$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.mft File: 0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.mft (raw, json) Hash identifier: IwZ8l1X0g+o4dvnWcQxD5WK0D+gAvudizpZEH2ifvH0= Subject key identifier: D8:43:DA:BE:CA:CC:6C:EB:56:64:D4:F1:EE:17:9D:9A:62:39:8F:63 Authority key identifier: 0D:3C:CC:7A:B1:67:58:20:A7:FD:BC:CF:45:02:97:1C:50:B5:29:F6 Certificate issuer: /CN=0D3CCC7AB1675820A7FDBCCF4502971C50B529F6 Certificate serial: 274473B44CF3EB2D5F37C31E4D9E1E2423806792 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 18:44:08 +0000 Manifest this update: Wed 23 Sep 2026 18:39:08 +0000 Manifest next update: Thu 24 Sep 2026 20:27:08 +0000 Files and hashes: 1: 3130332e3136362e33302e302f32342d3234203d3e20313431393430.roa (hash: juymzIKjppYynqQQ7FDS68cI4msLoCrbwsScpp65U+4=) 2: 0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.crl (hash: iXv6d6fJAd1wVUSbwndO+FHeA30l6liojVd+/2cv37Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.crl rsync://rpki-rsync.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 20:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:44:73:b4:4c:f3:eb:2d:5f:37:c3:1e:4d:9e:1e:24:23:80:67:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D3CCC7AB1675820A7FDBCCF4502971C50B529F6 Validity Not Before: Sep 23 18:39:08 2026 GMT Not After : Sep 24 20:27:08 2026 GMT Subject: CN=D843DABECACC6CEB5664D4F1EE179D9A62398F63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1a:2f:00:e2:3e:f6:fb:6a:53:52:6c:9d:ac: 9f:31:ab:10:20:55:23:fc:b0:87:2a:6e:79:47:74: 2d:3c:1b:8a:a4:d1:69:e2:32:5e:dd:27:0f:32:e8: d5:0c:b8:be:81:05:a1:55:da:b5:90:36:3e:f2:a9: e6:b7:19:c6:54:ab:70:0f:5a:ca:18:7c:6b:7f:5b: 47:a5:3e:be:6d:d0:03:e4:ac:d7:60:de:0d:7c:2d: 3e:10:97:bf:89:87:b0:84:16:a0:be:f3:fa:8d:33: 4b:2e:6e:76:73:ca:ae:42:1e:53:9e:97:ac:f1:0f: 66:f2:7b:41:2c:f6:47:6f:f5:32:4f:29:3b:1a:97: f0:29:3c:63:53:9a:c2:a6:7c:34:9b:b0:5f:87:2e: be:55:77:95:c2:a9:6f:2c:37:d7:e9:f1:f3:45:58: c7:9c:11:a4:ef:ad:fc:cc:57:59:6f:d5:25:2d:e3: 74:e4:70:78:76:ed:92:a5:b0:22:79:57:cb:36:de: c1:4d:cb:52:17:92:5a:3b:27:db:7d:5e:4e:bf:22: ea:b0:bb:9f:a6:6a:76:8b:49:d0:a7:b1:49:8b:54: 24:f7:c6:58:87:26:24:44:83:e1:be:05:05:57:74: 2e:88:51:61:e0:c2:d4:09:d1:c2:5c:bd:39:ec:0a: 9f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:43:DA:BE:CA:CC:6C:EB:56:64:D4:F1:EE:17:9D:9A:62:39:8F:63 X509v3 Authority Key Identifier: keyid:0D:3C:CC:7A:B1:67:58:20:A7:FD:BC:CF:45:02:97:1C:50:B5:29:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:ed:3d:30:d7:f8:e6:f6:2d:26:dc:76:c6:fc:14:f4:83:d3: 2a:61:4d:e5:19:80:bb:78:17:67:76:52:b9:03:f3:76:d7:16: 1c:00:3f:a6:04:f9:14:c3:dc:10:e6:21:c3:b1:63:1e:55:b8: 39:fd:25:08:59:ea:34:e4:7f:97:11:79:4b:70:c7:7d:95:38: db:b1:81:5e:77:c5:b7:9b:06:98:fe:50:bd:7b:1b:99:bf:0c: 63:4e:56:a5:6c:43:61:19:c0:37:d9:f6:d8:dc:cf:ec:34:7c: a2:15:d5:7c:65:fb:28:aa:26:39:8a:bc:52:2a:15:c4:2e:48: ac:54:94:14:c9:9b:25:cb:08:39:cd:33:29:95:90:2d:ed:73: 73:5b:5d:3d:4a:e3:2b:30:40:e5:98:30:55:b5:c4:d3:ea:82: 69:f1:de:df:cc:63:f2:83:f1:11:4a:e4:1d:ad:53:ac:c0:17: 15:4d:e9:d1:fc:07:75:7b:c1:91:46:59:e3:22:95:20:97:9c: 30:74:8c:9d:3f:96:5e:0e:20:32:5c:03:d7:e2:0a:78:30:15: de:64:5f:92:9c:c0:49:86:3f:09:19:5c:8e:7a:81:62:95:df: 1d:2a:ab:ac:13:73:c5:5e:fc:14:99:af:7a:0b:7c:51:76:24: 36:2d:69:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ0RztEzz6y1fN8MeTZ4eJCOAZ5IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQzQ0NDN0FCMTY3NTgyMEE3RkRCQ0NGNDUwMjk3MUM1 MEI1MjlGNjAeFw0yNjA5MjMxODM5MDhaFw0yNjA5MjQyMDI3MDhaMDMxMTAvBgNV BAMTKEQ4NDNEQUJFQ0FDQzZDRUI1NjY0RDRGMUVFMTc5RDlBNjIzOThGNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsGi8A4j72+2pTUmydrJ8xqxAg VSP8sIcqbnlHdC08G4qk0WniMl7dJw8y6NUMuL6BBaFV2rWQNj7yqea3GcZUq3AP WsoYfGt/W0elPr5t0APkrNdg3g18LT4Ql7+Jh7CEFqC+8/qNM0subnZzyq5CHlOe l6zxD2bye0Es9kdv9TJPKTsal/ApPGNTmsKmfDSbsF+HLr5Vd5XCqW8sN9fp8fNF WMecEaTvrfzMV1lv1SUt43TkcHh27ZKlsCJ5V8s23sFNy1IXklo7J9t9Xk6/Iuqw u5+manaLSdCnsUmLVCT3xliHJiREg+G+BQVXdC6IUWHgwtQJ0cJcvTnsCp/bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2EPavsrMbOtWZNTx7hedmmI5j2MwHwYDVR0j BBgwFoAUDTzMerFnWCCn/bzPRQKXHFC1KfYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDkwOTNhZDYtYjExNS00ZjEwLTg4ZDctNmU1N2RjZmQzMjIzLzAvMEQzQ0NDN0FC MTY3NTgyMEE3RkRCQ0NGNDUwMjk3MUM1MEI1MjlGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRDNDQ0M3QUIxNjc1ODIwQTdGREJDQ0Y0NTAyOTcxQzUwQjUy OUY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDkwOTNhZDYtYjExNS00ZjEwLTg4 ZDctNmU1N2RjZmQzMjIzLzAvMEQzQ0NDN0FCMTY3NTgyMEE3RkRCQ0NGNDUwMjk3 MUM1MEI1MjlGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIntPTDX+Ob2LSbcdsb8FPSD0yphTeUZgLt4 F2d2UrkD83bXFhwAP6YE+RTD3BDmIcOxYx5VuDn9JQhZ6jTkf5cReUtwx32VONux gV53xbebBpj+UL17G5m/DGNOVqVsQ2EZwDfZ9tjcz+w0fKIV1Xxl+yiqJjmKvFIq FcQuSKxUlBTJmyXLCDnNMymVkC3tc3NbXT1K4yswQOWYMFW1xNPqgmnx3t/MY/KD 8RFK5B2tU6zAFxVN6dH8B3V7wZFGWeMilSCXnDB0jJ0/ll4OIDJcA9fiCngwFd5k X5KcwEmGPwkZXI56gWKV3x0qq6wTc8Ve/BSZr3oLfFF2JDYtaQE= -----END CERTIFICATE-----Generated at Thu Sep 24 12:06:43 2026 by rpki-client