$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/C940C2C66C795EF89DE57AA820616ED8225890BC.mft File: C940C2C66C795EF89DE57AA820616ED8225890BC.mft (raw, json) Hash identifier: RDFJvrWiT6BI8NVr+bGrUMvt+MKErh7hXLBLFT9GSuc= Subject key identifier: E5:3E:26:6B:CF:AC:87:25:76:0D:EB:FF:CD:F5:61:E6:CB:24:26:C1 Authority key identifier: C9:40:C2:C6:6C:79:5E:F8:9D:E5:7A:A8:20:61:6E:D8:22:58:90:BC Certificate issuer: /CN=C940C2C66C795EF89DE57AA820616ED8225890BC Certificate serial: 188ADC07C14FDF97707D65994EC59C76EB0F21CD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C940C2C66C795EF89DE57AA820616ED8225890BC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/C940C2C66C795EF89DE57AA820616ED8225890BC.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 04:56:46 +0000 Manifest this update: Thu 24 Sep 2026 04:51:46 +0000 Manifest next update: Fri 25 Sep 2026 08:05:46 +0000 Files and hashes: 1: C940C2C66C795EF89DE57AA820616ED8225890BC.crl (hash: qaV9i1u1T2qOlYbd5WU0AEDmYhW4XfgsEnt3WN6qnwk=) 2: 3130332e3138312e3234382e302f32332d3234203d3e20313439343030.roa (hash: EIKjtb6bLXexCIbSvIG/auaO1yK9dSi+ewqDx2meiK4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/C940C2C66C795EF89DE57AA820616ED8225890BC.crl rsync://rpki-rsync.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/C940C2C66C795EF89DE57AA820616ED8225890BC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C940C2C66C795EF89DE57AA820616ED8225890BC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 08:05:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:8a:dc:07:c1:4f:df:97:70:7d:65:99:4e:c5:9c:76:eb:0f:21:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C940C2C66C795EF89DE57AA820616ED8225890BC Validity Not Before: Sep 24 04:51:46 2026 GMT Not After : Sep 25 08:05:46 2026 GMT Subject: CN=E53E266BCFAC8725760DEBFFCDF561E6CB2426C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:0f:b9:52:f5:1e:65:09:3f:da:38:52:67:02: 1c:8d:3b:d8:1c:2a:b2:01:04:12:7b:ee:d1:93:c6: ab:51:a7:b4:6e:50:b5:b1:06:9e:43:72:0a:83:d6: af:d6:3b:54:f6:9b:f3:e0:bf:6f:58:aa:82:4c:c7: 3e:38:0f:95:8c:c3:02:60:30:8f:f5:9a:85:dd:96: bd:de:99:ae:c3:f1:39:5f:2a:70:da:f4:75:55:ab: 8d:6a:ef:77:15:4f:7c:d1:f5:a2:ef:ec:b2:26:8a: 1d:c5:c8:5f:7a:11:de:4f:01:eb:0d:f1:dd:0e:30: de:46:f6:2b:ea:97:3e:78:a0:2b:5f:95:ba:0c:2e: 6a:a5:f1:93:8f:10:24:e8:49:e2:5d:96:85:4d:fc: e3:a4:96:c9:37:f1:0d:37:e1:70:16:d3:09:54:18: ca:35:97:d3:be:81:0b:0a:83:0d:de:e1:06:c5:c2: 1b:12:5c:4b:61:cb:93:88:c4:4d:4b:87:16:5d:76: b8:76:b0:85:5c:70:04:37:90:09:6c:c4:be:ee:12: 3d:77:3e:1a:72:28:15:6e:bf:30:c6:bd:25:58:ce: 79:da:69:be:29:74:a1:e2:be:cf:cb:d4:4a:a9:ed: 6e:6c:1a:c3:f9:bf:ff:ba:64:ae:5f:99:55:06:e9: cf:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:3E:26:6B:CF:AC:87:25:76:0D:EB:FF:CD:F5:61:E6:CB:24:26:C1 X509v3 Authority Key Identifier: keyid:C9:40:C2:C6:6C:79:5E:F8:9D:E5:7A:A8:20:61:6E:D8:22:58:90:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/C940C2C66C795EF89DE57AA820616ED8225890BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C940C2C66C795EF89DE57AA820616ED8225890BC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/C940C2C66C795EF89DE57AA820616ED8225890BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:d5:93:48:a7:c7:93:29:f4:04:5c:30:c2:94:3d:49:8f:3e: 8f:5e:98:38:49:67:ab:82:de:6f:5b:66:d4:6a:64:07:82:07: b0:30:e3:9b:26:a4:e6:fa:03:2d:60:30:3f:1a:67:a7:79:cf: 48:31:b9:39:df:f4:3a:4e:3e:d0:06:81:14:57:4f:a3:68:46: 40:4a:71:69:18:cc:70:9d:fc:32:d6:45:8a:2b:03:f0:ed:28: b1:50:16:4a:a5:c6:aa:13:f1:3c:9e:52:92:ea:88:38:cf:45: 43:e1:77:1a:e3:7f:25:b5:da:cd:fa:c7:5c:e4:b4:7f:65:d2: c6:94:a8:70:94:b5:fe:05:0f:7a:48:cb:91:38:09:a5:83:02: f5:9e:0c:ec:b5:fb:dd:2a:34:79:c2:c5:9a:59:3d:70:3b:47: 76:5a:5c:49:2e:38:5f:6c:84:0e:51:15:ff:b3:b6:44:45:f8: 3e:d5:22:6a:ed:5c:65:eb:81:12:5e:4d:2e:63:ba:87:63:5e: f3:6b:9a:a2:5e:a4:49:bb:50:fa:41:e4:df:82:18:cc:9c:6d: a3:b6:08:d1:ec:aa:58:29:8c:8b:d5:44:19:4b:53:0e:9a:dd: ba:d7:84:74:e3:8f:9c:99:ed:de:54:a2:26:21:e0:ad:90:58: 0e:6c:03:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGIrcB8FP35dwfWWZTsWcdusPIc0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk0MEMyQzY2Qzc5NUVGODlERTU3QUE4MjA2MTZFRDgy MjU4OTBCQzAeFw0yNjA5MjQwNDUxNDZaFw0yNjA5MjUwODA1NDZaMDMxMTAvBgNV BAMTKEU1M0UyNjZCQ0ZBQzg3MjU3NjBERUJGRkNERjU2MUU2Q0IyNDI2QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTD7lS9R5lCT/aOFJnAhyNO9gc KrIBBBJ77tGTxqtRp7RuULWxBp5DcgqD1q/WO1T2m/Pgv29YqoJMxz44D5WMwwJg MI/1moXdlr3ema7D8TlfKnDa9HVVq41q73cVT3zR9aLv7LImih3FyF96Ed5PAesN 8d0OMN5G9ivqlz54oCtflboMLmql8ZOPECToSeJdloVN/OOklsk38Q034XAW0wlU GMo1l9O+gQsKgw3e4QbFwhsSXEthy5OIxE1LhxZddrh2sIVccAQ3kAlsxL7uEj13 PhpyKBVuvzDGvSVYznnaab4pdKHivs/L1Eqp7W5sGsP5v/+6ZK5fmVUG6c+fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5T4ma8+shyV2Dev/zfVh5sskJsEwHwYDVR0j BBgwFoAUyUDCxmx5Xvid5XqoIGFu2CJYkLwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2U0ZTEwM2UtM2Q3OC00YWUwLTliYTQtZDE3OTJmZmEwNGFjLzAvQzk0MEMyQzY2 Qzc5NUVGODlERTU3QUE4MjA2MTZFRDgyMjU4OTBCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOTQwQzJDNjZDNzk1RUY4OURFNTdBQTgyMDYxNkVEODIyNTg5 MEJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2U0ZTEwM2UtM2Q3OC00YWUwLTli YTQtZDE3OTJmZmEwNGFjLzAvQzk0MEMyQzY2Qzc5NUVGODlERTU3QUE4MjA2MTZF RDgyMjU4OTBCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHDVk0inx5Mp9ARcMMKUPUmPPo9emDhJZ6uC 3m9bZtRqZAeCB7Aw45smpOb6Ay1gMD8aZ6d5z0gxuTnf9DpOPtAGgRRXT6NoRkBK cWkYzHCd/DLWRYorA/DtKLFQFkqlxqoT8TyeUpLqiDjPRUPhdxrjfyW12s36x1zk tH9l0saUqHCUtf4FD3pIy5E4CaWDAvWeDOy1+90qNHnCxZpZPXA7R3ZaXEkuOF9s hA5RFf+ztkRF+D7VImrtXGXrgRJeTS5juodjXvNrmqJepEm7UPpB5N+CGMycbaO2 CNHsqlgpjIvVRBlLUw6a3brXhHTjj5yZ7d5UoiYh4K2QWA5sA3Q= -----END CERTIFICATE-----Generated at Thu Sep 24 20:35:11 2026 by rpki-client