$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.mft File: C685EF86C3EED3646B26DDA717952CDBC1AF938B.mft (raw, json) Hash identifier: bTLDQE0aMPxdRRbQDOFj0EjT64WRuJa5+zCAkBmRLP4= Subject key identifier: A2:3E:7D:02:3D:45:79:04:E3:D3:C4:CC:C4:12:0F:77:0F:7A:37:15 Authority key identifier: C6:85:EF:86:C3:EE:D3:64:6B:26:DD:A7:17:95:2C:DB:C1:AF:93:8B Certificate issuer: /CN=C685EF86C3EED3646B26DDA717952CDBC1AF938B Certificate serial: 4FF00B6DA3249E22ECD7085E076CC3D162A5C6B9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C685EF86C3EED3646B26DDA717952CDBC1AF938B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 13:02:14 +0000 Manifest this update: Wed 23 Sep 2026 12:57:14 +0000 Manifest next update: Thu 24 Sep 2026 15:42:14 +0000 Files and hashes: 1: 3130332e3136362e36362e302f32332d3234203d3e203137393935.roa (hash: /TEOvHICrNlzqHKdTSQimWH4eZASaMfqjyKyEfSs2B4=) 2: C685EF86C3EED3646B26DDA717952CDBC1AF938B.crl (hash: GHXwCkug3iGWOJxOZAP8UCpRQ7tphsUSGq97aDbIblc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.crl rsync://rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C685EF86C3EED3646B26DDA717952CDBC1AF938B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 15:42:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:f0:0b:6d:a3:24:9e:22:ec:d7:08:5e:07:6c:c3:d1:62:a5:c6:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C685EF86C3EED3646B26DDA717952CDBC1AF938B Validity Not Before: Sep 23 12:57:14 2026 GMT Not After : Sep 24 15:42:14 2026 GMT Subject: CN=A23E7D023D457904E3D3C4CCC4120F770F7A3715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9a:98:19:92:c3:f4:34:c4:91:73:90:5e:d0: af:b8:5f:55:d0:2f:b1:32:93:b2:c4:cf:ca:b0:33: 09:ef:08:d9:f3:5a:e0:f1:e4:19:2b:85:c4:cf:5f: b1:cb:ba:b4:85:f4:04:d4:65:41:d2:96:6e:50:af: f3:aa:0a:9b:46:18:e8:83:06:27:92:4e:05:90:dc: 91:46:bb:6c:bb:fd:aa:97:b0:74:58:6f:91:b5:2d: ae:cd:3d:01:02:08:ef:e9:79:d5:ae:0d:7c:49:9b: 6d:b2:bf:38:40:6c:d0:40:01:0d:bf:13:eb:c1:c9: bc:46:11:25:80:ca:8e:95:8a:57:4c:75:4f:f8:8b: 10:a3:87:07:f0:57:97:c2:d1:dc:eb:f3:ad:c2:09: b6:39:ae:76:75:4b:cb:b7:c6:b6:25:80:1b:3f:e1: ef:6e:13:84:10:84:90:c8:1e:63:b9:3b:7e:0c:6e: 75:36:7e:50:dd:05:e4:f1:90:ea:f0:51:00:41:f1: de:64:0b:e8:de:fd:e1:84:94:15:8c:3e:17:93:ce: cd:4b:38:ac:a0:a3:6d:6e:2a:74:b1:66:79:73:e8: 2e:6f:5e:b5:e6:6f:c6:43:3b:f6:9f:f0:24:cd:45: a9:df:23:22:42:fd:96:54:89:27:50:be:39:72:1f: 6f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:3E:7D:02:3D:45:79:04:E3:D3:C4:CC:C4:12:0F:77:0F:7A:37:15 X509v3 Authority Key Identifier: keyid:C6:85:EF:86:C3:EE:D3:64:6B:26:DD:A7:17:95:2C:DB:C1:AF:93:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C685EF86C3EED3646B26DDA717952CDBC1AF938B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:39:ae:3e:e6:f8:ef:59:0a:ff:7c:d7:df:77:48:9f:d6:7f: 74:e9:a9:ae:2b:a5:6f:75:6e:97:c3:30:4a:f9:b6:46:b7:34: cb:e8:04:ed:78:f8:f2:ae:43:fc:a0:d1:b6:e9:31:c1:3e:8b: 1d:d1:22:ec:b7:1b:f5:95:8c:65:4d:27:37:b5:59:4f:8c:6a: 26:c4:4f:58:e7:78:91:3b:15:5b:74:5b:60:f4:1a:28:13:76: b9:c8:3d:10:94:1d:6a:50:11:0e:6c:dc:fe:2a:a6:f6:23:4c: 25:32:3d:c6:12:fd:e0:68:32:b6:67:36:7c:dd:d2:26:52:0f: 4d:29:6e:4e:31:4a:ec:2f:7c:2d:01:7f:f3:15:07:b7:ce:13: 42:9d:88:40:39:00:9f:92:96:cb:42:36:fd:af:41:4a:07:12: e2:5d:a5:41:db:d1:f2:80:4a:d5:12:02:d1:6b:21:d2:5c:be: f3:cd:38:8b:fd:cc:71:b0:6f:be:ae:bb:50:32:19:1c:32:2f: 56:2a:eb:e7:b9:6a:f3:30:ee:ca:87:3a:e4:1a:3e:69:45:67: b1:c9:2f:8a:4c:c2:73:b4:ab:b2:4b:df:81:b0:e3:5b:43:27: 9b:0f:48:4c:98:f0:1f:30:53:33:5a:f6:ee:c4:9e:4b:98:15: 3f:52:8b:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT/ALbaMkniLs1wheB2zD0WKlxrkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzY4NUVGODZDM0VFRDM2NDZCMjZEREE3MTc5NTJDREJD MUFGOTM4QjAeFw0yNjA5MjMxMjU3MTRaFw0yNjA5MjQxNTQyMTRaMDMxMTAvBgNV BAMTKEEyM0U3RDAyM0Q0NTc5MDRFM0QzQzRDQ0M0MTIwRjc3MEY3QTM3MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOmpgZksP0NMSRc5Be0K+4X1XQ L7Eyk7LEz8qwMwnvCNnzWuDx5BkrhcTPX7HLurSF9ATUZUHSlm5Qr/OqCptGGOiD BieSTgWQ3JFGu2y7/aqXsHRYb5G1La7NPQECCO/pedWuDXxJm22yvzhAbNBAAQ2/ E+vBybxGESWAyo6VildMdU/4ixCjhwfwV5fC0dzr863CCbY5rnZ1S8u3xrYlgBs/ 4e9uE4QQhJDIHmO5O34MbnU2flDdBeTxkOrwUQBB8d5kC+je/eGElBWMPheTzs1L OKygo21uKnSxZnlz6C5vXrXmb8ZDO/af8CTNRanfIyJC/ZZUiSdQvjlyH28RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoj59Aj1FeQTj08TMxBIPdw96NxUwHwYDVR0j BBgwFoAUxoXvhsPu02RrJt2nF5Us28Gvk4swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTU3ZTViMGUtNTk2NC00NjNmLTgwNDEtMzM3ZjgwNTU2NDNjLzAvQzY4NUVGODZD M0VFRDM2NDZCMjZEREE3MTc5NTJDREJDMUFGOTM4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNjg1RUY4NkMzRUVEMzY0NkIyNkREQTcxNzk1MkNEQkMxQUY5 MzhCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTU3ZTViMGUtNTk2NC00NjNmLTgw NDEtMzM3ZjgwNTU2NDNjLzAvQzY4NUVGODZDM0VFRDM2NDZCMjZEREE3MTc5NTJD REJDMUFGOTM4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJM5rj7m+O9ZCv981993SJ/Wf3Tpqa4rpW91 bpfDMEr5tka3NMvoBO14+PKuQ/yg0bbpMcE+ix3RIuy3G/WVjGVNJze1WU+MaibE T1jneJE7FVt0W2D0GigTdrnIPRCUHWpQEQ5s3P4qpvYjTCUyPcYS/eBoMrZnNnzd 0iZSD00pbk4xSuwvfC0Bf/MVB7fOE0KdiEA5AJ+SlstCNv2vQUoHEuJdpUHb0fKA StUSAtFrIdJcvvPNOIv9zHGwb76uu1AyGRwyL1Yq6+e5avMw7sqHOuQaPmlFZ7HJ L4pMwnO0q7JL34Gw41tDJ5sPSEyY8B8wUzNa9u7EnkuYFT9Si0U= -----END CERTIFICATE-----Generated at Wed Sep 23 20:19:17 2026 by rpki-client