$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.mft File: C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.mft (raw, json) Hash identifier: u8E+uopcI1W+B3kmXw+K8UifXmXtNrySQtDFQjs9MK8= Subject key identifier: 58:0B:BE:B7:CA:CA:5C:2F:48:2F:79:D2:20:05:1B:E2:6D:BB:7A:FF Authority key identifier: C0:FD:03:30:B0:66:5A:32:4B:ED:EF:57:93:F7:3F:D4:FA:6F:30:C1 Certificate issuer: /CN=C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1 Certificate serial: 3913F80A787D1D39EC4F09E4C7D431207068F311 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.mft Manifest number: BF Signing time: Wed 23 Sep 2026 00:52:19 +0000 Manifest this update: Wed 23 Sep 2026 00:47:19 +0000 Manifest next update: Thu 24 Sep 2026 03:43:19 +0000 Files and hashes: 1: C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.crl (hash: DB/KYSszJeB0ZAdQYdJyj8pM5D86Yo+qYtW1B4uNeKg=) 2: 3136302e32352e3233362e302f32332d3234203d3e20313533313035.roa (hash: NFuKh4QURKhti5ts/RHCyWk9MjNgIHs/zpDCkdJPOO8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.crl rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 03:43:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:13:f8:0a:78:7d:1d:39:ec:4f:09:e4:c7:d4:31:20:70:68:f3:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1 Validity Not Before: Sep 23 00:47:19 2026 GMT Not After : Sep 24 03:43:19 2026 GMT Subject: CN=580BBEB7CACA5C2F482F79D220051BE26DBB7AFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:21:25:28:14:25:b6:0c:00:6a:ca:78:f8:ae: 06:62:40:64:4f:d5:1d:2b:45:46:2e:3f:51:5f:b3: ac:fc:1a:24:b5:ed:e6:69:18:59:b2:65:a3:9f:cc: 3e:16:38:a1:cd:18:f1:5a:6d:70:48:23:a5:92:f7: bc:f3:ff:d1:f9:26:83:ac:b9:ce:dc:fb:34:1c:33: 46:e7:67:65:f9:4b:19:51:c2:f4:10:c9:34:bc:2f: 45:66:b1:2d:79:11:2b:02:55:13:db:e3:7e:3e:71: f0:2e:14:36:e7:4d:93:8e:88:f0:50:cc:4b:a3:06: 88:8a:c4:b2:81:6a:73:77:04:0a:bc:77:8c:01:41: 03:3b:32:cc:9e:5a:20:27:8b:af:b7:69:4d:3e:70: f7:0d:cd:75:1f:99:c6:5b:26:3f:2f:2b:ab:67:d3: 74:a4:30:79:8b:1e:40:e4:fe:b9:18:9d:18:3f:59: d8:78:15:2b:9a:71:d7:ed:d6:39:65:34:e3:f3:2d: c2:a8:45:4a:35:83:7d:1d:b0:25:74:c3:fc:de:31: 90:d9:12:cb:64:71:b9:8f:98:0b:ba:21:64:c0:56: 2c:20:49:07:d0:3b:05:57:29:54:2b:4f:18:34:27: b9:b2:f9:05:c8:77:1c:18:28:e3:8f:1a:50:96:1c: 75:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:0B:BE:B7:CA:CA:5C:2F:48:2F:79:D2:20:05:1B:E2:6D:BB:7A:FF X509v3 Authority Key Identifier: keyid:C0:FD:03:30:B0:66:5A:32:4B:ED:EF:57:93:F7:3F:D4:FA:6F:30:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:27:dd:17:c3:b6:2b:cb:e4:53:85:f3:af:90:77:c0:f6:82: c5:06:73:ce:f1:5f:1c:7c:05:dd:ba:dd:c0:27:d8:5d:4f:42: 8b:8f:9e:c0:38:d8:89:dc:03:df:cf:1b:b4:2e:f5:f3:43:f0: ba:2a:4b:59:b5:7f:e6:ae:36:71:40:25:21:3b:5e:0b:6c:01: 34:01:f9:22:2c:02:c8:de:2e:6b:78:a3:24:39:e1:fe:05:74: 86:63:c0:c7:fc:2f:55:d7:13:fe:dc:2d:5f:0e:93:02:fd:43: a9:db:88:d4:1c:94:5c:80:6c:cf:6b:a4:ac:1c:09:63:e2:4e: 6f:9b:0d:15:23:67:a0:b5:4c:a9:c2:4e:76:ec:a1:7b:7a:7a: 4b:06:53:14:aa:e8:8c:55:09:82:71:65:8d:1b:fd:27:09:ad: a1:1d:af:60:7a:82:29:ba:4b:be:f3:e0:bb:59:d5:0f:3e:03: be:8b:f4:38:12:fa:1d:48:3b:5e:45:6b:4d:6d:31:5f:ff:86: 00:0d:a1:81:18:30:a0:40:cd:4d:09:3a:37:8b:a7:3a:70:56: 06:32:0e:4f:30:3c:63:0c:25:03:ad:6c:48:09:a6:51:3d:bc: ed:a1:e6:9b:be:1a:ea:80:84:da:30:72:3e:3d:af:6f:5d:fe: 1e:41:bc:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUORP4Cnh9HTnsTwnkx9QxIHBo8xEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBGRDAzMzBCMDY2NUEzMjRCRURFRjU3OTNGNzNGRDRG QTZGMzBDMTAeFw0yNjA5MjMwMDQ3MTlaFw0yNjA5MjQwMzQzMTlaMDMxMTAvBgNV BAMTKDU4MEJCRUI3Q0FDQTVDMkY0ODJGNzlEMjIwMDUxQkUyNkRCQjdBRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwISUoFCW2DABqynj4rgZiQGRP 1R0rRUYuP1Ffs6z8GiS17eZpGFmyZaOfzD4WOKHNGPFabXBII6WS97zz/9H5JoOs uc7c+zQcM0bnZ2X5SxlRwvQQyTS8L0VmsS15ESsCVRPb434+cfAuFDbnTZOOiPBQ zEujBoiKxLKBanN3BAq8d4wBQQM7MsyeWiAni6+3aU0+cPcNzXUfmcZbJj8vK6tn 03SkMHmLHkDk/rkYnRg/Wdh4FSuacdft1jllNOPzLcKoRUo1g30dsCV0w/zeMZDZ EstkcbmPmAu6IWTAViwgSQfQOwVXKVQrTxg0J7my+QXIdxwYKOOPGlCWHHUhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWAu+t8rKXC9IL3nSIAUb4m27ev8wHwYDVR0j BBgwFoAUwP0DMLBmWjJL7e9Xk/c/1PpvMMEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGVjMmExYWMtNWFlNC00N2FkLThkYjEtNjUyYzdmM2Y3ZThmLzAvQzBGRDAzMzBC MDY2NUEzMjRCRURFRjU3OTNGNzNGRDRGQTZGMzBDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DMEZEMDMzMEIwNjY1QTMyNEJFREVGNTc5M0Y3M0ZENEZBNkYz MEMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGVjMmExYWMtNWFlNC00N2FkLThk YjEtNjUyYzdmM2Y3ZThmLzAvQzBGRDAzMzBCMDY2NUEzMjRCRURFRjU3OTNGNzNG RDRGQTZGMzBDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG0n3RfDtivL5FOF86+Qd8D2gsUGc87xXxx8 Bd263cAn2F1PQouPnsA42IncA9/PG7Qu9fND8LoqS1m1f+auNnFAJSE7XgtsATQB +SIsAsjeLmt4oyQ54f4FdIZjwMf8L1XXE/7cLV8OkwL9Q6nbiNQclFyAbM9rpKwc CWPiTm+bDRUjZ6C1TKnCTnbsoXt6eksGUxSq6IxVCYJxZY0b/ScJraEdr2B6gim6 S77z4LtZ1Q8+A76L9DgS+h1IO15Fa01tMV//hgANoYEYMKBAzU0JOjeLpzpwVgYy Dk8wPGMMJQOtbEgJplE9vO2h5pu+GuqAhNowcj49r29d/h5BvBg= -----END CERTIFICATE-----Generated at Wed Sep 23 11:28:22 2026 by rpki-client