$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.mft File: CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.mft (raw, json) Hash identifier: CiuJfVIjvTaKC9utSsMigSP7ZrIzoZIgdBDDedCkMog= Subject key identifier: 75:53:F4:96:B9:17:2B:60:05:CD:B5:99:C1:FB:F0:E0:21:B2:E1:95 Authority key identifier: CD:0A:24:B4:D5:08:D4:3D:8C:25:BB:8E:C5:D4:4F:77:E1:3A:51:A6 Certificate issuer: /CN=CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6 Certificate serial: 6325D59C4A563C369FC5694A41FB7C2563AB8C76 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 05:48:01 +0000 Manifest this update: Thu 24 Sep 2026 05:43:01 +0000 Manifest next update: Fri 25 Sep 2026 06:48:01 +0000 Files and hashes: 1: 3130332e3138392e3136362e302f32332d3233203d3e20313439383835.roa (hash: Pb1HhX9vGzRzwD3eC7x1KFYFFDBS8WYJS934upf4BBQ=) 2: CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.crl (hash: 18mvt1bkB5KPNG2+EU9hwtERrusGaF3YFKUHka3E4BI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.crl rsync://rpki-rsync.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 06:48:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:25:d5:9c:4a:56:3c:36:9f:c5:69:4a:41:fb:7c:25:63:ab:8c:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6 Validity Not Before: Sep 24 05:43:01 2026 GMT Not After : Sep 25 06:48:01 2026 GMT Subject: CN=7553F496B9172B6005CDB599C1FBF0E021B2E195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:3e:30:6b:d3:dc:4b:18:df:d7:63:24:b3:66: 13:83:2e:10:b2:21:cc:72:92:36:0a:ab:06:6a:56: 6b:52:da:1f:ea:01:41:8f:55:e4:8f:17:c6:44:8a: 48:2f:67:a1:44:d5:1a:cf:5e:32:dd:e3:4b:19:7e: d2:35:05:72:a3:6e:fc:ca:63:0a:c9:fb:01:69:05: 34:5d:87:0b:4e:86:9a:f2:2f:09:5b:9e:bb:b7:af: fe:34:e0:cf:22:de:10:91:87:ee:77:34:e4:54:61: b3:de:ad:5c:f8:f3:29:2a:0e:c0:70:41:51:98:0e: 7e:bf:33:bd:50:8a:6e:f0:ff:3e:1d:90:eb:9a:8a: af:52:d9:61:f6:85:a0:f6:9f:9b:49:97:c6:3e:37: e9:d3:4d:27:c1:02:8f:e7:fc:41:75:1d:7d:43:a0: 1d:2e:c7:cd:59:20:2a:5e:77:af:ae:7f:0c:7d:e0: 0e:f7:4e:0c:ce:f7:d8:eb:bd:5e:82:f7:dd:90:c7: 94:99:84:74:b5:c2:80:6f:fe:4a:4f:5b:d1:d5:2c: 0a:7f:14:56:d7:c2:41:94:45:36:91:f3:ed:44:ed: 53:ad:e6:07:f0:52:01:8d:a5:2a:74:3a:17:18:82: 80:07:a5:e2:ea:b5:0a:8c:22:43:42:12:63:aa:bf: 94:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:53:F4:96:B9:17:2B:60:05:CD:B5:99:C1:FB:F0:E0:21:B2:E1:95 X509v3 Authority Key Identifier: keyid:CD:0A:24:B4:D5:08:D4:3D:8C:25:BB:8E:C5:D4:4F:77:E1:3A:51:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:f7:c9:71:0c:e3:f8:6d:07:39:3e:da:83:08:bf:22:4a:e0: 51:e5:41:19:e4:7d:2f:30:62:ab:aa:f7:6c:be:58:e7:9f:f5: 49:c3:1d:02:4d:c9:18:13:b4:8c:86:b5:41:49:a5:11:5e:ed: 8e:e0:98:ec:fb:9f:94:98:13:12:86:f9:c3:2a:c9:77:a8:23: a6:e5:ab:c2:da:23:60:b7:0e:63:c1:f9:a7:a2:88:e2:1c:ac: b2:41:23:5f:16:18:79:8b:02:18:60:8a:f1:de:97:b0:cc:63: bf:f9:6a:3a:8c:e1:65:f2:aa:4c:69:bc:9c:74:3a:7f:d2:5d: 82:e6:64:0d:b5:33:c4:dc:43:81:f8:08:62:49:fb:05:ce:2d: b3:38:fd:e4:13:c7:2b:e0:03:38:41:ae:47:b3:2c:d8:27:b8: 47:fc:fc:23:6a:01:9b:11:80:4d:f5:eb:79:a4:cd:15:61:74: 3e:3e:7b:a8:52:d3:96:2d:0d:67:77:1f:53:67:f4:cc:af:58: 1c:a8:97:25:36:46:db:d0:09:6e:00:b5:78:3e:bd:0c:5f:65: 73:22:8a:10:6f:a0:2f:90:e4:b3:a6:dc:78:b0:2e:7d:81:c5: 4b:d3:fd:d5:cf:0d:a9:15:4a:4e:7a:1b:0d:6b:f6:50:10:c9: cf:2a:f8:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYyXVnEpWPDafxWlKQft8JWOrjHYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QwQTI0QjRENTA4RDQzRDhDMjVCQjhFQzVENDRGNzdF MTNBNTFBNjAeFw0yNjA5MjQwNTQzMDFaFw0yNjA5MjUwNjQ4MDFaMDMxMTAvBgNV BAMTKDc1NTNGNDk2QjkxNzJCNjAwNUNEQjU5OUMxRkJGMEUwMjFCMkUxOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGPjBr09xLGN/XYySzZhODLhCy IcxykjYKqwZqVmtS2h/qAUGPVeSPF8ZEikgvZ6FE1RrPXjLd40sZftI1BXKjbvzK YwrJ+wFpBTRdhwtOhpryLwlbnru3r/404M8i3hCRh+53NORUYbPerVz48ykqDsBw QVGYDn6/M71Qim7w/z4dkOuaiq9S2WH2haD2n5tJl8Y+N+nTTSfBAo/n/EF1HX1D oB0ux81ZICped6+ufwx94A73TgzO99jrvV6C992Qx5SZhHS1woBv/kpPW9HVLAp/ FFbXwkGURTaR8+1E7VOt5gfwUgGNpSp0OhcYgoAHpeLqtQqMIkNCEmOqv5QfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdVP0lrkXK2AFzbWZwfvw4CGy4ZUwHwYDVR0j BBgwFoAUzQoktNUI1D2MJbuOxdRPd+E6UaYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWUzMGFjNjQtMGYxMy00MTYyLTk2OGYtYWZlNWNjNzE0Y2Y2LzAvQ0QwQTI0QjRE NTA4RDQzRDhDMjVCQjhFQzVENDRGNzdFMTNBNTFBNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRDBBMjRCNEQ1MDhENDNEOEMyNUJCOEVDNUQ0NEY3N0UxM0E1 MUE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWUzMGFjNjQtMGYxMy00MTYyLTk2 OGYtYWZlNWNjNzE0Y2Y2LzAvQ0QwQTI0QjRENTA4RDQzRDhDMjVCQjhFQzVENDRG NzdFMTNBNTFBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALj3yXEM4/htBzk+2oMIvyJK4FHlQRnkfS8w Yquq92y+WOef9UnDHQJNyRgTtIyGtUFJpRFe7Y7gmOz7n5SYExKG+cMqyXeoI6bl q8LaI2C3DmPB+aeiiOIcrLJBI18WGHmLAhhgivHel7DMY7/5ajqM4WXyqkxpvJx0 On/SXYLmZA21M8TcQ4H4CGJJ+wXOLbM4/eQTxyvgAzhBrkezLNgnuEf8/CNqAZsR gE3163mkzRVhdD4+e6hS05YtDWd3H1Nn9MyvWByolyU2RtvQCW4AtXg+vQxfZXMi ihBvoC+Q5LOm3HiwLn2BxUvT/dXPDakVSk56Gw1r9lAQyc8q+Go= -----END CERTIFICATE-----Generated at Thu Sep 24 20:38:44 2026 by rpki-client