$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.mft File: C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.mft (raw, json) Hash identifier: DJIckubBzlgjkmh9AGirgTauVmfwRqHyXYrERo8WWHQ= Subject key identifier: 1A:9B:D4:23:10:CA:D9:82:42:EE:13:06:07:FC:91:1D:E7:0D:80:47 Authority key identifier: C0:74:83:FD:18:FF:18:39:E6:2A:24:FF:8E:D6:07:A4:4F:4A:2E:F1 Certificate issuer: /CN=C07483FD18FF1839E62A24FF8ED607A44F4A2EF1 Certificate serial: 5BF1023EDE724784BABE2E2C29688888BBC5FA7F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 11:09:55 +0000 Manifest this update: Wed 23 Sep 2026 11:04:55 +0000 Manifest next update: Thu 24 Sep 2026 11:24:55 +0000 Files and hashes: 1: 3130332e3134322e3230322e302f32342d3234203d3e20313339333738.roa (hash: F4tUjUdEY+l3s8NALDsIE06dbqwvjW+OT7LFyFQ/yeM=) 2: 3130332e3134322e3230332e302f32342d3234203d3e20313339333738.roa (hash: ZPdcFv71Hcn3YAeVTYCVX3MD4vGj6utOnAFPRD2DXHY=) 3: 323030313a6466313a353638303a3a2f34382d3438203d3e20313339333738.roa (hash: 2PZRw81bQ6C6T+rhPpeS2pJwxgW1qGxBfnel2RNaMVk=) 4: C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.crl (hash: ckUAM7EynuLI4hnmtsP7evRXFJZ07p+UpV8hx0tqTCo=) 5: 3130332e3134322e3230322e302f32332d3233203d3e20313339333738.roa (hash: 18RqwEy267Zr/RraNo+S/nzcISVxpvj1na+e3EceUks=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.crl rsync://rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 11:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:f1:02:3e:de:72:47:84:ba:be:2e:2c:29:68:88:88:bb:c5:fa:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C07483FD18FF1839E62A24FF8ED607A44F4A2EF1 Validity Not Before: Sep 23 11:04:55 2026 GMT Not After : Sep 24 11:24:55 2026 GMT Subject: CN=1A9BD42310CAD98242EE130607FC911DE70D8047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e0:df:1a:c3:de:49:b2:d3:64:80:12:6f:22: 0f:e8:b5:4d:7b:77:5a:93:b6:97:16:40:57:7e:74: 95:55:4e:99:4f:c4:63:5c:39:9e:58:bb:28:6e:03: 6c:1a:1f:1d:ce:db:81:64:e9:75:13:ce:48:51:4b: 0f:0b:80:3a:02:56:95:3a:5e:38:19:e5:b8:99:c0: c9:6f:45:ef:f1:9b:2a:01:6c:b7:48:ff:25:01:6b: ad:a1:e6:fb:f2:78:3d:4b:f2:4f:e0:0d:04:cf:d3: 94:fa:dd:4d:e0:51:af:7c:de:79:28:b2:f1:a2:39: 97:0a:53:4d:d2:88:1d:da:ef:fe:c6:98:d8:df:35: 62:ab:e7:eb:d4:17:56:25:e7:95:bb:8b:89:bc:79: 29:96:d0:bf:6a:82:0e:db:0a:6f:b9:ab:e6:a3:17: 5c:71:c0:2b:ce:a1:55:f1:36:e7:b7:87:3b:62:19: 31:87:3b:e3:2e:d0:2c:c0:9d:e1:41:49:9d:3b:5f: 43:1b:24:08:d3:4c:a8:1a:be:3d:b3:ee:8a:00:01: 90:57:86:ca:8a:69:4f:de:20:3e:50:33:16:62:ea: 51:20:98:27:87:47:21:05:bf:6a:2c:fb:f2:e4:02: d8:27:f7:dc:27:7d:f1:96:70:c4:55:7a:31:81:64: 56:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:9B:D4:23:10:CA:D9:82:42:EE:13:06:07:FC:91:1D:E7:0D:80:47 X509v3 Authority Key Identifier: keyid:C0:74:83:FD:18:FF:18:39:E6:2A:24:FF:8E:D6:07:A4:4F:4A:2E:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:4a:56:53:b7:9f:be:05:44:e4:ab:be:94:28:c7:31:bd:ac: 40:80:12:66:57:b5:87:73:5f:e3:98:ac:26:f7:f2:de:57:d5: bd:90:53:87:82:e0:95:fb:91:55:5d:c7:90:c3:be:cb:91:38: 1b:5c:26:6a:9b:46:68:3d:ad:bc:23:31:b5:15:ef:94:83:75: 37:fb:ae:ee:fd:25:94:bf:c1:1b:da:d3:6f:02:29:c3:ce:9e: b8:50:cc:f7:1c:7b:33:6a:3f:dd:5e:05:90:58:88:ef:a3:8e: 0f:51:ab:af:30:8e:c8:85:bf:10:7b:06:45:98:2d:93:57:7f: 26:ef:a3:dc:a2:50:eb:09:09:e8:ab:88:8f:f5:63:6f:44:7f: f1:fc:f3:c8:6f:78:c1:4b:ba:71:26:aa:5c:95:8e:69:7b:63: 9c:27:ad:6c:71:df:6e:73:54:f3:b6:9e:61:b6:78:e1:81:d2: 15:cf:25:30:d7:fb:da:e8:eb:88:b6:5c:20:90:9e:11:ea:31: e1:1c:35:d3:71:f6:ba:8a:96:25:8a:95:33:80:1f:46:e7:1c: e9:d1:7a:f6:7e:85:86:6b:fc:4b:fc:f8:d6:8c:36:25:3f:29: 5d:1c:31:fe:37:e7:81:5f:46:1f:4c:87:a5:3d:39:fc:f8:88: be:9e:cb:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW/ECPt5yR4S6vi4sKWiIiLvF+n8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA3NDgzRkQxOEZGMTgzOUU2MkEyNEZGOEVENjA3QTQ0 RjRBMkVGMTAeFw0yNjA5MjMxMTA0NTVaFw0yNjA5MjQxMTI0NTVaMDMxMTAvBgNV BAMTKDFBOUJENDIzMTBDQUQ5ODI0MkVFMTMwNjA3RkM5MTFERTcwRDgwNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw4N8aw95JstNkgBJvIg/otU17 d1qTtpcWQFd+dJVVTplPxGNcOZ5YuyhuA2waHx3O24Fk6XUTzkhRSw8LgDoCVpU6 XjgZ5biZwMlvRe/xmyoBbLdI/yUBa62h5vvyeD1L8k/gDQTP05T63U3gUa983nko svGiOZcKU03SiB3a7/7GmNjfNWKr5+vUF1Yl55W7i4m8eSmW0L9qgg7bCm+5q+aj F1xxwCvOoVXxNue3hztiGTGHO+Mu0CzAneFBSZ07X0MbJAjTTKgavj2z7ooAAZBX hsqKaU/eID5QMxZi6lEgmCeHRyEFv2os+/LkAtgn99wnffGWcMRVejGBZFYXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGpvUIxDK2YJC7hMGB/yRHecNgEcwHwYDVR0j BBgwFoAUwHSD/Rj/GDnmKiT/jtYHpE9KLvEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDY3ZmI4MzctMWIyZi00YzRlLWI5OTktNmU5OTBkZGMxNDk5LzAvQzA3NDgzRkQx OEZGMTgzOUU2MkEyNEZGOEVENjA3QTQ0RjRBMkVGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMDc0ODNGRDE4RkYxODM5RTYyQTI0RkY4RUQ2MDdBNDRGNEEy RUYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDY3ZmI4MzctMWIyZi00YzRlLWI5 OTktNmU5OTBkZGMxNDk5LzAvQzA3NDgzRkQxOEZGMTgzOUU2MkEyNEZGOEVENjA3 QTQ0RjRBMkVGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJKVlO3n74FROSrvpQoxzG9rECAEmZXtYdz X+OYrCb38t5X1b2QU4eC4JX7kVVdx5DDvsuROBtcJmqbRmg9rbwjMbUV75SDdTf7 ru79JZS/wRva028CKcPOnrhQzPccezNqP91eBZBYiO+jjg9Rq68wjsiFvxB7BkWY LZNXfybvo9yiUOsJCeiriI/1Y29Ef/H888hveMFLunEmqlyVjml7Y5wnrWxx325z VPO2nmG2eOGB0hXPJTDX+9ro64i2XCCQnhHqMeEcNdNx9rqKliWKlTOAH0bnHOnR evZ+hYZr/Ev8+NaMNiU/KV0cMf4354FfRh9Mh6U9Ofz4iL6eyzE= -----END CERTIFICATE-----Generated at Thu Sep 24 04:28:05 2026 by rpki-client