$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/511F1AA1B492F6794EF165F62B075919F2B16E44.mft File: 511F1AA1B492F6794EF165F62B075919F2B16E44.mft (raw, json) Hash identifier: i2J8jb0ekBFiI/szFzm2v/ukawK+UpU+m65p6Za5rnM= Subject key identifier: 68:BF:F2:51:F7:88:CF:47:36:F9:57:90:80:3C:14:00:F7:56:FC:4D Authority key identifier: 51:1F:1A:A1:B4:92:F6:79:4E:F1:65:F6:2B:07:59:19:F2:B1:6E:44 Certificate issuer: /CN=511F1AA1B492F6794EF165F62B075919F2B16E44 Certificate serial: 7641A30ED318238F9F90C08A30C5F0390C834AFC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/511F1AA1B492F6794EF165F62B075919F2B16E44.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/511F1AA1B492F6794EF165F62B075919F2B16E44.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 14:07:48 +0000 Manifest this update: Fri 25 Sep 2026 14:02:48 +0000 Manifest next update: Sat 26 Sep 2026 17:24:48 +0000 Files and hashes: 1: 511F1AA1B492F6794EF165F62B075919F2B16E44.crl (hash: 1BqVdzWmA2T0XOijoYji5MrIAaXOy1wggiKxTe4mTIM=) 2: 3136302e32302e3132342e302f32342d3234203d3e20313532373830.roa (hash: FVP2US2KHUP1OZkRW6LNBrYfqVg0Zj0UfccY8UblEsw=) 3: 3136302e32302e3132352e302f32342d3234203d3e20313532373830.roa (hash: E1+7D4tNcCRDkcP3qmZK/bR+JhJZ6mmoU1gs2WuZdOo=) 4: 3136302e32302e3132342e302f32332d3233203d3e20313532373830.roa (hash: 23fAd0P4P+mgKNL3oa2CrgF3dqXD3ZtfsTB8p14sYV4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/511F1AA1B492F6794EF165F62B075919F2B16E44.crl rsync://rpki-rsync.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/511F1AA1B492F6794EF165F62B075919F2B16E44.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/511F1AA1B492F6794EF165F62B075919F2B16E44.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:41:a3:0e:d3:18:23:8f:9f:90:c0:8a:30:c5:f0:39:0c:83:4a:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=511F1AA1B492F6794EF165F62B075919F2B16E44 Validity Not Before: Sep 25 14:02:48 2026 GMT Not After : Sep 26 17:24:48 2026 GMT Subject: CN=68BFF251F788CF4736F95790803C1400F756FC4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:09:df:c1:b4:cf:87:7e:4c:64:7e:82:41:4e: 7d:d3:da:a4:95:18:63:c7:b0:0e:a3:80:a8:a2:f8: 78:db:bf:e6:b5:15:11:d1:48:b9:65:49:36:02:b3: 87:22:d0:c8:e5:f1:c5:22:b6:73:6d:31:87:3a:01: 48:9f:58:eb:8f:f0:c0:59:d9:5a:62:4d:d8:22:03: e2:ae:1b:e5:2f:92:08:26:68:fd:f2:37:bb:c7:eb: f4:6f:d7:e1:ec:d0:3b:af:1e:b4:4c:80:23:7f:6f: d3:6d:71:b0:22:2e:e9:f2:70:b3:d0:68:46:59:e4: 7d:54:cc:32:ea:3a:b2:09:4e:97:95:10:06:e1:7d: da:00:fa:5e:5b:b0:d7:03:c7:51:63:e5:60:c3:16: 5a:e8:c4:eb:96:0f:f2:3a:72:d7:c6:d7:ee:6b:f4: 0f:d5:90:75:85:81:9b:97:6c:bd:fc:28:b9:db:68: 87:dd:9a:fd:7e:4b:ea:df:75:50:7c:0a:d9:bc:da: a5:9b:65:82:15:15:e1:e1:7e:f4:c8:e0:bc:72:da: d2:b8:55:08:9e:b9:a7:0b:d4:e0:95:9c:cc:d3:ed: 3f:d6:37:d3:14:3e:e0:93:a4:a9:a4:33:29:ae:20: 67:6c:0d:59:fd:e6:63:63:d8:da:29:47:4a:a1:44: 5e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:BF:F2:51:F7:88:CF:47:36:F9:57:90:80:3C:14:00:F7:56:FC:4D X509v3 Authority Key Identifier: keyid:51:1F:1A:A1:B4:92:F6:79:4E:F1:65:F6:2B:07:59:19:F2:B1:6E:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/511F1AA1B492F6794EF165F62B075919F2B16E44.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/511F1AA1B492F6794EF165F62B075919F2B16E44.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/511F1AA1B492F6794EF165F62B075919F2B16E44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:0f:cf:e4:79:f5:c7:f7:22:ac:59:ab:bc:b6:d4:30:e8:52: db:86:c4:85:05:9b:7b:5c:b9:3b:c9:0f:6f:e5:7e:a5:2f:d1: d7:fd:3d:91:21:2e:8e:02:4d:48:99:1f:5c:b9:fe:37:12:78: 7e:b5:e9:70:d4:05:b4:0a:6e:a6:e9:00:a9:d6:a1:37:d2:03: 5d:4c:80:31:59:35:9c:b9:56:9c:ef:f0:91:b6:f1:02:39:67: 2d:47:d5:56:da:8f:92:16:da:c7:3e:1a:c5:70:9a:7c:4d:43: 18:01:5f:b4:66:16:1c:99:64:68:0b:8b:2a:9e:3e:97:23:c9: 5d:de:13:46:7f:44:de:be:76:7a:75:79:cb:a8:12:a8:d7:e8: dd:c9:00:86:15:92:8f:76:4b:e8:6a:84:15:6b:fb:8b:8f:24: e2:8d:ae:1a:e3:45:d1:b0:b8:98:50:39:9e:a8:29:2b:e1:01: f6:a2:7e:ce:e6:63:63:c1:cb:07:9a:7c:39:54:07:d1:87:b4: 8c:61:db:85:84:34:a8:e5:19:7f:e1:3c:04:cc:97:49:1e:b2: 3b:85:4b:8f:95:f0:0a:e2:61:b8:80:df:5b:13:c5:4b:37:e2: 60:49:43:d1:01:67:f2:98:ce:61:4b:0c:22:51:c8:46:bd:1d: 67:59:8f:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdkGjDtMYI4+fkMCKMMXwOQyDSvwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTExRjFBQTFCNDkyRjY3OTRFRjE2NUY2MkIwNzU5MTlG MkIxNkU0NDAeFw0yNjA5MjUxNDAyNDhaFw0yNjA5MjYxNzI0NDhaMDMxMTAvBgNV BAMTKDY4QkZGMjUxRjc4OENGNDczNkY5NTc5MDgwM0MxNDAwRjc1NkZDNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCCd/BtM+HfkxkfoJBTn3T2qSV GGPHsA6jgKii+Hjbv+a1FRHRSLllSTYCs4ci0Mjl8cUitnNtMYc6AUifWOuP8MBZ 2VpiTdgiA+KuG+UvkggmaP3yN7vH6/Rv1+Hs0DuvHrRMgCN/b9NtcbAiLunycLPQ aEZZ5H1UzDLqOrIJTpeVEAbhfdoA+l5bsNcDx1Fj5WDDFlroxOuWD/I6ctfG1+5r 9A/VkHWFgZuXbL38KLnbaIfdmv1+S+rfdVB8Ctm82qWbZYIVFeHhfvTI4Lxy2tK4 VQieuacL1OCVnMzT7T/WN9MUPuCTpKmkMymuIGdsDVn95mNj2NopR0qhRF4vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaL/yUfeIz0c2+VeQgDwUAPdW/E0wHwYDVR0j BBgwFoAUUR8aobSS9nlO8WX2KwdZGfKxbkQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTM1NzkyMWQtZWUxOC00MzVjLThiNmUtZWJhMjI0MWI4M2FiLzAvNTExRjFBQTFC NDkyRjY3OTRFRjE2NUY2MkIwNzU5MTlGMkIxNkU0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81MTFGMUFBMUI0OTJGNjc5NEVGMTY1RjYyQjA3NTkxOUYyQjE2 RTQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTM1NzkyMWQtZWUxOC00MzVjLThi NmUtZWJhMjI0MWI4M2FiLzAvNTExRjFBQTFCNDkyRjY3OTRFRjE2NUY2MkIwNzU5 MTlGMkIxNkU0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC4Pz+R59cf3IqxZq7y21DDoUtuGxIUFm3tc uTvJD2/lfqUv0df9PZEhLo4CTUiZH1y5/jcSeH616XDUBbQKbqbpAKnWoTfSA11M gDFZNZy5Vpzv8JG28QI5Zy1H1Vbaj5IW2sc+GsVwmnxNQxgBX7RmFhyZZGgLiyqe PpcjyV3eE0Z/RN6+dnp1ecuoEqjX6N3JAIYVko92S+hqhBVr+4uPJOKNrhrjRdGw uJhQOZ6oKSvhAfaifs7mY2PByweafDlUB9GHtIxh24WENKjlGX/hPATMl0kesjuF S4+V8AriYbiA31sTxUs34mBJQ9EBZ/KYzmFLDCJRyEa9HWdZj8A= -----END CERTIFICATE-----Generated at Fri Sep 25 23:34:12 2026 by rpki-client