$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.mft File: D57816B86ABF0E6E25D84D1D5EB37F57672082E2.mft (raw, json) Hash identifier: u72zDk0wMWBLiCevsB8u9pAWJE55ztTDyuVDUS1PB0w= Subject key identifier: 90:71:B9:BA:16:E5:CB:6F:71:A4:8F:60:5D:C3:BE:61:4B:EB:0D:BD Authority key identifier: D5:78:16:B8:6A:BF:0E:6E:25:D8:4D:1D:5E:B3:7F:57:67:20:82:E2 Certificate issuer: /CN=D57816B86ABF0E6E25D84D1D5EB37F57672082E2 Certificate serial: 49B89E757D6E2399402F1A85E268385F34CA71EC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.mft Manifest number: BF Signing time: Tue 22 Sep 2026 16:06:13 +0000 Manifest this update: Tue 22 Sep 2026 16:01:13 +0000 Manifest next update: Wed 23 Sep 2026 19:44:13 +0000 Files and hashes: 1: 3130332e31342e37352e302f32342d3234203d3e20313334363332.roa (hash: peOff/bMaPRVFv7RqgmuHQIO5KzTIHkBdGVMuXkb3Y0=) 2: 3130332e31342e37342e302f32342d3234203d3e20313334363332.roa (hash: ut81wNpcxfZaRtfYOIEu10o1O6sE5PD51eUSrS4eL90=) 3: 323030313a6466373a353430303a3a2f34382d3438203d3e20313334363332.roa (hash: rH/HlzNj8EN1t4rBBnxlIYgmTwkrb8JdSMLp5n/vbuw=) 4: D57816B86ABF0E6E25D84D1D5EB37F57672082E2.crl (hash: S8TSsn6ztkSAXSrCt1CEgrAjWROQtQBOGS7JBZdxyBE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.crl rsync://rpki-rsync.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 19:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:b8:9e:75:7d:6e:23:99:40:2f:1a:85:e2:68:38:5f:34:ca:71:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D57816B86ABF0E6E25D84D1D5EB37F57672082E2 Validity Not Before: Sep 22 16:01:13 2026 GMT Not After : Sep 23 19:44:13 2026 GMT Subject: CN=9071B9BA16E5CB6F71A48F605DC3BE614BEB0DBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:13:5b:29:03:92:13:c3:27:6d:7e:4a:2c:39: a0:3c:c5:4b:11:6e:6f:f3:98:85:4e:3e:a3:b9:bc: d5:29:b8:e9:b9:ae:2e:8f:40:85:a8:23:1b:ec:e3: ea:b1:c1:cc:f3:a3:25:98:e4:1c:04:5d:0d:a8:a8: 2d:1e:d1:db:e7:7e:82:11:d6:0a:a2:f5:80:71:9a: 1a:d1:00:87:eb:77:22:89:33:89:78:85:63:b1:a6: d2:f8:28:14:2f:e3:a7:99:6f:90:3c:93:74:b4:22: a3:ab:86:5b:a9:17:58:9b:5f:ed:fc:1d:d0:4e:77: 3e:c8:44:7b:13:83:08:d3:70:8c:b7:7a:12:0d:9e: 66:06:f9:69:46:8a:f4:5c:c9:94:cc:b3:74:18:5d: 53:bb:90:6a:e8:2d:79:8f:b9:24:f7:f3:96:dd:f7: 0c:78:44:fd:78:45:1d:e6:75:8a:c3:63:0d:4a:92: 74:55:88:09:81:2a:8b:6b:e8:07:ad:bc:8d:b5:18: 0e:2a:c3:75:86:65:00:ad:48:99:bf:cb:2c:74:db: 07:8d:bc:3d:14:fc:12:f1:1e:13:5a:d4:82:45:7b: 6b:ff:8a:90:a4:3f:0a:5a:73:79:a9:6d:22:66:7e: e7:0c:4b:d0:53:22:4f:35:9d:8d:00:ac:ac:97:e2: 32:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:71:B9:BA:16:E5:CB:6F:71:A4:8F:60:5D:C3:BE:61:4B:EB:0D:BD X509v3 Authority Key Identifier: keyid:D5:78:16:B8:6A:BF:0E:6E:25:D8:4D:1D:5E:B3:7F:57:67:20:82:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:ac:3c:26:33:ff:6e:9a:b7:0d:90:e8:a0:12:4e:f6:36:2f: 29:91:96:a9:00:db:88:fe:40:bd:7c:54:7e:bf:00:63:66:da: fe:d9:61:55:86:60:4d:8a:56:8a:8b:f1:83:7d:0b:6e:a2:bb: fe:62:73:28:c0:31:01:f7:f8:a6:05:f6:f3:26:0b:8f:c2:bf: 5c:d7:06:ee:17:d4:74:74:a4:97:c1:d9:8e:98:81:80:27:be: 0c:83:cb:20:cb:5b:1e:ec:bf:8d:61:9f:f2:0a:92:8f:f5:bf: 51:4c:6d:80:b6:97:d3:58:b0:8d:57:16:15:e7:7e:17:ab:ef: 5e:6b:b5:38:26:33:d3:22:14:c0:95:f7:64:58:af:95:74:33: a4:ae:0c:09:11:6a:42:90:71:06:82:b8:51:be:39:8c:61:54: 00:28:b2:7a:76:82:1e:3c:df:1c:48:a6:c8:dd:63:d3:a5:f2: 91:f8:78:02:f0:2a:ae:f6:e4:6f:9e:38:70:7b:9a:4e:ee:a6: 44:99:33:ee:ea:72:ee:64:65:09:57:fe:8a:f6:a5:7f:2c:44: 57:48:76:60:22:01:69:46:8f:24:fe:f2:e4:7c:8e:c2:dd:2d: 40:09:aa:52:ba:d7:7a:ff:e2:0f:d0:50:c8:03:8f:ed:14:7a: a3:e7:c9:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSbiedX1uI5lALxqF4mg4XzTKcewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU3ODE2Qjg2QUJGMEU2RTI1RDg0RDFENUVCMzdGNTc2 NzIwODJFMjAeFw0yNjA5MjIxNjAxMTNaFw0yNjA5MjMxOTQ0MTNaMDMxMTAvBgNV BAMTKDkwNzFCOUJBMTZFNUNCNkY3MUE0OEY2MDVEQzNCRTYxNEJFQjBEQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTE1spA5ITwydtfkosOaA8xUsR bm/zmIVOPqO5vNUpuOm5ri6PQIWoIxvs4+qxwczzoyWY5BwEXQ2oqC0e0dvnfoIR 1gqi9YBxmhrRAIfrdyKJM4l4hWOxptL4KBQv46eZb5A8k3S0IqOrhlupF1ibX+38 HdBOdz7IRHsTgwjTcIy3ehINnmYG+WlGivRcyZTMs3QYXVO7kGroLXmPuST385bd 9wx4RP14RR3mdYrDYw1KknRViAmBKotr6AetvI21GA4qw3WGZQCtSJm/yyx02weN vD0U/BLxHhNa1IJFe2v/ipCkPwpac3mpbSJmfucMS9BTIk81nY0ArKyX4jLZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkHG5uhbly29xpI9gXcO+YUvrDb0wHwYDVR0j BBgwFoAU1XgWuGq/Dm4l2E0dXrN/V2cgguIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTAwMGUyM2UtZjQ0YS00Y2ZjLWJmNTYtZDk5YTA5MmQ3MzE0LzAvRDU3ODE2Qjg2 QUJGMEU2RTI1RDg0RDFENUVCMzdGNTc2NzIwODJFMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENTc4MTZCODZBQkYwRTZFMjVEODREMUQ1RUIzN0Y1NzY3MjA4 MkUyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTAwMGUyM2UtZjQ0YS00Y2ZjLWJm NTYtZDk5YTA5MmQ3MzE0LzAvRDU3ODE2Qjg2QUJGMEU2RTI1RDg0RDFENUVCMzdG NTc2NzIwODJFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHGsPCYz/26atw2Q6KASTvY2LymRlqkA24j+ QL18VH6/AGNm2v7ZYVWGYE2KVoqL8YN9C26iu/5icyjAMQH3+KYF9vMmC4/Cv1zX Bu4X1HR0pJfB2Y6YgYAnvgyDyyDLWx7sv41hn/IKko/1v1FMbYC2l9NYsI1XFhXn fher715rtTgmM9MiFMCV92RYr5V0M6SuDAkRakKQcQaCuFG+OYxhVAAosnp2gh48 3xxIpsjdY9Ol8pH4eALwKq725G+eOHB7mk7upkSZM+7qcu5kZQlX/or2pX8sRFdI dmAiAWlGjyT+8uR8jsLdLUAJqlK613r/4g/QUMgDj+0UeqPnyd0= -----END CERTIFICATE-----Generated at Wed Sep 23 10:20:05 2026 by rpki-client