$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.mft File: D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.mft (raw, json) Hash identifier: lYWZI0Cyop/lXW5RjZt2dKMV9P768QHiuZDFK7YDD7A= Subject key identifier: 84:93:82:56:8B:CD:46:72:2A:05:58:13:1A:AE:C5:27:40:AD:ED:47 Authority key identifier: D0:FF:50:D2:21:71:54:9D:8F:FA:9A:AB:3E:81:F8:76:6C:7F:7E:15 Certificate issuer: /CN=D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15 Certificate serial: 34F1694A90AC977B1E9125D8EACD29BF8E183C04 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.mft Manifest number: C1 Signing time: Mon 21 Sep 2026 08:57:35 +0000 Manifest this update: Mon 21 Sep 2026 08:52:35 +0000 Manifest next update: Tue 22 Sep 2026 12:22:35 +0000 Files and hashes: 1: D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.crl (hash: pycFv8JY1fM9ClakOjOPIZqzezDFk5RLjI8tZWEEhbY=) 2: 3130332e3138352e33392e302f32342d3234203d3e20313339343536.roa (hash: uW+IVxfV8f87IsoKQJA75zmndKbl8xC3CzJnrp9BN1Q=) 3: 3130332e3138352e33382e302f32332d3233203d3e203538383230.roa (hash: 96CDSdZcSo+UEQAQF3sCpQRuZ8lYkqGXZBprM0AA1aw=) 4: 3130332e3138352e33382e302f32342d3234203d3e20313339343536.roa (hash: IjalSDTSc8HchZQeF3J6Ob4TnTBMrEoHkiCdaMu5BeQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.crl rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 12:22:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:f1:69:4a:90:ac:97:7b:1e:91:25:d8:ea:cd:29:bf:8e:18:3c:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15 Validity Not Before: Sep 21 08:52:35 2026 GMT Not After : Sep 22 12:22:35 2026 GMT Subject: CN=849382568BCD46722A0558131AAEC52740ADED47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:f9:67:66:49:c3:b6:05:d6:e6:c6:62:b6:c2: 0c:26:6b:db:25:19:28:3a:42:dd:d1:fd:ae:92:25: a9:60:2e:63:a1:f3:44:aa:61:a5:2c:e2:af:36:21: 31:fe:e0:e2:2b:65:e3:46:5f:c8:57:5f:8e:cc:fe: f5:6e:1d:ed:81:dd:0a:be:59:ad:22:b8:12:8f:6a: 9b:7b:0b:5e:d4:2a:27:a6:db:84:73:1f:cd:82:d5: 57:89:2d:e0:74:d2:d3:34:01:98:3c:84:da:90:d9: e4:56:9d:4d:27:48:3c:d8:61:f6:35:d9:82:77:da: 2f:6b:cf:dd:79:5f:c9:15:23:99:1c:75:b7:48:b0: e0:b2:00:fa:1a:52:73:80:d1:0c:20:6e:b4:fc:b4: f1:32:b7:a1:33:fb:74:28:f8:2c:79:1f:6c:9b:18: ef:56:68:ed:e5:74:78:05:db:6e:35:0a:e7:c5:87: a1:4f:44:ce:ab:62:82:77:8b:52:93:ff:5a:94:10: d6:db:ec:c0:61:dd:b2:d9:c1:dc:db:da:cd:70:e2: 6d:0b:f5:8e:4e:57:81:49:c8:7b:63:0c:09:12:37: 8d:d9:f5:30:fe:90:dd:8d:1a:a3:6d:75:26:1d:85: 68:af:31:7c:9e:0e:da:16:f0:88:db:3a:81:8e:eb: 92:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:93:82:56:8B:CD:46:72:2A:05:58:13:1A:AE:C5:27:40:AD:ED:47 X509v3 Authority Key Identifier: keyid:D0:FF:50:D2:21:71:54:9D:8F:FA:9A:AB:3E:81:F8:76:6C:7F:7E:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:3d:6d:77:8a:de:88:ed:44:22:dc:03:e9:6b:bd:1a:13:51: 3c:71:09:16:d9:86:48:6d:a6:36:d7:26:49:8b:23:8e:40:ca: ef:e1:76:55:68:c4:28:cf:f0:50:66:b7:88:09:9e:f3:32:8c: ea:b7:48:5a:e6:16:1b:6f:40:ff:44:f0:08:2b:4b:e7:57:0a: 38:d5:59:d4:c9:5c:45:3c:67:2e:31:60:a7:6f:e6:65:0f:50: bb:3e:03:e0:92:4c:e7:e3:ab:4c:c6:9c:c4:29:22:bf:be:6d: 9c:ac:41:e6:02:94:3e:7a:c2:e3:cc:5b:3a:c1:19:fd:c2:31: 54:78:d7:f3:9a:06:07:30:e2:7a:9c:2f:4b:e0:5e:42:77:0a: 56:c6:55:f3:66:8b:13:9a:33:2b:a3:5d:43:eb:6c:95:81:a2: 8c:a5:a1:33:d2:84:62:96:ad:ac:ef:84:54:c7:16:87:c6:0b: 9c:d3:2f:3e:73:48:5f:c9:19:5f:2d:71:a7:85:6d:bd:da:d5: e3:a4:8a:e9:9c:96:33:a3:d5:07:52:94:0b:fa:d9:a0:04:c6: 1c:da:c8:cc:ca:db:66:0d:b1:dc:91:e8:b8:3e:9a:18:b6:fc: e6:7a:e2:5c:d6:2b:98:d5:62:83:7f:a6:ec:1c:94:03:28:b0: 8e:14:ba:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNPFpSpCsl3sekSXY6s0pv44YPAQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBGRjUwRDIyMTcxNTQ5RDhGRkE5QUFCM0U4MUY4NzY2 QzdGN0UxNTAeFw0yNjA5MjEwODUyMzVaFw0yNjA5MjIxMjIyMzVaMDMxMTAvBgNV BAMTKDg0OTM4MjU2OEJDRDQ2NzIyQTA1NTgxMzFBQUVDNTI3NDBBREVENDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu+WdmScO2BdbmxmK2wgwma9sl GSg6Qt3R/a6SJalgLmOh80SqYaUs4q82ITH+4OIrZeNGX8hXX47M/vVuHe2B3Qq+ Wa0iuBKPapt7C17UKiem24RzH82C1VeJLeB00tM0AZg8hNqQ2eRWnU0nSDzYYfY1 2YJ32i9rz915X8kVI5kcdbdIsOCyAPoaUnOA0QwgbrT8tPEyt6Ez+3Qo+Cx5H2yb GO9WaO3ldHgF2241CufFh6FPRM6rYoJ3i1KT/1qUENbb7MBh3bLZwdzb2s1w4m0L 9Y5OV4FJyHtjDAkSN43Z9TD+kN2NGqNtdSYdhWivMXyeDtoW8IjbOoGO65KlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhJOCVovNRnIqBVgTGq7FJ0Ct7UcwHwYDVR0j BBgwFoAU0P9Q0iFxVJ2P+pqrPoH4dmx/fhUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmUwNWFiNjYtNjZhZi00MGE0LTg5YTUtODA2OTQwMjgzOWE5LzAvRDBGRjUwRDIy MTcxNTQ5RDhGRkE5QUFCM0U4MUY4NzY2QzdGN0UxNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMEZGNTBEMjIxNzE1NDlEOEZGQTlBQUIzRTgxRjg3NjZDN0Y3 RTE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmUwNWFiNjYtNjZhZi00MGE0LTg5 YTUtODA2OTQwMjgzOWE5LzAvRDBGRjUwRDIyMTcxNTQ5RDhGRkE5QUFCM0U4MUY4 NzY2QzdGN0UxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABM9bXeK3ojtRCLcA+lrvRoTUTxxCRbZhkht pjbXJkmLI45Ayu/hdlVoxCjP8FBmt4gJnvMyjOq3SFrmFhtvQP9E8AgrS+dXCjjV WdTJXEU8Zy4xYKdv5mUPULs+A+CSTOfjq0zGnMQpIr++bZysQeYClD56wuPMWzrB Gf3CMVR41/OaBgcw4nqcL0vgXkJ3ClbGVfNmixOaMyujXUPrbJWBooyloTPShGKW razvhFTHFofGC5zTLz5zSF/JGV8tcaeFbb3a1eOkiumcljOj1QdSlAv62aAExhza yMzK22YNsdyR6Lg+mhi2/OZ64lzWK5jVYoN/puwclAMosI4Uuv0= -----END CERTIFICATE-----Generated at Tue Sep 22 01:24:04 2026 by rpki-client