$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.mft File: D74CD7B87D744D2D301C3F69774A99FBE835EDDD.mft (raw, json) Hash identifier: MgTc7ma81HjdKJ2fhQE+tMRCncyu+o84Wx9BH6alzE0= Subject key identifier: E8:0C:2E:95:AF:30:44:3B:8D:E9:D8:86:80:5E:F1:4C:FC:FF:D9:8E Authority key identifier: D7:4C:D7:B8:7D:74:4D:2D:30:1C:3F:69:77:4A:99:FB:E8:35:ED:DD Certificate issuer: /CN=D74CD7B87D744D2D301C3F69774A99FBE835EDDD Certificate serial: 6DD5274EABBD670B388AF81E870FA736FCD95451 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.mft Manifest number: BF Signing time: Tue 22 Sep 2026 18:39:35 +0000 Manifest this update: Tue 22 Sep 2026 18:34:35 +0000 Manifest next update: Wed 23 Sep 2026 21:38:35 +0000 Files and hashes: 1: 3130332e3139302e33302e302f32342d3234203d3e20313439383931.roa (hash: zZwF560CCW8FIsmpm9G6YMYG8iguu4mvO1b/REjgURE=) 2: 3130332e3139302e33312e302f32342d3234203d3e20313439383931.roa (hash: tvgNMRKF9YhTkUojezBviQo+Tr5X2S/8TAOF/Ehj41w=) 3: D74CD7B87D744D2D301C3F69774A99FBE835EDDD.crl (hash: AY8o4rt/S6cKtkDFWS8X+cr0LZqZTvsnsOj2+lAhR8I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.crl rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 17:48:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:d5:27:4e:ab:bd:67:0b:38:8a:f8:1e:87:0f:a7:36:fc:d9:54:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D74CD7B87D744D2D301C3F69774A99FBE835EDDD Validity Not Before: Sep 22 18:34:35 2026 GMT Not After : Sep 23 21:38:35 2026 GMT Subject: CN=E80C2E95AF30443B8DE9D886805EF14CFCFFD98E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:06:dc:6f:b2:84:93:83:e0:2c:5b:f2:55:2c: b1:06:23:1f:83:b6:30:76:60:11:8a:84:5b:db:35: 5e:fa:e9:ff:d1:96:0c:23:19:f9:c0:4b:db:e5:36: 9d:fe:58:40:fc:01:c6:01:82:02:0a:25:1d:55:42: 52:9b:ab:15:ff:9a:07:52:24:39:be:61:1a:d4:03: f6:01:fa:db:0b:f8:28:03:e6:9b:7e:6b:4e:71:e1: d3:4a:49:71:96:b9:af:c3:0c:41:f0:a8:9b:70:db: 97:30:ea:fd:7a:41:5d:01:06:a2:db:95:6b:c5:3f: d1:ad:7c:2b:dc:6b:0d:b3:85:a4:10:de:42:03:38: 85:85:15:e5:17:09:83:eb:68:a4:aa:50:7d:89:89: d8:92:80:0e:1c:36:b1:38:f8:eb:56:07:25:36:44: 8c:96:48:92:31:b9:03:b2:9c:a5:7a:d8:70:6e:f5: 85:a3:20:ca:30:f1:62:e4:78:a0:30:92:b9:b2:f9: 9e:6f:b4:62:ca:9b:da:e3:64:7a:a0:8f:ff:bb:e4: 7e:44:5a:30:07:52:a4:19:62:87:08:30:3b:af:42: 58:fc:51:cd:47:a6:90:59:ca:55:12:98:b7:4b:7f: 2a:67:47:98:ce:03:25:d9:0f:7a:57:89:14:94:2b: 81:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:0C:2E:95:AF:30:44:3B:8D:E9:D8:86:80:5E:F1:4C:FC:FF:D9:8E X509v3 Authority Key Identifier: keyid:D7:4C:D7:B8:7D:74:4D:2D:30:1C:3F:69:77:4A:99:FB:E8:35:ED:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:39:d3:0e:e7:87:cf:64:60:8d:80:32:d8:4b:75:d1:47:46: 35:19:ac:ff:19:cb:93:5d:9f:a1:15:38:01:9b:eb:ec:b1:d1: e3:2a:ea:9f:ce:b4:78:a4:69:14:81:a9:8d:49:f2:27:5d:16: 21:43:81:3f:c9:8a:78:bb:78:12:1b:12:be:5f:78:8e:20:79: 39:7e:0d:a6:a3:58:6a:31:9d:bb:02:68:b1:13:89:97:e0:c8: cd:4d:95:43:e2:75:5b:fa:58:a9:b1:03:0e:88:14:2a:4f:ef: 7b:58:2e:32:13:6d:a4:ec:b1:7e:b9:04:c3:61:80:c5:93:ec: 58:77:1a:d2:f3:22:29:41:43:d0:39:bf:43:eb:8f:78:84:7d: 30:fb:cc:3d:df:18:69:33:60:60:5f:67:c8:d1:38:d2:c8:8b: b8:fd:b1:41:e1:68:c4:45:5b:0a:48:c9:ee:fd:51:61:8b:f4: 42:32:67:e1:de:5a:47:d9:91:a1:96:9c:3e:0c:67:5e:56:46: ab:23:fe:fe:37:88:64:cd:a6:4a:1c:f5:d4:89:02:a7:92:51: 3f:21:3d:97:ed:ce:d2:99:18:d5:8b:cb:40:9a:93:c0:0d:33: 59:19:fd:6b:27:b2:42:51:76:15:f9:8a:30:a5:aa:3f:35:c0: b7:3a:ec:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbdUnTqu9Zws4ivgehw+nNvzZVFEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc0Q0Q3Qjg3RDc0NEQyRDMwMUMzRjY5Nzc0QTk5RkJF ODM1RURERDAeFw0yNjA5MjIxODM0MzVaFw0yNjA5MjMyMTM4MzVaMDMxMTAvBgNV BAMTKEU4MEMyRTk1QUYzMDQ0M0I4REU5RDg4NjgwNUVGMTRDRkNGRkQ5OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRBtxvsoSTg+AsW/JVLLEGIx+D tjB2YBGKhFvbNV766f/RlgwjGfnAS9vlNp3+WED8AcYBggIKJR1VQlKbqxX/mgdS JDm+YRrUA/YB+tsL+CgD5pt+a05x4dNKSXGWua/DDEHwqJtw25cw6v16QV0BBqLb lWvFP9GtfCvcaw2zhaQQ3kIDOIWFFeUXCYPraKSqUH2JidiSgA4cNrE4+OtWByU2 RIyWSJIxuQOynKV62HBu9YWjIMow8WLkeKAwkrmy+Z5vtGLKm9rjZHqgj/+75H5E WjAHUqQZYocIMDuvQlj8Uc1HppBZylUSmLdLfypnR5jOAyXZD3pXiRSUK4GRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6Awula8wRDuN6diGgF7xTPz/2Y4wHwYDVR0j BBgwFoAU10zXuH10TS0wHD9pd0qZ++g17d0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWRlZTEyNmYtODE5Mi00ZDI4LWIyNWUtZGVhYmRiNzllYjIxLzAvRDc0Q0Q3Qjg3 RDc0NEQyRDMwMUMzRjY5Nzc0QTk5RkJFODM1RURERC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENzRDRDdCODdENzQ0RDJEMzAxQzNGNjk3NzRBOTlGQkU4MzVF RERELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWRlZTEyNmYtODE5Mi00ZDI4LWIy NWUtZGVhYmRiNzllYjIxLzAvRDc0Q0Q3Qjg3RDc0NEQyRDMwMUMzRjY5Nzc0QTk5 RkJFODM1RURERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHo50w7nh89kYI2AMthLddFHRjUZrP8Zy5Nd n6EVOAGb6+yx0eMq6p/OtHikaRSBqY1J8iddFiFDgT/Jini7eBIbEr5feI4geTl+ DaajWGoxnbsCaLETiZfgyM1NlUPidVv6WKmxAw6IFCpP73tYLjITbaTssX65BMNh gMWT7Fh3GtLzIilBQ9A5v0Prj3iEfTD7zD3fGGkzYGBfZ8jRONLIi7j9sUHhaMRF WwpIye79UWGL9EIyZ+HeWkfZkaGWnD4MZ15WRqsj/v43iGTNpkoc9dSJAqeSUT8h PZftztKZGNWLy0Cak8ANM1kZ/WsnskJRdhX5ijClqj81wLc67N8= -----END CERTIFICATE-----Generated at Wed Sep 23 01:12:32 2026 by rpki-client