$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.mft File: DB162C17AB46C72EF7494E06260EB3FE574E4CEE.mft (raw, json) Hash identifier: 8Hk09o1KSonVwAVYxhXahU4D7/Si1tcIB8XLH9Xs82g= Subject key identifier: 84:12:56:BD:BF:CD:CB:30:74:62:DE:9A:4E:F4:00:B6:D2:15:E4:CA Authority key identifier: DB:16:2C:17:AB:46:C7:2E:F7:49:4E:06:26:0E:B3:FE:57:4E:4C:EE Certificate issuer: /CN=DB162C17AB46C72EF7494E06260EB3FE574E4CEE Certificate serial: 2C490F72B08184AADFCEF0BBFA06C9F70D7FC63F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.mft Manifest number: BE Signing time: Mon 21 Sep 2026 01:02:48 +0000 Manifest this update: Mon 21 Sep 2026 00:57:48 +0000 Manifest next update: Tue 22 Sep 2026 03:26:48 +0000 Files and hashes: 1: 3130332e31352e3235312e302f32342d3234203d3e20313331373337.roa (hash: n2jgLsgpyvuRu9OXUICieAMoUsWBKFqPo1kbmePbqLI=) 2: DB162C17AB46C72EF7494E06260EB3FE574E4CEE.crl (hash: +YFYRF2XW7B6MVs1ZkwtmzKuF+gXr80B9YzOs2Kamtk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.crl rsync://rpki-rsync.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:26:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:49:0f:72:b0:81:84:aa:df:ce:f0:bb:fa:06:c9:f7:0d:7f:c6:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB162C17AB46C72EF7494E06260EB3FE574E4CEE Validity Not Before: Sep 21 00:57:48 2026 GMT Not After : Sep 22 03:26:48 2026 GMT Subject: CN=841256BDBFCDCB307462DE9A4EF400B6D215E4CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:24:9f:e7:5c:73:f3:3a:78:b4:90:2f:4c:39: 3e:0d:65:8a:20:1e:ea:09:6c:6e:7a:e6:1f:0b:25: e8:51:59:e1:75:00:b5:5c:55:e4:a4:d9:65:fd:b6: 67:4e:9b:1c:1c:09:80:32:53:b4:14:67:84:1f:4b: f3:96:ae:30:e4:91:b4:43:8e:34:30:99:35:14:4c: c3:8f:54:4b:79:9e:7d:de:67:ca:08:7b:74:5a:63: 31:28:e6:51:2f:37:51:84:b0:76:ad:71:13:be:c2: 50:b6:de:b2:8f:8d:ce:05:ec:76:fa:60:04:b6:6c: b6:d0:54:d0:3a:fb:3b:82:25:c8:d6:ed:44:87:b4: 13:57:17:f8:4a:c3:15:5d:f2:db:8f:c6:e6:71:a6: e8:c2:ee:22:45:69:7f:06:3c:95:92:e2:4d:6a:2b: 72:20:74:f5:31:af:49:6c:35:65:0b:9c:63:41:d8: bf:c5:fb:e5:94:9f:4d:6c:72:55:40:76:83:c9:5f: 38:1d:a7:45:57:21:80:ca:7a:8e:18:e8:c4:51:78: 30:f5:3c:d1:2c:6d:63:6b:e7:3c:1e:df:cb:8b:fb: c8:b6:b1:4d:1a:14:b1:d5:b7:e9:f7:13:77:55:eb: 08:28:80:f8:7b:a8:4c:f1:0f:0a:cb:a0:1d:26:d5: 2f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:12:56:BD:BF:CD:CB:30:74:62:DE:9A:4E:F4:00:B6:D2:15:E4:CA X509v3 Authority Key Identifier: keyid:DB:16:2C:17:AB:46:C7:2E:F7:49:4E:06:26:0E:B3:FE:57:4E:4C:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:70:45:99:3b:73:a2:f2:ca:bf:39:98:e3:46:2e:9a:87:1f: 03:8f:8b:82:9e:73:5f:3c:c3:14:3a:a5:90:d9:97:22:2b:d0: ad:d8:8f:aa:09:e4:db:04:2a:7d:6c:de:b4:5e:64:13:f6:bd: 26:ab:16:a9:64:7a:d5:ee:f1:83:d8:74:78:68:fc:d4:42:30: 6a:3f:88:3e:cd:6e:4f:ec:42:44:69:ff:6a:5d:8a:09:9e:3a: d7:f8:7c:76:bb:90:b6:b2:fb:e2:20:ae:63:69:7c:8e:86:48: f7:ba:a4:95:05:e7:ec:99:0b:7f:d7:aa:4c:05:29:20:c7:e0: 8a:66:f2:3a:7c:c5:27:63:93:ef:58:8f:b6:d4:90:12:94:a9: c3:fe:ef:3a:c0:9a:b6:47:83:d2:ab:15:0e:31:fd:c3:e2:f2: 52:a9:30:83:aa:fc:1f:a9:c2:d4:1b:75:09:4c:3c:78:50:71: 4f:76:44:8c:17:c9:cb:50:97:b6:32:4a:3b:c2:58:71:d7:3e: 99:8b:c5:86:b5:51:c5:e7:6e:ac:c9:52:c3:9c:d1:74:0e:17: 4d:56:7d:03:5a:2e:98:e0:b3:1a:e0:c3:c3:03:56:31:f3:b5: e7:d7:fd:2f:a8:bc:c8:fe:d1:e1:b6:fd:80:c2:c2:50:7c:a0: c4:80:33:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULEkPcrCBhKrfzvC7+gbJ9w1/xj8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIxNjJDMTdBQjQ2QzcyRUY3NDk0RTA2MjYwRUIzRkU1 NzRFNENFRTAeFw0yNjA5MjEwMDU3NDhaFw0yNjA5MjIwMzI2NDhaMDMxMTAvBgNV BAMTKDg0MTI1NkJEQkZDRENCMzA3NDYyREU5QTRFRjQwMEI2RDIxNUU0Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2JJ/nXHPzOni0kC9MOT4NZYog HuoJbG565h8LJehRWeF1ALVcVeSk2WX9tmdOmxwcCYAyU7QUZ4QfS/OWrjDkkbRD jjQwmTUUTMOPVEt5nn3eZ8oIe3RaYzEo5lEvN1GEsHatcRO+wlC23rKPjc4F7Hb6 YAS2bLbQVNA6+zuCJcjW7USHtBNXF/hKwxVd8tuPxuZxpujC7iJFaX8GPJWS4k1q K3IgdPUxr0lsNWULnGNB2L/F++WUn01sclVAdoPJXzgdp0VXIYDKeo4Y6MRReDD1 PNEsbWNr5zwe38uL+8i2sU0aFLHVt+n3E3dV6wgogPh7qEzxDwrLoB0m1S+/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhBJWvb/NyzB0Yt6aTvQAttIV5MowHwYDVR0j BBgwFoAU2xYsF6tGxy73SU4GJg6z/ldOTO4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmNkZmQ4ZWItOGE0MC00ZThiLWE5ZTAtOTI3OGNkMDRmYTQzLzAvREIxNjJDMTdB QjQ2QzcyRUY3NDk0RTA2MjYwRUIzRkU1NzRFNENFRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQjE2MkMxN0FCNDZDNzJFRjc0OTRFMDYyNjBFQjNGRTU3NEU0 Q0VFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmNkZmQ4ZWItOGE0MC00ZThiLWE5 ZTAtOTI3OGNkMDRmYTQzLzAvREIxNjJDMTdBQjQ2QzcyRUY3NDk0RTA2MjYwRUIz RkU1NzRFNENFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACdwRZk7c6Lyyr85mONGLpqHHwOPi4Kec188 wxQ6pZDZlyIr0K3Yj6oJ5NsEKn1s3rReZBP2vSarFqlketXu8YPYdHho/NRCMGo/ iD7Nbk/sQkRp/2pdigmeOtf4fHa7kLay++IgrmNpfI6GSPe6pJUF5+yZC3/XqkwF KSDH4Ipm8jp8xSdjk+9Yj7bUkBKUqcP+7zrAmrZHg9KrFQ4x/cPi8lKpMIOq/B+p wtQbdQlMPHhQcU92RIwXyctQl7YySjvCWHHXPpmLxYa1UcXnbqzJUsOc0XQOF01W fQNaLpjgsxrgw8MDVjHztefX/S+ovMj+0eG2/YDCwlB8oMSAM9Y= -----END CERTIFICATE-----Generated at Mon Sep 21 21:17:25 2026 by rpki-client