$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.mft File: D84B02092CD9FAF487B7FFE8A3CE245E1532817B.mft (raw, json) Hash identifier: xg5yZGNzotp/Zhm98n7eujL5I3vX/J1NXgrI6NG0cds= Subject key identifier: E2:F8:DB:DD:6D:D6:22:F3:FB:31:32:7C:F0:3D:C1:6B:F3:9D:CB:34 Authority key identifier: D8:4B:02:09:2C:D9:FA:F4:87:B7:FF:E8:A3:CE:24:5E:15:32:81:7B Certificate issuer: /CN=D84B02092CD9FAF487B7FFE8A3CE245E1532817B Certificate serial: 51DFA96D874FF25E0B1335DA95B7C83CCE7B4956 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.mft Manifest number: BC Signing time: Mon 21 Sep 2026 08:16:47 +0000 Manifest this update: Mon 21 Sep 2026 08:11:47 +0000 Manifest next update: Tue 22 Sep 2026 11:57:47 +0000 Files and hashes: 1: 3130332e3232392e31342e302f32332d3233203d3e20313530313936.roa (hash: qvAhwO/EjrHouy1t9oPOe/Yp+kgXSnzORPmVIxEb76o=) 2: 323030313a6466333a323534303a3a2f34382d3438203d3e20313530313936.roa (hash: pHpItOVKv8esoRGqC1921wkOWFNotJS3YzPQt+5pees=) 3: D84B02092CD9FAF487B7FFE8A3CE245E1532817B.crl (hash: wZVoBqOz8aarFXWeRn5lIocIGsrG2Exk+opg8Cb2qf4=) 4: 3130332e3232392e31352e302f32342d3234203d3e20313530313936.roa (hash: zY+TCMFw7rqEprfDm4KpW3QZwoOVJC4HoqlrpBLXEfI=) 5: 3130332e3232392e31342e302f32342d3234203d3e20313530313936.roa (hash: O9b/sE0cgUl/rxVhhp6cIJikTp6ysHnQzs5JN33UOjQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.crl rsync://rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:df:a9:6d:87:4f:f2:5e:0b:13:35:da:95:b7:c8:3c:ce:7b:49:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D84B02092CD9FAF487B7FFE8A3CE245E1532817B Validity Not Before: Sep 21 08:11:47 2026 GMT Not After : Sep 22 11:57:47 2026 GMT Subject: CN=E2F8DBDD6DD622F3FB31327CF03DC16BF39DCB34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:66:09:e8:4d:b1:da:01:76:56:8b:ed:21:47: 53:92:77:ae:d1:59:85:ab:73:1d:f0:f3:df:ff:11: a0:0d:20:50:c4:70:a1:59:33:64:59:72:be:4c:9e: 91:5a:eb:54:5e:70:80:21:12:4c:67:8b:97:d6:2f: 88:9d:b9:5c:c2:b1:27:ed:5e:53:19:a6:89:cb:0c: 5f:b3:5a:ec:b9:6f:7e:a6:f8:f0:94:7b:c8:ad:2f: 9c:65:11:2c:99:e5:93:d6:33:f9:a3:47:4b:12:71: 9a:3f:9c:90:31:d3:5d:07:a2:da:5b:74:b7:e9:db: 07:a0:29:96:de:ac:0a:15:ac:b5:e3:a9:ca:87:b5: 2a:e8:17:85:3a:1b:90:07:3a:0b:00:46:e8:ab:11: 6b:b4:ea:2a:2c:82:c2:9e:75:61:ee:4b:ec:42:f1: 45:72:a8:a7:d1:80:dc:8a:11:d4:50:38:03:ce:bf: 0f:fb:f7:9c:3b:e9:95:48:6a:56:17:bd:30:63:af: d9:28:bb:17:63:37:b0:dc:48:d4:ba:8a:b5:a9:c3: b4:ed:4c:15:eb:1d:32:bd:a8:99:11:2d:27:b4:46: e8:c5:58:07:0b:76:11:52:7f:3c:f1:df:86:72:14: da:cd:73:cb:1d:9f:21:56:96:7d:a4:49:f6:aa:83: cb:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:F8:DB:DD:6D:D6:22:F3:FB:31:32:7C:F0:3D:C1:6B:F3:9D:CB:34 X509v3 Authority Key Identifier: keyid:D8:4B:02:09:2C:D9:FA:F4:87:B7:FF:E8:A3:CE:24:5E:15:32:81:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:39:14:2a:57:54:5f:28:70:3a:b5:6d:7a:7b:0c:ba:bb:4c: c5:4c:e1:a5:30:10:19:6c:c9:cd:95:8c:83:91:b9:d2:fe:b3: f0:f7:ef:0e:da:8c:c7:d4:b8:f5:30:c7:df:6e:d8:c9:e3:2d: 2e:83:66:5d:77:09:0b:bd:04:4b:07:e5:22:f5:39:97:ca:c9: 09:03:7e:fe:82:36:ac:75:34:2a:ab:69:13:1e:ba:a7:9b:19: 5a:20:a1:95:d0:ae:72:93:99:ea:b9:88:53:d2:e3:96:34:7d: df:63:f4:72:29:8e:1d:56:52:89:5b:cc:e6:58:e9:a5:95:62: 33:8b:57:76:0a:7e:9e:ca:df:5c:2b:d4:62:f3:99:f3:03:e7: 6f:fa:1a:9b:42:e7:79:83:a0:be:19:9e:0f:3a:4d:d7:ec:e8: 9b:a3:69:ff:a5:53:fd:22:56:33:4f:1a:4b:c2:89:61:09:30: 44:7b:6f:34:ee:9d:3d:c8:4b:6f:b5:0d:97:4c:60:4a:03:29: db:e5:eb:f6:01:8c:00:86:57:59:b7:ad:1a:df:47:4e:42:c2: 14:17:8f:f3:03:13:95:2d:2c:fa:dd:24:40:59:37:9c:90:51: ff:8f:56:dc:83:3a:c5:92:8d:ea:05:21:b7:e2:c9:4c:65:85: 4e:a5:e6:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUd+pbYdP8l4LEzXalbfIPM57SVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg0QjAyMDkyQ0Q5RkFGNDg3QjdGRkU4QTNDRTI0NUUx NTMyODE3QjAeFw0yNjA5MjEwODExNDdaFw0yNjA5MjIxMTU3NDdaMDMxMTAvBgNV BAMTKEUyRjhEQkRENkRENjIyRjNGQjMxMzI3Q0YwM0RDMTZCRjM5RENCMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOZgnoTbHaAXZWi+0hR1OSd67R WYWrcx3w89//EaANIFDEcKFZM2RZcr5MnpFa61RecIAhEkxni5fWL4iduVzCsSft XlMZponLDF+zWuy5b36m+PCUe8itL5xlESyZ5ZPWM/mjR0sScZo/nJAx010Hotpb dLfp2wegKZberAoVrLXjqcqHtSroF4U6G5AHOgsARuirEWu06iosgsKedWHuS+xC 8UVyqKfRgNyKEdRQOAPOvw/795w76ZVIalYXvTBjr9kouxdjN7DcSNS6irWpw7Tt TBXrHTK9qJkRLSe0RujFWAcLdhFSfzzx34ZyFNrNc8sdnyFWln2kSfaqg8sDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4vjb3W3WIvP7MTJ88D3Ba/OdyzQwHwYDVR0j BBgwFoAU2EsCCSzZ+vSHt//oo84kXhUygXswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2I3NWJmZDAtYTg2Yy00YmViLTlmOTktYWFjMzNmYjVlNDlmLzAvRDg0QjAyMDky Q0Q5RkFGNDg3QjdGRkU4QTNDRTI0NUUxNTMyODE3Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODRCMDIwOTJDRDlGQUY0ODdCN0ZGRThBM0NFMjQ1RTE1MzI4 MTdCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2I3NWJmZDAtYTg2Yy00YmViLTlm OTktYWFjMzNmYjVlNDlmLzAvRDg0QjAyMDkyQ0Q5RkFGNDg3QjdGRkU4QTNDRTI0 NUUxNTMyODE3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABQ5FCpXVF8ocDq1bXp7DLq7TMVM4aUwEBls yc2VjIORudL+s/D37w7ajMfUuPUwx99u2MnjLS6DZl13CQu9BEsH5SL1OZfKyQkD fv6CNqx1NCqraRMeuqebGVogoZXQrnKTmeq5iFPS45Y0fd9j9HIpjh1WUolbzOZY 6aWVYjOLV3YKfp7K31wr1GLzmfMD52/6GptC53mDoL4Zng86Tdfs6Jujaf+lU/0i VjNPGkvCiWEJMER7bzTunT3IS2+1DZdMYEoDKdvl6/YBjACGV1m3rRrfR05CwhQX j/MDE5UtLPrdJEBZN5yQUf+PVtyDOsWSjeoFIbfiyUxlhU6l5s0= -----END CERTIFICATE-----Generated at Mon Sep 21 17:08:13 2026 by rpki-client