$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.mft File: 84122DA5B146979D5AAE13129EB677B96C49C7F6.mft (raw, json) Hash identifier: grps7YUbT+0TeAlY2eD+CCwvlWDjvevAPp7bMjyHCc0= Subject key identifier: C2:F7:4D:26:F7:BE:EF:6E:53:9B:2F:27:BF:6C:07:5A:02:99:9A:94 Authority key identifier: 84:12:2D:A5:B1:46:97:9D:5A:AE:13:12:9E:B6:77:B9:6C:49:C7:F6 Certificate issuer: /CN=84122DA5B146979D5AAE13129EB677B96C49C7F6 Certificate serial: 61A9A97C17D3826BA63C7C733BED7501EC8FD7B0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84122DA5B146979D5AAE13129EB677B96C49C7F6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.mft Manifest number: BE Signing time: Sun 20 Sep 2026 15:36:15 +0000 Manifest this update: Sun 20 Sep 2026 15:31:15 +0000 Manifest next update: Mon 21 Sep 2026 17:00:15 +0000 Files and hashes: 1: 323430313a646234303a3a2f33322d3332203d3e20313336383635.roa (hash: jhYHGOtLAWmv9OcO3/5rDKvnFPZl5OTObgAsQoi8r50=) 2: 3130332e3130322e31352e302f32342d3234203d3e20313337333331.roa (hash: LXKwnzjsakvh6k668BXuaYJ1O5iQ9reQNkhpZI7YDu8=) 3: 3130332e3130322e31322e302f32342d3234203d3e20313336383635.roa (hash: 2a7WLuRJ0dxekwgo8okkZl2guEN5PE3JgGMBxaSTXY4=) 4: 84122DA5B146979D5AAE13129EB677B96C49C7F6.crl (hash: aOE12j4XGghArNcDZ/PjFLjfxtbl4JUPn0AeerFQCR0=) 5: 3130332e3130322e31322e302f32332d3233203d3e20313336383635.roa (hash: u+tKwHgjMKGgdgEnZPp2mwsftX+fJPIHxzdML3oWuA4=) 6: 3130332e3130322e31342e302f32342d3234203d3e20313336383635.roa (hash: fHid8e/HPZhTBqkYcMs+Y715ZVlDl6RBBe2DwEnsBPc=) 7: 3130332e3130322e31332e302f32342d3234203d3e20313336383635.roa (hash: LWJq/XJLjGCHAx0PdP5FSd33v0EqmvbG5/RZUAKgCgs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.crl rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84122DA5B146979D5AAE13129EB677B96C49C7F6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:a9:a9:7c:17:d3:82:6b:a6:3c:7c:73:3b:ed:75:01:ec:8f:d7:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84122DA5B146979D5AAE13129EB677B96C49C7F6 Validity Not Before: Sep 20 15:31:15 2026 GMT Not After : Sep 21 17:00:15 2026 GMT Subject: CN=C2F74D26F7BEEF6E539B2F27BF6C075A02999A94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d4:5b:22:7f:4e:c7:38:32:7a:86:fd:41:d7: 72:22:ff:37:67:51:a9:15:e8:03:2f:0e:94:68:2f: 62:e2:e6:c0:dd:8e:e0:37:bc:d3:db:50:25:ed:01: b1:d2:fc:8d:3f:57:74:6e:d0:ca:59:5f:f4:cb:f4: ea:70:f8:49:5c:2e:4f:8c:06:35:1e:18:7b:f8:63: f8:e0:57:75:2a:3e:ad:90:37:bb:51:d6:cf:37:a8: 1e:59:5f:41:90:9d:21:b3:9c:ff:52:cf:4d:ef:24: 83:d9:74:12:a5:fa:0a:8c:01:69:1d:7a:98:3b:0d: ed:c2:52:3b:4c:bc:61:90:a7:ee:75:01:5c:f6:9f: 21:a6:32:77:c9:b5:18:f2:35:42:05:11:73:4c:3e: 44:f2:bd:21:af:0b:47:f3:47:24:a6:ac:7e:7c:e5: 94:54:b2:3f:da:08:fd:95:ed:5d:73:8a:5c:b8:7a: 00:22:b3:25:0b:23:8d:ec:0c:30:a6:70:4d:c7:56: bd:dc:f5:46:99:99:0b:27:96:88:4e:00:bb:bf:e1: 32:1e:6a:c4:d5:cc:26:28:67:f5:c1:7c:f6:17:71: a4:b3:61:b7:c8:87:c1:e6:b3:dd:25:11:7e:23:da: 67:c8:b2:56:53:4d:9e:6b:0b:7d:d5:46:4f:d5:12: 2b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F7:4D:26:F7:BE:EF:6E:53:9B:2F:27:BF:6C:07:5A:02:99:9A:94 X509v3 Authority Key Identifier: keyid:84:12:2D:A5:B1:46:97:9D:5A:AE:13:12:9E:B6:77:B9:6C:49:C7:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84122DA5B146979D5AAE13129EB677B96C49C7F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:f8:7e:a9:2f:b4:d5:a3:67:1a:e1:2f:d0:61:57:f9:2e:c6: b4:1d:7b:35:7f:af:d1:b8:60:b3:4b:16:ca:76:d5:d9:28:33: 67:84:3c:62:7a:31:01:7f:36:55:09:8e:0a:96:9d:8e:7d:a2: 37:48:4e:fb:fa:19:23:5f:89:79:1d:84:59:f1:ab:62:ac:0b: 5a:74:da:96:a2:6d:d3:81:d0:94:49:1e:bc:99:9a:80:db:91: 5a:4e:17:02:f9:b7:36:ef:67:be:90:10:a9:b8:51:6d:ea:ef: a6:20:72:d3:6d:c5:12:4c:0f:40:75:6c:f4:6f:ed:6b:3a:23: cb:89:09:c3:ee:d5:43:87:00:83:11:b0:79:17:c8:01:67:71: 55:c3:63:9f:04:9e:06:6a:da:66:e4:f4:32:42:a2:01:01:eb: b8:30:7c:6f:29:94:85:14:2e:1e:7d:4b:8c:71:ce:eb:d1:e3: 8e:c1:5c:f9:5e:78:2e:00:c9:4a:88:ad:3f:2b:68:6e:c0:1b: 0c:20:bd:44:a5:c3:f3:9f:20:4e:6b:60:b8:3d:18:f0:17:b0: 56:4e:43:1f:6d:68:b9:8e:75:24:15:dc:e4:28:2d:11:e7:8a: d4:86:9f:3b:25:c6:2a:45:c9:81:d0:6a:5e:dd:c3:b8:c6:de: 42:5a:c7:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYampfBfTgmumPHxzO+11AeyP17AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQxMjJEQTVCMTQ2OTc5RDVBQUUxMzEyOUVCNjc3Qjk2 QzQ5QzdGNjAeFw0yNjA5MjAxNTMxMTVaFw0yNjA5MjExNzAwMTVaMDMxMTAvBgNV BAMTKEMyRjc0RDI2RjdCRUVGNkU1MzlCMkYyN0JGNkMwNzVBMDI5OTlBOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa1Fsif07HODJ6hv1B13Ii/zdn UakV6AMvDpRoL2Li5sDdjuA3vNPbUCXtAbHS/I0/V3Ru0MpZX/TL9Opw+ElcLk+M BjUeGHv4Y/jgV3UqPq2QN7tR1s83qB5ZX0GQnSGznP9Sz03vJIPZdBKl+gqMAWkd epg7De3CUjtMvGGQp+51AVz2nyGmMnfJtRjyNUIFEXNMPkTyvSGvC0fzRySmrH58 5ZRUsj/aCP2V7V1zily4egAisyULI43sDDCmcE3HVr3c9UaZmQsnlohOALu/4TIe asTVzCYoZ/XBfPYXcaSzYbfIh8Hms90lEX4j2mfIslZTTZ5rC33VRk/VEitxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwvdNJve+725Tmy8nv2wHWgKZmpQwHwYDVR0j BBgwFoAUhBItpbFGl51arhMSnrZ3uWxJx/YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWY4NmIxMmUtZTU3NC00MjZiLWFhNmItNDkzOWUzYjAzMGJhLzAvODQxMjJEQTVC MTQ2OTc5RDVBQUUxMzEyOUVCNjc3Qjk2QzQ5QzdGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NDEyMkRBNUIxNDY5NzlENUFBRTEzMTI5RUI2NzdCOTZDNDlD N0Y2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWY4NmIxMmUtZTU3NC00MjZiLWFh NmItNDkzOWUzYjAzMGJhLzAvODQxMjJEQTVCMTQ2OTc5RDVBQUUxMzEyOUVCNjc3 Qjk2QzQ5QzdGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIf4fqkvtNWjZxrhL9BhV/kuxrQdezV/r9G4 YLNLFsp21dkoM2eEPGJ6MQF/NlUJjgqWnY59ojdITvv6GSNfiXkdhFnxq2KsC1p0 2paibdOB0JRJHryZmoDbkVpOFwL5tzbvZ76QEKm4UW3q76YgctNtxRJMD0B1bPRv 7Ws6I8uJCcPu1UOHAIMRsHkXyAFncVXDY58EngZq2mbk9DJCogEB67gwfG8plIUU Lh59S4xxzuvR447BXPleeC4AyUqIrT8raG7AGwwgvUSlw/OfIE5rYLg9GPAXsFZO Qx9taLmOdSQV3OQoLRHnitSGnzslxipFyYHQal7dw7jG3kJaxxs= -----END CERTIFICATE-----Generated at Mon Sep 21 09:58:49 2026 by rpki-client