$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.mft File: CD845730E45E4D531071D97C1EDC23DA378D662F.mft (raw, json) Hash identifier: AoT2QUmV5hUG3aRvyvgb45NcziZ5uTHs98yiEVLssqo= Subject key identifier: 5E:D5:1C:57:F6:16:45:ED:47:47:D0:72:7A:B3:C0:7E:23:51:F3:3C Authority key identifier: CD:84:57:30:E4:5E:4D:53:10:71:D9:7C:1E:DC:23:DA:37:8D:66:2F Certificate issuer: /CN=CD845730E45E4D531071D97C1EDC23DA378D662F Certificate serial: 788C5E3594AA4C1F7B84FA041F63BF1B84B828FF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD845730E45E4D531071D97C1EDC23DA378D662F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 13:32:50 +0000 Manifest this update: Wed 23 Sep 2026 13:27:50 +0000 Manifest next update: Thu 24 Sep 2026 17:23:50 +0000 Files and hashes: 1: 3130332e3131342e35332e302f32342d3234203d3e20313337333439.roa (hash: BgiKJc54U9vx0Bz6VAlgbJ7Gti2eL3QTE9xees67wzA=) 2: 3130332e3131342e35322e302f32332d3234203d3e20313337333439.roa (hash: ZyTKIgLUxCGhcIet/CFJoBSXRoiA7e9G+Kr6S5o0mEQ=) 3: CD845730E45E4D531071D97C1EDC23DA378D662F.crl (hash: 1HsWF5Mq9r1UtUCqH2jakVygt9xieyr7Vr0SX0IvRvk=) 4: 323030313a6466343a663330303a3a2f34382d3438203d3e20313337333439.roa (hash: lb4d9lrnmMWGai0ItqfgLnvKFt7iEuEC2HCE9pUg2nE=) 5: 3130332e3131342e35322e302f32342d3234203d3e20313337333439.roa (hash: qBRAe7C40tWA04dsJPNXkwqtoGUaunwx7S+rfFhu9ho=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.crl rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD845730E45E4D531071D97C1EDC23DA378D662F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 17:23:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:8c:5e:35:94:aa:4c:1f:7b:84:fa:04:1f:63:bf:1b:84:b8:28:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD845730E45E4D531071D97C1EDC23DA378D662F Validity Not Before: Sep 23 13:27:50 2026 GMT Not After : Sep 24 17:23:50 2026 GMT Subject: CN=5ED51C57F61645ED4747D0727AB3C07E2351F33C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b8:54:8f:74:0d:9e:0b:61:c3:a2:68:bd:3c: e2:b6:0b:58:46:40:3a:79:9b:7b:d7:f8:5b:f0:41: e2:f3:e7:b8:8e:25:0b:18:5d:0d:86:95:62:ba:46: 6d:4f:29:69:fe:7f:77:8a:4e:2f:dd:0c:a7:fb:c3: 34:27:f7:ea:fd:08:d6:7c:c1:b3:d6:5c:23:60:4b: 39:ed:0a:cb:9c:82:32:29:7c:85:64:77:26:5e:4b: 9a:29:52:af:2d:e6:72:1a:3d:51:13:35:b2:92:1b: e3:3f:5b:f4:08:16:3b:16:83:5a:e5:c8:4e:be:8b: 18:b3:62:bb:a5:c9:c0:2b:7c:b8:65:dc:38:7b:fb: 93:94:c9:35:db:de:17:89:79:ba:64:7b:71:0f:45: a3:e6:2f:d0:43:3d:72:38:7a:de:16:a0:06:e8:1f: 6f:b8:1b:33:40:f0:be:3a:d7:8c:94:a8:21:86:a1: e3:5d:45:f9:41:e1:14:4f:00:87:31:12:de:75:96: ae:5f:0b:a6:b4:02:63:20:d9:59:81:a0:07:ef:5b: 34:65:ed:da:71:2c:50:90:7f:16:f8:ae:c0:22:d0: 82:ea:03:b5:67:6e:21:83:37:ea:13:f0:38:e3:84: 86:0b:a3:56:f2:75:3d:64:f2:2b:af:cf:60:5c:b2: 58:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:D5:1C:57:F6:16:45:ED:47:47:D0:72:7A:B3:C0:7E:23:51:F3:3C X509v3 Authority Key Identifier: keyid:CD:84:57:30:E4:5E:4D:53:10:71:D9:7C:1E:DC:23:DA:37:8D:66:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD845730E45E4D531071D97C1EDC23DA378D662F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:0f:58:3d:4a:6d:fb:f1:8a:ba:e9:65:01:58:6f:1e:a2:28: bf:45:be:1b:a3:3e:10:d1:a0:b7:4e:ed:e8:24:0f:71:89:f5: 49:db:3c:f3:e1:65:c2:2c:c7:ba:5d:33:35:90:b9:8e:d6:73: be:d3:d6:e6:ed:2c:56:48:92:23:98:34:f0:91:49:68:09:1d: 72:43:4a:c5:6b:27:31:bf:b7:df:8f:78:24:bb:cc:9d:d9:4c: 5d:e7:f2:28:5f:9b:19:1c:f1:17:fb:c1:40:b0:37:6d:33:32: c4:56:47:02:29:64:bd:85:e1:6a:73:d3:e5:72:d2:51:20:06: 3e:f9:e3:36:ad:38:7e:15:8e:d7:b6:94:b7:e1:4d:d5:fe:22: 4f:fc:5e:19:be:0d:8e:5b:79:f7:2d:e9:c3:a0:7f:fb:48:f1: d3:eb:ac:41:3e:f1:37:8c:b7:0d:a2:23:9a:5c:94:48:a7:eb: 99:31:41:af:ba:45:af:cb:6b:d2:a6:d6:bb:d1:a1:01:34:9e: c5:ef:da:74:7b:f4:6a:21:6f:87:80:8c:57:f2:5e:7e:d1:c9: da:3e:c5:f1:32:80:c7:a1:72:a8:fa:3c:c8:a6:c5:80:97:48: 6d:8e:84:f5:ea:92:2d:16:f9:09:f0:ee:82:3a:d5:f2:41:ac: 60:d5:d9:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeIxeNZSqTB97hPoEH2O/G4S4KP8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q4NDU3MzBFNDVFNEQ1MzEwNzFEOTdDMUVEQzIzREEz NzhENjYyRjAeFw0yNjA5MjMxMzI3NTBaFw0yNjA5MjQxNzIzNTBaMDMxMTAvBgNV BAMTKDVFRDUxQzU3RjYxNjQ1RUQ0NzQ3RDA3MjdBQjNDMDdFMjM1MUYzM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpuFSPdA2eC2HDomi9POK2C1hG QDp5m3vX+FvwQeLz57iOJQsYXQ2GlWK6Rm1PKWn+f3eKTi/dDKf7wzQn9+r9CNZ8 wbPWXCNgSzntCsucgjIpfIVkdyZeS5opUq8t5nIaPVETNbKSG+M/W/QIFjsWg1rl yE6+ixizYrulycArfLhl3Dh7+5OUyTXb3heJebpke3EPRaPmL9BDPXI4et4WoAbo H2+4GzNA8L4614yUqCGGoeNdRflB4RRPAIcxEt51lq5fC6a0AmMg2VmBoAfvWzRl 7dpxLFCQfxb4rsAi0ILqA7VnbiGDN+oT8DjjhIYLo1bydT1k8iuvz2BcslgRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXtUcV/YWRe1HR9ByerPAfiNR8zwwHwYDVR0j BBgwFoAUzYRXMOReTVMQcdl8Htwj2jeNZi8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDA5NjJjNmUtNTk1YS00N2M0LWFhN2MtZWY4ZTc3Y2FlNjQyLzAvQ0Q4NDU3MzBF NDVFNEQ1MzEwNzFEOTdDMUVEQzIzREEzNzhENjYyRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRDg0NTczMEU0NUU0RDUzMTA3MUQ5N0MxRURDMjNEQTM3OEQ2 NjJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDA5NjJjNmUtNTk1YS00N2M0LWFh N2MtZWY4ZTc3Y2FlNjQyLzAvQ0Q4NDU3MzBFNDVFNEQ1MzEwNzFEOTdDMUVEQzIz REEzNzhENjYyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADMPWD1KbfvxirrpZQFYbx6iKL9FvhujPhDR oLdO7egkD3GJ9UnbPPPhZcIsx7pdMzWQuY7Wc77T1ubtLFZIkiOYNPCRSWgJHXJD SsVrJzG/t9+PeCS7zJ3ZTF3n8ihfmxkc8Rf7wUCwN20zMsRWRwIpZL2F4Wpz0+Vy 0lEgBj754zatOH4Vjte2lLfhTdX+Ik/8Xhm+DY5befct6cOgf/tI8dPrrEE+8TeM tw2iI5pclEin65kxQa+6Ra/La9Km1rvRoQE0nsXv2nR79Gohb4eAjFfyXn7Rydo+ xfEygMehcqj6PMimxYCXSG2OhPXqki0W+Qnw7oI61fJBrGDV2Xc= -----END CERTIFICATE-----Generated at Thu Sep 24 06:09:55 2026 by rpki-client