$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.mft File: C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.mft (raw, json) Hash identifier: JQ9H6TqEn04YVSbtBK/TyHxzyA+EI96Zk1Nr5ATYdIE= Subject key identifier: 8E:65:CA:C7:38:2F:B0:A6:33:82:42:78:E9:C5:4C:9D:45:EF:BA:78 Authority key identifier: C2:04:09:5D:0D:FA:29:CA:02:22:F4:C1:BE:5E:6A:9C:7F:E5:B5:CC Certificate issuer: /CN=C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC Certificate serial: 5DF7D962BAD70E9009215EB05B46EC8FF4C71EB1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 08:41:26 +0000 Manifest this update: Fri 25 Sep 2026 08:36:26 +0000 Manifest next update: Sat 26 Sep 2026 11:21:26 +0000 Files and hashes: 1: 3135372e31302e3138312e302f32342d3234203d3e20313532333439.roa (hash: R6QK9+MoLmzsMre1Y9YXqP/L5rUmbxfvyX6TdZV81Yk=) 2: C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.crl (hash: XZ38Lg+f6nQ3loeuBhXxAJsMIEJF6mRoSYalDiBTuVQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.crl rsync://rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 08:55:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:f7:d9:62:ba:d7:0e:90:09:21:5e:b0:5b:46:ec:8f:f4:c7:1e:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC Validity Not Before: Sep 25 08:36:26 2026 GMT Not After : Sep 26 11:21:26 2026 GMT Subject: CN=8E65CAC7382FB0A633824278E9C54C9D45EFBA78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:30:1c:5a:fc:82:5d:60:f7:1f:38:82:3e:fc: 5d:95:7e:15:09:69:20:af:ae:1e:a4:0d:34:6f:56: 33:99:8c:2e:08:9b:fe:2c:84:98:4f:69:e1:5a:70: 34:60:4b:fb:97:34:84:5c:ae:e3:f2:9d:23:ba:16: 55:ee:00:b6:fa:28:48:5d:8e:45:25:da:7d:1e:81: 46:b9:0b:69:d8:71:54:6c:af:af:3c:44:fd:5d:d8: ae:27:bc:7d:d5:31:1d:e4:4e:72:43:a5:3a:41:d2: dd:db:cb:d9:40:3c:51:06:26:d7:0a:73:b2:61:05: e2:df:e8:67:d7:b9:61:1a:99:11:e4:01:1b:02:9b: ef:a4:d2:9f:fd:f6:ce:7f:23:f0:99:40:21:20:66: 20:c1:0b:96:ce:01:c9:29:dd:d3:aa:bc:19:79:e7: 48:5d:67:ef:75:f3:18:d9:59:2e:20:5d:3d:59:2f: e5:a2:bf:20:c6:b5:b5:84:49:88:4a:5f:e3:e1:6b: 4f:cd:e9:b6:9e:1c:e4:13:f2:a2:71:fd:b8:df:49: c8:fa:2c:62:76:cd:20:27:f3:aa:72:44:ac:c3:29: a0:5c:ed:29:14:e6:9e:2b:00:be:47:f1:d4:3b:39: 4a:41:c5:c5:c8:d1:1a:a4:22:c4:bc:71:63:56:d4: d7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:65:CA:C7:38:2F:B0:A6:33:82:42:78:E9:C5:4C:9D:45:EF:BA:78 X509v3 Authority Key Identifier: keyid:C2:04:09:5D:0D:FA:29:CA:02:22:F4:C1:BE:5E:6A:9C:7F:E5:B5:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:4c:65:b5:e3:79:14:9e:93:56:c4:f4:a5:3d:ee:ea:19:37: 33:a2:da:25:ec:8c:5e:46:9d:41:d7:b2:5a:2c:c9:80:16:8b: 8e:9c:71:19:1f:bf:ae:3b:f9:97:5a:af:a3:44:e7:93:75:40: 97:1f:35:55:b6:5a:4b:cc:e1:da:52:db:cc:60:e1:f3:15:77: ca:2b:3c:3e:f7:87:10:de:b6:4f:ad:26:ac:ed:33:bd:d4:88: c9:4e:45:8c:ba:49:c1:7c:c0:58:87:de:c7:e2:73:f4:ad:ee: 47:91:2d:92:c0:8b:73:7f:f7:d0:ed:21:d8:d3:8b:7d:0b:5e: 70:11:8d:aa:d4:3c:6e:2c:de:55:c7:58:2b:42:cf:01:a2:bf: d6:56:68:65:8b:06:7c:68:67:e5:55:3c:0c:6e:43:25:df:81: 66:cf:a5:47:b5:bb:24:72:3b:c1:33:02:c6:83:eb:01:fe:c3: 53:e2:39:34:0d:e7:1f:ff:de:55:54:fc:31:42:8f:d5:76:f1: e8:ec:67:2d:46:7a:fd:cd:5e:9d:1b:fd:9e:85:e1:8a:b1:40: 8a:55:10:dd:cd:5c:07:55:6e:1f:91:43:fc:6d:1b:00:56:42: 8a:44:79:83:cc:c4:30:1f:bb:e8:07:56:87:b6:ed:2c:1e:e3: 4e:59:40:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXffZYrrXDpAJIV6wW0bsj/THHrEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIwNDA5NUQwREZBMjlDQTAyMjJGNEMxQkU1RTZBOUM3 RkU1QjVDQzAeFw0yNjA5MjUwODM2MjZaFw0yNjA5MjYxMTIxMjZaMDMxMTAvBgNV BAMTKDhFNjVDQUM3MzgyRkIwQTYzMzgyNDI3OEU5QzU0QzlENDVFRkJBNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKMBxa/IJdYPcfOII+/F2VfhUJ aSCvrh6kDTRvVjOZjC4Im/4shJhPaeFacDRgS/uXNIRcruPynSO6FlXuALb6KEhd jkUl2n0egUa5C2nYcVRsr688RP1d2K4nvH3VMR3kTnJDpTpB0t3by9lAPFEGJtcK c7JhBeLf6GfXuWEamRHkARsCm++k0p/99s5/I/CZQCEgZiDBC5bOAckp3dOqvBl5 50hdZ+918xjZWS4gXT1ZL+WivyDGtbWESYhKX+Pha0/N6baeHOQT8qJx/bjfScj6 LGJ2zSAn86pyRKzDKaBc7SkU5p4rAL5H8dQ7OUpBxcXI0RqkIsS8cWNW1NfpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjmXKxzgvsKYzgkJ46cVMnUXvungwHwYDVR0j BBgwFoAUwgQJXQ36KcoCIvTBvl5qnH/ltcwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjkwZDAyNjUtMmNjMS00NjNkLTk0OGItY2RlZDEzYTIwMjk1LzAvQzIwNDA5NUQw REZBMjlDQTAyMjJGNEMxQkU1RTZBOUM3RkU1QjVDQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DMjA0MDk1RDBERkEyOUNBMDIyMkY0QzFCRTVFNkE5QzdGRTVC NUNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjkwZDAyNjUtMmNjMS00NjNkLTk0 OGItY2RlZDEzYTIwMjk1LzAvQzIwNDA5NUQwREZBMjlDQTAyMjJGNEMxQkU1RTZB OUM3RkU1QjVDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHNMZbXjeRSek1bE9KU97uoZNzOi2iXsjF5G nUHXslosyYAWi46ccRkfv647+Zdar6NE55N1QJcfNVW2WkvM4dpS28xg4fMVd8or PD73hxDetk+tJqztM73UiMlORYy6ScF8wFiH3sfic/St7keRLZLAi3N/99DtIdjT i30LXnARjarUPG4s3lXHWCtCzwGiv9ZWaGWLBnxoZ+VVPAxuQyXfgWbPpUe1uyRy O8EzAsaD6wH+w1PiOTQN5x//3lVU/DFCj9V28ejsZy1Gev3NXp0b/Z6F4YqxQIpV EN3NXAdVbh+RQ/xtGwBWQopEeYPMxDAfu+gHVoe27Swe405ZQGE= -----END CERTIFICATE-----Generated at Fri Sep 25 11:03:47 2026 by rpki-client