00:D0:EE:C7:A2:1A:AF:AD:61:B6:E4:08:28:CB:BA:7C:03:C8:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:ff:51:a0:87:46:33:0d:70:94:c8:69:9f:ab:bd:63:2f:14: f4:8d:9f:d0:bb:01:0a:d2:e3:20:e1:9c:e1:c7:09:5a:e0:0c: b6:41:53:ed:05:1f:1c:9b:80:7f:ff:4c:58:da:50:66:08:4a: af:37:a1:75:e2:31:a3:e5:3a:53:ee:ec:9e:c1:1b:e8:8c:21: 64:f6:eb:f2:f4:66:a1:ef:b3:d5:1e:72:33:58:09:ba:9d:f9: 9c:fb:8c:c3:17:1d:25:4c:bd:94:ad:48:e6:4f:fa:ae:59:73: ff:7f:f1:16:45:bd:d7:23:22:33:48:8f:b5:33:e0:50:2d:01: 1d:26:b7:c5:20:b7:53:72:3e:df:ed:28:eb:63:bf:99:e5:64: d5:57:d0:49:09:e6:ca:e9:9c:12:cf:00:ec:1d:d3:94:2a:ef: 12:df:b1:3b:6b:9e:48:20:f5:b9:f8:36:6c:89:9f:39:60:ff: de:a5:20:b4:5f:46:f9:5b:ad:ad:3d:e8:8a:10:ae:2d:be:2d: 3c:84:66:9a:20:a7:1c:39:42:b3:b9:37:f7:ab:e5:39:7a:f4: ec:65:f7:92:2d:83:34:45:d4:cc:2b:bb:57:18:b4:c4:b8:3b: 6d:32:16:e3:b5:9d:a1:f9:6d:ab:a7:0f:cc:9d:f3:7f:28:93: 1a:c5:6d:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNojHp8ozRHt3wpjcy5mymUbBOaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMwMEQwRUVDN0EyMUFBRkFENjFCNkU0MDgyOENCQkE3 QzAzQzg0OTAeFw0yNjA5MjQxODMzNDZaFw0yNjA5MjUyMDE0NDZaMDMxMTAvBgNV BAMTKEI2Q0U0MEQ0ODU2OEIzQkMyQTE2OTVFNEEzMTUxQjc5QkE5MUY0QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjj+K+ZsgUnxljj+hKk40sYMrC 3fDZXmT/FnVSzY1cnFVzpZp71wKAHbwz6ftk6AFl6UaKKWTBaOG+NeHl+0pv9O7q CvggrYOL2XL6jNfyIeU1UBqshV2tKrDcHVq0fkhLtdqNQ9FCtK2z9oBtPAVqRJFP bTnj7IfbqxApzVbd2wZjGbBoOUznkB9v1v3Uw/XcqR+8xbHB3JTsGX7p5lYqjQFD lgWhmrIhbo/aFxj0QhrDatfS//Q9i0JC8k5HsWLw5o4jEhlJ405il9bIqNXHTVLk 6Sfkcz6RmxMGpxtlDffVbuhk0MxPzTf94O7cLwYbwoRpkOa8QTkgaJaAa8p3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUts5A1IVos7wqFpXkoxUbebqR9McwHwYDVR0j BBgwFoAUUwDQ7seiGq+tYbbkCCjLunwDyEkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGFiM2MwM2QtMmUyZS00ODk3LTg2OWItMjFjZTQ4NjAxNjE5LzAvNTMwMEQwRUVD N0EyMUFBRkFENjFCNkU0MDgyOENCQkE3QzAzQzg0OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MzAwRDBFRUM3QTIxQUFGQUQ2MUI2RTQwODI4Q0JCQTdDMDND ODQ5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGFiM2MwM2QtMmUyZS00ODk3LTg2 OWItMjFjZTQ4NjAxNjE5LzAvNTMwMEQwRUVDN0EyMUFBRkFENjFCNkU0MDgyOENC QkE3QzAzQzg0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHn/UaCHRjMNcJTIaZ+rvWMvFPSNn9C7AQrS 4yDhnOHHCVrgDLZBU+0FHxybgH//TFjaUGYISq83oXXiMaPlOlPu7J7BG+iMIWT2 6/L0ZqHvs9UecjNYCbqd+Zz7jMMXHSVMvZStSOZP+q5Zc/9/8RZFvdcjIjNIj7Uz 4FAtAR0mt8Ugt1NyPt/tKOtjv5nlZNVX0EkJ5srpnBLPAOwd05Qq7xLfsTtrnkgg 9bn4NmyJnzlg/96lILRfRvlbra096IoQri2+LTyEZpogpxw5QrO5N/er5Tl69Oxl 95ItgzRF1Mwru1cYtMS4O20yFuO1naH5baunD8yd838okxrFbYc= -----END CERTIFICATE-----Generated at Fri Sep 25 04:06:24 2026 by rpki-client