$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/84D8D73F40AAC54FA5471C49D1B0B26082108594.mft File: 84D8D73F40AAC54FA5471C49D1B0B26082108594.mft (raw, json) Hash identifier: KbtZSyGkLBIv3w6YkGRuuuOGKMBU2BY6e3Abxil/U5U= Subject key identifier: 3C:D4:71:90:AC:CE:A4:70:DD:39:1A:67:55:1D:0F:7F:A3:87:C8:F5 Authority key identifier: 84:D8:D7:3F:40:AA:C5:4F:A5:47:1C:49:D1:B0:B2:60:82:10:85:94 Certificate issuer: /CN=84D8D73F40AAC54FA5471C49D1B0B26082108594 Certificate serial: 05F5A956D7982CD51128E84005F6EFE12B257F03 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84D8D73F40AAC54FA5471C49D1B0B26082108594.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/84D8D73F40AAC54FA5471C49D1B0B26082108594.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 18:18:00 +0000 Manifest this update: Fri 25 Sep 2026 18:13:00 +0000 Manifest next update: Sat 26 Sep 2026 22:09:00 +0000 Files and hashes: 1: 84D8D73F40AAC54FA5471C49D1B0B26082108594.crl (hash: f09jFq4gRMQvgOqYk5hsp+BWH+Pv2xEXpUoj0p+mbdw=) 2: 3130332e3139372e3138382e302f32322d3234203d3e20313333383030.roa (hash: ZTH11IqUBjUloy94Wjo3h3nzkEwNWGDprNQQAIlXj6U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/84D8D73F40AAC54FA5471C49D1B0B26082108594.crl rsync://rpki-rsync.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/84D8D73F40AAC54FA5471C49D1B0B26082108594.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84D8D73F40AAC54FA5471C49D1B0B26082108594.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:f5:a9:56:d7:98:2c:d5:11:28:e8:40:05:f6:ef:e1:2b:25:7f:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84D8D73F40AAC54FA5471C49D1B0B26082108594 Validity Not Before: Sep 25 18:13:00 2026 GMT Not After : Sep 26 22:09:00 2026 GMT Subject: CN=3CD47190ACCEA470DD391A67551D0F7FA387C8F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5a:65:ca:9a:99:39:e9:b0:80:70:2d:87:e8: b8:51:cf:69:5d:8a:86:fb:ce:06:72:3f:15:39:9e: f9:d9:4f:0f:2a:68:4d:27:e7:1f:5c:53:ec:8e:a4: a9:d9:70:54:ac:1a:f0:db:b0:40:8e:81:0e:34:e1: 34:f2:9e:e6:5f:74:39:91:0e:23:c5:04:07:8f:a9: 40:b3:19:fe:fe:39:73:3a:f1:e4:f6:63:1a:ec:16: e2:67:9f:5b:e3:6c:8e:89:48:44:b2:ce:6c:33:13: 89:f1:ca:a4:00:67:71:87:13:d3:f0:ba:62:16:6f: d6:53:76:cf:6d:c8:68:53:10:bf:5e:30:5b:32:77: 7b:70:22:46:1a:ff:f6:6e:b4:49:10:29:1f:cb:71: 09:4a:97:b8:91:9b:b1:8e:f1:e6:e5:91:f3:16:55: 22:39:af:ac:66:b3:42:30:cf:82:82:e8:10:e7:e0: c3:f5:ef:72:9d:6a:11:43:78:3e:97:6a:ce:c4:c8: d4:64:76:56:22:72:ab:c7:91:ca:b3:47:3e:74:a4: c2:3b:52:c9:f4:aa:da:27:48:0b:46:cc:ef:e9:bd: 98:fb:62:6d:87:dc:be:7b:68:9a:da:70:67:68:7f: 25:ca:a9:c3:d9:32:c7:4a:30:ad:28:37:64:e4:2b: fc:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D4:71:90:AC:CE:A4:70:DD:39:1A:67:55:1D:0F:7F:A3:87:C8:F5 X509v3 Authority Key Identifier: keyid:84:D8:D7:3F:40:AA:C5:4F:A5:47:1C:49:D1:B0:B2:60:82:10:85:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/84D8D73F40AAC54FA5471C49D1B0B26082108594.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84D8D73F40AAC54FA5471C49D1B0B26082108594.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/84D8D73F40AAC54FA5471C49D1B0B26082108594.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:d1:a4:29:be:0a:b8:4e:7f:e7:ea:c2:0d:05:96:7f:fb:cb: 25:47:1a:fc:44:dc:b0:95:72:34:36:ab:05:6a:0e:81:f0:6c: 70:f4:28:c6:23:3e:7d:ab:f5:fc:c3:f7:26:ec:f6:52:f9:f8: f8:fd:c1:8b:23:5b:4c:af:ed:20:81:0d:dd:07:9b:b1:d0:e5: a2:27:cc:87:a3:48:61:d6:ff:58:4c:17:7c:cc:46:db:44:4d: 2c:2b:e5:45:dd:a6:f1:12:5f:9b:67:ca:f1:12:44:de:9f:95: f6:d2:4c:55:a8:73:b1:e3:14:65:f1:04:b9:ae:0a:30:6c:3e: 5e:b6:30:43:57:58:5f:5d:e4:d2:24:3a:11:b0:6f:82:f2:26: 46:02:d4:b4:c1:a7:fd:26:df:70:6e:a0:de:84:4c:34:a5:48: 69:eb:23:0d:6a:90:a2:47:54:f5:b4:2f:d2:54:35:7d:5c:cf: 5c:72:e6:d6:04:fc:13:eb:6d:ef:7d:4e:89:dc:d9:30:90:54: c3:d1:ee:8c:d0:fb:27:74:05:73:5e:4a:ae:21:e3:70:e4:18: 9b:d9:30:d4:9f:44:3f:6a:bf:8a:35:85:31:b2:6e:b8:53:b8: 90:a4:72:60:6f:02:06:a3:d4:29:fc:fa:99:81:48:86:85:cf: 28:9c:bf:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBfWpVteYLNURKOhABfbv4SslfwMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODREOEQ3M0Y0MEFBQzU0RkE1NDcxQzQ5RDFCMEIyNjA4 MjEwODU5NDAeFw0yNjA5MjUxODEzMDBaFw0yNjA5MjYyMjA5MDBaMDMxMTAvBgNV BAMTKDNDRDQ3MTkwQUNDRUE0NzBERDM5MUE2NzU1MUQwRjdGQTM4N0M4RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8WmXKmpk56bCAcC2H6LhRz2ld iob7zgZyPxU5nvnZTw8qaE0n5x9cU+yOpKnZcFSsGvDbsECOgQ404TTynuZfdDmR DiPFBAePqUCzGf7+OXM68eT2YxrsFuJnn1vjbI6JSESyzmwzE4nxyqQAZ3GHE9Pw umIWb9ZTds9tyGhTEL9eMFsyd3twIkYa//ZutEkQKR/LcQlKl7iRm7GO8eblkfMW VSI5r6xms0Iwz4KC6BDn4MP173KdahFDeD6Xas7EyNRkdlYicqvHkcqzRz50pMI7 Usn0qtonSAtGzO/pvZj7Ym2H3L57aJracGdofyXKqcPZMsdKMK0oN2TkK/zRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPNRxkKzOpHDdORpnVR0Pf6OHyPUwHwYDVR0j BBgwFoAUhNjXP0CqxU+lRxxJ0bCyYIIQhZQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWM4MDQ2N2MtYWViMi00MDk1LThmNTQtODViOTA5MGQzOTA4LzAvODREOEQ3M0Y0 MEFBQzU0RkE1NDcxQzQ5RDFCMEIyNjA4MjEwODU5NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NEQ4RDczRjQwQUFDNTRGQTU0NzFDNDlEMUIwQjI2MDgyMTA4 NTk0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWM4MDQ2N2MtYWViMi00MDk1LThm NTQtODViOTA5MGQzOTA4LzAvODREOEQ3M0Y0MEFBQzU0RkE1NDcxQzQ5RDFCMEIy NjA4MjEwODU5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACvRpCm+CrhOf+fqwg0Fln/7yyVHGvxE3LCV cjQ2qwVqDoHwbHD0KMYjPn2r9fzD9ybs9lL5+Pj9wYsjW0yv7SCBDd0Hm7HQ5aIn zIejSGHW/1hMF3zMRttETSwr5UXdpvESX5tnyvESRN6flfbSTFWoc7HjFGXxBLmu CjBsPl62MENXWF9d5NIkOhGwb4LyJkYC1LTBp/0m33BuoN6ETDSlSGnrIw1qkKJH VPW0L9JUNX1cz1xy5tYE/BPrbe99Tonc2TCQVMPR7ozQ+yd0BXNeSq4h43DkGJvZ MNSfRD9qv4o1hTGybrhTuJCkcmBvAgaj1Cn8+pmBSIaFzyicvww= -----END CERTIFICATE-----Generated at Fri Sep 25 22:38:13 2026 by rpki-client