$ rpki-client -vvvf rpki-rsync.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.mft File: D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.mft (raw, json) Hash identifier: aMoPvFdRC79U+HGYaIyu4nDyubXTrrJjCoPJaefZH7s= Subject key identifier: 07:02:19:35:88:AF:6C:CB:22:60:96:C2:E4:86:DD:DE:33:0F:CE:2C Authority key identifier: D3:B0:B1:2C:00:ED:A4:8B:D2:7B:03:AE:46:20:E5:1B:4D:5B:35:B9 Certificate issuer: /CN=D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9 Certificate serial: 5A9FCFFEF4147887DD0D65B841F722658A6F1CD4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 21:47:32 +0000 Manifest this update: Thu 24 Sep 2026 21:42:32 +0000 Manifest next update: Fri 25 Sep 2026 22:35:32 +0000 Files and hashes: 1: 323430353a633863303a3a2f33322d3332203d3e20313339393831.roa (hash: UG7HopHAsWszm3vKCwbdEPyJLKZk5ZAofsZVkykHgJs=) 2: 3130332e3134382e32342e302f32332d3234203d3e20313339393831.roa (hash: ppvRL+0RoVt7WTK9nlYvDd18NTyRBb+RqG5BAHWS1Ig=) 3: D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.crl (hash: 0ASkKquDNPYjvBl+ckUVSeFXammZGm+14ZUt7icdkJc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.crl rsync://rpki-rsync.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:9f:cf:fe:f4:14:78:87:dd:0d:65:b8:41:f7:22:65:8a:6f:1c:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9 Validity Not Before: Sep 24 21:42:32 2026 GMT Not After : Sep 25 22:35:32 2026 GMT Subject: CN=0702193588AF6CCB226096C2E486DDDE330FCE2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0d:d1:05:76:76:35:a7:04:ea:29:ac:5b:8c: 9c:31:a8:dd:9c:0e:de:89:3d:97:74:bb:2d:8a:8f: eb:bb:0a:f6:ea:c2:53:20:57:36:4e:bb:d4:bf:3c: 84:a0:08:f3:2f:29:6b:a4:5a:0d:b3:76:82:e6:06: 1d:18:c9:aa:0a:78:45:b9:0e:6d:4c:91:15:40:f9: c0:c4:95:51:ad:31:f0:ac:1f:1d:2e:8c:ca:61:6b: 37:d5:a3:70:95:91:97:7e:54:56:70:33:c4:7e:ca: b0:fc:35:93:2d:78:e6:91:65:d8:ae:64:70:69:eb: 9f:16:06:11:76:8f:8d:37:72:21:cf:f4:73:b6:b0: 60:50:76:14:ca:1d:0d:88:77:0c:b2:85:f1:85:23: 25:4b:fb:1e:cb:f3:97:08:75:19:bb:6a:c2:3b:f6: 35:5b:e1:6f:dd:11:c8:ad:42:82:7e:9a:12:1f:d4: 5b:e8:4f:74:e0:4e:3d:43:3a:7c:a0:b4:c8:dc:a5: 94:b0:47:e7:bd:33:c0:6b:32:c6:63:51:32:ff:f8: 1b:0a:11:9b:c3:3d:2f:64:e5:a3:34:3d:a8:e9:2c: a4:49:e3:c5:ba:8c:f5:c5:90:b4:f1:d0:43:92:88: 33:63:15:fe:70:12:0b:b3:fa:82:ed:03:24:10:55: c4:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:02:19:35:88:AF:6C:CB:22:60:96:C2:E4:86:DD:DE:33:0F:CE:2C X509v3 Authority Key Identifier: keyid:D3:B0:B1:2C:00:ED:A4:8B:D2:7B:03:AE:46:20:E5:1B:4D:5B:35:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:86:59:a2:bf:56:4d:fc:e7:54:ab:20:2a:13:67:e1:e1:b1: da:e5:54:cb:5c:15:cb:e8:23:86:6d:85:cd:7f:3b:fc:e3:8d: 2a:9d:6a:a4:dc:3d:71:0b:e3:65:82:a2:c7:a9:57:ce:d6:55: 08:18:87:fb:60:8a:ff:9b:0e:ef:92:8c:81:18:44:11:c5:78: 90:6d:8b:e8:c7:e6:1a:14:73:e2:46:7c:2a:3a:43:cf:b6:58: b6:4c:03:a6:1d:63:9a:d9:e5:b9:66:1d:65:92:57:03:d2:75: 3c:f4:9c:67:f8:2f:71:b5:a2:37:91:4b:8f:9a:66:7f:8f:5e: 29:8f:d9:a0:ce:74:13:67:7b:72:64:16:55:ea:db:22:96:03: 00:86:f6:b0:65:78:5d:65:31:fb:a2:d5:24:fa:00:68:2e:fc: 64:b1:ad:64:59:e7:ad:35:99:8b:f8:9a:fe:55:c9:34:d2:18: f2:85:fa:38:33:73:16:d5:f9:72:15:0f:74:8f:68:18:20:6b: 48:46:23:32:03:1f:85:59:f3:05:8d:1e:45:4c:2c:3f:c1:5b: 65:72:cf:4b:59:c8:21:c4:b0:c8:7a:86:2e:d8:f6:26:9a:3e: 25:01:d9:e0:56:49:da:a2:b2:a9:38:d6:6d:80:6b:4b:e5:9d: 09:f9:59:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWp/P/vQUeIfdDWW4QfciZYpvHNQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNCMEIxMkMwMEVEQTQ4QkQyN0IwM0FFNDYyMEU1MUI0 RDVCMzVCOTAeFw0yNjA5MjQyMTQyMzJaFw0yNjA5MjUyMjM1MzJaMDMxMTAvBgNV BAMTKDA3MDIxOTM1ODhBRjZDQ0IyMjYwOTZDMkU0ODZERERFMzMwRkNFMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxDdEFdnY1pwTqKaxbjJwxqN2c Dt6JPZd0uy2Kj+u7CvbqwlMgVzZOu9S/PISgCPMvKWukWg2zdoLmBh0YyaoKeEW5 Dm1MkRVA+cDElVGtMfCsHx0ujMphazfVo3CVkZd+VFZwM8R+yrD8NZMteOaRZdiu ZHBp658WBhF2j403ciHP9HO2sGBQdhTKHQ2IdwyyhfGFIyVL+x7L85cIdRm7asI7 9jVb4W/dEcitQoJ+mhIf1FvoT3TgTj1DOnygtMjcpZSwR+e9M8BrMsZjUTL/+BsK EZvDPS9k5aM0PajpLKRJ48W6jPXFkLTx0EOSiDNjFf5wEguz+oLtAyQQVcTVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBwIZNYivbMsiYJbC5Ibd3jMPziwwHwYDVR0j BBgwFoAU07CxLADtpIvSewOuRiDlG01bNbkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTkyZTA3ZjgtMWE0OC00MzkxLWE2YTUtOGU0ZTM5Yzg1ODhhLzAvRDNCMEIxMkMw MEVEQTQ4QkQyN0IwM0FFNDYyMEU1MUI0RDVCMzVCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EM0IwQjEyQzAwRURBNDhCRDI3QjAzQUU0NjIwRTUxQjRENUIz NUI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTkyZTA3ZjgtMWE0OC00MzkxLWE2 YTUtOGU0ZTM5Yzg1ODhhLzAvRDNCMEIxMkMwMEVEQTQ4QkQyN0IwM0FFNDYyMEU1 MUI0RDVCMzVCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEaGWaK/Vk3851SrICoTZ+HhsdrlVMtcFcvo I4Zthc1/O/zjjSqdaqTcPXEL42WCosepV87WVQgYh/tgiv+bDu+SjIEYRBHFeJBt i+jH5hoUc+JGfCo6Q8+2WLZMA6YdY5rZ5blmHWWSVwPSdTz0nGf4L3G1ojeRS4+a Zn+PXimP2aDOdBNne3JkFlXq2yKWAwCG9rBleF1lMfui1ST6AGgu/GSxrWRZ5601 mYv4mv5VyTTSGPKF+jgzcxbV+XIVD3SPaBgga0hGIzIDH4VZ8wWNHkVMLD/BW2Vy z0tZyCHEsMh6hi7Y9iaaPiUB2eBWSdqisqk41m2Aa0vlnQn5WUI= -----END CERTIFICATE-----Generated at Fri Sep 25 04:28:13 2026 by rpki-client