$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/DB4AC9A8087056C56E38C2C0CC75A3903F37E230.mft File: DB4AC9A8087056C56E38C2C0CC75A3903F37E230.mft (raw, json) Hash identifier: evPGLm9PaG2VdMgyFc5shn8RtZKREjI1F/1/VkyQZbM= Subject key identifier: 9E:35:C9:94:75:AD:6E:80:52:A3:6B:A3:AC:47:49:55:5B:9C:63:4A Authority key identifier: DB:4A:C9:A8:08:70:56:C5:6E:38:C2:C0:CC:75:A3:90:3F:37:E2:30 Certificate issuer: /CN=DB4AC9A8087056C56E38C2C0CC75A3903F37E230 Certificate serial: 12A124FC55BF98D2FDBB6B8484065DC2D10D1030 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB4AC9A8087056C56E38C2C0CC75A3903F37E230.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/DB4AC9A8087056C56E38C2C0CC75A3903F37E230.mft Manifest number: BC Signing time: Sun 20 Sep 2026 13:38:49 +0000 Manifest this update: Sun 20 Sep 2026 13:33:49 +0000 Manifest next update: Mon 21 Sep 2026 16:16:49 +0000 Files and hashes: 1: 323030313a6466323a323130303a3a2f34382d3438203d3e20313336383231.roa (hash: 0Zbp66Mkncj5oCXs1yHj0YUhYzKAXAlHlpMsofKBpH8=) 2: 3130332e39382e3130342e302f32332d3234203d3e20313336383231.roa (hash: 4YZ/ZRV4ksOjfTDRZ8oe6dmwipIG0EjZ5ajPjIVeb/w=) 3: DB4AC9A8087056C56E38C2C0CC75A3903F37E230.crl (hash: 5GCHw1VyE5l1IN5YrkFlWt30vJ0tsjcWGP7gezOtq5A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/DB4AC9A8087056C56E38C2C0CC75A3903F37E230.crl rsync://rpki-rsync.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/DB4AC9A8087056C56E38C2C0CC75A3903F37E230.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB4AC9A8087056C56E38C2C0CC75A3903F37E230.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 16:16:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:a1:24:fc:55:bf:98:d2:fd:bb:6b:84:84:06:5d:c2:d1:0d:10:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB4AC9A8087056C56E38C2C0CC75A3903F37E230 Validity Not Before: Sep 20 13:33:49 2026 GMT Not After : Sep 21 16:16:49 2026 GMT Subject: CN=9E35C99475AD6E8052A36BA3AC4749555B9C634A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:10:0a:16:b4:dd:b0:5a:8d:1a:9c:ed:02:a6: ad:cc:2b:e1:37:5f:c4:6f:e1:cd:52:d8:82:9d:59: 11:29:1a:d8:0c:c0:0b:0a:18:d5:3b:c0:32:4b:74: cb:6f:7a:ac:2f:2d:80:30:0e:e5:c5:de:c1:f9:28: 9c:3f:11:39:d4:35:33:6a:9e:4e:e0:a6:19:92:8d: 80:ef:62:45:1c:d6:ec:f4:d5:43:94:18:05:83:88: 9a:24:2d:83:1d:ef:59:f5:93:16:e1:c7:83:69:a6: c5:db:9e:ac:d8:ee:a3:94:07:bb:49:ac:58:82:98: 36:89:0b:90:0c:98:9a:50:b5:50:42:31:53:df:8b: b9:60:9a:d5:e5:a1:29:3e:6e:0a:18:af:b4:e8:4d: 15:bf:0e:8a:ec:27:9a:71:73:61:b3:36:42:a7:85: 23:b9:85:e9:ce:36:4a:2f:e2:3c:cb:6a:20:3a:fe: c9:1d:9c:83:40:37:94:6e:9f:f9:68:ae:02:45:f6: a3:9b:23:21:bc:55:8d:04:5d:9c:48:c8:20:34:3c: e9:d0:9f:88:37:0c:46:d4:10:1c:5b:0d:30:42:dd: 24:04:17:1d:15:78:75:c7:ab:e5:94:7c:6f:81:23: 1f:f3:be:1f:fa:13:7a:b8:2b:ac:3f:c6:60:6e:a1: b4:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:35:C9:94:75:AD:6E:80:52:A3:6B:A3:AC:47:49:55:5B:9C:63:4A X509v3 Authority Key Identifier: keyid:DB:4A:C9:A8:08:70:56:C5:6E:38:C2:C0:CC:75:A3:90:3F:37:E2:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/DB4AC9A8087056C56E38C2C0CC75A3903F37E230.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB4AC9A8087056C56E38C2C0CC75A3903F37E230.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/DB4AC9A8087056C56E38C2C0CC75A3903F37E230.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:0f:75:7d:b8:41:fb:53:af:24:e7:b5:36:f8:c0:21:80:e2: 17:f2:13:f2:b0:92:92:53:42:6a:79:35:07:84:ea:ca:21:ae: ea:cf:c9:89:0e:d4:a3:aa:88:06:f2:f0:2c:ed:62:c6:3a:d3: 46:47:46:a3:ce:58:0f:b3:9b:28:81:c5:12:e4:8f:ed:71:b2: 37:2b:7e:16:00:10:21:8f:98:e5:8a:60:d5:05:c3:14:23:75: 69:ba:83:47:5b:84:86:18:ce:d2:7b:98:ab:11:be:81:be:e1: 4c:12:da:66:f9:39:96:5d:77:84:c7:5c:78:d9:b7:26:8b:11: 26:f2:33:13:8d:75:26:62:29:15:0f:01:b0:54:e3:b9:51:29: 51:f7:43:ab:24:b9:5b:d8:97:b7:b7:de:cf:96:b1:19:01:ba: 25:8b:a7:32:c5:f1:47:88:f1:39:c5:50:0c:98:72:3c:a7:59: cf:7f:db:4e:74:aa:14:61:0d:a3:e6:c0:58:24:41:cc:85:5a: ad:e9:a7:82:bc:fa:2b:2e:13:64:22:a7:c8:8d:52:bf:82:fa: 63:60:75:91:f9:a8:33:12:60:ba:36:63:c3:bd:0b:80:c0:d2: 07:96:eb:96:57:ef:a8:b9:41:f4:5f:4c:b0:3f:bb:5e:c6:82: 2f:68:0c:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEqEk/FW/mNL9u2uEhAZdwtENEDAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI0QUM5QTgwODcwNTZDNTZFMzhDMkMwQ0M3NUEzOTAz RjM3RTIzMDAeFw0yNjA5MjAxMzMzNDlaFw0yNjA5MjExNjE2NDlaMDMxMTAvBgNV BAMTKDlFMzVDOTk0NzVBRDZFODA1MkEzNkJBM0FDNDc0OTU1NUI5QzYzNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWEAoWtN2wWo0anO0Cpq3MK+E3 X8Rv4c1S2IKdWREpGtgMwAsKGNU7wDJLdMtveqwvLYAwDuXF3sH5KJw/ETnUNTNq nk7gphmSjYDvYkUc1uz01UOUGAWDiJokLYMd71n1kxbhx4NppsXbnqzY7qOUB7tJ rFiCmDaJC5AMmJpQtVBCMVPfi7lgmtXloSk+bgoYr7ToTRW/DorsJ5pxc2GzNkKn hSO5henONkov4jzLaiA6/skdnINAN5Run/lorgJF9qObIyG8VY0EXZxIyCA0POnQ n4g3DEbUEBxbDTBC3SQEFx0VeHXHq+WUfG+BIx/zvh/6E3q4K6w/xmBuobTNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnjXJlHWtboBSo2ujrEdJVVucY0owHwYDVR0j BBgwFoAU20rJqAhwVsVuOMLAzHWjkD834jAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmZkM2ZjMjQtNzVhMi00N2Y2LTkyOGUtNGU5ODAyYjk3MDg1LzAvREI0QUM5QTgw ODcwNTZDNTZFMzhDMkMwQ0M3NUEzOTAzRjM3RTIzMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQjRBQzlBODA4NzA1NkM1NkUzOEMyQzBDQzc1QTM5MDNGMzdF MjMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmZkM2ZjMjQtNzVhMi00N2Y2LTky OGUtNGU5ODAyYjk3MDg1LzAvREI0QUM5QTgwODcwNTZDNTZFMzhDMkMwQ0M3NUEz OTAzRjM3RTIzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD0PdX24QftTryTntTb4wCGA4hfyE/KwkpJT Qmp5NQeE6sohrurPyYkO1KOqiAby8CztYsY600ZHRqPOWA+zmyiBxRLkj+1xsjcr fhYAECGPmOWKYNUFwxQjdWm6g0dbhIYYztJ7mKsRvoG+4UwS2mb5OZZdd4THXHjZ tyaLESbyMxONdSZiKRUPAbBU47lRKVH3Q6skuVvYl7e33s+WsRkBuiWLpzLF8UeI 8TnFUAyYcjynWc9/2050qhRhDaPmwFgkQcyFWq3pp4K8+isuE2Qip8iNUr+C+mNg dZH5qDMSYLo2Y8O9C4DA0geW65ZX76i5QfRfTLA/u17Ggi9oDMQ= -----END CERTIFICATE-----Generated at Sun Sep 20 20:12:36 2026 by rpki-client