$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.mft File: D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.mft (raw, json) Hash identifier: PKTncxoWmAqs7YWScIpxaA9QIzmxiOqfwDEvpT7l5Ms= Subject key identifier: E7:1C:48:35:74:00:69:98:07:05:93:63:DC:30:20:DE:F9:A1:50:D8 Authority key identifier: D0:CF:CA:6A:1F:D2:34:38:03:3F:81:7E:FD:3B:2A:18:0D:32:C0:C3 Certificate issuer: /CN=D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3 Certificate serial: 4F39BA2CDA67BFEAC7B342E3E1FBA60915C69CD7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.mft Manifest number: C0 Signing time: Mon 21 Sep 2026 21:33:15 +0000 Manifest this update: Mon 21 Sep 2026 21:28:15 +0000 Manifest next update: Wed 23 Sep 2026 00:18:15 +0000 Files and hashes: 1: 3130332e3134302e3130382e302f32332d3233203d3e203538333639.roa (hash: pd6OjyzAAcK8uT6naV7NfTNnsjqGHMwbU9/DgsoTtzo=) 2: D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.crl (hash: 2+z55NYV28ATRcYN+3qX760OZeqRuLmeWeRdEQw1zdY=) 3: 3130332e3134302e3130392e302f32342d3234203d3e203538333639.roa (hash: APyKoi1ZG2HKYN+LmPQKEKUBYkJq8d16Zc9c2T01Unc=) 4: 3130332e3134302e3130382e302f32342d3234203d3e203538333639.roa (hash: W9kmi6fSD3hfpz6c4ipA4kZ2ayaTmTarwmo8qVkL32c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.crl rsync://rpki-rsync.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 00:18:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:39:ba:2c:da:67:bf:ea:c7:b3:42:e3:e1:fb:a6:09:15:c6:9c:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3 Validity Not Before: Sep 21 21:28:15 2026 GMT Not After : Sep 23 00:18:15 2026 GMT Subject: CN=E71C48357400699807059363DC3020DEF9A150D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:68:d8:52:6c:b8:f3:07:0d:c0:92:a2:6d:71: 99:50:2f:17:0a:1a:ca:5d:23:cc:c4:b1:9f:cc:58: 40:bd:9d:1d:32:d7:a5:a0:9d:ba:f2:97:5c:3a:03: 7a:11:99:31:6f:1e:15:3c:f4:9d:3a:5e:f6:ba:79: 13:2f:c2:2a:5a:71:70:df:b3:41:52:8a:a5:2d:c5: 52:bb:bf:83:52:e0:55:38:ee:eb:fe:e8:e5:e6:ef: 41:cf:44:d5:15:80:07:46:8d:1e:46:5e:4e:69:f8: af:2b:67:5d:cf:77:e4:56:4b:2c:27:e0:cd:86:4e: 3a:3a:77:90:9f:67:44:0e:54:8d:fb:60:b9:36:75: ef:74:c0:92:3a:b1:33:3a:b6:a0:c1:ff:c8:87:34: c7:d1:aa:f7:b4:db:15:4c:e7:c3:0d:70:7a:cc:e4: 83:70:15:35:d3:5d:f0:65:f9:cb:80:81:9f:41:a4: 5d:c1:82:18:3c:df:d1:6c:b3:db:31:24:1e:56:31: c4:11:c4:e3:02:28:1f:82:7b:b5:40:94:b4:f0:d8: c6:3f:79:83:d7:1c:df:7d:17:10:0b:a5:b0:17:86: 26:e3:0d:c0:34:ac:78:b1:5d:f9:e2:b9:8b:af:6b: 48:3f:3a:2d:38:c4:20:aa:3a:61:fd:66:cb:64:ca: d2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:1C:48:35:74:00:69:98:07:05:93:63:DC:30:20:DE:F9:A1:50:D8 X509v3 Authority Key Identifier: keyid:D0:CF:CA:6A:1F:D2:34:38:03:3F:81:7E:FD:3B:2A:18:0D:32:C0:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:f0:64:2d:6b:fd:de:d0:65:4f:61:57:f1:81:2a:74:85:08: 4b:fd:a6:c3:55:7a:21:ad:5e:12:2c:5c:ec:b4:f6:26:be:70: 87:6f:fd:d5:b2:41:e9:03:f0:e0:3f:61:2d:d9:64:9b:cf:24: 0b:df:53:6d:ad:12:6f:c5:37:be:a4:82:d3:eb:c1:19:5b:0a: 6e:f1:27:9e:4e:29:c1:c4:af:6a:28:2e:58:27:88:29:26:f9: 23:de:02:6d:60:79:84:59:98:0c:49:76:0b:c6:b2:53:ec:b5: 0d:c8:d5:f5:37:b6:63:14:cd:84:7b:c6:56:a4:e3:48:a5:5f: 9e:63:52:3b:d1:c9:80:9e:ed:14:9a:c8:9d:26:fc:fc:17:ed: 8f:ae:dd:8c:0e:ea:a3:e4:8a:94:1a:79:71:66:64:4e:74:ef: 5d:e8:71:66:4a:bd:2b:91:27:d5:6f:bd:de:6d:19:69:b0:e9: 70:48:62:0e:d3:b5:0d:c0:b9:9b:48:ac:02:4f:5d:1b:20:ae: ac:76:2f:58:6f:af:f9:e9:7c:54:a6:c4:b4:63:f8:6b:18:cc: 71:b7:cd:d8:ac:e7:d6:ae:5f:ea:1b:2b:8c:67:29:20:a6:02: 0d:91:bc:92:53:7c:da:08:20:fe:77:0c:de:6b:c8:ab:bf:6c: 29:29:dc:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTzm6LNpnv+rHs0Lj4fumCRXGnNcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBDRkNBNkExRkQyMzQzODAzM0Y4MTdFRkQzQjJBMTgw RDMyQzBDMzAeFw0yNjA5MjEyMTI4MTVaFw0yNjA5MjMwMDE4MTVaMDMxMTAvBgNV BAMTKEU3MUM0ODM1NzQwMDY5OTgwNzA1OTM2M0RDMzAyMERFRjlBMTUwRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLaNhSbLjzBw3AkqJtcZlQLxcK GspdI8zEsZ/MWEC9nR0y16Wgnbryl1w6A3oRmTFvHhU89J06Xva6eRMvwipacXDf s0FSiqUtxVK7v4NS4FU47uv+6OXm70HPRNUVgAdGjR5GXk5p+K8rZ13Pd+RWSywn 4M2GTjo6d5CfZ0QOVI37YLk2de90wJI6sTM6tqDB/8iHNMfRqve02xVM58MNcHrM 5INwFTXTXfBl+cuAgZ9BpF3Bghg839Fss9sxJB5WMcQRxOMCKB+Ce7VAlLTw2MY/ eYPXHN99FxALpbAXhibjDcA0rHixXfniuYuva0g/Oi04xCCqOmH9ZstkytK5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5xxINXQAaZgHBZNj3DAg3vmhUNgwHwYDVR0j BBgwFoAU0M/Kah/SNDgDP4F+/TsqGA0ywMMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGE0YTIxYjktZjkxMi00MWYzLWI2MmMtMTIxNzU4MWM5NDhhLzAvRDBDRkNBNkEx RkQyMzQzODAzM0Y4MTdFRkQzQjJBMTgwRDMyQzBDMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMENGQ0E2QTFGRDIzNDM4MDMzRjgxN0VGRDNCMkExODBEMzJD MEMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGE0YTIxYjktZjkxMi00MWYzLWI2 MmMtMTIxNzU4MWM5NDhhLzAvRDBDRkNBNkExRkQyMzQzODAzM0Y4MTdFRkQzQjJB MTgwRDMyQzBDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJLwZC1r/d7QZU9hV/GBKnSFCEv9psNVeiGt XhIsXOy09ia+cIdv/dWyQekD8OA/YS3ZZJvPJAvfU22tEm/FN76kgtPrwRlbCm7x J55OKcHEr2ooLlgniCkm+SPeAm1geYRZmAxJdgvGslPstQ3I1fU3tmMUzYR7xlak 40ilX55jUjvRyYCe7RSayJ0m/PwX7Y+u3YwO6qPkipQaeXFmZE50713ocWZKvSuR J9Vvvd5tGWmw6XBIYg7TtQ3AuZtIrAJPXRsgrqx2L1hvr/npfFSmxLRj+GsYzHG3 zdis59auX+obK4xnKSCmAg2RvJJTfNoIIP53DN5ryKu/bCkp3MY= -----END CERTIFICATE-----Generated at Tue Sep 22 17:41:44 2026 by rpki-client