$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/10305EB1D756B8E205948FA9D96C07D30D5559C6.mft File: 10305EB1D756B8E205948FA9D96C07D30D5559C6.mft (raw, json) Hash identifier: LgHyAtsEUUgLoxVlvGjy0A4jK9FU8hap9lYiEfuoTCE= Subject key identifier: 51:A4:F1:23:E9:54:CC:E9:76:94:BA:58:09:67:89:A8:3E:DF:0A:DD Authority key identifier: 10:30:5E:B1:D7:56:B8:E2:05:94:8F:A9:D9:6C:07:D3:0D:55:59:C6 Certificate issuer: /CN=10305EB1D756B8E205948FA9D96C07D30D5559C6 Certificate serial: 153CA76DC2C62E29B9381105DADF7F571C94C84A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10305EB1D756B8E205948FA9D96C07D30D5559C6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/10305EB1D756B8E205948FA9D96C07D30D5559C6.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 16:10:47 +0000 Manifest this update: Thu 24 Sep 2026 16:05:47 +0000 Manifest next update: Fri 25 Sep 2026 19:37:47 +0000 Files and hashes: 1: 3131302e39322e37342e302f32332d3234203d3e203538333835.roa (hash: G6PGQreB8GGiXWbjNuIkvOBqamEXNRruYXzWZ5ntbWM=) 2: 3130332e32382e3231382e302f32342d3234203d3e203538333835.roa (hash: w+xTBuxDVGZDvJln2gWD2TMLIgtp2a/JxAVQQSe/MJc=) 3: 3130332e32332e3131362e302f32332d3234203d3e203538333835.roa (hash: xg8S5Jz4WdUD3Z66GOwGk02Rpx5TvYnlOCLFL6/urQw=) 4: 3130332e3234362e3136392e302f32342d3234203d3e203538333835.roa (hash: wzVp735bfnp8XDnpMDExEB2u8d/EmF9ou01fz223/d4=) 5: 10305EB1D756B8E205948FA9D96C07D30D5559C6.crl (hash: XMkF9GcJq+xELDNShMuLjIOooXOxZB3MUxqmeZEh7iE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/10305EB1D756B8E205948FA9D96C07D30D5559C6.crl rsync://rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/10305EB1D756B8E205948FA9D96C07D30D5559C6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10305EB1D756B8E205948FA9D96C07D30D5559C6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 19:37:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:3c:a7:6d:c2:c6:2e:29:b9:38:11:05:da:df:7f:57:1c:94:c8:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10305EB1D756B8E205948FA9D96C07D30D5559C6 Validity Not Before: Sep 24 16:05:47 2026 GMT Not After : Sep 25 19:37:47 2026 GMT Subject: CN=51A4F123E954CCE97694BA58096789A83EDF0ADD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:29:9c:da:7f:31:3a:02:70:f4:c9:f0:f2:99: ff:8c:55:99:94:63:e6:2c:69:ce:26:e7:9c:23:1b: cf:85:70:65:6e:8d:17:bb:c4:53:94:1a:5e:fc:41: b4:fe:0e:f0:b6:bf:6b:bc:68:35:d2:e2:6e:0c:86: f8:da:ae:e5:b6:0e:de:3c:fe:4e:80:0d:5c:63:10: be:df:ba:cc:69:f2:83:6a:ad:74:bb:8c:cd:56:fe: 05:e5:d5:03:3f:ec:b1:3f:16:c5:5f:c1:9a:b3:e8: ea:0b:34:54:cd:5e:25:ec:69:86:76:f1:21:03:4c: f5:4a:c6:60:55:cb:89:96:34:12:9b:e1:39:da:7e: 85:14:d9:12:b8:fd:5a:f4:84:01:48:aa:00:e1:2f: 4d:a7:c6:05:56:8c:25:ff:9b:e1:15:ed:9c:48:e0: 35:6b:8d:72:94:b1:32:0f:3f:98:25:af:a7:71:d5: a1:70:19:15:51:6e:cf:f0:63:0e:35:74:50:52:b0: f1:79:d0:a5:82:86:0d:4e:3d:9a:04:a8:48:06:c6: 68:40:46:6f:09:cb:ac:4a:5a:d8:e8:6a:84:c2:fa: a9:ce:ea:5b:82:cb:c8:5a:40:a3:8b:dc:6b:cf:4a: 67:ce:d0:04:11:8a:53:64:d9:51:22:f1:33:87:ca: d6:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:A4:F1:23:E9:54:CC:E9:76:94:BA:58:09:67:89:A8:3E:DF:0A:DD X509v3 Authority Key Identifier: keyid:10:30:5E:B1:D7:56:B8:E2:05:94:8F:A9:D9:6C:07:D3:0D:55:59:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/10305EB1D756B8E205948FA9D96C07D30D5559C6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10305EB1D756B8E205948FA9D96C07D30D5559C6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/10305EB1D756B8E205948FA9D96C07D30D5559C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:b1:37:c1:97:78:71:e7:8c:00:e5:9f:bd:39:65:3e:b7:ed: 94:75:08:87:ab:3b:c5:71:e7:54:fe:2e:26:eb:3e:8f:2c:00: fa:a5:97:a9:b0:72:48:1a:e3:53:93:28:ea:70:e5:1f:08:58: 0e:33:7b:11:ef:d3:61:e4:72:61:e3:99:12:bf:59:9e:39:73: 33:01:d6:e5:f2:8c:b6:81:85:00:fd:00:1e:d6:f3:5e:3a:76: b1:6a:68:3d:40:a0:3e:23:f2:5c:f4:6b:c0:d6:5a:e8:4e:f4: 7b:4c:10:f1:a2:7a:6e:87:8a:e4:90:68:6d:2f:06:cb:80:9d: ec:05:c3:18:00:bc:28:c5:71:20:d4:61:97:6f:81:af:f0:bd: 47:3a:da:f4:35:d9:e4:3f:66:d2:19:5d:68:08:3a:83:f7:e2: 7c:d6:e3:6a:a9:03:29:b2:4b:f2:42:ec:8c:17:de:42:7b:70: ca:d3:6b:0e:45:39:5b:8c:9c:79:b0:c5:00:e4:6c:0d:7b:24: e5:c7:b3:3e:36:11:37:7b:49:d2:f8:fb:c7:ec:d0:a4:0b:a3: fe:56:e2:1f:4f:31:d5:cf:ff:e5:cb:84:f7:64:04:48:f1:50: 88:c4:e1:aa:b0:84:3a:7c:59:a6:2f:07:12:8f:d1:ca:b7:45: 07:4f:ab:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFTynbcLGLim5OBEF2t9/VxyUyEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTAzMDVFQjFENzU2QjhFMjA1OTQ4RkE5RDk2QzA3RDMw RDU1NTlDNjAeFw0yNjA5MjQxNjA1NDdaFw0yNjA5MjUxOTM3NDdaMDMxMTAvBgNV BAMTKDUxQTRGMTIzRTk1NENDRTk3Njk0QkE1ODA5Njc4OUE4M0VERjBBREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKKZzafzE6AnD0yfDymf+MVZmU Y+Ysac4m55wjG8+FcGVujRe7xFOUGl78QbT+DvC2v2u8aDXS4m4MhvjaruW2Dt48 /k6ADVxjEL7fusxp8oNqrXS7jM1W/gXl1QM/7LE/FsVfwZqz6OoLNFTNXiXsaYZ2 8SEDTPVKxmBVy4mWNBKb4TnafoUU2RK4/Vr0hAFIqgDhL02nxgVWjCX/m+EV7ZxI 4DVrjXKUsTIPP5glr6dx1aFwGRVRbs/wYw41dFBSsPF50KWChg1OPZoEqEgGxmhA Rm8Jy6xKWtjoaoTC+qnO6luCy8haQKOL3GvPSmfO0AQRilNk2VEi8TOHytbFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUaTxI+lUzOl2lLpYCWeJqD7fCt0wHwYDVR0j BBgwFoAUEDBesddWuOIFlI+p2WwH0w1VWcYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDM5MjUzODgtMzVjNi00MWQ3LTlkYzQtZGI0ZDExOGQxMzVhLzAvMTAzMDVFQjFE NzU2QjhFMjA1OTQ4RkE5RDk2QzA3RDMwRDU1NTlDNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMDMwNUVCMUQ3NTZCOEUyMDU5NDhGQTlEOTZDMDdEMzBENTU1 OUM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDM5MjUzODgtMzVjNi00MWQ3LTlk YzQtZGI0ZDExOGQxMzVhLzAvMTAzMDVFQjFENzU2QjhFMjA1OTQ4RkE5RDk2QzA3 RDMwRDU1NTlDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH+xN8GXeHHnjADln705ZT637ZR1CIerO8Vx 51T+LibrPo8sAPqll6mwckga41OTKOpw5R8IWA4zexHv02HkcmHjmRK/WZ45czMB 1uXyjLaBhQD9AB7W8146drFqaD1AoD4j8lz0a8DWWuhO9HtMEPGiem6HiuSQaG0v BsuAnewFwxgAvCjFcSDUYZdvga/wvUc62vQ12eQ/ZtIZXWgIOoP34nzW42qpAymy S/JC7IwX3kJ7cMrTaw5FOVuMnHmwxQDkbA17JOXHsz42ETd7SdL4+8fs0KQLo/5W 4h9PMdXP/+XLhPdkBEjxUIjE4aqwhDp8WaYvBxKP0cq3RQdPq34= -----END CERTIFICATE-----Generated at Fri Sep 25 07:07:05 2026 by rpki-client