$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/8369683C9C4A77F4B5AB05185F01C3C810502D34.mft File: 8369683C9C4A77F4B5AB05185F01C3C810502D34.mft (raw, json) Hash identifier: B9JDQ1x13R1zkD6JaPG1SU37PXDz+MtLXPBCn5NgVmU= Subject key identifier: AB:AC:B1:1D:76:AD:45:CC:03:4B:CF:1F:61:97:07:0F:50:75:50:9F Authority key identifier: 83:69:68:3C:9C:4A:77:F4:B5:AB:05:18:5F:01:C3:C8:10:50:2D:34 Certificate issuer: /CN=8369683C9C4A77F4B5AB05185F01C3C810502D34 Certificate serial: 2CC2BDB4A63225BE576FAE00FC3FA8B9A84D0F18 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8369683C9C4A77F4B5AB05185F01C3C810502D34.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/8369683C9C4A77F4B5AB05185F01C3C810502D34.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 00:26:13 +0000 Manifest this update: Thu 24 Sep 2026 00:21:13 +0000 Manifest next update: Fri 25 Sep 2026 04:23:13 +0000 Files and hashes: 1: 3130332e3136322e36322e302f32332d3234203d3e20313431363432.roa (hash: fnlL5zMOPvGAUBk55QrgutXcZXU5BAm+3sV40oQEUJw=) 2: 8369683C9C4A77F4B5AB05185F01C3C810502D34.crl (hash: 3f3BtlYfwpJx7PdAH1yWeILs3oPBUNeUfSW9sCnuhLc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/8369683C9C4A77F4B5AB05185F01C3C810502D34.crl rsync://rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/8369683C9C4A77F4B5AB05185F01C3C810502D34.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8369683C9C4A77F4B5AB05185F01C3C810502D34.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 04:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:c2:bd:b4:a6:32:25:be:57:6f:ae:00:fc:3f:a8:b9:a8:4d:0f:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8369683C9C4A77F4B5AB05185F01C3C810502D34 Validity Not Before: Sep 24 00:21:13 2026 GMT Not After : Sep 25 04:23:13 2026 GMT Subject: CN=ABACB11D76AD45CC034BCF1F6197070F5075509F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:8a:3c:44:7e:c4:be:d7:cb:8f:7a:e6:98:20: 64:bb:e8:f4:4a:4e:21:5d:f9:63:e5:6a:f3:69:1b: 8c:d0:0d:5c:00:0e:f4:cb:38:35:82:47:09:d8:ba: b4:14:0f:0e:21:cd:88:fe:8a:35:9b:ab:8a:4a:b3: ca:b3:ad:a9:25:ae:b3:41:3d:24:ff:df:83:6a:c7: b5:0d:79:39:b4:9b:66:0d:96:10:9d:df:ff:4c:8a: e9:56:b7:4c:72:26:b3:db:65:bc:62:1d:b2:a0:5f: 16:98:81:17:1f:1c:6d:5b:06:18:c5:aa:6c:6d:4e: 30:04:f3:07:e8:15:b1:d8:f7:84:43:16:97:7f:d1: 9d:bd:02:b4:39:a9:c0:2d:80:05:9c:ef:36:1f:11: 27:d6:5c:26:32:02:42:b9:75:14:4d:80:99:ae:bf: ed:68:7d:79:ca:17:a2:d5:dd:8a:fc:c2:4e:b3:62: 28:18:8a:b0:b9:98:21:8b:ae:b0:b9:c4:61:8a:1f: 4e:e7:0f:b6:8a:f6:53:65:ad:de:15:4e:cb:78:a9: 56:bb:9d:14:6e:26:51:8f:87:f2:a1:29:22:c2:92: c3:44:e0:c7:8e:80:b5:4f:53:2a:86:b7:ce:2e:df: b8:dd:53:8d:40:c5:03:d8:79:9c:83:8c:52:8e:82: 3a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:AC:B1:1D:76:AD:45:CC:03:4B:CF:1F:61:97:07:0F:50:75:50:9F X509v3 Authority Key Identifier: keyid:83:69:68:3C:9C:4A:77:F4:B5:AB:05:18:5F:01:C3:C8:10:50:2D:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/8369683C9C4A77F4B5AB05185F01C3C810502D34.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8369683C9C4A77F4B5AB05185F01C3C810502D34.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/8369683C9C4A77F4B5AB05185F01C3C810502D34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:64:30:de:47:cc:f2:02:a8:2f:25:a1:04:e6:cc:df:c9:8c: 19:4b:e9:3d:6d:db:b8:5f:d4:bc:54:b0:1d:5a:67:2e:5f:91: 03:5f:71:4e:83:4e:1a:56:77:ab:46:75:2a:77:2b:ac:0d:9c: 38:30:8f:ce:43:c1:e1:ff:2b:4b:18:46:c8:ef:cd:ca:76:4b: 79:14:53:f7:dd:27:ca:e7:cc:67:a1:f5:d4:b3:c7:b4:eb:ef: e6:f1:87:d9:a5:f7:bb:46:38:01:2a:57:47:db:29:da:00:15: 1e:4c:fe:e4:6e:73:3d:42:52:eb:0e:68:a8:37:f6:ce:73:91: 28:b8:0a:af:e0:f0:b7:31:5f:da:a4:9e:f3:f3:ea:58:f8:72: c5:ee:01:92:f8:97:2c:cd:9e:02:2f:68:ff:30:0d:db:18:b9: dd:d7:a4:66:43:17:74:1d:33:15:52:7e:f4:ee:4d:6f:15:17: 9d:1e:d9:09:6f:75:7c:fc:9b:40:45:df:db:5c:5c:42:41:46: 4a:a6:cc:e6:4f:be:75:4c:fc:18:fd:e7:04:15:39:86:5b:8e: 54:0c:2c:fe:82:6c:6b:a2:22:b3:73:90:cc:66:1c:93:3a:44: 2b:01:f2:aa:34:cf:be:dc:b5:0a:0d:8c:d8:35:5f:d8:a1:77: 38:2a:ed:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULMK9tKYyJb5Xb64A/D+ouahNDxgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODM2OTY4M0M5QzRBNzdGNEI1QUIwNTE4NUYwMUMzQzgx MDUwMkQzNDAeFw0yNjA5MjQwMDIxMTNaFw0yNjA5MjUwNDIzMTNaMDMxMTAvBgNV BAMTKEFCQUNCMTFENzZBRDQ1Q0MwMzRCQ0YxRjYxOTcwNzBGNTA3NTUwOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfijxEfsS+18uPeuaYIGS76PRK TiFd+WPlavNpG4zQDVwADvTLODWCRwnYurQUDw4hzYj+ijWbq4pKs8qzraklrrNB PST/34Nqx7UNeTm0m2YNlhCd3/9MiulWt0xyJrPbZbxiHbKgXxaYgRcfHG1bBhjF qmxtTjAE8wfoFbHY94RDFpd/0Z29ArQ5qcAtgAWc7zYfESfWXCYyAkK5dRRNgJmu v+1ofXnKF6LV3Yr8wk6zYigYirC5mCGLrrC5xGGKH07nD7aK9lNlrd4VTst4qVa7 nRRuJlGPh/KhKSLCksNE4MeOgLVPUyqGt84u37jdU41AxQPYeZyDjFKOgjoDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq6yxHXatRcwDS88fYZcHD1B1UJ8wHwYDVR0j BBgwFoAUg2loPJxKd/S1qwUYXwHDyBBQLTQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTFjYTk0MzUtNzIyNC00N2E4LTk1MWItYzFiNDJlYjBlMmY3LzAvODM2OTY4M0M5 QzRBNzdGNEI1QUIwNTE4NUYwMUMzQzgxMDUwMkQzNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MzY5NjgzQzlDNEE3N0Y0QjVBQjA1MTg1RjAxQzNDODEwNTAy RDM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTFjYTk0MzUtNzIyNC00N2E4LTk1 MWItYzFiNDJlYjBlMmY3LzAvODM2OTY4M0M5QzRBNzdGNEI1QUIwNTE4NUYwMUMz QzgxMDUwMkQzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACxkMN5HzPICqC8loQTmzN/JjBlL6T1t27hf 1LxUsB1aZy5fkQNfcU6DThpWd6tGdSp3K6wNnDgwj85DweH/K0sYRsjvzcp2S3kU U/fdJ8rnzGeh9dSzx7Tr7+bxh9ml97tGOAEqV0fbKdoAFR5M/uRucz1CUusOaKg3 9s5zkSi4Cq/g8LcxX9qknvPz6lj4csXuAZL4lyzNngIvaP8wDdsYud3XpGZDF3Qd MxVSfvTuTW8VF50e2QlvdXz8m0BF39tcXEJBRkqmzOZPvnVM/Bj95wQVOYZbjlQM LP6CbGuiIrNzkMxmHJM6RCsB8qo0z77ctQoNjNg1X9ihdzgq7RM= -----END CERTIFICATE-----Generated at Thu Sep 24 14:14:44 2026 by rpki-client