$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.mft File: 964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.mft (raw, json) Hash identifier: VIONoxyKpksPDw3OS159OZMs3Ij2CCl+qfGAUVM+OCc= Subject key identifier: C8:DE:F2:D3:73:A3:ED:10:33:FD:5B:91:9A:C3:58:61:6E:6E:75:85 Authority key identifier: 96:4C:EC:E4:DB:02:A6:D9:78:CE:7F:22:B0:B3:36:E7:8E:7E:FE:21 Certificate issuer: /CN=964CECE4DB02A6D978CE7F22B0B336E78E7EFE21 Certificate serial: 5E8ED4C6B7DDD533F73450FA1FD032B07B6B3ACD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 21:53:10 +0000 Manifest this update: Wed 23 Sep 2026 21:48:10 +0000 Manifest next update: Thu 24 Sep 2026 23:44:10 +0000 Files and hashes: 1: 3130332e3136322e31362e302f32332d3234203d3e20313431363336.roa (hash: FykeN+ZnqOJgkPJefPV3nDEsoGKfA2/qLMJi68jlv2o=) 2: 964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.crl (hash: /XKsVVc2okqOJqoJo4NjNI7uGIIQQTAdeVmkrSTzZWc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.crl rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:8e:d4:c6:b7:dd:d5:33:f7:34:50:fa:1f:d0:32:b0:7b:6b:3a:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=964CECE4DB02A6D978CE7F22B0B336E78E7EFE21 Validity Not Before: Sep 23 21:48:10 2026 GMT Not After : Sep 24 23:44:10 2026 GMT Subject: CN=C8DEF2D373A3ED1033FD5B919AC358616E6E7585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8e:04:62:a8:b9:7a:88:f5:65:8d:ca:cb:30: 14:1f:14:0e:4c:34:a8:26:91:c8:f6:e9:ad:39:9d: 52:84:6c:ed:a9:db:e5:bc:88:08:ee:05:8c:9e:77: c2:d9:64:2f:9f:4a:0f:37:24:ee:4f:f4:db:fb:9d: fc:64:20:a8:89:7e:d8:1a:61:8d:be:7a:ca:29:a5: 1c:45:3a:f0:6e:48:4c:5a:32:4d:db:81:cc:f9:76: dc:5d:d3:03:e4:fa:f7:31:45:bf:28:1b:58:cb:6f: 7d:23:4f:1d:b6:cc:0f:9f:f4:9a:68:91:a3:0c:0a: 7d:7b:6b:d9:65:af:ed:27:ba:43:62:bc:c9:af:50: 4e:8b:3e:01:76:45:3a:5f:bc:0d:4a:6f:4e:d0:e2: e8:1f:70:93:7b:27:a2:70:57:2c:dd:79:a4:cf:3a: 91:55:fa:78:9e:ac:0e:93:dc:9e:48:df:6a:a5:36: 6f:45:5b:23:31:bb:0f:d3:b4:41:97:56:03:5f:a9: dd:9a:a4:5c:9d:42:6e:2d:66:d8:09:f3:22:fe:12: 85:4f:44:e4:d9:f4:ce:6a:fc:52:8d:3d:0a:86:9d: c7:11:59:5f:b1:7d:7c:b7:7d:fc:e5:a9:1f:32:a9: 28:76:39:02:b8:92:b4:66:ce:43:34:58:ff:84:10: f3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:DE:F2:D3:73:A3:ED:10:33:FD:5B:91:9A:C3:58:61:6E:6E:75:85 X509v3 Authority Key Identifier: keyid:96:4C:EC:E4:DB:02:A6:D9:78:CE:7F:22:B0:B3:36:E7:8E:7E:FE:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:e3:9e:b6:c9:76:8f:18:45:23:a1:62:76:a6:53:f5:71:9a: b2:49:1e:16:30:1b:15:ae:62:f8:5d:2a:3f:c2:ca:0d:5d:7b: 83:76:d0:83:d1:ac:f8:9a:cc:66:73:6f:42:d7:49:5d:dc:b7: fa:58:37:e2:03:ec:37:a5:45:6e:8a:10:b5:15:38:4c:b1:f9: 7a:67:a9:a6:5c:8b:b4:85:e3:0c:75:60:0b:fe:f4:8c:da:68: c7:fc:83:af:97:8a:b6:38:10:b3:b1:f7:d2:c5:ee:12:98:3f: 33:31:13:7a:f8:05:a6:cf:25:07:eb:41:e7:c3:13:c0:54:4d: e8:8c:f2:d5:17:7c:03:d7:13:64:40:24:06:ac:14:b9:e5:55: 0e:e1:f3:42:50:65:7d:47:b8:3e:da:76:af:2f:5b:eb:6f:a7: d1:05:76:03:91:00:99:85:c3:f3:5a:da:47:64:35:ee:42:26: 34:ea:4d:8d:9f:cb:60:a4:a8:6e:dc:e8:1e:77:ec:9d:ac:77: 3a:44:6e:d2:9e:43:fa:c2:39:e4:7b:b6:a3:fd:0b:e7:0c:8f: 15:45:10:6f:a3:d3:9e:19:13:7e:4c:e8:54:09:c2:ba:8f:82: 6c:8b:57:da:07:05:36:e0:0d:7e:71:02:cb:3c:92:f8:ec:28: 59:cc:8a:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXo7Uxrfd1TP3NFD6H9AysHtrOs0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY0Q0VDRTREQjAyQTZEOTc4Q0U3RjIyQjBCMzM2RTc4 RTdFRkUyMTAeFw0yNjA5MjMyMTQ4MTBaFw0yNjA5MjQyMzQ0MTBaMDMxMTAvBgNV BAMTKEM4REVGMkQzNzNBM0VEMTAzM0ZENUI5MTlBQzM1ODYxNkU2RTc1ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWjgRiqLl6iPVljcrLMBQfFA5M NKgmkcj26a05nVKEbO2p2+W8iAjuBYyed8LZZC+fSg83JO5P9Nv7nfxkIKiJftga YY2+esoppRxFOvBuSExaMk3bgcz5dtxd0wPk+vcxRb8oG1jLb30jTx22zA+f9Jpo kaMMCn17a9llr+0nukNivMmvUE6LPgF2RTpfvA1Kb07Q4ugfcJN7J6JwVyzdeaTP OpFV+nierA6T3J5I32qlNm9FWyMxuw/TtEGXVgNfqd2apFydQm4tZtgJ8yL+EoVP ROTZ9M5q/FKNPQqGnccRWV+xfXy3ffzlqR8yqSh2OQK4krRmzkM0WP+EEPPpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyN7y03Oj7RAz/VuRmsNYYW5udYUwHwYDVR0j BBgwFoAUlkzs5NsCptl4zn8isLM2545+/iEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGYzMTUxZGItMTMzMC00ZTcwLTljYzQtOWI4ZmNkNWVkMmQyLzAvOTY0Q0VDRTRE QjAyQTZEOTc4Q0U3RjIyQjBCMzM2RTc4RTdFRkUyMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NjRDRUNFNERCMDJBNkQ5NzhDRTdGMjJCMEIzMzZFNzhFN0VG RTIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGYzMTUxZGItMTMzMC00ZTcwLTlj YzQtOWI4ZmNkNWVkMmQyLzAvOTY0Q0VDRTREQjAyQTZEOTc4Q0U3RjIyQjBCMzM2 RTc4RTdFRkUyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACTjnrbJdo8YRSOhYnamU/VxmrJJHhYwGxWu YvhdKj/Cyg1de4N20IPRrPiazGZzb0LXSV3ct/pYN+ID7DelRW6KELUVOEyx+Xpn qaZci7SF4wx1YAv+9IzaaMf8g6+XirY4ELOx99LF7hKYPzMxE3r4BabPJQfrQefD E8BUTeiM8tUXfAPXE2RAJAasFLnlVQ7h80JQZX1HuD7adq8vW+tvp9EFdgORAJmF w/Na2kdkNe5CJjTqTY2fy2CkqG7c6B537J2sdzpEbtKeQ/rCOeR7tqP9C+cMjxVF EG+j054ZE35M6FQJwrqPgmyLV9oHBTbgDX5xAss8kvjsKFnMitg= -----END CERTIFICATE-----Generated at Thu Sep 24 00:59:24 2026 by rpki-client