$ rpki-client -vvvf rpki-rsync.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/D5B392E916885394AA1C2B31FE082DC317BCE686.mft File: D5B392E916885394AA1C2B31FE082DC317BCE686.mft (raw, json) Hash identifier: y40BcJ2/KMx9lXNbJ/Ao14rg3GncPzZ5JPCyhdUgluw= Subject key identifier: F2:A9:7C:CB:D3:D9:97:5F:27:77:42:07:71:A4:C6:C7:76:77:1E:83 Authority key identifier: D5:B3:92:E9:16:88:53:94:AA:1C:2B:31:FE:08:2D:C3:17:BC:E6:86 Certificate issuer: /CN=D5B392E916885394AA1C2B31FE082DC317BCE686 Certificate serial: 63615C42990052E65E46DF69257E141638E0E60F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5B392E916885394AA1C2B31FE082DC317BCE686.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/D5B392E916885394AA1C2B31FE082DC317BCE686.mft Manifest number: BF Signing time: Tue 22 Sep 2026 06:34:40 +0000 Manifest this update: Tue 22 Sep 2026 06:29:40 +0000 Manifest next update: Wed 23 Sep 2026 08:42:40 +0000 Files and hashes: 1: 3130332e3134332e32322e302f32342d3234203d3e20313339343331.roa (hash: Mij6gjlboJz168uvi1+veD3ghjYsq0hmKTYOHdpJFfc=) 2: 3130332e3134332e32322e302f32332d3233203d3e20313339343331.roa (hash: n/anw1j/p698bFcxqqm49V4G12x2QBboMMl4JYNKkrU=) 3: 323430353a343663303a3a2f33322d3332203d3e20313339343331.roa (hash: 72ltkdAz77XwydUIwwc3kpnQIFXbCRX8QiK7JdJ6abI=) 4: D5B392E916885394AA1C2B31FE082DC317BCE686.crl (hash: G81Ru/NlkNIUVUFaQtaggcrzDuqckghjtMkn7niG144=) 5: 3130332e3134332e32332e302f32342d3234203d3e20313339343331.roa (hash: AcnbfkvX1w/c7v0ssG/zc+baC3z+ryz2Lyxv+skns7o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/D5B392E916885394AA1C2B31FE082DC317BCE686.crl rsync://rpki-rsync.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/D5B392E916885394AA1C2B31FE082DC317BCE686.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5B392E916885394AA1C2B31FE082DC317BCE686.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 03:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:61:5c:42:99:00:52:e6:5e:46:df:69:25:7e:14:16:38:e0:e6:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5B392E916885394AA1C2B31FE082DC317BCE686 Validity Not Before: Sep 22 06:29:40 2026 GMT Not After : Sep 23 08:42:40 2026 GMT Subject: CN=F2A97CCBD3D9975F2777420771A4C6C776771E83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:63:92:72:bc:0c:8a:89:3c:be:9c:1c:9e:3a: 21:f5:46:79:2b:89:0a:39:6b:bf:aa:ed:5d:8d:1c: 1c:42:2e:00:d3:e6:21:af:1b:46:f0:10:05:c1:be: 44:d7:ab:96:e0:b5:00:39:81:5c:90:06:a6:0b:45: 92:bd:96:99:f9:ce:bc:2b:de:02:0a:40:3e:dd:2e: 19:80:ec:63:3a:0c:70:31:28:b4:d4:14:72:c7:49: 8b:54:23:2f:4f:34:4d:3f:67:4d:12:2b:8b:2a:7a: fc:63:8a:a4:9a:c4:e9:d5:07:17:84:1f:dc:3a:e7: 30:3e:77:9a:2e:76:93:da:d6:e8:72:a8:54:e3:b9: 0f:64:8b:68:c8:cb:16:ce:2e:7b:5b:16:8f:b1:82: 4e:2b:82:f7:26:47:9e:b8:5a:b8:1d:a9:58:cd:74: 67:72:85:99:55:27:05:c2:1b:e0:a7:a2:30:79:f1: 74:f8:07:54:af:8b:b5:c5:bc:05:e5:66:6b:24:ee: 0b:41:d4:9d:8b:56:8d:43:68:81:34:12:2d:1c:d3: d8:51:f9:e9:0a:a4:d8:00:3a:da:b5:4a:65:8d:0a: 45:0f:dd:99:68:c9:22:4c:75:58:3f:71:06:b9:1d: a5:4d:94:43:52:0e:ea:8b:65:3b:f7:4a:39:7b:f4: a2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A9:7C:CB:D3:D9:97:5F:27:77:42:07:71:A4:C6:C7:76:77:1E:83 X509v3 Authority Key Identifier: keyid:D5:B3:92:E9:16:88:53:94:AA:1C:2B:31:FE:08:2D:C3:17:BC:E6:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/D5B392E916885394AA1C2B31FE082DC317BCE686.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5B392E916885394AA1C2B31FE082DC317BCE686.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/D5B392E916885394AA1C2B31FE082DC317BCE686.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:7b:ad:f7:94:82:7d:a3:3b:c7:de:41:8a:69:82:13:b5:cc: ce:e5:f3:fb:7b:74:b6:fe:62:20:71:e6:94:32:d6:1e:7b:07: 6d:6b:0c:5b:8e:be:3e:f0:51:73:4c:28:f4:82:c1:76:86:09: 15:ac:ec:6d:93:b0:6d:bf:eb:cb:c7:e2:d4:a5:26:22:7f:11: 96:d0:7d:27:b5:2e:3d:49:19:45:f9:4f:ab:b5:57:f6:31:35: 69:af:4f:dd:a3:58:53:d6:64:81:0c:19:60:fd:e4:82:b6:b4: 6f:33:67:28:46:ec:86:43:c5:d9:7f:9f:04:6a:66:ef:07:48: 00:50:95:10:9b:8c:21:a7:09:68:7d:83:b0:d8:77:1e:d0:e4: 54:00:d3:22:8a:fd:a2:96:31:9b:c1:97:1f:50:fa:d6:d8:e9: 61:3c:99:49:7d:a3:9a:8e:5e:22:2f:80:36:74:8c:52:31:5a: ec:b7:8b:bb:dc:23:b4:89:11:95:77:fc:af:de:9c:d2:5d:39: e2:2d:b8:a3:8e:a4:77:58:b0:95:04:42:60:88:04:a3:1e:ef: 55:2e:6d:1a:fd:39:6a:48:1a:92:41:1b:d8:45:f5:dd:29:f5: 82:57:a8:67:9f:3e:c1:55:7f:b3:4f:bf:d1:ca:56:db:c8:1a: 7b:d6:9f:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY2FcQpkAUuZeRt9pJX4UFjjg5g8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVCMzkyRTkxNjg4NTM5NEFBMUMyQjMxRkUwODJEQzMx N0JDRTY4NjAeFw0yNjA5MjIwNjI5NDBaFw0yNjA5MjMwODQyNDBaMDMxMTAvBgNV BAMTKEYyQTk3Q0NCRDNEOTk3NUYyNzc3NDIwNzcxQTRDNkM3NzY3NzFFODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsY5JyvAyKiTy+nByeOiH1Rnkr iQo5a7+q7V2NHBxCLgDT5iGvG0bwEAXBvkTXq5bgtQA5gVyQBqYLRZK9lpn5zrwr 3gIKQD7dLhmA7GM6DHAxKLTUFHLHSYtUIy9PNE0/Z00SK4sqevxjiqSaxOnVBxeE H9w65zA+d5oudpPa1uhyqFTjuQ9ki2jIyxbOLntbFo+xgk4rgvcmR564WrgdqVjN dGdyhZlVJwXCG+CnojB58XT4B1Svi7XFvAXlZmsk7gtB1J2LVo1DaIE0Ei0c09hR +ekKpNgAOtq1SmWNCkUP3ZloySJMdVg/cQa5HaVNlENSDuqLZTv3Sjl79KIxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8ql8y9PZl18nd0IHcaTGx3Z3HoMwHwYDVR0j BBgwFoAU1bOS6RaIU5SqHCsx/ggtwxe85oYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQ2ZjMzZjItZjA2ZS00ZWI2LWFlNjEtNTUyOWJjYTFjZGNkLzAvRDVCMzkyRTkx Njg4NTM5NEFBMUMyQjMxRkUwODJEQzMxN0JDRTY4Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENUIzOTJFOTE2ODg1Mzk0QUExQzJCMzFGRTA4MkRDMzE3QkNF Njg2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQ2ZjMzZjItZjA2ZS00ZWI2LWFl NjEtNTUyOWJjYTFjZGNkLzAvRDVCMzkyRTkxNjg4NTM5NEFBMUMyQjMxRkUwODJE QzMxN0JDRTY4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIh7rfeUgn2jO8feQYppghO1zM7l8/t7dLb+ YiBx5pQy1h57B21rDFuOvj7wUXNMKPSCwXaGCRWs7G2TsG2/68vH4tSlJiJ/EZbQ fSe1Lj1JGUX5T6u1V/YxNWmvT92jWFPWZIEMGWD95IK2tG8zZyhG7IZDxdl/nwRq Zu8HSABQlRCbjCGnCWh9g7DYdx7Q5FQA0yKK/aKWMZvBlx9Q+tbY6WE8mUl9o5qO XiIvgDZ0jFIxWuy3i7vcI7SJEZV3/K/enNJdOeItuKOOpHdYsJUEQmCIBKMe71Uu bRr9OWpIGpJBG9hF9d0p9YJXqGefPsFVf7NPv9HKVtvIGnvWnzc= -----END CERTIFICATE-----Generated at Tue Sep 22 10:42:23 2026 by rpki-client