$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.mft File: 986AA3A06E40D171D993DC74DEF4BE498C29EDC5.mft (raw, json) Hash identifier: oKm+tdpq4OFMhkbjJBNIXcaGGDiztmBEDmkLOGBpCB0= Subject key identifier: F2:FC:20:19:A6:7C:6F:B6:51:4C:F6:AE:00:A5:7A:75:23:1B:A6:DE Authority key identifier: 98:6A:A3:A0:6E:40:D1:71:D9:93:DC:74:DE:F4:BE:49:8C:29:ED:C5 Certificate issuer: /CN=986AA3A06E40D171D993DC74DEF4BE498C29EDC5 Certificate serial: 4C1884C9FAF38F138E9C3B7F4E09ACED9816DF0C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 16:11:05 +0000 Manifest this update: Wed 23 Sep 2026 16:06:05 +0000 Manifest next update: Thu 24 Sep 2026 19:44:05 +0000 Files and hashes: 1: 986AA3A06E40D171D993DC74DEF4BE498C29EDC5.crl (hash: YEnRtY698/A36IoHFOZWPi00o/21y5UdmUMFwzqSObI=) 2: 3130332e3133302e38302e302f32332d3234203d3e20313339393737.roa (hash: CodcG2RlcElofIyHkhWkjp7iwOM0brF/BMzNO8nhSZI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.crl rsync://rpki-rsync.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 19:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:18:84:c9:fa:f3:8f:13:8e:9c:3b:7f:4e:09:ac:ed:98:16:df:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=986AA3A06E40D171D993DC74DEF4BE498C29EDC5 Validity Not Before: Sep 23 16:06:05 2026 GMT Not After : Sep 24 19:44:05 2026 GMT Subject: CN=F2FC2019A67C6FB6514CF6AE00A57A75231BA6DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7a:5a:94:c7:a3:83:db:02:21:c3:2c:33:51: 65:2f:51:e0:4d:88:d5:6c:34:83:da:d8:f9:7d:52: e0:c7:c6:85:25:19:79:a6:ee:0c:09:09:57:7e:97: cb:38:a4:50:d7:34:36:36:d7:e3:c7:34:c5:50:59: 08:af:26:0f:0e:e1:50:9f:27:c2:c2:b3:ef:bc:16: 13:8f:f5:38:3b:ff:22:0f:cd:22:2b:41:88:4b:f2: c7:f3:c8:1c:f0:4a:32:b2:ab:df:de:10:c4:f2:32: c8:26:c4:70:d5:5b:55:e8:ac:8b:19:e9:ea:48:c9: 94:73:b2:1b:a7:8d:2e:31:94:b6:89:e7:62:09:51: 69:3b:0e:3b:15:87:ad:a4:07:d7:38:69:f0:53:48: 4c:1d:60:e0:bc:6d:c0:df:5a:7a:26:96:b9:c8:8b: 5e:23:cb:ed:7a:23:01:a9:b4:8a:ff:ff:91:5e:23: 92:df:3c:3e:d9:22:b8:83:4e:8a:0b:57:d4:db:0e: c5:60:ba:c0:ab:d1:b7:7d:88:af:3b:d8:e5:48:c4: 1c:24:21:23:78:bc:92:09:d3:d4:87:91:7b:0c:b7: e3:63:42:4c:e6:48:0a:57:ee:4b:54:24:cd:89:4f: 7e:e1:82:ae:9c:be:5a:40:03:55:8e:7c:f7:6d:9a: 55:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:FC:20:19:A6:7C:6F:B6:51:4C:F6:AE:00:A5:7A:75:23:1B:A6:DE X509v3 Authority Key Identifier: keyid:98:6A:A3:A0:6E:40:D1:71:D9:93:DC:74:DE:F4:BE:49:8C:29:ED:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:46:98:d7:9f:a6:54:1d:c2:9b:32:1e:b3:fe:6a:2c:78:04: 6d:51:c2:cb:87:81:19:2f:ae:d9:4d:2d:03:d9:ed:25:d8:c1: d5:89:df:96:a8:76:eb:15:d0:5a:a5:13:88:7d:97:e6:eb:10: 63:6b:bf:60:2a:07:8e:39:ec:b6:aa:58:80:c5:97:1e:10:82: 5c:33:59:ca:e5:05:55:de:d8:25:7f:5a:c6:95:04:b3:c6:d5: 14:69:f2:be:89:ed:e8:56:24:1c:df:03:9e:6f:58:25:33:cf: b6:4b:69:08:9f:e7:54:32:5d:d6:b3:28:1e:69:8d:11:6a:28: 91:51:bc:65:5a:03:13:41:91:ff:c5:21:29:d2:9c:b0:1c:8b: d5:2f:90:ad:79:0c:37:ec:49:97:c5:f0:70:9c:0a:62:c9:b1: e7:17:54:a4:ef:7b:43:93:0f:7d:04:67:19:1d:7c:27:04:1a: 2b:85:44:a9:db:c3:f7:5b:a1:6c:72:97:d6:61:f6:29:db:1a: 45:69:70:f2:2e:29:2c:fe:e6:83:ec:98:8d:e0:a8:e0:a4:58: 9a:90:2f:8d:58:25:d1:b2:e0:a2:ca:9f:a9:b6:20:fc:bd:d9: 66:6a:d5:fd:27:11:06:eb:bd:d6:81:62:0d:40:24:f9:17:45: 20:85:cc:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTBiEyfrzjxOOnDt/Tgms7ZgW3wwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg2QUEzQTA2RTQwRDE3MUQ5OTNEQzc0REVGNEJFNDk4 QzI5RURDNTAeFw0yNjA5MjMxNjA2MDVaFw0yNjA5MjQxOTQ0MDVaMDMxMTAvBgNV BAMTKEYyRkMyMDE5QTY3QzZGQjY1MTRDRjZBRTAwQTU3QTc1MjMxQkE2REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9elqUx6OD2wIhwywzUWUvUeBN iNVsNIPa2Pl9UuDHxoUlGXmm7gwJCVd+l8s4pFDXNDY21+PHNMVQWQivJg8O4VCf J8LCs++8FhOP9Tg7/yIPzSIrQYhL8sfzyBzwSjKyq9/eEMTyMsgmxHDVW1XorIsZ 6epIyZRzshunjS4xlLaJ52IJUWk7DjsVh62kB9c4afBTSEwdYOC8bcDfWnomlrnI i14jy+16IwGptIr//5FeI5LfPD7ZIriDTooLV9TbDsVgusCr0bd9iK872OVIxBwk ISN4vJIJ09SHkXsMt+NjQkzmSApX7ktUJM2JT37hgq6cvlpAA1WOfPdtmlWNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8vwgGaZ8b7ZRTPauAKV6dSMbpt4wHwYDVR0j BBgwFoAUmGqjoG5A0XHZk9x03vS+SYwp7cUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTRhZTU3YjMtNDZhMi00MjNkLWIyNDQtMDNmZmVlMTA1Yjc3LzAvOTg2QUEzQTA2 RTQwRDE3MUQ5OTNEQzc0REVGNEJFNDk4QzI5RURDNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85ODZBQTNBMDZFNDBEMTcxRDk5M0RDNzRERUY0QkU0OThDMjlF REM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTRhZTU3YjMtNDZhMi00MjNkLWIy NDQtMDNmZmVlMTA1Yjc3LzAvOTg2QUEzQTA2RTQwRDE3MUQ5OTNEQzc0REVGNEJF NDk4QzI5RURDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGtGmNefplQdwpsyHrP+aix4BG1RwsuHgRkv rtlNLQPZ7SXYwdWJ35aodusV0FqlE4h9l+brEGNrv2AqB4457LaqWIDFlx4Qglwz WcrlBVXe2CV/WsaVBLPG1RRp8r6J7ehWJBzfA55vWCUzz7ZLaQif51QyXdazKB5p jRFqKJFRvGVaAxNBkf/FISnSnLAci9UvkK15DDfsSZfF8HCcCmLJsecXVKTve0OT D30EZxkdfCcEGiuFRKnbw/dboWxyl9Zh9inbGkVpcPIuKSz+5oPsmI3gqOCkWJqQ L41YJdGy4KLKn6m2IPy92WZq1f0nEQbrvdaBYg1AJPkXRSCFzEk= -----END CERTIFICATE-----Generated at Wed Sep 23 21:58:16 2026 by rpki-client