$ rpki-client -vvvf rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.mft File: D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.mft (raw, json) Hash identifier: Af7D7ybDnfmiv9E2/uOJzShTEu1VhCQn40hyxyTvZDs= Subject key identifier: 20:6B:F7:2E:FF:4E:69:F4:87:89:A3:FD:D9:98:F9:AE:F7:3C:73:FA Authority key identifier: D8:3D:6E:3A:34:49:60:D9:1E:10:88:4A:A1:CE:E3:A3:46:1E:1B:F9 Certificate issuer: /CN=D83D6E3A344960D91E10884AA1CEE3A3461E1BF9 Certificate serial: 2EC688CA292EFED4DD7A4E2FE76D1244A1A22A19 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.mft Manifest number: BE Signing time: Mon 21 Sep 2026 18:29:21 +0000 Manifest this update: Mon 21 Sep 2026 18:24:21 +0000 Manifest next update: Tue 22 Sep 2026 19:12:21 +0000 Files and hashes: 1: 3130332e37372e3230342e302f32332d3233203d3e203634323937.roa (hash: UDtR/bmcoGQ4Qjq+Iq2hw3T7b2QXxyjMcOZO/xAMlNY=) 2: 3130332e37372e3230342e302f32342d3234203d3e203634323937.roa (hash: P8+4V5z096Waggp484U08aSEWnvYMzfn2QuEGNZcw6k=) 3: 3130332e37372e3230362e302f32342d3234203d3e203634323937.roa (hash: jPAnnqmUSZKCOHdAErpqklofojiM1qCv7SQs+xi8fCw=) 4: 323430373a396538303a3a2f33322d3332203d3e203634323937.roa (hash: E6tR5JFlnt4a2SDzp1URSec/UvlgqLYhcsF8yth51R4=) 5: 3130332e37372e3230372e302f32342d3234203d3e203634323937.roa (hash: dQq3t9CHCoAGrdXvawfKbXrrABW3jl6jI9yPO4Api+E=) 6: D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.crl (hash: sGSFt3b3O16b86JWxa52+rQx0SylhJdiwdLwRl9JxLU=) 7: 3130332e37372e3230352e302f32342d3234203d3e203634323937.roa (hash: AqPDvu5wMH9hSXVjD2VnKUqfXyX3eZeH2kklyZn/LgU=) 8: 3130332e37372e3230342e302f32322d3232203d3e203634323937.roa (hash: JR5WOntI+i6T1zRjrN8zT02s0LTFAvw0fmSCSLj0TTI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.crl rsync://rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 19:12:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:c6:88:ca:29:2e:fe:d4:dd:7a:4e:2f:e7:6d:12:44:a1:a2:2a:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D83D6E3A344960D91E10884AA1CEE3A3461E1BF9 Validity Not Before: Sep 21 18:24:21 2026 GMT Not After : Sep 22 19:12:21 2026 GMT Subject: CN=206BF72EFF4E69F48789A3FDD998F9AEF73C73FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:67:2b:a1:4a:4b:ba:53:15:ef:8d:28:38:20: 7f:00:5e:f2:4b:0e:5d:d3:91:c1:bf:d7:15:59:ea: ca:f4:7f:ae:8c:75:6e:a4:a8:f2:de:84:e0:fa:51: 99:9e:b4:a5:4b:01:13:12:61:f3:86:85:42:9d:70: 3f:08:47:c2:9a:4c:a5:67:06:ed:8a:1d:5e:11:59: bf:5d:90:9b:3f:2b:15:3e:a6:10:30:08:4f:b0:a1: fe:a0:03:2e:d5:4f:37:99:6e:10:ef:25:b2:aa:33: 25:d2:5a:28:11:59:be:70:cb:d2:94:8c:73:a7:3f: 20:29:a8:4c:a3:86:0e:3c:a3:94:17:95:b9:67:b4: 1c:3d:df:4c:7d:ad:02:61:f6:58:3f:93:75:b0:fc: d2:2e:c9:ec:ab:00:15:76:f7:ca:c3:f8:b6:bc:c1: 4f:85:9d:c0:d9:a4:4c:4c:47:cb:37:14:66:45:83: e6:6a:f4:48:d4:c4:8b:2f:2a:4a:da:54:1f:95:ea: 7d:16:3e:c2:4c:bc:a1:aa:d1:6d:07:c3:95:5d:99: 32:69:32:19:f0:e8:7f:10:0c:16:b0:51:f6:fa:78: 7e:75:c9:6b:3b:b8:f4:73:49:e9:5d:f7:31:17:9f: b9:68:9f:eb:db:16:64:d3:28:88:71:ba:64:49:c1: 25:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:6B:F7:2E:FF:4E:69:F4:87:89:A3:FD:D9:98:F9:AE:F7:3C:73:FA X509v3 Authority Key Identifier: keyid:D8:3D:6E:3A:34:49:60:D9:1E:10:88:4A:A1:CE:E3:A3:46:1E:1B:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:1a:ca:31:36:0c:e7:5b:8a:ef:6a:39:40:37:5d:d7:83:2c: 59:b0:29:80:74:4f:16:4e:18:d6:b1:2e:39:26:35:d3:ba:db: c0:fb:af:ca:7f:84:81:aa:88:22:12:e7:4c:22:d1:85:91:9e: 96:aa:22:7f:05:c1:03:97:4b:83:fe:0e:c8:de:fe:4a:07:69: a5:6a:25:81:9d:41:64:39:53:7e:bb:99:e8:30:ba:13:62:8e: 01:a5:62:31:a5:4a:a0:b8:40:dc:f5:67:5b:21:e0:da:53:c1: 3c:39:41:6c:76:3e:c6:38:be:85:6d:e0:da:45:29:c6:1a:0e: 65:02:6f:ef:e9:37:69:5e:f3:61:b9:a0:8e:46:94:c9:9d:5b: 5e:f8:7f:72:e9:34:f4:eb:00:b5:f3:67:46:3b:e9:fb:34:57: f2:e6:93:ed:7f:f1:38:37:29:06:a2:4e:1b:0a:11:fe:d6:54: 8a:12:a1:21:6a:03:e1:3a:6c:54:6a:ac:ad:9d:75:19:c0:e6: 19:e6:54:a0:59:b6:ae:bf:75:46:d7:65:92:4e:cb:00:4c:59: ef:8f:e0:67:c6:54:11:76:00:cb:53:3b:fb:1f:5a:63:47:78: f6:21:ef:71:46:c8:4f:93:69:3b:d6:01:81:fe:cc:3d:e9:0d: 97:91:4b:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULsaIyiku/tTdek4v520SRKGiKhkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDgzRDZFM0EzNDQ5NjBEOTFFMTA4ODRBQTFDRUUzQTM0 NjFFMUJGOTAeFw0yNjA5MjExODI0MjFaFw0yNjA5MjIxOTEyMjFaMDMxMTAvBgNV BAMTKDIwNkJGNzJFRkY0RTY5RjQ4Nzg5QTNGREQ5OThGOUFFRjczQzczRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjZyuhSku6UxXvjSg4IH8AXvJL Dl3TkcG/1xVZ6sr0f66MdW6kqPLehOD6UZmetKVLARMSYfOGhUKdcD8IR8KaTKVn Bu2KHV4RWb9dkJs/KxU+phAwCE+wof6gAy7VTzeZbhDvJbKqMyXSWigRWb5wy9KU jHOnPyApqEyjhg48o5QXlblntBw930x9rQJh9lg/k3Ww/NIuyeyrABV298rD+La8 wU+FncDZpExMR8s3FGZFg+Zq9EjUxIsvKkraVB+V6n0WPsJMvKGq0W0Hw5VdmTJp Mhnw6H8QDBawUfb6eH51yWs7uPRzSeld9zEXn7lon+vbFmTTKIhxumRJwSWxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIGv3Lv9OafSHiaP92Zj5rvc8c/owHwYDVR0j BBgwFoAU2D1uOjRJYNkeEIhKoc7jo0YeG/kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDlkYTdiNmEtNGUxYS00MWZmLWI4ZWItOGMzNjRjZDI2NGIxLzAvRDgzRDZFM0Ez NDQ5NjBEOTFFMTA4ODRBQTFDRUUzQTM0NjFFMUJGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODNENkUzQTM0NDk2MEQ5MUUxMDg4NEFBMUNFRTNBMzQ2MUUx QkY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDlkYTdiNmEtNGUxYS00MWZmLWI4 ZWItOGMzNjRjZDI2NGIxLzAvRDgzRDZFM0EzNDQ5NjBEOTFFMTA4ODRBQTFDRUUz QTM0NjFFMUJGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKoayjE2DOdbiu9qOUA3XdeDLFmwKYB0TxZO GNaxLjkmNdO628D7r8p/hIGqiCIS50wi0YWRnpaqIn8FwQOXS4P+Dsje/koHaaVq JYGdQWQ5U367megwuhNijgGlYjGlSqC4QNz1Z1sh4NpTwTw5QWx2PsY4voVt4NpF KcYaDmUCb+/pN2le82G5oI5GlMmdW174f3LpNPTrALXzZ0Y76fs0V/Lmk+1/8Tg3 KQaiThsKEf7WVIoSoSFqA+E6bFRqrK2ddRnA5hnmVKBZtq6/dUbXZZJOywBMWe+P 4GfGVBF2AMtTO/sfWmNHePYh73FGyE+TaTvWAYH+zD3pDZeRS5c= -----END CERTIFICATE-----Generated at Tue Sep 22 07:49:40 2026 by rpki-client