$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/354106638019F94606F5ABA3A90FEB87A8A7FA76.mft File: 354106638019F94606F5ABA3A90FEB87A8A7FA76.mft (raw, json) Hash identifier: 8zk9VMUt1ale3iRwwihwLUHdiZlEB0aqpxokrG7NqdY= Subject key identifier: 5A:86:E4:64:50:49:6E:71:CE:25:EC:7F:83:6A:20:48:B1:17:D8:5F Authority key identifier: 35:41:06:63:80:19:F9:46:06:F5:AB:A3:A9:0F:EB:87:A8:A7:FA:76 Certificate issuer: /CN=354106638019F94606F5ABA3A90FEB87A8A7FA76 Certificate serial: 068C37A0023CF938C9B9642BB04DF99047721263 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/354106638019F94606F5ABA3A90FEB87A8A7FA76.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/354106638019F94606F5ABA3A90FEB87A8A7FA76.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 14:49:23 +0000 Manifest this update: Wed 23 Sep 2026 14:44:23 +0000 Manifest next update: Thu 24 Sep 2026 18:43:23 +0000 Files and hashes: 1: 354106638019F94606F5ABA3A90FEB87A8A7FA76.crl (hash: p7CO7qk5dV1YKAQHx92OsbnkW06EtbfPpqFHRTHsXcI=) 2: 3130332e3139312e3134382e302f32332d3234203d3e2034383030.roa (hash: ikR4B1sB9IhhiTpM9SD6KX5Vk82b9oPtczvgaIgOyo8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/354106638019F94606F5ABA3A90FEB87A8A7FA76.crl rsync://rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/354106638019F94606F5ABA3A90FEB87A8A7FA76.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/354106638019F94606F5ABA3A90FEB87A8A7FA76.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 18:43:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:8c:37:a0:02:3c:f9:38:c9:b9:64:2b:b0:4d:f9:90:47:72:12:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=354106638019F94606F5ABA3A90FEB87A8A7FA76 Validity Not Before: Sep 23 14:44:23 2026 GMT Not After : Sep 24 18:43:23 2026 GMT Subject: CN=5A86E46450496E71CE25EC7F836A2048B117D85F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9c:c0:f6:6d:c2:b6:8d:8a:f4:bf:d2:d4:ad: 38:66:72:6f:60:9e:f8:1d:4c:a6:c2:1b:d9:79:73: ba:2d:12:1f:da:a7:3b:db:fc:6f:ae:ca:ea:ea:6d: d3:dc:2e:e0:eb:80:50:54:a9:b7:99:50:a0:b2:4a: 84:82:42:d2:b0:af:e5:61:2e:92:72:95:89:8d:f2: 96:2a:a2:98:23:8a:ff:ee:93:81:b7:08:78:30:76: 65:1b:c9:42:fc:ba:81:83:2b:32:12:6b:79:6b:7c: 4e:b0:65:f1:54:7d:6d:98:15:bf:cb:1c:f9:b5:61: 05:dc:b4:b7:85:b7:7a:9a:06:1d:d8:ea:b0:32:7f: 67:dd:95:3b:ea:0b:50:51:9a:dc:65:55:8c:58:0a: 0e:43:71:a8:5d:0c:3f:18:d7:6f:27:08:7a:98:87: ce:45:27:ba:6a:37:61:eb:0d:41:3d:82:4b:0a:c0: 72:ee:1d:b5:0d:87:0e:39:73:bb:c9:61:64:4d:a8: 29:7b:df:28:40:b0:bd:aa:35:55:70:dc:49:b5:7d: 6b:01:05:fc:14:37:01:dd:f7:cc:43:dd:9b:4a:ce: c9:a8:eb:d8:d7:e6:4a:10:35:39:88:b8:bf:bc:5b: 72:79:1d:92:22:b0:21:60:6c:a1:ff:1a:21:73:40: 0e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:86:E4:64:50:49:6E:71:CE:25:EC:7F:83:6A:20:48:B1:17:D8:5F X509v3 Authority Key Identifier: keyid:35:41:06:63:80:19:F9:46:06:F5:AB:A3:A9:0F:EB:87:A8:A7:FA:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/354106638019F94606F5ABA3A90FEB87A8A7FA76.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/354106638019F94606F5ABA3A90FEB87A8A7FA76.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/354106638019F94606F5ABA3A90FEB87A8A7FA76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:f9:c5:21:07:f1:fd:4e:81:be:80:fd:17:c9:41:a4:a1:a1: 79:30:2b:27:f3:17:5a:0a:46:f1:aa:89:b7:f5:e6:0b:7c:ee: b2:ae:b1:85:86:56:b0:6f:bf:bc:72:dc:5b:47:4c:92:c2:cb: 38:96:3b:07:37:a6:83:07:3a:43:09:0e:a9:37:63:f5:5b:6d: 4b:d6:e6:11:41:50:c1:35:b4:22:35:63:37:98:24:12:00:46: 88:70:b7:9d:ca:a3:47:49:c1:9c:1e:3d:3a:02:b5:8a:e2:94: aa:68:55:37:6c:80:36:e9:81:b3:b8:e6:34:e8:cb:21:3a:82: e7:07:c3:0a:d4:aa:bd:d0:20:b9:a2:9a:bf:5b:61:b5:4a:49: fe:13:51:f9:9f:10:02:85:0e:43:77:85:e2:a9:ea:08:3b:3b: dd:d5:15:de:9a:37:53:80:3c:b4:ec:ac:73:06:76:ff:d8:f4: 5c:23:45:50:a7:6b:1c:fc:82:e2:a6:8d:03:ef:a4:2c:03:71: af:c5:e9:f4:07:85:3f:6a:80:38:22:99:21:6a:c7:6a:70:74: d8:3a:12:f6:d2:2d:f2:83:e8:58:b5:bc:99:b4:70:40:2b:09: 7d:8a:3e:3b:9b:ea:69:1a:97:1d:9d:f9:08:c3:8f:bd:3a:90: c6:3d:4f:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBow3oAI8+TjJuWQrsE35kEdyEmMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU0MTA2NjM4MDE5Rjk0NjA2RjVBQkEzQTkwRkVCODdB OEE3RkE3NjAeFw0yNjA5MjMxNDQ0MjNaFw0yNjA5MjQxODQzMjNaMDMxMTAvBgNV BAMTKDVBODZFNDY0NTA0OTZFNzFDRTI1RUM3RjgzNkEyMDQ4QjExN0Q4NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5nMD2bcK2jYr0v9LUrThmcm9g nvgdTKbCG9l5c7otEh/apzvb/G+uyurqbdPcLuDrgFBUqbeZUKCySoSCQtKwr+Vh LpJylYmN8pYqopgjiv/uk4G3CHgwdmUbyUL8uoGDKzISa3lrfE6wZfFUfW2YFb/L HPm1YQXctLeFt3qaBh3Y6rAyf2fdlTvqC1BRmtxlVYxYCg5DcahdDD8Y128nCHqY h85FJ7pqN2HrDUE9gksKwHLuHbUNhw45c7vJYWRNqCl73yhAsL2qNVVw3Em1fWsB BfwUNwHd98xD3ZtKzsmo69jX5koQNTmIuL+8W3J5HZIisCFgbKH/GiFzQA5DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWobkZFBJbnHOJex/g2ogSLEX2F8wHwYDVR0j BBgwFoAUNUEGY4AZ+UYG9aujqQ/rh6in+nYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGQ5MDZmYzAtNDM2My00ZjQ2LTliMTQtNWMxYWI4MjVhMzM1LzAvMzU0MTA2NjM4 MDE5Rjk0NjA2RjVBQkEzQTkwRkVCODdBOEE3RkE3Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNTQxMDY2MzgwMTlGOTQ2MDZGNUFCQTNBOTBGRUI4N0E4QTdG QTc2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGQ5MDZmYzAtNDM2My00ZjQ2LTli MTQtNWMxYWI4MjVhMzM1LzAvMzU0MTA2NjM4MDE5Rjk0NjA2RjVBQkEzQTkwRkVC ODdBOEE3RkE3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALz5xSEH8f1Ogb6A/RfJQaShoXkwKyfzF1oK RvGqibf15gt87rKusYWGVrBvv7xy3FtHTJLCyziWOwc3poMHOkMJDqk3Y/VbbUvW 5hFBUME1tCI1YzeYJBIARohwt53Ko0dJwZwePToCtYrilKpoVTdsgDbpgbO45jTo yyE6gucHwwrUqr3QILmimr9bYbVKSf4TUfmfEAKFDkN3heKp6gg7O93VFd6aN1OA PLTsrHMGdv/Y9FwjRVCnaxz8guKmjQPvpCwDca/F6fQHhT9qgDgimSFqx2pwdNg6 EvbSLfKD6Fi1vJm0cEArCX2KPjub6mkalx2d+QjDj706kMY9T+4= -----END CERTIFICATE-----Generated at Thu Sep 24 05:28:27 2026 by rpki-client