$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.mft File: D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.mft (raw, json) Hash identifier: 4PXavMdhZfR2B52h5TKmtYD3c2Urn38GduUmKF/6zCA= Subject key identifier: A3:3D:69:AC:EB:19:FF:4F:E3:3B:24:45:30:81:2E:E7:35:32:40:8F Authority key identifier: D0:FF:50:D2:21:71:54:9D:8F:FA:9A:AB:3E:81:F8:76:6C:7F:7E:15 Certificate issuer: /CN=D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15 Certificate serial: 68981CC02C10AF399AA50C28D8963B154D332F61 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.mft Manifest number: C4 Signing time: Wed 23 Sep 2026 16:00:56 +0000 Manifest this update: Wed 23 Sep 2026 15:55:56 +0000 Manifest next update: Thu 24 Sep 2026 17:05:56 +0000 Files and hashes: 1: D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.crl (hash: J9GAtYafSMeaDwDUo3k1w1AlCLvl0XRBpDfowZWRJOo=) 2: 3130332e3138352e33382e302f32342d3234203d3e20313339343536.roa (hash: IjalSDTSc8HchZQeF3J6Ob4TnTBMrEoHkiCdaMu5BeQ=) 3: 3130332e3138352e33382e302f32332d3233203d3e203538383230.roa (hash: 96CDSdZcSo+UEQAQF3sCpQRuZ8lYkqGXZBprM0AA1aw=) 4: 3130332e3138352e33392e302f32342d3234203d3e20313339343536.roa (hash: uW+IVxfV8f87IsoKQJA75zmndKbl8xC3CzJnrp9BN1Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.crl rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 17:05:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:98:1c:c0:2c:10:af:39:9a:a5:0c:28:d8:96:3b:15:4d:33:2f:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15 Validity Not Before: Sep 23 15:55:56 2026 GMT Not After : Sep 24 17:05:56 2026 GMT Subject: CN=A33D69ACEB19FF4FE33B244530812EE73532408F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:00:91:60:14:85:e3:b3:f9:c9:8f:17:dd:25: 8d:58:42:b5:52:2a:63:4a:52:05:9c:95:6f:24:d8: c7:13:ae:96:53:48:ac:76:e7:96:78:01:05:cc:2e: 32:7a:12:d3:7a:d8:b8:79:d8:45:ac:47:d8:d4:82: fd:05:b5:69:90:f8:a9:45:20:8b:08:52:1f:d7:10: 7b:ef:e1:39:cf:9a:a1:b5:31:04:58:37:a0:82:df: c6:24:20:09:78:f5:05:0b:b6:17:51:ed:65:2f:3b: 08:c8:f7:4d:61:3e:4c:72:58:08:14:3d:c7:0c:66: a2:97:79:49:de:7b:12:74:25:85:73:62:73:50:08: e1:d4:dc:8f:e0:d1:86:78:3e:3c:8f:32:d3:99:ac: 42:5b:5b:ec:b5:57:83:f7:a1:76:fa:59:98:f7:ad: 8b:f0:fe:5d:36:b4:b5:51:c3:16:46:52:bb:eb:aa: da:8d:de:e3:33:3c:26:33:70:0a:6c:0f:08:a5:1a: c5:a4:59:a5:ff:7c:37:79:cb:de:f8:a4:63:ac:5b: dc:37:68:de:e5:85:dc:c1:af:2e:c5:cd:7f:9c:c9: ca:2a:56:fb:de:30:9e:b8:8c:90:8e:6c:9c:89:9f: 07:5c:f0:94:0d:26:05:07:6f:fe:0f:c7:12:6a:dd: d3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:3D:69:AC:EB:19:FF:4F:E3:3B:24:45:30:81:2E:E7:35:32:40:8F X509v3 Authority Key Identifier: keyid:D0:FF:50:D2:21:71:54:9D:8F:FA:9A:AB:3E:81:F8:76:6C:7F:7E:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:3d:af:28:9e:43:1c:e5:ee:31:21:4f:bf:a2:b5:5a:e7:86: e7:a0:32:bc:16:c5:c2:7e:73:8c:f9:05:f9:f8:b0:c2:23:ba: b4:ee:71:ed:97:70:67:8b:e1:e6:a9:2e:07:4b:1b:f2:52:05: b2:7d:d5:59:8c:ae:bd:a9:6a:42:00:11:dd:96:7c:49:02:35: dc:c0:4f:e2:03:ae:40:08:be:a1:dc:6b:b4:ae:0e:a3:3e:52: a6:d7:08:65:3c:8e:d1:17:11:2a:ca:47:ce:af:03:a1:fe:14: 21:63:48:c4:6a:aa:76:2f:d3:fa:0b:1c:fa:b7:e1:76:c1:ed: 43:44:14:5a:20:12:c8:85:85:9b:a1:61:42:78:53:41:3a:94: 00:6f:08:ee:39:d5:1e:84:03:dd:3b:0e:92:7c:3b:af:54:69: 12:3a:b6:10:0d:d9:5c:96:0f:54:ed:40:05:26:f7:d5:53:44: 9d:51:7c:90:0e:10:5b:53:7c:68:81:0f:61:00:30:7d:a9:42: 94:29:ed:f4:41:55:70:1e:7b:1a:59:45:58:09:7c:e2:aa:c4: c8:f4:c7:88:f6:b7:97:a0:f8:25:85:1c:75:9b:d2:ad:7a:88: 1d:70:79:55:c7:c8:78:41:25:56:70:c5:8b:d9:58:72:b3:d4: ed:0d:59:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaJgcwCwQrzmapQwo2JY7FU0zL2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBGRjUwRDIyMTcxNTQ5RDhGRkE5QUFCM0U4MUY4NzY2 QzdGN0UxNTAeFw0yNjA5MjMxNTU1NTZaFw0yNjA5MjQxNzA1NTZaMDMxMTAvBgNV BAMTKEEzM0Q2OUFDRUIxOUZGNEZFMzNCMjQ0NTMwODEyRUU3MzUzMjQwOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJAJFgFIXjs/nJjxfdJY1YQrVS KmNKUgWclW8k2McTrpZTSKx255Z4AQXMLjJ6EtN62Lh52EWsR9jUgv0FtWmQ+KlF IIsIUh/XEHvv4TnPmqG1MQRYN6CC38YkIAl49QULthdR7WUvOwjI901hPkxyWAgU PccMZqKXeUneexJ0JYVzYnNQCOHU3I/g0YZ4PjyPMtOZrEJbW+y1V4P3oXb6WZj3 rYvw/l02tLVRwxZGUrvrqtqN3uMzPCYzcApsDwilGsWkWaX/fDd5y974pGOsW9w3 aN7lhdzBry7FzX+cycoqVvveMJ64jJCObJyJnwdc8JQNJgUHb/4PxxJq3dNzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoz1prOsZ/0/jOyRFMIEu5zUyQI8wHwYDVR0j BBgwFoAU0P9Q0iFxVJ2P+pqrPoH4dmx/fhUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmUwNWFiNjYtNjZhZi00MGE0LTg5YTUtODA2OTQwMjgzOWE5LzAvRDBGRjUwRDIy MTcxNTQ5RDhGRkE5QUFCM0U4MUY4NzY2QzdGN0UxNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMEZGNTBEMjIxNzE1NDlEOEZGQTlBQUIzRTgxRjg3NjZDN0Y3 RTE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmUwNWFiNjYtNjZhZi00MGE0LTg5 YTUtODA2OTQwMjgzOWE5LzAvRDBGRjUwRDIyMTcxNTQ5RDhGRkE5QUFCM0U4MUY4 NzY2QzdGN0UxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJk9ryieQxzl7jEhT7+itVrnhuegMrwWxcJ+ c4z5Bfn4sMIjurTuce2XcGeL4eapLgdLG/JSBbJ91VmMrr2pakIAEd2WfEkCNdzA T+IDrkAIvqHca7SuDqM+UqbXCGU8jtEXESrKR86vA6H+FCFjSMRqqnYv0/oLHPq3 4XbB7UNEFFogEsiFhZuhYUJ4U0E6lABvCO451R6EA907DpJ8O69UaRI6thAN2VyW D1TtQAUm99VTRJ1RfJAOEFtTfGiBD2EAMH2pQpQp7fRBVXAeexpZRVgJfOKqxMj0 x4j2t5eg+CWFHHWb0q16iB1weVXHyHhBJVZwxYvZWHKz1O0NWXs= -----END CERTIFICATE-----Generated at Thu Sep 24 00:39:16 2026 by rpki-client