$ rpki-client -vvvf rpki-rsync.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.mft File: DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.mft (raw, json) Hash identifier: DlPqrwXDIY9EwiDXEly5aIl+VGNgVAcb8FA2fXeotaA= Subject key identifier: 70:23:5C:E8:90:71:10:49:98:EB:C4:8C:F3:1E:2C:00:C9:3A:0F:B9 Authority key identifier: DE:17:2F:4C:F0:CE:42:30:A5:10:6C:D6:AC:0C:25:A6:3A:72:C4:A5 Certificate issuer: /CN=DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5 Certificate serial: 61AB38756A7F95E8C68541F094721DF36BF4FB8B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.mft Manifest number: C3 Signing time: Wed 23 Sep 2026 22:39:05 +0000 Manifest this update: Wed 23 Sep 2026 22:34:05 +0000 Manifest next update: Fri 25 Sep 2026 01:20:05 +0000 Files and hashes: 1: 3130332e3232392e3133312e302f32342d3234203d3e20313530393632.roa (hash: FP5pxHLBZtIDduyXGtgh7O/QJiYCmUVEXRSY7J06kQM=) 2: DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.crl (hash: QCDrFAWbudfbUh4lcPBwSN659w0IfvnhTSRkuFDaSVU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.crl rsync://rpki-rsync.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:ab:38:75:6a:7f:95:e8:c6:85:41:f0:94:72:1d:f3:6b:f4:fb:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5 Validity Not Before: Sep 23 22:34:05 2026 GMT Not After : Sep 25 01:20:05 2026 GMT Subject: CN=70235CE89071104998EBC48CF31E2C00C93A0FB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:25:78:75:da:49:91:5b:50:51:28:8d:fb:a4: 0d:81:96:a8:8b:fd:b1:48:07:c4:71:da:4f:79:7c: 24:29:e7:e3:03:4c:d3:34:52:dc:62:fd:c5:b6:2b: 76:9f:af:94:e1:a9:9d:ac:f0:5b:a6:fb:73:0e:6b: 30:16:e8:b9:63:52:3d:c0:b4:3e:11:2d:1d:bb:47: 98:7e:42:27:78:29:69:6b:e5:59:2a:be:de:81:f6: 2b:0b:d2:5a:f4:0b:90:19:5a:77:7f:18:96:a1:82: d4:e6:9e:6c:2a:d0:a4:47:7a:37:bd:c2:3a:86:cd: 20:4c:d8:1c:5c:80:cf:9d:5e:20:de:d6:a6:45:cf: 64:79:ee:db:fe:eb:27:8d:3b:07:e1:d7:1c:16:a0: 27:50:f2:83:45:ed:b9:36:fa:59:59:28:e7:79:58: eb:e6:dd:b1:a6:8e:84:a6:08:62:a2:5a:cf:ff:bb: f2:77:01:f9:ae:ca:21:bb:64:0c:8b:8b:c0:06:fa: 9d:31:8d:7f:01:7f:4d:4f:ea:4e:53:c6:c4:a3:ca: 66:00:72:d8:21:3f:79:31:e5:22:48:8c:fe:c6:78: 2c:90:46:b2:cc:cc:2f:32:d5:f4:50:ee:f6:16:41: 22:6d:ef:c4:67:46:e5:82:9e:3f:59:3b:c8:9c:57: b4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:23:5C:E8:90:71:10:49:98:EB:C4:8C:F3:1E:2C:00:C9:3A:0F:B9 X509v3 Authority Key Identifier: keyid:DE:17:2F:4C:F0:CE:42:30:A5:10:6C:D6:AC:0C:25:A6:3A:72:C4:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:1a:9e:ae:8a:9c:a9:f4:a7:bb:d3:f8:c1:57:d7:78:fe:7e: fb:1e:02:8b:d6:0d:48:aa:a7:9e:1c:94:33:79:dc:d2:b8:6b: 59:7a:ff:9b:63:a8:78:ff:92:f2:be:d5:97:ae:1c:e7:e8:42: 6e:21:33:aa:0d:a0:ec:3c:55:5b:34:49:6e:5d:c4:1f:df:a6: 07:a2:43:c2:53:e4:25:c7:eb:f0:d3:94:d3:5b:57:2d:05:97: 71:91:c0:ef:08:ed:ca:14:a1:d1:8c:78:37:25:7a:39:05:02: 08:f4:f1:5e:87:a0:a1:02:62:33:32:30:f2:1d:7f:49:26:bc: 60:03:4a:19:78:27:22:d7:8f:6c:5e:5f:62:71:62:e2:30:46: e8:75:50:fa:ee:5f:65:7f:07:5b:bd:d9:7c:19:3e:e0:5f:48: b6:7e:3f:59:29:2a:9b:75:e8:f6:ab:b2:2e:d6:c1:a7:b3:c0: ad:b2:41:dc:12:a7:b1:99:d4:74:19:68:2f:72:11:83:36:c1: 80:f2:58:d6:b3:eb:ac:8f:b5:4b:6c:bc:cc:14:9a:09:25:69: 14:6b:30:cb:6b:a8:35:a9:fa:24:3c:8d:9c:95:5f:bd:56:99: a1:b8:13:03:c8:af:15:61:25:71:72:c1:ae:2a:65:29:67:fa: f6:28:dd:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYas4dWp/lejGhUHwlHId82v0+4swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUxNzJGNENGMENFNDIzMEE1MTA2Q0Q2QUMwQzI1QTYz QTcyQzRBNTAeFw0yNjA5MjMyMjM0MDVaFw0yNjA5MjUwMTIwMDVaMDMxMTAvBgNV BAMTKDcwMjM1Q0U4OTA3MTEwNDk5OEVCQzQ4Q0YzMUUyQzAwQzkzQTBGQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJJXh12kmRW1BRKI37pA2BlqiL /bFIB8Rx2k95fCQp5+MDTNM0Utxi/cW2K3afr5ThqZ2s8Fum+3MOazAW6LljUj3A tD4RLR27R5h+Qid4KWlr5Vkqvt6B9isL0lr0C5AZWnd/GJahgtTmnmwq0KRHeje9 wjqGzSBM2BxcgM+dXiDe1qZFz2R57tv+6yeNOwfh1xwWoCdQ8oNF7bk2+llZKOd5 WOvm3bGmjoSmCGKiWs//u/J3AfmuyiG7ZAyLi8AG+p0xjX8Bf01P6k5TxsSjymYA ctghP3kx5SJIjP7GeCyQRrLMzC8y1fRQ7vYWQSJt78RnRuWCnj9ZO8icV7RFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcCNc6JBxEEmY68SM8x4sAMk6D7kwHwYDVR0j BBgwFoAU3hcvTPDOQjClEGzWrAwlpjpyxKUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzQyYzFmMzItODFhYy00MTE4LWJlMmYtNTc0Y2E1YjU0MWVhLzAvREUxNzJGNENG MENFNDIzMEE1MTA2Q0Q2QUMwQzI1QTYzQTcyQzRBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERTE3MkY0Q0YwQ0U0MjMwQTUxMDZDRDZBQzBDMjVBNjNBNzJD NEE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzQyYzFmMzItODFhYy00MTE4LWJl MmYtNTc0Y2E1YjU0MWVhLzAvREUxNzJGNENGMENFNDIzMEE1MTA2Q0Q2QUMwQzI1 QTYzQTcyQzRBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAAanq6KnKn0p7vT+MFX13j+fvseAovWDUiq p54clDN53NK4a1l6/5tjqHj/kvK+1ZeuHOfoQm4hM6oNoOw8VVs0SW5dxB/fpgei Q8JT5CXH6/DTlNNbVy0Fl3GRwO8I7coUodGMeDclejkFAgj08V6HoKECYjMyMPId f0kmvGADShl4JyLXj2xeX2JxYuIwRuh1UPruX2V/B1u92XwZPuBfSLZ+P1kpKpt1 6Parsi7WwaezwK2yQdwSp7GZ1HQZaC9yEYM2wYDyWNaz66yPtUtsvMwUmgklaRRr MMtrqDWp+iQ8jZyVX71WmaG4EwPIrxVhJXFywa4qZSln+vYo3XI= -----END CERTIFICATE-----Generated at Thu Sep 24 00:33:10 2026 by rpki-client