$ rpki-client -vvvf rpki-rsync.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/D341D8EA81805778BAF0FC25804627AB205A595B.mft File: D341D8EA81805778BAF0FC25804627AB205A595B.mft (raw, json) Hash identifier: I1hTSCWYYW/2x6WpDjYh+cDfp0NVOnWfbO3UvUZ8rbs= Subject key identifier: EA:07:55:B9:2C:10:98:6D:84:0F:97:43:31:59:4D:AA:E6:5F:09:68 Authority key identifier: D3:41:D8:EA:81:80:57:78:BA:F0:FC:25:80:46:27:AB:20:5A:59:5B Certificate issuer: /CN=D341D8EA81805778BAF0FC25804627AB205A595B Certificate serial: 3C713EFDC3261D2CFB27BDF4B081110DF555D700 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D341D8EA81805778BAF0FC25804627AB205A595B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/D341D8EA81805778BAF0FC25804627AB205A595B.mft Manifest number: BE Signing time: Mon 21 Sep 2026 21:48:36 +0000 Manifest this update: Mon 21 Sep 2026 21:43:36 +0000 Manifest next update: Wed 23 Sep 2026 01:23:36 +0000 Files and hashes: 1: D341D8EA81805778BAF0FC25804627AB205A595B.crl (hash: /lw6W6KB6K1hdzApNdeMPjYp5MqsXzyg8S9++1TCtFU=) 2: 3130332e3138362e3230382e302f32342d3234203d3e20313337333331.roa (hash: 9bLzC5cJz/hB1T6TsZaVOeXIoTd9norVTABcvOz2X24=) 3: 3130332e3138362e3230392e302f32342d3234203d3e20313336383733.roa (hash: xc3Q1ltrywVJe3y21qqPN5TWdfqkKkKR0OL3qOrG5oc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/D341D8EA81805778BAF0FC25804627AB205A595B.crl rsync://rpki-rsync.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/D341D8EA81805778BAF0FC25804627AB205A595B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D341D8EA81805778BAF0FC25804627AB205A595B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 01:23:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:71:3e:fd:c3:26:1d:2c:fb:27:bd:f4:b0:81:11:0d:f5:55:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D341D8EA81805778BAF0FC25804627AB205A595B Validity Not Before: Sep 21 21:43:36 2026 GMT Not After : Sep 23 01:23:36 2026 GMT Subject: CN=EA0755B92C10986D840F974331594DAAE65F0968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:19:1c:b2:14:43:08:f6:95:af:a2:2f:ac:2d: 5d:b0:eb:cb:2e:95:7a:aa:8f:24:81:ea:b0:d6:a3: 63:b6:b5:dc:b0:f9:e3:51:35:f9:72:06:ca:82:2f: 8e:84:02:26:85:9b:f6:94:3a:aa:b3:ef:2c:fb:26: 89:cb:2c:36:36:5e:94:94:5c:9b:a3:9c:42:bb:b0: 48:91:37:f3:81:f6:37:f9:e0:e6:e0:52:82:77:73: f2:04:71:13:59:1c:6c:72:5d:65:be:7c:c1:27:59: ab:77:87:fa:ce:39:9a:08:2a:31:6a:22:53:cd:7d: 95:be:25:90:ce:5e:57:f1:33:6d:25:8b:8a:97:5a: 3c:d8:85:db:ce:ca:03:ef:94:ce:14:68:79:3f:27: 1f:ea:7f:03:df:e6:fe:a0:b7:db:9a:e6:43:d4:c9: 88:7d:48:25:ea:07:ef:47:d8:7f:8a:90:8b:ba:9c: a6:fa:3d:bc:e7:8f:ff:c2:dc:1e:df:16:1d:4b:ef: 29:17:2f:17:1e:b8:20:34:bb:cc:be:45:c7:08:f5: 9b:ef:82:87:d5:98:bd:74:ff:e6:c5:19:c4:7a:a3: 09:3a:99:9a:d1:13:5d:8b:a6:73:ec:c1:d0:15:6f: 9b:fa:d5:52:40:8c:87:77:0f:05:59:37:56:00:25: 93:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:07:55:B9:2C:10:98:6D:84:0F:97:43:31:59:4D:AA:E6:5F:09:68 X509v3 Authority Key Identifier: keyid:D3:41:D8:EA:81:80:57:78:BA:F0:FC:25:80:46:27:AB:20:5A:59:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/D341D8EA81805778BAF0FC25804627AB205A595B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D341D8EA81805778BAF0FC25804627AB205A595B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/D341D8EA81805778BAF0FC25804627AB205A595B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:e4:6e:a1:7a:e7:ed:88:c8:0d:97:7a:17:6b:63:9e:84:d3: da:c3:11:68:6e:90:03:1a:e3:a4:6d:28:65:fe:af:4a:7c:54: 91:8a:b5:af:cf:af:2d:46:0d:94:f7:09:7c:45:0f:5c:b4:9e: bd:e2:b0:6d:ee:fa:4e:e6:84:c4:e2:6c:1b:f4:99:df:a8:67: 83:bd:50:4d:9d:0d:5f:e8:81:57:fb:79:64:ac:23:00:c1:72: e8:88:33:0a:42:9d:5b:bd:f7:5d:9c:fb:4d:89:50:17:9b:57: 8d:c0:55:f9:6b:c0:c6:bf:d8:0f:78:43:18:71:6e:a2:de:4e: f2:4a:b8:54:6e:8a:29:dd:5a:df:5b:bc:82:6a:f6:80:60:b1: 34:7e:97:7f:84:b5:4f:99:18:d7:db:5b:8b:bd:92:f9:e0:45: d1:af:da:95:c6:13:3f:3e:f3:a1:55:7b:1c:eb:2a:69:b7:c7: d1:35:2a:a2:2b:4d:1d:cf:3b:d9:38:5c:1a:f1:d2:94:c9:34: 8a:f7:26:66:ea:40:d9:52:0b:0d:e7:3b:86:3a:32:d3:6b:23: b6:ff:59:c7:38:0b:26:f8:67:d7:36:ff:54:c4:1d:3e:cb:b8: 63:1a:73:1f:42:df:ab:a1:37:eb:3d:73:19:79:20:11:e2:4b: 9f:45:69:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPHE+/cMmHSz7J730sIERDfVV1wAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0MUQ4RUE4MTgwNTc3OEJBRjBGQzI1ODA0NjI3QUIy MDVBNTk1QjAeFw0yNjA5MjEyMTQzMzZaFw0yNjA5MjMwMTIzMzZaMDMxMTAvBgNV BAMTKEVBMDc1NUI5MkMxMDk4NkQ4NDBGOTc0MzMxNTk0REFBRTY1RjA5NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNGRyyFEMI9pWvoi+sLV2w68su lXqqjySB6rDWo2O2tdyw+eNRNflyBsqCL46EAiaFm/aUOqqz7yz7JonLLDY2XpSU XJujnEK7sEiRN/OB9jf54ObgUoJ3c/IEcRNZHGxyXWW+fMEnWat3h/rOOZoIKjFq IlPNfZW+JZDOXlfxM20li4qXWjzYhdvOygPvlM4UaHk/Jx/qfwPf5v6gt9ua5kPU yYh9SCXqB+9H2H+KkIu6nKb6Pbznj//C3B7fFh1L7ykXLxceuCA0u8y+RccI9Zvv gofVmL10/+bFGcR6owk6mZrRE12LpnPswdAVb5v61VJAjId3DwVZN1YAJZNDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6gdVuSwQmG2ED5dDMVlNquZfCWgwHwYDVR0j BBgwFoAU00HY6oGAV3i68PwlgEYnqyBaWVswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDlhOWU4MzUtZjNhMS00YzM2LWI0N2QtNmYyZjcxZWI4YWE0LzAvRDM0MUQ4RUE4 MTgwNTc3OEJBRjBGQzI1ODA0NjI3QUIyMDVBNTk1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMzQxRDhFQTgxODA1Nzc4QkFGMEZDMjU4MDQ2MjdBQjIwNUE1 OTVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDlhOWU4MzUtZjNhMS00YzM2LWI0 N2QtNmYyZjcxZWI4YWE0LzAvRDM0MUQ4RUE4MTgwNTc3OEJBRjBGQzI1ODA0NjI3 QUIyMDVBNTk1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHzkbqF65+2IyA2XehdrY56E09rDEWhukAMa 46RtKGX+r0p8VJGKta/Pry1GDZT3CXxFD1y0nr3isG3u+k7mhMTibBv0md+oZ4O9 UE2dDV/ogVf7eWSsIwDBcuiIMwpCnVu9912c+02JUBebV43AVflrwMa/2A94Qxhx bqLeTvJKuFRuiindWt9bvIJq9oBgsTR+l3+EtU+ZGNfbW4u9kvngRdGv2pXGEz8+ 86FVexzrKmm3x9E1KqIrTR3PO9k4XBrx0pTJNIr3JmbqQNlSCw3nO4Y6MtNrI7b/ Wcc4Cyb4Z9c2/1TEHT7LuGMacx9C36uhN+s9cxl5IBHiS59FaUQ= -----END CERTIFICATE-----Generated at Tue Sep 22 12:28:15 2026 by rpki-client