$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.mft File: DB23849BCF63AE719E7BE4FE89385D166773A883.mft (raw, json) Hash identifier: Wa/IPAzqbkc54+f4fr3xNrhU6+q092S4MyOdcMnCnHk= Subject key identifier: CB:8C:5D:33:22:01:26:09:F9:04:7F:B7:67:57:A2:7B:1B:E5:23:E3 Authority key identifier: DB:23:84:9B:CF:63:AE:71:9E:7B:E4:FE:89:38:5D:16:67:73:A8:83 Certificate issuer: /CN=DB23849BCF63AE719E7BE4FE89385D166773A883 Certificate serial: 3F915775FF0A902A0DB66D487B72827417C2960B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB23849BCF63AE719E7BE4FE89385D166773A883.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.mft Manifest number: BE Signing time: Mon 21 Sep 2026 10:04:05 +0000 Manifest this update: Mon 21 Sep 2026 09:59:05 +0000 Manifest next update: Tue 22 Sep 2026 13:04:05 +0000 Files and hashes: 1: DB23849BCF63AE719E7BE4FE89385D166773A883.crl (hash: 27wg5Gcn3nHuN4WZrvlvtgUdx1Aa3OPi93uOLKY6yVI=) 2: 3130332e3135372e32342e302f32342d3234203d3e20313431313035.roa (hash: g3WbWI1q18vac55oq8gdpUXBjsp4Aidv1FzJgM9YpdM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.crl rsync://rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB23849BCF63AE719E7BE4FE89385D166773A883.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:91:57:75:ff:0a:90:2a:0d:b6:6d:48:7b:72:82:74:17:c2:96:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB23849BCF63AE719E7BE4FE89385D166773A883 Validity Not Before: Sep 21 09:59:05 2026 GMT Not After : Sep 22 13:04:05 2026 GMT Subject: CN=CB8C5D3322012609F9047FB76757A27B1BE523E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:8a:77:4a:a7:5c:04:5d:50:ce:12:d4:9a:ad: 88:25:7f:ae:aa:82:63:94:c2:31:3e:9a:14:83:0d: 99:6b:6e:84:1e:9c:1a:e1:9d:b7:08:b9:37:d0:ef: 9d:cf:c1:48:6f:e1:3b:4b:a0:4e:31:47:be:0f:cb: 7d:03:5b:01:a5:57:3e:9d:06:ed:63:13:6a:7b:3f: 0b:11:8d:6b:53:e6:a3:cc:8e:ea:30:8a:6f:56:53: fa:1c:04:5b:d3:d8:6b:ab:1a:72:cc:28:b6:24:7f: 96:d4:3f:ba:c7:13:5e:b2:50:ea:f6:ce:f1:11:c1: 08:de:ef:d4:f2:4a:87:6a:c4:e4:54:49:b1:e1:18: 0c:b2:65:01:47:ff:06:59:04:e5:4a:f1:b8:f5:f4: 32:49:0e:42:09:a9:f7:03:80:08:a1:52:e8:f9:af: e2:7b:1f:8c:62:36:e9:8f:9d:b3:68:6a:78:ed:63: 4f:5c:d0:be:9a:b4:56:4a:91:97:43:d1:47:a0:31: ee:d1:7b:7e:08:49:db:97:c8:8d:64:80:9a:0b:15: 55:8a:88:68:5b:c0:75:3d:a9:f7:2b:ae:de:f6:05: e4:74:68:20:ea:2e:08:00:0e:c1:e1:13:c6:36:f5: bd:19:08:1d:88:8c:a5:a4:71:69:6d:9a:99:64:88: ee:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:8C:5D:33:22:01:26:09:F9:04:7F:B7:67:57:A2:7B:1B:E5:23:E3 X509v3 Authority Key Identifier: keyid:DB:23:84:9B:CF:63:AE:71:9E:7B:E4:FE:89:38:5D:16:67:73:A8:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB23849BCF63AE719E7BE4FE89385D166773A883.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:ba:fa:19:9a:3e:d6:b7:3a:d5:c4:c0:7a:df:6d:3e:3d:9a: 00:4c:96:97:37:c9:51:32:13:a3:28:ca:73:af:1a:d3:fa:e5: 59:19:d1:5c:5f:74:fc:67:d6:78:17:32:06:1f:45:0f:87:ac: b2:f9:b3:4c:e0:6f:e8:c8:6a:4d:99:b1:cf:4b:50:23:2b:75: 8b:20:b4:9f:bc:16:41:9b:05:cd:b8:46:1f:6f:8c:3d:ad:cc: 90:c4:a0:fc:5b:2b:2f:ad:87:06:af:75:90:b0:26:f1:65:a2: 81:97:67:5b:c1:57:9b:88:ab:6b:10:59:be:a4:41:57:63:78: 7a:d2:3d:54:30:79:63:25:d2:74:f9:e7:17:47:e1:d9:3c:74: 3d:0e:fb:3f:81:d7:be:cf:44:2a:f9:6c:ea:44:93:b9:d0:b4: fa:70:17:a6:2b:08:7b:b2:9f:56:46:32:c9:16:08:7a:1e:b3: f4:91:0a:49:92:8a:02:f3:82:13:b4:76:fb:fa:0f:c3:46:c2: 99:f0:6f:d4:38:b6:4f:b4:0b:18:c7:3f:5b:b5:f8:7d:4e:d1: f2:ef:43:96:e6:56:09:52:bd:9e:9a:75:b4:21:35:82:9b:98: 72:d2:a1:b3:e8:87:62:f8:a1:bf:01:1e:17:a2:98:f0:63:a3: ff:70:1f:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP5FXdf8KkCoNtm1Ie3KCdBfClgswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIyMzg0OUJDRjYzQUU3MTlFN0JFNEZFODkzODVEMTY2 NzczQTg4MzAeFw0yNjA5MjEwOTU5MDVaFw0yNjA5MjIxMzA0MDVaMDMxMTAvBgNV BAMTKENCOEM1RDMzMjIwMTI2MDlGOTA0N0ZCNzY3NTdBMjdCMUJFNTIzRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmindKp1wEXVDOEtSarYglf66q gmOUwjE+mhSDDZlrboQenBrhnbcIuTfQ753PwUhv4TtLoE4xR74Py30DWwGlVz6d Bu1jE2p7PwsRjWtT5qPMjuowim9WU/ocBFvT2GurGnLMKLYkf5bUP7rHE16yUOr2 zvERwQje79TySodqxORUSbHhGAyyZQFH/wZZBOVK8bj19DJJDkIJqfcDgAihUuj5 r+J7H4xiNumPnbNoanjtY09c0L6atFZKkZdD0UegMe7Re34ISduXyI1kgJoLFVWK iGhbwHU9qfcrrt72BeR0aCDqLggADsHhE8Y29b0ZCB2IjKWkcWltmplkiO7lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy4xdMyIBJgn5BH+3Z1eiexvlI+MwHwYDVR0j BBgwFoAU2yOEm89jrnGee+T+iThdFmdzqIMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmJjNjViOGMtMzllOS00NzhkLTg3NDItYzUzNWI2MWJhZTU5LzAvREIyMzg0OUJD RjYzQUU3MTlFN0JFNEZFODkzODVEMTY2NzczQTg4My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQjIzODQ5QkNGNjNBRTcxOUU3QkU0RkU4OTM4NUQxNjY3NzNB ODgzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmJjNjViOGMtMzllOS00NzhkLTg3 NDItYzUzNWI2MWJhZTU5LzAvREIyMzg0OUJDRjYzQUU3MTlFN0JFNEZFODkzODVE MTY2NzczQTg4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMC6+hmaPta3OtXEwHrfbT49mgBMlpc3yVEy E6MoynOvGtP65VkZ0VxfdPxn1ngXMgYfRQ+HrLL5s0zgb+jIak2Zsc9LUCMrdYsg tJ+8FkGbBc24Rh9vjD2tzJDEoPxbKy+thwavdZCwJvFlooGXZ1vBV5uIq2sQWb6k QVdjeHrSPVQweWMl0nT55xdH4dk8dD0O+z+B177PRCr5bOpEk7nQtPpwF6YrCHuy n1ZGMskWCHoes/SRCkmSigLzghO0dvv6D8NGwpnwb9Q4tk+0CxjHP1u1+H1O0fLv Q5bmVglSvZ6adbQhNYKbmHLSobPoh2L4ob8BHheimPBjo/9wHzM= -----END CERTIFICATE-----Generated at Mon Sep 21 16:08:37 2026 by rpki-client