$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.mft File: 873409842DEE948D3DE05C618194C87A259E04BF.mft (raw, json) Hash identifier: HGRKzmUVilddxWJPyj3Iq8JlC25RMM918i7/M5JBjBU= Subject key identifier: C3:95:6E:E4:53:AA:66:48:1F:11:33:B0:6C:17:14:84:20:F5:62:19 Authority key identifier: 87:34:09:84:2D:EE:94:8D:3D:E0:5C:61:81:94:C8:7A:25:9E:04:BF Certificate issuer: /CN=873409842DEE948D3DE05C618194C87A259E04BF Certificate serial: 4A7E154AE78D021F30307CFB442ED099D4C7E068 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/873409842DEE948D3DE05C618194C87A259E04BF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 08:06:20 +0000 Manifest this update: Wed 23 Sep 2026 08:01:20 +0000 Manifest next update: Thu 24 Sep 2026 08:41:20 +0000 Files and hashes: 1: 873409842DEE948D3DE05C618194C87A259E04BF.crl (hash: tdQWt4hUMP/+CtgdG3ezN57FEpHGF/PGkybFzgMJMio=) 2: 3130332e3135332e3234372e302f32342d3234203d3e20313430343735.roa (hash: OzhJdHffqoSTJ5pFjxmQ04VEvXqHaJWqkM8YRHVnaeQ=) 3: 3130332e3135332e3234362e302f32342d3234203d3e20313430343735.roa (hash: M8QTZuDsRpJ1yY06WkCYeFwFPm5+TLSWxZVTx0+FX3U=) 4: 323430363a346563303a3a2f33322d3332203d3e20313430343735.roa (hash: grkHY3zf57XsShC3GloC/Ysy8CRxkBA2HYvszXntAaM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.crl rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/873409842DEE948D3DE05C618194C87A259E04BF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 08:41:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:7e:15:4a:e7:8d:02:1f:30:30:7c:fb:44:2e:d0:99:d4:c7:e0:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=873409842DEE948D3DE05C618194C87A259E04BF Validity Not Before: Sep 23 08:01:20 2026 GMT Not After : Sep 24 08:41:20 2026 GMT Subject: CN=C3956EE453AA66481F1133B06C17148420F56219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f8:3a:ba:0c:76:47:e5:c8:d4:90:6b:ef:3b: c1:a2:f3:b8:98:c3:67:e8:29:60:ca:c2:5f:7a:98: 87:69:59:ee:e6:fe:97:b8:dd:24:14:a4:e3:dd:7f: 08:11:50:35:e6:b9:2d:1c:d3:df:98:c8:80:27:7d: b7:82:da:bc:17:54:ec:ae:16:cf:43:3d:e8:2e:0a: dc:2d:0d:24:6e:9b:b4:6f:11:47:3f:6c:12:dd:02: 1e:00:05:d8:f5:83:4a:12:fa:91:43:ca:6d:98:c8: 99:bb:4d:c9:35:97:09:da:c1:0d:cc:d3:90:95:f0: 5c:fc:37:ae:7b:f7:14:a6:65:cf:ce:73:45:6c:6a: 4c:48:0e:06:1e:d3:b3:a8:b8:21:ee:3f:c2:d2:35: 7c:ac:20:19:52:f1:55:b9:8e:64:f5:90:58:c6:4b: 30:1f:24:40:da:b5:39:da:0a:db:d6:36:3a:3b:03: 0d:c1:f4:56:43:ad:a5:14:2c:6b:91:48:7e:00:ba: 9f:2d:2b:83:d7:61:05:12:99:ba:31:47:62:52:03: 12:30:2e:ae:20:8e:5b:75:7c:49:ef:e8:fd:43:b3: 40:1f:6a:04:5b:a3:e3:48:02:92:a7:c7:dc:50:4f: 9b:50:76:d4:a6:03:20:7d:9b:be:1c:a8:0a:11:2d: 79:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:95:6E:E4:53:AA:66:48:1F:11:33:B0:6C:17:14:84:20:F5:62:19 X509v3 Authority Key Identifier: keyid:87:34:09:84:2D:EE:94:8D:3D:E0:5C:61:81:94:C8:7A:25:9E:04:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/873409842DEE948D3DE05C618194C87A259E04BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:93:8b:e9:17:c2:9c:6f:6c:4d:45:ad:87:55:21:3b:04:de: 9f:7c:b3:03:5c:9e:8c:61:bb:ec:e9:3f:22:47:ba:f2:f3:91: 4d:be:32:3f:a5:00:30:bf:3d:cb:50:b7:a5:91:e9:ce:4d:0e: b4:31:6e:3f:7f:1f:95:3d:a5:e6:97:ad:c3:94:27:f3:32:91: 25:4e:35:3e:36:d2:42:49:07:ab:c0:de:4b:b6:cd:a6:ed:c5: 56:3d:3c:77:b7:b7:05:e0:4a:d2:c7:49:bc:f9:c1:86:da:db: d9:95:83:71:18:9e:99:b5:79:45:8f:a9:55:a0:ce:53:6f:c9: 20:2a:47:3c:25:b5:aa:a4:3a:97:81:69:88:7e:6c:7d:d5:ef: e2:71:0e:32:49:89:5b:e1:29:00:99:df:50:e5:e7:a5:93:cc: 2e:39:85:f5:e5:8c:0d:66:ea:d1:1f:92:ce:88:1b:1b:a4:2e: 87:7d:49:81:0f:e1:de:36:08:19:33:2e:46:3e:08:ce:0c:e7: a4:95:03:00:15:e6:34:02:80:5f:09:50:93:f6:e7:37:db:cf: 0f:f7:91:18:a2:04:77:5d:69:ca:60:97:53:8a:ca:42:4e:72: 02:c9:8c:7b:34:14:25:a1:bd:d8:c7:2f:2e:ce:02:39:75:3c: c5:b7:57:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSn4VSueNAh8wMHz7RC7QmdTH4GgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODczNDA5ODQyREVFOTQ4RDNERTA1QzYxODE5NEM4N0Ey NTlFMDRCRjAeFw0yNjA5MjMwODAxMjBaFw0yNjA5MjQwODQxMjBaMDMxMTAvBgNV BAMTKEMzOTU2RUU0NTNBQTY2NDgxRjExMzNCMDZDMTcxNDg0MjBGNTYyMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI+Dq6DHZH5cjUkGvvO8Gi87iY w2foKWDKwl96mIdpWe7m/pe43SQUpOPdfwgRUDXmuS0c09+YyIAnfbeC2rwXVOyu Fs9DPeguCtwtDSRum7RvEUc/bBLdAh4ABdj1g0oS+pFDym2YyJm7Tck1lwnawQ3M 05CV8Fz8N6579xSmZc/Oc0VsakxIDgYe07OouCHuP8LSNXysIBlS8VW5jmT1kFjG SzAfJEDatTnaCtvWNjo7Aw3B9FZDraUULGuRSH4Aup8tK4PXYQUSmboxR2JSAxIw Lq4gjlt1fEnv6P1Ds0AfagRbo+NIApKnx9xQT5tQdtSmAyB9m74cqAoRLXlRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw5Vu5FOqZkgfETOwbBcUhCD1YhkwHwYDVR0j BBgwFoAUhzQJhC3ulI094FxhgZTIeiWeBL8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGRjZjQwNjctYTY5ZC00OTA4LWJlZTgtYjQ2NTViZGMxNWY4LzAvODczNDA5ODQy REVFOTQ4RDNERTA1QzYxODE5NEM4N0EyNTlFMDRCRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NzM0MDk4NDJERUU5NDhEM0RFMDVDNjE4MTk0Qzg3QTI1OUUw NEJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGRjZjQwNjctYTY5ZC00OTA4LWJl ZTgtYjQ2NTViZGMxNWY4LzAvODczNDA5ODQyREVFOTQ4RDNERTA1QzYxODE5NEM4 N0EyNTlFMDRCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEeTi+kXwpxvbE1FrYdVITsE3p98swNcnoxh u+zpPyJHuvLzkU2+Mj+lADC/PctQt6WR6c5NDrQxbj9/H5U9peaXrcOUJ/MykSVO NT420kJJB6vA3ku2zabtxVY9PHe3twXgStLHSbz5wYba29mVg3EYnpm1eUWPqVWg zlNvySAqRzwltaqkOpeBaYh+bH3V7+JxDjJJiVvhKQCZ31Dl56WTzC45hfXljA1m 6tEfks6IGxukLod9SYEP4d42CBkzLkY+CM4M56SVAwAV5jQCgF8JUJP25zfbzw/3 kRiiBHddacpgl1OKykJOcgLJjHs0FCWhvdjHLy7OAjl1PMW3V0M= -----END CERTIFICATE-----Generated at Thu Sep 24 03:57:14 2026 by rpki-client