$ rpki-client -vvvf rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.mft File: D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.mft (raw, json) Hash identifier: iNSeM8KGHOu2vIlyhNO9sFW59ESRRFkZx6t3MAV4trY= Subject key identifier: 49:92:20:46:73:47:10:53:6D:6F:58:E6:EC:84:16:7C:99:2D:9A:A8 Authority key identifier: D8:BF:75:90:C4:0D:E7:31:6F:52:A1:DE:E7:CE:7B:ED:A4:30:82:C3 Certificate issuer: /CN=D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3 Certificate serial: 4BC6ED1332D20058DF0FD2EC0C3E78C050400CA2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.mft Manifest number: BF Signing time: Tue 22 Sep 2026 07:41:03 +0000 Manifest this update: Tue 22 Sep 2026 07:36:03 +0000 Manifest next update: Wed 23 Sep 2026 08:00:03 +0000 Files and hashes: 1: 3136302e3139312e32372e302f32342d3234203d3e20313533313239.roa (hash: JFxGecPe7UA2eaCg+ZKJcplW/KcDw+sS4WqX6uOvlVg=) 2: 3136302e3139312e32362e302f32342d3234203d3e20313533313239.roa (hash: eXGHZrGd4sU2DLSEdy3de330+Fw4LKj8QHf1Kk8jl8M=) 3: 3136302e3139312e32362e302f32332d3234203d3e20313533313239.roa (hash: JFK4m68zG0lJAd7+KDHHharwdbO7qzWlnuoWt7ljQFI=) 4: D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.crl (hash: sTwa2PXJ3cFQxYY3W0xgzgEFMtF0VG61IqDPKxU+RWI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.crl rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 08:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:c6:ed:13:32:d2:00:58:df:0f:d2:ec:0c:3e:78:c0:50:40:0c:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3 Validity Not Before: Sep 22 07:36:03 2026 GMT Not After : Sep 23 08:00:03 2026 GMT Subject: CN=49922046734710536D6F58E6EC84167C992D9AA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2d:e7:57:fb:9a:5f:17:a5:99:fb:aa:ae:76: 08:a7:f7:e5:d4:38:7d:f2:5c:df:ab:c3:2c:8f:84: 18:d1:ed:65:19:9b:8b:a7:2c:c2:5f:3d:e6:0c:80: d7:e1:df:fc:34:d8:27:5c:e5:59:a1:1d:72:26:d4: a4:50:4c:5c:b6:ca:f0:9e:13:eb:f6:2e:1a:6a:af: 68:54:bb:00:2c:a9:ae:0d:38:5d:0c:ba:eb:70:de: e3:ea:52:8a:8a:71:79:57:20:03:87:96:3e:1a:30: 76:95:80:34:b5:3c:68:e6:5f:5e:78:55:0e:48:1a: 9a:50:75:09:c4:6f:05:4d:18:9d:c7:25:b3:8e:fb: 5f:25:1b:69:e4:80:ee:a3:57:cb:bc:10:ef:9a:68: 65:c6:96:1f:df:a2:52:6a:cb:af:13:3b:ac:1a:ca: c1:ee:0b:c7:fc:87:24:10:b0:55:1b:39:d7:9e:97: 89:5c:91:84:7e:b7:9c:2d:51:7e:80:74:90:8b:f4: 1b:a8:66:0c:b5:16:2d:d2:a8:21:72:f4:92:05:8c: bd:e2:9f:c5:58:dd:d6:cf:2d:bf:42:d9:e2:ac:d7: b0:4f:40:df:f0:dd:25:e2:8a:fc:d3:74:d9:ea:3f: b9:b2:79:20:2c:1e:2d:2f:fc:09:0a:43:7c:2e:99: 11:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:92:20:46:73:47:10:53:6D:6F:58:E6:EC:84:16:7C:99:2D:9A:A8 X509v3 Authority Key Identifier: keyid:D8:BF:75:90:C4:0D:E7:31:6F:52:A1:DE:E7:CE:7B:ED:A4:30:82:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:63:42:51:dd:48:ac:65:1c:50:a4:26:94:f5:75:15:68:5d: 0d:54:d2:cc:ba:7e:13:cf:39:0a:5f:7d:4d:01:31:79:b1:5e: d1:39:17:2e:4e:83:ca:b5:3b:bf:e2:13:c3:fb:58:fa:ba:42: 4b:62:e4:3c:18:1b:d4:1c:6b:ae:58:91:c0:cc:cd:d5:95:c0: 73:91:82:28:50:63:43:13:d4:a1:e0:76:02:44:a9:30:7e:9f: 9b:be:49:d0:4b:5a:ce:c1:ea:46:5f:e9:06:a5:4c:84:ea:99: a3:56:02:65:e1:82:35:8b:8a:3b:69:c2:66:be:b9:0f:c6:db: c7:69:fb:e8:62:be:c0:41:35:4c:78:2b:a5:c3:e1:13:b1:dd: 60:52:24:48:c9:f0:6d:c8:79:46:39:02:09:ba:bd:b9:0a:63: dc:cd:22:d0:28:97:42:91:1f:bb:7f:85:c6:d5:1d:45:68:27: 4b:6a:60:17:28:66:2d:c3:a3:95:90:e1:27:a0:08:e0:f9:ac: 3e:5d:86:97:5c:64:d9:ea:30:4f:a5:38:04:dc:6d:6e:12:66: 0c:a5:f8:b1:06:37:5c:64:43:e2:d0:5a:7b:5c:4e:f5:c0:95: 17:ff:8f:e2:49:48:b9:9d:93:f0:d7:8c:b7:95:31:41:ee:5d: 6d:6f:0b:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS8btEzLSAFjfD9LsDD54wFBADKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhCRjc1OTBDNDBERTczMTZGNTJBMURFRTdDRTdCRURB NDMwODJDMzAeFw0yNjA5MjIwNzM2MDNaFw0yNjA5MjMwODAwMDNaMDMxMTAvBgNV BAMTKDQ5OTIyMDQ2NzM0NzEwNTM2RDZGNThFNkVDODQxNjdDOTkyRDlBQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDELedX+5pfF6WZ+6qudgin9+XU OH3yXN+rwyyPhBjR7WUZm4unLMJfPeYMgNfh3/w02Cdc5VmhHXIm1KRQTFy2yvCe E+v2Lhpqr2hUuwAsqa4NOF0Muutw3uPqUoqKcXlXIAOHlj4aMHaVgDS1PGjmX154 VQ5IGppQdQnEbwVNGJ3HJbOO+18lG2nkgO6jV8u8EO+aaGXGlh/folJqy68TO6wa ysHuC8f8hyQQsFUbOdeel4lckYR+t5wtUX6AdJCL9BuoZgy1Fi3SqCFy9JIFjL3i n8VY3dbPLb9C2eKs17BPQN/w3SXiivzTdNnqP7myeSAsHi0v/AkKQ3wumREbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSZIgRnNHEFNtb1jm7IQWfJktmqgwHwYDVR0j BBgwFoAU2L91kMQN5zFvUqHe58577aQwgsMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjAzOTYzODgtMmQ2Yi00NzZlLTk2M2QtMWNjMzgxMzc0YjFjLzAvRDhCRjc1OTBD NDBERTczMTZGNTJBMURFRTdDRTdCRURBNDMwODJDMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EOEJGNzU5MEM0MERFNzMxNkY1MkExREVFN0NFN0JFREE0MzA4 MkMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjAzOTYzODgtMmQ2Yi00NzZlLTk2 M2QtMWNjMzgxMzc0YjFjLzAvRDhCRjc1OTBDNDBERTczMTZGNTJBMURFRTdDRTdC RURBNDMwODJDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHBjQlHdSKxlHFCkJpT1dRVoXQ1U0sy6fhPP OQpffU0BMXmxXtE5Fy5Og8q1O7/iE8P7WPq6Qkti5DwYG9Qca65YkcDMzdWVwHOR gihQY0MT1KHgdgJEqTB+n5u+SdBLWs7B6kZf6QalTITqmaNWAmXhgjWLijtpwma+ uQ/G28dp++hivsBBNUx4K6XD4ROx3WBSJEjJ8G3IeUY5Agm6vbkKY9zNItAol0KR H7t/hcbVHUVoJ0tqYBcoZi3Do5WQ4SegCOD5rD5dhpdcZNnqME+lOATcbW4SZgyl +LEGN1xkQ+LQWntcTvXAlRf/j+JJSLmdk/DXjLeVMUHuXW1vC0c= -----END CERTIFICATE-----Generated at Tue Sep 22 18:15:58 2026 by rpki-client