$ rpki-client -vvvf rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.mft File: DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.mft (raw, json) Hash identifier: U2WDUU9YwEsNZObEBcumW+MlQPWi0ksCyoBby7TtQIA= Subject key identifier: 5C:6A:7B:5A:34:94:5F:F1:41:8E:D6:F6:A0:6C:97:F3:AC:09:DE:D3 Authority key identifier: DC:A3:C8:F8:E8:2C:D4:F9:E2:F8:F9:AE:C8:90:BC:1D:B0:98:A8:87 Certificate issuer: /CN=DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887 Certificate serial: 0E3B9A7B6674BC6B94EBFDC3A08A60406EA7D462 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 08:11:44 +0000 Manifest this update: Tue 22 Sep 2026 08:06:44 +0000 Manifest next update: Wed 23 Sep 2026 11:30:44 +0000 Files and hashes: 1: DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.crl (hash: CDEKXQbjNv2d0Vp06ty0xvimuanoeqXyZ09guLKQ+Yw=) 2: 3130332e31392e3138302e302f32322d3232203d3e20313332363432.roa (hash: swMIglkDWca6bTykcQAlBI8mPZmObmBmI7XJvNSgNmI=) 3: 3130332e31392e3138322e302f32342d3234203d3e20313332363432.roa (hash: ogZJ6AIvbYZ3rfPWkAwkD+wUu9pRc9HcU7kgCnHTVek=) 4: 3130332e31392e3138312e302f32342d3234203d3e20313332363432.roa (hash: 2hrlUfalWGLJAAgURvT2UIB10iFx48ljh0wmwwAeiOQ=) 5: 3130332e31392e3138302e302f32342d3234203d3e20313332363432.roa (hash: 7vL8y9qGcwGlBHTlp7W2DDNh7nh9ZG6pUOsZTFcC5m8=) 6: 323430353a336463303a3a2f33322d3438203d3e20313332363432.roa (hash: BbljfPMaDaoCXmfqlX766e2gOwStRy9KRMwBeVYrNRA=) 7: 3130332e31392e3138332e302f32342d3234203d3e20313332363432.roa (hash: b9ucf82rqvNvVvSo4KylGCCzRBHVOTbyEMd9uIlhwkk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.crl rsync://rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 11:30:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:3b:9a:7b:66:74:bc:6b:94:eb:fd:c3:a0:8a:60:40:6e:a7:d4:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887 Validity Not Before: Sep 22 08:06:44 2026 GMT Not After : Sep 23 11:30:44 2026 GMT Subject: CN=5C6A7B5A34945FF1418ED6F6A06C97F3AC09DED3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ee:a2:26:48:c2:52:98:30:92:e2:99:1f:3f: e0:a4:43:3f:69:09:5b:27:a2:95:57:55:e4:2a:da: d6:d8:16:54:16:c6:11:34:f2:97:82:5b:e8:e6:ed: c9:fb:2f:05:51:88:5c:82:41:10:e6:4f:8a:ff:d2: dd:dd:5d:a5:45:ad:5f:fd:0e:59:da:f8:31:fd:8b: 06:3f:59:d8:4f:b6:7f:01:01:b5:62:ef:0d:13:16: 69:41:5f:12:15:bc:0b:7a:16:2b:1b:56:7a:08:d7: d7:08:e2:c5:20:54:b9:9f:bc:70:5d:c6:fa:99:01: 2f:be:7d:7e:70:d8:79:ef:63:44:d4:1b:5d:3e:5e: 0a:c5:9f:49:73:25:61:b3:f1:15:5d:c9:e4:73:7c: 2e:98:aa:d0:a4:78:7e:06:5b:56:a6:65:cf:f9:b4: 50:46:0f:2b:f2:27:d1:a1:f6:60:11:9b:f8:36:7a: d9:95:bf:74:2a:c9:4d:9f:46:5b:b8:ac:89:d9:42: ab:68:31:8b:28:d4:3a:e1:ef:a5:9c:94:12:d3:cb: 35:0a:78:a0:27:ab:6f:fd:8e:42:7a:ca:06:96:59: 7f:b6:ed:f7:db:4c:a3:f5:44:bf:9e:10:c8:4c:a2: a9:e2:20:d3:27:51:34:6c:22:3d:b4:5e:ee:4f:18: 42:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:6A:7B:5A:34:94:5F:F1:41:8E:D6:F6:A0:6C:97:F3:AC:09:DE:D3 X509v3 Authority Key Identifier: keyid:DC:A3:C8:F8:E8:2C:D4:F9:E2:F8:F9:AE:C8:90:BC:1D:B0:98:A8:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:91:fc:e4:98:5f:db:aa:56:9b:3c:fd:df:aa:c8:1e:6f:9b: 40:aa:d9:e5:61:39:39:e2:6a:5b:91:a8:66:d0:31:64:e8:9c: e2:a8:18:1a:33:0f:50:dc:a0:5f:a6:dd:0c:41:e0:64:ea:5d: dd:a1:fb:a7:d7:ba:e5:02:17:82:1e:79:6e:e2:70:98:dd:f8: 06:f6:a7:a7:2b:c1:78:6b:be:8c:a7:33:67:ed:20:84:d6:7d: 89:28:89:c0:59:e9:a1:c2:7e:d3:c9:87:e5:99:89:d6:8a:f9: 34:9e:c8:00:7f:68:fe:ff:98:dd:35:73:83:58:10:fb:3c:2f: f5:fd:93:26:8c:f9:6d:7d:ee:af:af:be:5f:ff:9a:5c:60:45: 09:05:09:8b:e0:79:20:55:bf:f8:b3:a6:af:76:a0:29:58:9f: 61:07:a5:08:54:1c:cc:00:5b:68:56:60:b9:4b:91:26:9a:23: 52:29:51:c5:47:cd:87:94:63:fd:e3:5e:fc:ae:8c:c7:08:de: 2e:d1:3f:58:6c:55:46:2a:e8:85:22:a9:14:38:4b:09:e1:d8: 38:65:8b:d4:e0:62:e1:09:41:60:10:dc:2d:05:b4:99:8a:f5: 09:e3:49:ea:2d:1f:f2:3c:12:d0:5e:88:44:ab:64:51:3e:c9: b2:c3:00:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDjuae2Z0vGuU6/3DoIpgQG6n1GIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENBM0M4RjhFODJDRDRGOUUyRjhGOUFFQzg5MEJDMURC MDk4QTg4NzAeFw0yNjA5MjIwODA2NDRaFw0yNjA5MjMxMTMwNDRaMDMxMTAvBgNV BAMTKDVDNkE3QjVBMzQ5NDVGRjE0MThFRDZGNkEwNkM5N0YzQUMwOURFRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg7qImSMJSmDCS4pkfP+CkQz9p CVsnopVXVeQq2tbYFlQWxhE08peCW+jm7cn7LwVRiFyCQRDmT4r/0t3dXaVFrV/9 Dlna+DH9iwY/WdhPtn8BAbVi7w0TFmlBXxIVvAt6FisbVnoI19cI4sUgVLmfvHBd xvqZAS++fX5w2HnvY0TUG10+XgrFn0lzJWGz8RVdyeRzfC6YqtCkeH4GW1amZc/5 tFBGDyvyJ9Gh9mARm/g2etmVv3QqyU2fRlu4rInZQqtoMYso1Drh76WclBLTyzUK eKAnq2/9jkJ6ygaWWX+27ffbTKP1RL+eEMhMoqniINMnUTRsIj20Xu5PGEK7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXGp7WjSUX/FBjtb2oGyX86wJ3tMwHwYDVR0j BBgwFoAU3KPI+Ogs1Pni+PmuyJC8HbCYqIcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTBjNzczYzgtZmI1Ni00NDlmLTg2NDktMTEyZDZlMTY4NmIzLzAvRENBM0M4RjhF ODJDRDRGOUUyRjhGOUFFQzg5MEJDMURCMDk4QTg4Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQ0EzQzhGOEU4MkNENEY5RTJGOEY5QUVDODkwQkMxREIwOThB ODg3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTBjNzczYzgtZmI1Ni00NDlmLTg2 NDktMTEyZDZlMTY4NmIzLzAvRENBM0M4RjhFODJDRDRGOUUyRjhGOUFFQzg5MEJD MURCMDk4QTg4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFyR/OSYX9uqVps8/d+qyB5vm0Cq2eVhOTni aluRqGbQMWTonOKoGBozD1DcoF+m3QxB4GTqXd2h+6fXuuUCF4IeeW7icJjd+Ab2 p6crwXhrvoynM2ftIITWfYkoicBZ6aHCftPJh+WZidaK+TSeyAB/aP7/mN01c4NY EPs8L/X9kyaM+W197q+vvl//mlxgRQkFCYvgeSBVv/izpq92oClYn2EHpQhUHMwA W2hWYLlLkSaaI1IpUcVHzYeUY/3jXvyujMcI3i7RP1hsVUYq6IUiqRQ4Swnh2Dhl i9TgYuEJQWAQ3C0FtJmK9QnjSeotH/I8EtBeiESrZFE+ybLDANQ= -----END CERTIFICATE-----Generated at Tue Sep 22 15:55:37 2026 by rpki-client