$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.mft File: C10437213774C7C2BB5BC9BA7649B72D7646F81C.mft (raw, json) Hash identifier: NJcEsz5rrlKs1O1k33u9w2rh225qQX4s3fEv/LC96cQ= Subject key identifier: 01:C4:ED:4A:30:D8:74:A6:92:AE:3E:06:17:DD:2F:83:CE:FB:1F:7F Authority key identifier: C1:04:37:21:37:74:C7:C2:BB:5B:C9:BA:76:49:B7:2D:76:46:F8:1C Certificate issuer: /CN=C10437213774C7C2BB5BC9BA7649B72D7646F81C Certificate serial: 62270C0E3A60F497764B205FF8C3D745046DF5F0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 06:08:22 +0000 Manifest this update: Thu 24 Sep 2026 06:03:22 +0000 Manifest next update: Fri 25 Sep 2026 09:16:22 +0000 Files and hashes: 1: 3136302e32322e3130302e302f32342d3234203d3e20313532383038.roa (hash: 3Tzs+hQ+b22vv80zUD8FcOM/x7RDc2pjQFIIYIEE2b4=) 2: C10437213774C7C2BB5BC9BA7649B72D7646F81C.crl (hash: FQ3d+2gmjNd2mKrv2RITPqhsnoFfERpqXyZ0Bb3l1Dc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.crl rsync://rpki-rsync.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 09:16:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:27:0c:0e:3a:60:f4:97:76:4b:20:5f:f8:c3:d7:45:04:6d:f5:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C10437213774C7C2BB5BC9BA7649B72D7646F81C Validity Not Before: Sep 24 06:03:22 2026 GMT Not After : Sep 25 09:16:22 2026 GMT Subject: CN=01C4ED4A30D874A692AE3E0617DD2F83CEFB1F7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:14:28:16:9f:a3:d4:2c:62:70:09:20:85:1c: 57:6f:86:7d:00:31:65:ef:27:f4:bb:7e:c3:2d:e3: cc:35:9d:6b:1e:68:a4:1f:ca:61:68:67:a5:75:83: 2b:44:86:53:be:2d:1d:07:62:0d:a0:ca:16:dd:ad: c0:fa:8f:d7:1b:3f:02:56:76:bc:88:15:cd:a2:df: 4f:44:3f:c0:3a:31:ad:6e:d1:3f:1b:bd:9f:43:ef: 72:80:79:87:45:f8:3e:2b:fa:b2:a5:18:50:66:02: ab:04:a9:1f:fa:c4:25:df:bc:ab:7c:68:46:0a:b3: e6:f0:33:35:0b:8c:d8:10:5c:3a:5d:3f:49:64:3a: 81:86:1d:61:a2:1b:77:55:25:7c:82:c5:94:d5:d4: 27:7b:33:63:21:3a:ac:9c:2b:67:f2:74:ae:70:e8: 95:10:a5:a8:6f:61:1f:f1:07:78:91:9b:06:0c:63: c1:06:76:79:43:b8:a3:7a:31:fe:5c:f9:c2:e1:16: e1:fb:56:77:8b:4a:78:2c:c4:cf:74:4b:cb:b6:84: e5:cc:35:cd:2f:e2:d2:cd:71:cf:e3:c6:ae:6f:03: 06:bb:16:54:b7:0f:4d:60:ad:ea:d9:c5:31:17:55: 63:d4:6c:61:1e:2c:71:c7:d2:cd:18:84:8a:6c:e1: c2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:C4:ED:4A:30:D8:74:A6:92:AE:3E:06:17:DD:2F:83:CE:FB:1F:7F X509v3 Authority Key Identifier: keyid:C1:04:37:21:37:74:C7:C2:BB:5B:C9:BA:76:49:B7:2D:76:46:F8:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:4a:3f:12:24:e6:e4:26:57:47:20:6a:8e:21:74:1c:7f:48: c3:b0:cf:da:c0:0a:a9:1e:ee:22:53:2c:ed:ce:67:e9:2c:25: 62:f5:cc:5c:8d:56:76:79:9e:47:0c:cf:31:12:99:6a:a0:6a: 0f:1f:25:1d:e6:5d:d6:6a:40:97:b4:c9:f6:66:60:c6:31:09: a7:f9:b7:0f:02:a0:0f:7a:52:b7:d1:52:41:8d:a1:a3:4d:e2: 1a:b0:98:64:60:b5:18:21:d3:34:d5:db:ee:83:eb:33:c2:1f: 6b:a4:bc:94:81:25:0a:2f:40:76:dd:89:22:d0:c3:39:7d:24: e4:45:de:f8:59:b8:74:4f:7d:4c:d6:5d:60:59:c7:3c:26:e8: 00:8d:0b:94:1a:17:0a:db:74:27:40:f9:29:7b:18:83:ae:df: ca:0d:ef:48:06:8d:0c:9c:fe:13:a0:42:1b:b9:75:92:1f:22: b1:dd:df:cc:4a:8b:ca:02:d2:31:ce:c6:21:b8:81:3c:f5:8d: ee:6e:ce:07:a6:6d:e0:44:16:b5:1a:72:15:07:7a:6b:ea:e1: b3:90:6e:7f:a9:a0:b1:b2:be:ad:29:7d:c1:52:9b:30:4a:52: 9b:41:79:cb:1e:3c:76:3c:32:df:1d:c8:f7:c4:29:78:df:a2: e3:79:59:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYicMDjpg9Jd2SyBf+MPXRQRt9fAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzEwNDM3MjEzNzc0QzdDMkJCNUJDOUJBNzY0OUI3MkQ3 NjQ2RjgxQzAeFw0yNjA5MjQwNjAzMjJaFw0yNjA5MjUwOTE2MjJaMDMxMTAvBgNV BAMTKDAxQzRFRDRBMzBEODc0QTY5MkFFM0UwNjE3REQyRjgzQ0VGQjFGN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeFCgWn6PULGJwCSCFHFdvhn0A MWXvJ/S7fsMt48w1nWseaKQfymFoZ6V1gytEhlO+LR0HYg2gyhbdrcD6j9cbPwJW dryIFc2i309EP8A6Ma1u0T8bvZ9D73KAeYdF+D4r+rKlGFBmAqsEqR/6xCXfvKt8 aEYKs+bwMzULjNgQXDpdP0lkOoGGHWGiG3dVJXyCxZTV1Cd7M2MhOqycK2fydK5w 6JUQpahvYR/xB3iRmwYMY8EGdnlDuKN6Mf5c+cLhFuH7VneLSngsxM90S8u2hOXM Nc0v4tLNcc/jxq5vAwa7FlS3D01grerZxTEXVWPUbGEeLHHH0s0YhIps4cIZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAcTtSjDYdKaSrj4GF90vg877H38wHwYDVR0j BBgwFoAUwQQ3ITd0x8K7W8m6dkm3LXZG+BwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDBhOGNlNmMtODI5MC00YjlkLTlhZWQtMDc1NGQzZmQ4ZDMyLzAvQzEwNDM3MjEz Nzc0QzdDMkJCNUJDOUJBNzY0OUI3MkQ3NjQ2RjgxQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DMTA0MzcyMTM3NzRDN0MyQkI1QkM5QkE3NjQ5QjcyRDc2NDZG ODFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDBhOGNlNmMtODI5MC00YjlkLTlh ZWQtMDc1NGQzZmQ4ZDMyLzAvQzEwNDM3MjEzNzc0QzdDMkJCNUJDOUJBNzY0OUI3 MkQ3NjQ2RjgxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABxKPxIk5uQmV0cgao4hdBx/SMOwz9rACqke 7iJTLO3OZ+ksJWL1zFyNVnZ5nkcMzzESmWqgag8fJR3mXdZqQJe0yfZmYMYxCaf5 tw8CoA96UrfRUkGNoaNN4hqwmGRgtRgh0zTV2+6D6zPCH2ukvJSBJQovQHbdiSLQ wzl9JORF3vhZuHRPfUzWXWBZxzwm6ACNC5QaFwrbdCdA+Sl7GIOu38oN70gGjQyc /hOgQhu5dZIfIrHd38xKi8oC0jHOxiG4gTz1je5uzgembeBEFrUachUHemvq4bOQ bn+poLGyvq0pfcFSmzBKUptBecsePHY8Mt8dyPfEKXjfouN5WYw= -----END CERTIFICATE-----Generated at Fri Sep 25 01:05:18 2026 by rpki-client