$ rpki-client -vvvf rpki-rsync.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.mft File: DF2304429B18F8089FAE1FC938674F36A0FD77B2.mft (raw, json) Hash identifier: QmFaEgZmxIPyYZuB49uEXLGw9/qjUYZ75acoKpkqMMA= Subject key identifier: F2:0E:54:F9:56:EA:15:0C:CF:DF:4D:13:3E:97:3F:E0:70:B7:B5:61 Authority key identifier: DF:23:04:42:9B:18:F8:08:9F:AE:1F:C9:38:67:4F:36:A0:FD:77:B2 Certificate issuer: /CN=DF2304429B18F8089FAE1FC938674F36A0FD77B2 Certificate serial: 6C17902CBFBC2935D9ACBEF56FA2EB0C8F396C24 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.mft Manifest number: BF Signing time: Mon 21 Sep 2026 12:31:45 +0000 Manifest this update: Mon 21 Sep 2026 12:26:45 +0000 Manifest next update: Tue 22 Sep 2026 12:40:45 +0000 Files and hashes: 1: 3135372e31352e36362e302f32332d3233203d3e20313532333737.roa (hash: N6yMW5HjzqSkSXTxh8LYBYq0zgZeaS0wE1WlogwqRwM=) 2: DF2304429B18F8089FAE1FC938674F36A0FD77B2.crl (hash: S2nUSHLVimML58WK/o2QfcfneLlwlR7s5/CpIdy5pDw=) 3: 3135372e31352e36372e302f32342d3234203d3e20313532333737.roa (hash: CpW+8vhTW86R4U0S/gqyxxfPZJCtlWIdT+jTSx+66zc=) 4: 3135372e31352e36362e302f32342d3234203d3e20313532333737.roa (hash: ftQeDYyrz6hB+RbX5fKWVbWWuQdAQyxBYb3VQF1+q6g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.crl rsync://rpki-rsync.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 12:40:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:17:90:2c:bf:bc:29:35:d9:ac:be:f5:6f:a2:eb:0c:8f:39:6c:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF2304429B18F8089FAE1FC938674F36A0FD77B2 Validity Not Before: Sep 21 12:26:45 2026 GMT Not After : Sep 22 12:40:45 2026 GMT Subject: CN=F20E54F956EA150CCFDF4D133E973FE070B7B561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d6:cd:20:59:11:9a:6a:23:b5:7d:98:b2:93: 45:fc:86:6d:97:8f:62:d9:8b:40:9f:88:bc:66:6f: b6:95:1e:dd:e1:39:ce:06:b2:c7:28:d2:ba:ba:d4: b7:ea:7d:50:d1:69:0c:fc:a9:17:70:cd:6b:35:21: a8:b4:86:f1:86:ee:d9:b1:57:44:08:f7:38:c1:49: e2:7e:58:7c:ba:cb:b0:e0:4b:7a:80:e3:78:37:3b: c2:48:8b:c5:14:a2:c8:28:97:d2:24:2c:7d:11:5e: df:d7:5b:d6:b5:77:99:df:d5:13:6b:52:34:db:62: d7:2b:65:70:32:d5:29:94:ec:e9:6b:a2:46:84:e4: a4:d6:93:50:8d:76:92:6e:c0:2b:7c:e6:53:52:5c: b7:41:f9:88:a2:7b:99:81:5c:5e:21:9c:73:53:7c: a4:e5:92:48:6a:7c:80:6a:f7:29:b6:5d:c1:42:bd: 14:fc:fc:61:6a:67:46:d6:6c:76:ec:a1:7f:6e:48: fa:1d:10:75:26:fe:ee:29:42:90:6d:85:58:89:8f: 44:7f:0a:f7:be:4f:e1:0f:d7:35:ae:0a:e3:a6:60: f7:48:8b:a6:65:54:1d:3d:b3:11:29:d7:8a:ef:ba: 97:97:9c:5d:4d:c0:be:7c:3d:7d:70:3f:c3:a6:75: d2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:0E:54:F9:56:EA:15:0C:CF:DF:4D:13:3E:97:3F:E0:70:B7:B5:61 X509v3 Authority Key Identifier: keyid:DF:23:04:42:9B:18:F8:08:9F:AE:1F:C9:38:67:4F:36:A0:FD:77:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:34:d0:fd:d6:7c:50:f4:1d:d6:8d:64:0f:7b:45:46:2a:71: 65:20:25:be:87:58:c1:68:7d:e4:79:2f:10:eb:db:7b:31:1a: e8:50:25:1b:95:81:e8:0a:8a:ee:43:a6:63:19:95:35:88:b9: 4b:31:96:75:4c:f2:2f:37:f9:15:42:69:5b:28:05:19:6b:83: 09:bb:30:56:7c:4d:91:ec:73:6c:53:b8:aa:f4:e4:7b:af:b3: b4:9d:8a:c9:16:06:8b:73:47:ad:e1:07:f9:ee:a5:eb:28:37: 55:27:88:00:c2:b9:88:5e:d9:50:8e:01:67:8b:1c:7c:26:10: 4a:7e:b8:ef:00:c9:79:20:12:22:f9:9b:41:a7:fd:0b:a6:4f: 0a:66:60:72:ee:c1:ca:98:76:b4:c4:cd:e4:ed:e5:66:32:87: 20:09:30:a8:c6:3b:72:e6:ea:3e:cb:ea:da:f2:fc:87:a9:3e: 24:7b:81:85:64:70:aa:32:75:80:f7:fa:46:6e:f6:40:6f:1b: ed:e2:c9:8d:1f:7d:59:2b:ec:95:0b:19:f8:69:55:53:fc:81: be:2f:2c:9b:01:21:12:c5:db:40:b0:22:e3:05:07:5f:45:6f: 40:19:94:47:be:09:e5:98:07:b4:f2:e1:fd:33:30:3a:13:3d: cf:8a:dc:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbBeQLL+8KTXZrL71b6LrDI85bCQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYyMzA0NDI5QjE4RjgwODlGQUUxRkM5Mzg2NzRGMzZB MEZENzdCMjAeFw0yNjA5MjExMjI2NDVaFw0yNjA5MjIxMjQwNDVaMDMxMTAvBgNV BAMTKEYyMEU1NEY5NTZFQTE1MENDRkRGNEQxMzNFOTczRkUwNzBCN0I1NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC51s0gWRGaaiO1fZiyk0X8hm2X j2LZi0CfiLxmb7aVHt3hOc4Gssco0rq61LfqfVDRaQz8qRdwzWs1Iai0hvGG7tmx V0QI9zjBSeJ+WHy6y7DgS3qA43g3O8JIi8UUosgol9IkLH0RXt/XW9a1d5nf1RNr UjTbYtcrZXAy1SmU7OlrokaE5KTWk1CNdpJuwCt85lNSXLdB+Yiie5mBXF4hnHNT fKTlkkhqfIBq9ym2XcFCvRT8/GFqZ0bWbHbsoX9uSPodEHUm/u4pQpBthViJj0R/ Cve+T+EP1zWuCuOmYPdIi6ZlVB09sxEp14rvupeXnF1NwL58PX1wP8OmddJPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8g5U+VbqFQzP300TPpc/4HC3tWEwHwYDVR0j BBgwFoAU3yMEQpsY+Aifrh/JOGdPNqD9d7IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDg0ZTg3OWYtM2E1Ni00ZDhkLTgzZTgtMGU5Y2M2NTc3MGVhLzAvREYyMzA0NDI5 QjE4RjgwODlGQUUxRkM5Mzg2NzRGMzZBMEZENzdCMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9ERjIzMDQ0MjlCMThGODA4OUZBRTFGQzkzODY3NEYzNkEwRkQ3 N0IyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDg0ZTg3OWYtM2E1Ni00ZDhkLTgz ZTgtMGU5Y2M2NTc3MGVhLzAvREYyMzA0NDI5QjE4RjgwODlGQUUxRkM5Mzg2NzRG MzZBMEZENzdCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAc00P3WfFD0HdaNZA97RUYqcWUgJb6HWMFo feR5LxDr23sxGuhQJRuVgegKiu5DpmMZlTWIuUsxlnVM8i83+RVCaVsoBRlrgwm7 MFZ8TZHsc2xTuKr05Huvs7SdiskWBotzR63hB/nupesoN1UniADCuYhe2VCOAWeL HHwmEEp+uO8AyXkgEiL5m0Gn/QumTwpmYHLuwcqYdrTEzeTt5WYyhyAJMKjGO3Lm 6j7L6try/IepPiR7gYVkcKoydYD3+kZu9kBvG+3iyY0ffVkr7JULGfhpVVP8gb4v LJsBIRLF20CwIuMFB19Fb0AZlEe+CeWYB7Ty4f0zMDoTPc+K3Os= -----END CERTIFICATE-----Generated at Tue Sep 22 05:53:52 2026 by rpki-client