$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft File: D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft (raw, json) Hash identifier: 2c6E0FeNcqu7DpeUrjOT9paRHqJKJclxz+ro6pIsVjI= Subject key identifier: D8:7E:7D:36:BC:2E:79:24:BC:E2:E8:7E:AE:95:67:D7:A7:16:20:CF Authority key identifier: D1:F9:BE:E6:CF:09:00:BE:61:0D:2D:AC:AD:F3:EE:47:13:5C:0F:06 Certificate issuer: /CN=D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06 Certificate serial: 7618BE16680CAFB806C657F186938981EAFD68E0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft Manifest number: BD Signing time: Mon 21 Sep 2026 02:09:12 +0000 Manifest this update: Mon 21 Sep 2026 02:04:12 +0000 Manifest next update: Tue 22 Sep 2026 05:57:12 +0000 Files and hashes: 1: D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.crl (hash: oprEu6PFYtSDTEEPZ6kNxgvolBRuczb4HaHdneS8S/E=) 2: 3130332e3133392e3137352e302f32342d3234203d3e20313331373435.roa (hash: KRDZJxi0FxgUIEi2fP8SirXZmXhHmW7JJ3jDoLiPW4M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.crl rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:18:be:16:68:0c:af:b8:06:c6:57:f1:86:93:89:81:ea:fd:68:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06 Validity Not Before: Sep 21 02:04:12 2026 GMT Not After : Sep 22 05:57:12 2026 GMT Subject: CN=D87E7D36BC2E7924BCE2E87EAE9567D7A71620CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d7:e8:e4:7c:ea:6f:c5:2c:f8:4b:69:33:e9: 48:6a:38:32:39:af:67:e8:9a:51:fa:4c:2e:35:fd: 93:f4:ee:fe:df:b3:b2:b6:31:7e:d9:ea:3f:70:d1: a7:66:5e:76:e3:d8:d4:54:c3:a8:60:d8:fe:89:20: aa:cf:c2:a8:e9:6c:18:ab:eb:3a:0f:dc:23:57:05: c1:7e:e0:3a:94:ed:da:7f:5f:1a:6e:d8:eb:15:08: d8:41:45:3f:24:f0:a3:19:44:f9:08:15:2c:06:5d: 69:dc:bd:2e:8a:a4:08:d1:64:f2:1e:dd:bb:60:08: 42:a3:4b:59:3c:18:48:a6:4f:7b:a3:8f:d6:90:a3: 02:2e:df:e5:9a:af:d4:df:7c:eb:43:3c:54:d1:06: c2:c0:9f:c4:7f:2a:3c:31:9e:3c:15:1e:fb:f2:c5: 5d:4e:ac:74:6f:e1:70:45:c0:af:e6:17:9f:d7:65: d3:53:33:a3:40:0d:1a:d2:33:a8:cf:3f:d2:7c:56: df:ae:d0:d2:ba:79:fa:07:6c:3e:49:8d:88:8c:13: 3b:bb:03:43:b6:a8:87:90:e7:4c:51:c4:90:e7:db: 76:db:07:c3:ba:ec:c9:d3:ae:18:4b:e1:76:75:b7: 3f:70:9e:83:50:20:94:44:e8:c4:da:6d:de:86:5a: f8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:7E:7D:36:BC:2E:79:24:BC:E2:E8:7E:AE:95:67:D7:A7:16:20:CF X509v3 Authority Key Identifier: keyid:D1:F9:BE:E6:CF:09:00:BE:61:0D:2D:AC:AD:F3:EE:47:13:5C:0F:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:61:5b:37:32:97:b2:6d:b4:82:e3:e9:57:16:8c:f2:29:5a: 60:50:52:8a:d7:07:a7:59:75:16:c5:b6:b5:96:9c:67:bf:17: bd:e8:44:c0:31:d4:80:35:54:5e:ca:bb:88:25:6a:b3:77:db: bc:d7:55:8a:a2:bf:b1:a4:d1:25:85:78:9c:e6:70:7a:e5:e0: b0:a0:21:d2:2f:2a:b3:9d:34:bb:a6:89:66:5f:43:c9:2b:3a: 6f:0b:4b:73:2e:ac:fa:e1:d8:59:83:49:8d:3a:c6:0a:14:6c: 9e:5b:9d:71:67:87:fa:79:e7:a8:42:ef:d0:70:1f:22:b0:e2: 30:e2:8e:8e:71:78:d4:54:65:07:ff:88:66:7f:fe:f0:31:e0: 6a:d9:54:6a:5f:1f:58:91:18:94:25:db:ed:4b:3e:5e:17:39: d0:fc:e0:7e:d7:38:ed:45:0e:39:28:f1:52:57:54:d4:23:8e: 16:62:21:f4:67:c7:c3:eb:89:08:b8:cf:5c:11:28:6d:3c:3c: 83:24:89:f7:5f:6b:b7:3b:73:46:ff:fc:7d:93:8f:54:b8:22: 19:f2:7e:ca:19:c8:29:31:5d:d4:ef:91:cb:4c:a5:62:90:7f: f1:8d:c4:34:0f:b1:fa:44:bf:08:54:ec:bd:52:b7:6d:e5:0b: 66:27:bd:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdhi+FmgMr7gGxlfxhpOJger9aOAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFGOUJFRTZDRjA5MDBCRTYxMEQyREFDQURGM0VFNDcx MzVDMEYwNjAeFw0yNjA5MjEwMjA0MTJaFw0yNjA5MjIwNTU3MTJaMDMxMTAvBgNV BAMTKEQ4N0U3RDM2QkMyRTc5MjRCQ0UyRTg3RUFFOTU2N0Q3QTcxNjIwQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb1+jkfOpvxSz4S2kz6UhqODI5 r2fomlH6TC41/ZP07v7fs7K2MX7Z6j9w0admXnbj2NRUw6hg2P6JIKrPwqjpbBir 6zoP3CNXBcF+4DqU7dp/Xxpu2OsVCNhBRT8k8KMZRPkIFSwGXWncvS6KpAjRZPIe 3btgCEKjS1k8GEimT3ujj9aQowIu3+War9TffOtDPFTRBsLAn8R/KjwxnjwVHvvy xV1OrHRv4XBFwK/mF5/XZdNTM6NADRrSM6jPP9J8Vt+u0NK6efoHbD5JjYiMEzu7 A0O2qIeQ50xRxJDn23bbB8O67MnTrhhL4XZ1tz9wnoNQIJRE6MTabd6GWvhXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2H59NrwueSS84uh+rpVn16cWIM8wHwYDVR0j BBgwFoAU0fm+5s8JAL5hDS2srfPuRxNcDwYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzkwMDIwOGItMzJhYy00YTI2LTlkOTItNjA5YWQ3NjE4M2MxLzAvRDFGOUJFRTZD RjA5MDBCRTYxMEQyREFDQURGM0VFNDcxMzVDMEYwNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMUY5QkVFNkNGMDkwMEJFNjEwRDJEQUNBREYzRUU0NzEzNUMw RjA2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzkwMDIwOGItMzJhYy00YTI2LTlk OTItNjA5YWQ3NjE4M2MxLzAvRDFGOUJFRTZDRjA5MDBCRTYxMEQyREFDQURGM0VF NDcxMzVDMEYwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAERhWzcyl7JttILj6VcWjPIpWmBQUorXB6dZ dRbFtrWWnGe/F73oRMAx1IA1VF7Ku4glarN327zXVYqiv7Gk0SWFeJzmcHrl4LCg IdIvKrOdNLumiWZfQ8krOm8LS3MurPrh2FmDSY06xgoUbJ5bnXFnh/p556hC79Bw HyKw4jDijo5xeNRUZQf/iGZ//vAx4GrZVGpfH1iRGJQl2+1LPl4XOdD84H7XOO1F Djko8VJXVNQjjhZiIfRnx8PriQi4z1wRKG08PIMkifdfa7c7c0b//H2Tj1S4Ihny fsoZyCkxXdTvkctMpWKQf/GNxDQPsfpEvwhU7L1St23lC2Ynvf0= -----END CERTIFICATE-----Generated at Mon Sep 21 10:06:22 2026 by rpki-client