$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.mft File: CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.mft (raw, json) Hash identifier: voizwNRX+JzByA0Q3R9aHmcs1rm+2BxfbDTqRgPdGNE= Subject key identifier: 67:52:6B:DA:6B:1C:B7:EF:53:B1:EA:A2:10:91:19:A0:1C:FB:D3:FD Authority key identifier: CD:47:4E:79:16:37:1A:E6:AC:CF:87:42:2C:4E:A8:D4:E5:3D:1E:D1 Certificate issuer: /CN=CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1 Certificate serial: 7F0ED4BD6ADA899645954C420B64EEE23124FF63 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 11:45:36 +0000 Manifest this update: Wed 23 Sep 2026 11:40:36 +0000 Manifest next update: Thu 24 Sep 2026 14:19:36 +0000 Files and hashes: 1: 3130332e35342e38322e302f32342d3234203d3e20313530353132.roa (hash: wOpjCYu2B/2dvfL2/p92TM51IsDnzUPICTzMvcgVUFY=) 2: 3130332e35342e38322e302f32332d3233203d3e20313530353132.roa (hash: bbQqob1JTbWw2rvNr6s3TBx3HaklMvpVDZzpBLfCECs=) 3: CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.crl (hash: FLbKygjRiOtO+sJjmDd4KOsq/gsa4mrVemyn1GOzVoQ=) 4: 3130332e35342e38332e302f32342d3234203d3e20313530353132.roa (hash: yc9l1FWLsdkyL80KmG/CENv1nMl40+rlvUGHbaIRcrU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.crl rsync://rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 14:19:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:0e:d4:bd:6a:da:89:96:45:95:4c:42:0b:64:ee:e2:31:24:ff:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1 Validity Not Before: Sep 23 11:40:36 2026 GMT Not After : Sep 24 14:19:36 2026 GMT Subject: CN=67526BDA6B1CB7EF53B1EAA2109119A01CFBD3FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1b:00:fa:df:8f:87:5d:90:68:a8:77:4c:e6: 0a:25:ab:4f:c3:ec:79:ba:02:f7:a8:f4:d0:f9:4a: d6:74:49:44:e9:aa:b7:c8:d0:c3:fe:8f:57:f8:22: f8:42:49:6e:13:9e:13:64:91:3a:a5:a6:af:98:3b: a0:04:00:9f:71:39:31:bf:b5:72:ce:59:a4:13:15: df:91:bc:1a:9e:59:d6:ef:2f:61:92:d1:5a:76:56: 2d:cc:51:40:47:1b:8c:e0:90:10:da:30:be:12:65: 92:36:a9:d5:4c:40:cd:01:4d:94:16:90:1d:df:54: 35:21:f9:3d:07:e3:d2:20:75:26:c2:ad:dc:55:cd: 32:55:fa:fc:f1:8c:d3:aa:d7:9d:cc:47:5a:99:18: fd:e2:e3:ba:c7:34:01:09:9e:63:f8:ed:14:79:6c: 5d:5a:38:3c:14:20:23:84:85:83:6c:2a:f8:4d:b2: 1a:cd:3d:2e:69:6b:ce:fe:99:b4:fa:a2:92:a3:48: 45:f7:fa:05:c1:d2:3a:3e:aa:3b:bc:28:b5:5a:00: 3c:c8:a5:70:3d:1e:09:0c:05:80:16:b7:f1:72:1e: f8:3c:9d:b4:8b:2f:50:b8:bd:18:41:e5:98:10:2d: dd:4f:b7:ae:f5:d0:e6:29:f4:ea:42:c5:57:e5:0e: a9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:52:6B:DA:6B:1C:B7:EF:53:B1:EA:A2:10:91:19:A0:1C:FB:D3:FD X509v3 Authority Key Identifier: keyid:CD:47:4E:79:16:37:1A:E6:AC:CF:87:42:2C:4E:A8:D4:E5:3D:1E:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:b7:d2:b8:18:48:14:f4:e9:fa:1a:57:62:4c:3d:a4:ce:6b: e9:05:61:4a:f0:0f:16:f8:1f:8e:d4:e7:0e:7d:07:9c:dc:ae: 0d:5b:37:be:43:a7:a1:f8:6f:b6:bd:fa:d2:76:3a:79:e0:ec: 30:59:2f:f4:1e:12:17:e6:87:95:e3:e5:03:3b:30:ca:88:57: ea:5e:76:db:a2:12:a2:59:49:c1:cf:10:b4:ed:a3:a2:bb:ec: be:8f:92:16:3c:90:c7:5d:08:33:bb:76:7e:be:90:76:be:da: 27:03:25:ad:c9:25:7a:2f:41:c6:ee:1d:90:2e:40:64:87:8a: f3:84:34:4c:bb:e8:bf:15:04:b3:2a:da:79:4f:d4:d7:1c:7b: 71:99:e7:65:d7:86:6a:31:1b:87:a0:1d:fc:b3:cd:19:31:eb: 1c:00:8f:77:5a:84:62:9d:20:4a:5a:35:c1:c7:8a:fd:3e:bc: d8:a8:43:45:e5:b5:e5:8f:40:db:4b:20:19:56:17:c3:17:64: 74:5d:d0:c9:5b:82:fe:a6:1b:27:79:5b:46:42:3f:e4:e2:21: 75:91:b8:42:44:1e:c9:9e:bc:09:2c:3d:57:fe:a4:53:12:02: 23:51:14:ea:8a:43:e5:ff:21:e4:f5:af:a3:00:27:bf:3a:8f: 80:e2:ae:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfw7UvWraiZZFlUxCC2Tu4jEk/2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q0NzRFNzkxNjM3MUFFNkFDQ0Y4NzQyMkM0RUE4RDRF NTNEMUVEMTAeFw0yNjA5MjMxMTQwMzZaFw0yNjA5MjQxNDE5MzZaMDMxMTAvBgNV BAMTKDY3NTI2QkRBNkIxQ0I3RUY1M0IxRUFBMjEwOTExOUEwMUNGQkQzRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0GwD634+HXZBoqHdM5golq0/D 7Hm6Aveo9ND5StZ0SUTpqrfI0MP+j1f4IvhCSW4TnhNkkTqlpq+YO6AEAJ9xOTG/ tXLOWaQTFd+RvBqeWdbvL2GS0Vp2Vi3MUUBHG4zgkBDaML4SZZI2qdVMQM0BTZQW kB3fVDUh+T0H49IgdSbCrdxVzTJV+vzxjNOq153MR1qZGP3i47rHNAEJnmP47RR5 bF1aODwUICOEhYNsKvhNshrNPS5pa87+mbT6opKjSEX3+gXB0jo+qju8KLVaADzI pXA9HgkMBYAWt/FyHvg8nbSLL1C4vRhB5ZgQLd1Pt6710OYp9OpCxVflDqmvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ1Jr2msct+9TseqiEJEZoBz70/0wHwYDVR0j BBgwFoAUzUdOeRY3Guasz4dCLE6o1OU9HtEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZThkZTk0NjMtNjhhNy00NjJkLTk0MDgtYTdjMzljZTZlOGZmLzAvQ0Q0NzRFNzkx NjM3MUFFNkFDQ0Y4NzQyMkM0RUE4RDRFNTNEMUVEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRDQ3NEU3OTE2MzcxQUU2QUNDRjg3NDIyQzRFQThENEU1M0Qx RUQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZThkZTk0NjMtNjhhNy00NjJkLTk0 MDgtYTdjMzljZTZlOGZmLzAvQ0Q0NzRFNzkxNjM3MUFFNkFDQ0Y4NzQyMkM0RUE4 RDRFNTNEMUVEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF+30rgYSBT06foaV2JMPaTOa+kFYUrwDxb4 H47U5w59B5zcrg1bN75Dp6H4b7a9+tJ2Onng7DBZL/QeEhfmh5Xj5QM7MMqIV+pe dtuiEqJZScHPELTto6K77L6PkhY8kMddCDO7dn6+kHa+2icDJa3JJXovQcbuHZAu QGSHivOENEy76L8VBLMq2nlP1Ncce3GZ52XXhmoxG4egHfyzzRkx6xwAj3dahGKd IEpaNcHHiv0+vNioQ0XlteWPQNtLIBlWF8MXZHRd0Mlbgv6mGyd5W0ZCP+TiIXWR uEJEHsmevAksPVf+pFMSAiNRFOqKQ+X/IeT1r6MAJ786j4DiruI= -----END CERTIFICATE-----Generated at Thu Sep 24 02:46:07 2026 by rpki-client