$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.mft File: 84EE64DA51082B30948D12F6E14B8EBCF1D658D1.mft (raw, json) Hash identifier: m+NtAKzilyvJzNhxzbQOJinoQZtinmAVApqz7jGB3PU= Subject key identifier: DB:4F:7D:4F:9A:AD:85:60:09:CE:24:BF:F8:4F:F4:96:C3:BE:A1:44 Authority key identifier: 84:EE:64:DA:51:08:2B:30:94:8D:12:F6:E1:4B:8E:BC:F1:D6:58:D1 Certificate issuer: /CN=84EE64DA51082B30948D12F6E14B8EBCF1D658D1 Certificate serial: 3120CA0921F0FB9FE658A523F11BDCD6FD07B6A2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 13:02:18 +0000 Manifest this update: Wed 23 Sep 2026 12:57:18 +0000 Manifest next update: Thu 24 Sep 2026 16:48:18 +0000 Files and hashes: 1: 3130332e3137382e3137342e302f32332d3234203d3e20313337333331.roa (hash: WmY+n1lGNZlUUH5ZggQpvj8af92oWZ8YbeF8/QwNgtQ=) 2: 84EE64DA51082B30948D12F6E14B8EBCF1D658D1.crl (hash: yOcZ3DqT+hh/DvGjdM3yKuN8QZMVHC9R2QxOE68DSQI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.crl rsync://rpki-rsync.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 16:48:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:20:ca:09:21:f0:fb:9f:e6:58:a5:23:f1:1b:dc:d6:fd:07:b6:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84EE64DA51082B30948D12F6E14B8EBCF1D658D1 Validity Not Before: Sep 23 12:57:18 2026 GMT Not After : Sep 24 16:48:18 2026 GMT Subject: CN=DB4F7D4F9AAD856009CE24BFF84FF496C3BEA144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:0f:71:46:72:07:bd:64:e7:f1:56:5a:4d:97: 74:5c:37:0f:84:90:a7:28:a0:12:8c:07:4c:4d:90: f1:95:cf:08:4f:de:89:e4:85:4a:cf:e8:dd:2d:bf: d2:09:ba:f9:e9:10:c4:65:66:0b:5d:26:b6:94:06: 2b:b2:47:18:bf:45:80:b1:71:29:fe:01:46:eb:b3: bd:bd:af:dc:2c:90:d0:e6:59:13:ac:9a:f9:b5:cf: 0e:b8:6d:80:a7:4e:9b:4e:a5:03:b6:2c:c3:3a:4d: 67:e0:fc:55:65:3a:98:33:6d:42:a6:5f:47:c1:dd: 5a:a6:37:9c:5e:3c:26:4d:e3:25:bc:fa:a7:2f:5a: 85:08:fa:99:a5:05:ab:a4:70:6f:e2:12:bb:4c:3f: 9b:b1:a6:82:86:55:22:fc:38:61:55:7a:65:99:fb: 74:7c:2c:6e:94:f8:95:11:23:4e:9f:01:6a:6d:79: 3f:d7:d5:93:67:f7:fc:0d:c4:2d:b0:c5:82:2d:5a: 30:5c:7e:0e:46:17:33:64:3e:43:6a:43:10:3d:16: 30:8a:7e:2f:53:3a:21:b3:de:ec:71:c6:af:a1:07: 7c:db:cd:6a:9e:f3:47:ca:2a:41:2c:77:e0:14:9f: 6a:c4:44:19:16:5d:ca:b2:00:c7:5c:a9:70:f8:57: af:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:4F:7D:4F:9A:AD:85:60:09:CE:24:BF:F8:4F:F4:96:C3:BE:A1:44 X509v3 Authority Key Identifier: keyid:84:EE:64:DA:51:08:2B:30:94:8D:12:F6:E1:4B:8E:BC:F1:D6:58:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:7e:f7:54:74:fd:61:a2:bb:0b:f2:c6:ea:c3:91:23:32:ab: 05:c2:07:91:a3:6b:03:74:f2:af:20:27:94:f8:38:63:6d:b2: df:4a:36:a4:7b:f2:d4:1e:5e:d8:80:73:9a:4f:01:18:fb:f3: bd:dd:b5:da:33:fb:8b:e7:74:93:ac:d7:55:db:d6:55:45:73: 96:bd:a3:67:11:c1:da:1d:c8:e1:e4:4b:4a:77:6f:0e:e3:e2: 6e:04:ef:23:5e:b8:20:b4:97:06:5d:1d:f3:68:a5:ad:41:92: e8:69:ef:c4:78:65:e2:82:eb:a8:3b:93:5c:35:99:b4:9b:14: 20:c0:90:6d:af:a9:52:8f:83:e4:aa:01:d3:d5:b9:12:53:ef: 46:c0:92:bf:01:58:df:e4:8d:66:79:7b:2f:0e:28:74:b9:93: 96:16:3d:9d:14:20:bb:39:1d:12:01:64:09:6f:3e:d4:6f:19: ed:a7:aa:7b:0c:c4:8a:4e:f0:b2:82:41:d4:56:0e:9e:16:f6: b6:7e:9b:61:80:cb:5f:48:3c:db:27:01:90:a4:fc:64:3d:12: 4d:0c:26:b2:fb:39:3f:3f:a7:55:a1:78:6b:ca:66:43:2f:96: 0f:1f:05:3a:59:ae:72:1c:54:0e:09:61:d0:2a:d9:b6:1e:83: 05:40:08:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMSDKCSHw+5/mWKUj8Rvc1v0HtqIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODRFRTY0REE1MTA4MkIzMDk0OEQxMkY2RTE0QjhFQkNG MUQ2NThEMTAeFw0yNjA5MjMxMjU3MThaFw0yNjA5MjQxNjQ4MThaMDMxMTAvBgNV BAMTKERCNEY3RDRGOUFBRDg1NjAwOUNFMjRCRkY4NEZGNDk2QzNCRUExNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7D3FGcge9ZOfxVlpNl3RcNw+E kKcooBKMB0xNkPGVzwhP3onkhUrP6N0tv9IJuvnpEMRlZgtdJraUBiuyRxi/RYCx cSn+AUbrs729r9wskNDmWROsmvm1zw64bYCnTptOpQO2LMM6TWfg/FVlOpgzbUKm X0fB3VqmN5xePCZN4yW8+qcvWoUI+pmlBaukcG/iErtMP5uxpoKGVSL8OGFVemWZ +3R8LG6U+JURI06fAWpteT/X1ZNn9/wNxC2wxYItWjBcfg5GFzNkPkNqQxA9FjCK fi9TOiGz3uxxxq+hB3zbzWqe80fKKkEsd+AUn2rERBkWXcqyAMdcqXD4V69DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2099T5qthWAJziS/+E/0lsO+oUQwHwYDVR0j BBgwFoAUhO5k2lEIKzCUjRL24UuOvPHWWNEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmQ3ZjllZjQtZjk5Zi00NGZmLWI5NjgtNzBkNDUyNGQ3MjA3LzAvODRFRTY0REE1 MTA4MkIzMDk0OEQxMkY2RTE0QjhFQkNGMUQ2NThEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NEVFNjREQTUxMDgyQjMwOTQ4RDEyRjZFMTRCOEVCQ0YxRDY1 OEQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmQ3ZjllZjQtZjk5Zi00NGZmLWI5 NjgtNzBkNDUyNGQ3MjA3LzAvODRFRTY0REE1MTA4MkIzMDk0OEQxMkY2RTE0QjhF QkNGMUQ2NThEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJN+91R0/WGiuwvyxurDkSMyqwXCB5GjawN0 8q8gJ5T4OGNtst9KNqR78tQeXtiAc5pPARj7873dtdoz+4vndJOs11Xb1lVFc5a9 o2cRwdodyOHkS0p3bw7j4m4E7yNeuCC0lwZdHfNopa1Bkuhp78R4ZeKC66g7k1w1 mbSbFCDAkG2vqVKPg+SqAdPVuRJT70bAkr8BWN/kjWZ5ey8OKHS5k5YWPZ0UILs5 HRIBZAlvPtRvGe2nqnsMxIpO8LKCQdRWDp4W9rZ+m2GAy19IPNsnAZCk/GQ9Ek0M JrL7OT8/p1WheGvKZkMvlg8fBTpZrnIcVA4JYdAq2bYegwVACGE= -----END CERTIFICATE-----Generated at Thu Sep 24 02:35:02 2026 by rpki-client