$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.mft File: DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.mft (raw, json) Hash identifier: aSWT/D3iFzKg5NDS6CQM8iPnSA7KBKz4K7aVetEWHSg= Subject key identifier: 93:74:3A:C2:95:77:E3:37:68:FD:19:F7:7A:88:A0:5B:3C:55:90:2C Authority key identifier: DC:FA:CD:04:E9:47:8A:36:F0:58:CD:17:DE:0E:A6:B7:FB:6E:4D:09 Certificate issuer: /CN=DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09 Certificate serial: 598B412512388E04AB22D3EFA9E56A824BAC3E7F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.mft Manifest number: BD Signing time: Mon 21 Sep 2026 13:58:55 +0000 Manifest this update: Mon 21 Sep 2026 13:53:55 +0000 Manifest next update: Tue 22 Sep 2026 17:43:55 +0000 Files and hashes: 1: 3130332e3136302e34312e302f32342d3234203d3e20313431353936.roa (hash: lXhYJ0DA1ZPF7j87Xae2VDeesVSyf9L7rCounE/aVVg=) 2: DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.crl (hash: pwmAdWSqiPHrdXuBTN0eNXuQi0dYsUXUkbnzL/JbLY4=) 3: 3130332e3136302e34302e302f32332d3233203d3e20313431353936.roa (hash: uFKAqSD6oWq2rEbik7/vRzt6HsV3cf1Z8RYkorvCjFs=) 4: 3130332e3136302e34302e302f32342d3234203d3e20313431353936.roa (hash: 8kH9OYeCGgkpS6ETOYa6DFVI3BcrTxBasG8Wv5iWOP8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.crl rsync://rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:8b:41:25:12:38:8e:04:ab:22:d3:ef:a9:e5:6a:82:4b:ac:3e:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09 Validity Not Before: Sep 21 13:53:55 2026 GMT Not After : Sep 22 17:43:55 2026 GMT Subject: CN=93743AC29577E33768FD19F77A88A05B3C55902C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:be:24:ff:a1:56:90:a3:96:cd:a3:b4:4c:59: 1e:e4:57:73:30:a4:d3:f5:2c:b5:58:32:8b:21:fb: c4:1f:18:44:ab:9f:90:5c:5e:cc:16:cf:bd:c9:cd: 17:eb:81:6f:b9:70:1e:ee:06:81:a4:bd:de:d0:bb: 6f:bd:3c:4c:ad:a9:80:57:20:e6:02:83:1d:e4:d2: fe:4c:47:96:ce:d3:5e:8b:02:e3:ab:7a:62:f0:71: 81:2a:9e:4b:26:50:0d:93:4a:f4:8b:d7:4f:b9:d7: 9a:ad:d6:04:6f:21:8a:bb:e7:63:25:dc:00:5f:a3: ac:7a:7a:f8:bc:ba:7e:0e:eb:fa:d5:89:26:04:7f: f1:c2:42:93:9f:34:f0:0d:7d:b2:19:8e:51:cb:f2: 23:d2:a2:40:18:e0:e9:7a:ce:e3:5f:49:d9:16:25: ea:cd:69:14:8c:59:c9:bf:3f:fb:89:cc:5b:ac:bc: ac:b2:de:f9:ea:85:4a:a4:12:b8:95:af:fe:9e:6f: 48:73:62:6b:da:2f:b5:f8:63:23:e4:3f:1f:2e:1e: c7:66:a7:d9:c3:69:07:61:0a:4c:da:e1:f0:49:17: 1d:51:f3:90:6d:64:87:19:99:a5:89:08:d0:20:6d: 46:2a:a2:22:6d:33:a4:f3:2e:db:16:71:3a:33:14: ac:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:74:3A:C2:95:77:E3:37:68:FD:19:F7:7A:88:A0:5B:3C:55:90:2C X509v3 Authority Key Identifier: keyid:DC:FA:CD:04:E9:47:8A:36:F0:58:CD:17:DE:0E:A6:B7:FB:6E:4D:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:6e:e8:dd:e6:66:b5:8a:8d:4c:ff:85:9c:d3:d6:0e:96:60: e1:9a:39:d2:32:29:d1:91:91:9d:5d:6d:e8:19:ba:4d:ea:95: 47:e3:6a:2d:42:0c:3c:08:ae:36:78:3f:28:10:3e:6c:62:bf: 7a:dd:44:df:fd:33:de:11:ad:1a:c1:29:97:7f:08:0b:ab:be: 93:a3:b3:d5:03:02:4a:d7:da:5d:c6:7e:74:77:49:51:b5:65: 38:34:48:70:9b:4b:42:7e:99:f6:78:10:51:ff:40:88:4f:31: 38:f6:a3:2f:c8:97:f1:08:4d:17:c0:cb:8b:f7:b9:70:9a:4f: 09:b9:cc:63:8c:05:e6:a6:66:25:b8:0a:66:9b:2b:97:55:65: c7:1f:49:7a:d9:1d:56:84:3c:dc:f2:f6:46:ca:13:88:f2:6a: f1:cc:f3:e1:c8:5a:d8:8e:56:31:82:a9:af:8e:cd:e2:0e:5b: 29:6c:83:d0:4e:3e:15:bc:6a:e2:b8:ad:f8:b9:de:e5:41:9b: 34:8c:d6:a8:f4:d2:5d:d4:99:26:03:dc:e4:58:88:07:f1:42: 7c:2b:a0:6d:e8:6a:3c:7b:d7:9d:8f:20:06:ba:d4:e4:07:74: 1f:99:86:0d:90:96:c4:2f:54:79:85:22:39:15:32:5a:0a:d9: 0b:06:36:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWYtBJRI4jgSrItPvqeVqgkusPn8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENGQUNEMDRFOTQ3OEEzNkYwNThDRDE3REUwRUE2QjdG QjZFNEQwOTAeFw0yNjA5MjExMzUzNTVaFw0yNjA5MjIxNzQzNTVaMDMxMTAvBgNV BAMTKDkzNzQzQUMyOTU3N0UzMzc2OEZEMTlGNzdBODhBMDVCM0M1NTkwMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3viT/oVaQo5bNo7RMWR7kV3Mw pNP1LLVYMosh+8QfGESrn5BcXswWz73JzRfrgW+5cB7uBoGkvd7Qu2+9PEytqYBX IOYCgx3k0v5MR5bO016LAuOremLwcYEqnksmUA2TSvSL10+515qt1gRvIYq752Ml 3ABfo6x6evi8un4O6/rViSYEf/HCQpOfNPANfbIZjlHL8iPSokAY4Ol6zuNfSdkW JerNaRSMWcm/P/uJzFusvKyy3vnqhUqkEriVr/6eb0hzYmvaL7X4YyPkPx8uHsdm p9nDaQdhCkza4fBJFx1R85BtZIcZmaWJCNAgbUYqoiJtM6TzLtsWcTozFKwxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk3Q6wpV34zdo/Rn3eoigWzxVkCwwHwYDVR0j BBgwFoAU3PrNBOlHijbwWM0X3g6mt/tuTQkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGEwOTlhZGYtN2UxMi00ZTgzLTk1YzItZGQ3Zjc3NDk0Nzg4LzAvRENGQUNEMDRF OTQ3OEEzNkYwNThDRDE3REUwRUE2QjdGQjZFNEQwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQ0ZBQ0QwNEU5NDc4QTM2RjA1OENEMTdERTBFQTZCN0ZCNkU0 RDA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGEwOTlhZGYtN2UxMi00ZTgzLTk1 YzItZGQ3Zjc3NDk0Nzg4LzAvRENGQUNEMDRFOTQ3OEEzNkYwNThDRDE3REUwRUE2 QjdGQjZFNEQwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFpu6N3mZrWKjUz/hZzT1g6WYOGaOdIyKdGR kZ1dbegZuk3qlUfjai1CDDwIrjZ4PygQPmxiv3rdRN/9M94RrRrBKZd/CAurvpOj s9UDAkrX2l3GfnR3SVG1ZTg0SHCbS0J+mfZ4EFH/QIhPMTj2oy/Il/EITRfAy4v3 uXCaTwm5zGOMBeamZiW4CmabK5dVZccfSXrZHVaEPNzy9kbKE4jyavHM8+HIWtiO VjGCqa+OzeIOWylsg9BOPhW8auK4rfi53uVBmzSM1qj00l3UmSYD3ORYiAfxQnwr oG3oajx7152PIAa61OQHdB+Zhg2QlsQvVHmFIjkVMloK2QsGNg0= -----END CERTIFICATE-----Generated at Mon Sep 21 22:01:37 2026 by rpki-client