$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/0834397E0D61D0AABF517AF83A3C2BA1DB62C242.mft File: 0834397E0D61D0AABF517AF83A3C2BA1DB62C242.mft (raw, json) Hash identifier: CZ9/10YYDauFqK0kbnMlgzXQsLpzppvi68cwwddRWps= Subject key identifier: EB:65:D3:70:0A:A1:15:D7:CB:FA:B6:77:82:1B:A0:2B:35:C9:D8:36 Authority key identifier: 08:34:39:7E:0D:61:D0:AA:BF:51:7A:F8:3A:3C:2B:A1:DB:62:C2:42 Certificate issuer: /CN=0834397E0D61D0AABF517AF83A3C2BA1DB62C242 Certificate serial: 5A31960CEB5D3F7DAB69418953BEBB629AFFB379 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0834397E0D61D0AABF517AF83A3C2BA1DB62C242.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/0834397E0D61D0AABF517AF83A3C2BA1DB62C242.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 06:13:39 +0000 Manifest this update: Wed 23 Sep 2026 06:08:39 +0000 Manifest next update: Thu 24 Sep 2026 08:53:39 +0000 Files and hashes: 1: 0834397E0D61D0AABF517AF83A3C2BA1DB62C242.crl (hash: rzJoGdZWRglcNSNbBhxQbt+GPc4ebikWrcSA1sVBTPg=) 2: 3130332e3135382e3139362e302f32342d3234203d3e20313431313333.roa (hash: +HdgvP+uGxgAxogBbgKZdpEZmiEj0DQvXIC1nOPvcEc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/0834397E0D61D0AABF517AF83A3C2BA1DB62C242.crl rsync://rpki-rsync.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/0834397E0D61D0AABF517AF83A3C2BA1DB62C242.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0834397E0D61D0AABF517AF83A3C2BA1DB62C242.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 08:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:31:96:0c:eb:5d:3f:7d:ab:69:41:89:53:be:bb:62:9a:ff:b3:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0834397E0D61D0AABF517AF83A3C2BA1DB62C242 Validity Not Before: Sep 23 06:08:39 2026 GMT Not After : Sep 24 08:53:39 2026 GMT Subject: CN=EB65D3700AA115D7CBFAB677821BA02B35C9D836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ce:2d:d0:45:e4:f5:49:74:ef:e6:a3:56:6a: 76:68:a9:02:67:eb:45:25:e9:bc:33:85:ed:13:a0: ad:ae:55:fa:67:78:47:65:a0:cf:70:84:5c:07:b4: 4c:04:f6:10:1e:1b:8f:4a:aa:76:f8:87:74:17:c3: 31:bc:39:e5:ed:a8:19:3a:03:c8:21:d7:60:7b:b3: f2:53:d9:e9:de:78:59:38:39:e7:51:74:fd:8d:2f: 11:4d:05:b0:01:da:8b:5e:4b:2a:86:88:77:cc:28: 45:dc:aa:38:35:8b:0b:69:08:e0:cf:e6:22:ba:2a: b5:f5:dd:28:db:4e:f4:1e:a2:db:9d:cc:97:a9:f8: 59:a0:77:fa:46:12:eb:10:d6:e1:2a:31:1b:59:2f: d5:cc:b8:a9:ad:04:0a:b1:30:e4:8b:7e:c4:1c:3e: a9:fd:2a:3b:3c:f9:ca:e8:6b:f7:da:ff:fc:a9:b6: 48:0b:fd:29:f6:cc:47:e5:71:1e:f0:0b:9a:23:77: 5a:8f:9a:73:80:83:ff:99:d5:c9:6d:7a:1c:69:16: d6:12:04:94:f2:87:af:01:59:9a:c1:01:87:64:ac: ce:27:82:1b:c4:ff:23:64:aa:82:e3:a5:44:fd:1b: fa:e8:59:9b:d1:e2:61:56:44:eb:c7:fe:bb:40:d1: dc:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:65:D3:70:0A:A1:15:D7:CB:FA:B6:77:82:1B:A0:2B:35:C9:D8:36 X509v3 Authority Key Identifier: keyid:08:34:39:7E:0D:61:D0:AA:BF:51:7A:F8:3A:3C:2B:A1:DB:62:C2:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/0834397E0D61D0AABF517AF83A3C2BA1DB62C242.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0834397E0D61D0AABF517AF83A3C2BA1DB62C242.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/0834397E0D61D0AABF517AF83A3C2BA1DB62C242.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:31:f1:65:7e:90:64:16:1f:a7:29:aa:16:60:6f:4b:e6:b6: b8:71:ff:1f:d5:f3:25:d7:76:1a:e2:8c:cd:36:a9:7e:c0:27: dc:ee:d7:88:13:12:91:da:9a:24:6e:13:76:33:ff:c2:4e:d6: 9e:dd:d1:e6:ac:fe:84:02:ae:f6:14:af:ae:32:ee:cd:87:73: 2d:df:4e:4f:7a:21:e3:20:a1:7c:64:73:e3:4b:39:43:f6:ff: 98:b4:63:95:8e:53:1e:b1:e9:7f:77:ab:3d:92:64:36:b7:fa: 9e:f6:c3:22:5a:7e:84:05:7e:26:6a:ab:e8:4d:6b:78:54:13: b5:f4:b3:8a:a5:0b:c9:d9:b4:e5:63:3c:a1:75:49:6a:be:eb: 4a:c5:ee:d8:ac:ee:f5:05:f6:c4:91:92:1f:73:58:24:f0:8b: f7:a7:89:0d:e8:28:d8:e1:be:a4:a2:19:0a:e5:4c:b2:7e:c2: ef:4c:6d:92:fa:a8:07:4d:81:1f:24:82:05:00:81:e6:81:62: 72:3b:df:8a:fb:e9:35:78:cd:c1:da:a3:23:ec:3a:11:f7:a1: 77:81:76:8e:9d:a2:a3:61:ce:14:7a:68:10:f7:08:cb:3e:4a: 6b:d8:17:d9:17:cc:29:8c:4d:ec:21:80:dd:fc:69:88:04:6c: 79:05:8c:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWjGWDOtdP32raUGJU767Ypr/s3kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDgzNDM5N0UwRDYxRDBBQUJGNTE3QUY4M0EzQzJCQTFE QjYyQzI0MjAeFw0yNjA5MjMwNjA4MzlaFw0yNjA5MjQwODUzMzlaMDMxMTAvBgNV BAMTKEVCNjVEMzcwMEFBMTE1RDdDQkZBQjY3NzgyMUJBMDJCMzVDOUQ4MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvzi3QReT1SXTv5qNWanZoqQJn 60Ul6bwzhe0ToK2uVfpneEdloM9whFwHtEwE9hAeG49Kqnb4h3QXwzG8OeXtqBk6 A8gh12B7s/JT2eneeFk4OedRdP2NLxFNBbAB2oteSyqGiHfMKEXcqjg1iwtpCODP 5iK6KrX13SjbTvQeotudzJep+Fmgd/pGEusQ1uEqMRtZL9XMuKmtBAqxMOSLfsQc Pqn9Kjs8+croa/fa//yptkgL/Sn2zEflcR7wC5ojd1qPmnOAg/+Z1cltehxpFtYS BJTyh68BWZrBAYdkrM4nghvE/yNkqoLjpUT9G/roWZvR4mFWROvH/rtA0dzLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU62XTcAqhFdfL+rZ3ghugKzXJ2DYwHwYDVR0j BBgwFoAUCDQ5fg1h0Kq/UXr4OjwrodtiwkIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZkZGNiNGItNmQ4ZS00NTliLThhYTItOTlhNjA4ODYyNTZhLzAvMDgzNDM5N0Uw RDYxRDBBQUJGNTE3QUY4M0EzQzJCQTFEQjYyQzI0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wODM0Mzk3RTBENjFEMEFBQkY1MTdBRjgzQTNDMkJBMURCNjJD MjQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZkZGNiNGItNmQ4ZS00NTliLThh YTItOTlhNjA4ODYyNTZhLzAvMDgzNDM5N0UwRDYxRDBBQUJGNTE3QUY4M0EzQzJC QTFEQjYyQzI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHIx8WV+kGQWH6cpqhZgb0vmtrhx/x/V8yXX dhrijM02qX7AJ9zu14gTEpHamiRuE3Yz/8JO1p7d0eas/oQCrvYUr64y7s2Hcy3f Tk96IeMgoXxkc+NLOUP2/5i0Y5WOUx6x6X93qz2SZDa3+p72wyJafoQFfiZqq+hN a3hUE7X0s4qlC8nZtOVjPKF1SWq+60rF7tis7vUF9sSRkh9zWCTwi/eniQ3oKNjh vqSiGQrlTLJ+wu9MbZL6qAdNgR8kggUAgeaBYnI734r76TV4zcHaoyPsOhH3oXeB do6doqNhzhR6aBD3CMs+SmvYF9kXzCmMTewhgN38aYgEbHkFjE8= -----END CERTIFICATE-----Generated at Thu Sep 24 02:36:14 2026 by rpki-client