$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/D522456371D4AC1AABD94B54197F5014F8E929A5.mft File: D522456371D4AC1AABD94B54197F5014F8E929A5.mft (raw, json) Hash identifier: yeIZ4TtgPmPVtNRPnEkl4stIn8Zo+JYso29iLS5YWGE= Subject key identifier: F5:89:77:F6:55:DE:27:71:F3:82:15:97:EC:33:A6:BC:F9:B0:E4:C1 Authority key identifier: D5:22:45:63:71:D4:AC:1A:AB:D9:4B:54:19:7F:50:14:F8:E9:29:A5 Certificate issuer: /CN=D522456371D4AC1AABD94B54197F5014F8E929A5 Certificate serial: 71A29D88CD0F265D792D8955FECD6D0EBE61D1FD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D522456371D4AC1AABD94B54197F5014F8E929A5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/D522456371D4AC1AABD94B54197F5014F8E929A5.mft Manifest number: BD Signing time: Sun 20 Sep 2026 05:34:01 +0000 Manifest this update: Sun 20 Sep 2026 05:29:01 +0000 Manifest next update: Mon 21 Sep 2026 06:35:01 +0000 Files and hashes: 1: D522456371D4AC1AABD94B54197F5014F8E929A5.crl (hash: I/0zxCNYQ149jgfF5neDY85KCB8+XB109va6RqR4lIg=) 2: 3130332e3137392e3133362e302f32332d3234203d3e20313339393737.roa (hash: OUIoLLo/dAdijxG7HgPy+7u0dGo5YCKdHwzzHlzGJYU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/D522456371D4AC1AABD94B54197F5014F8E929A5.crl rsync://rpki-rsync.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/D522456371D4AC1AABD94B54197F5014F8E929A5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D522456371D4AC1AABD94B54197F5014F8E929A5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 06:35:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:a2:9d:88:cd:0f:26:5d:79:2d:89:55:fe:cd:6d:0e:be:61:d1:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D522456371D4AC1AABD94B54197F5014F8E929A5 Validity Not Before: Sep 20 05:29:01 2026 GMT Not After : Sep 21 06:35:01 2026 GMT Subject: CN=F58977F655DE2771F3821597EC33A6BCF9B0E4C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:46:36:c1:e8:91:80:6f:34:6c:f7:a3:47:f0: 49:92:20:b2:f4:80:88:25:4b:4d:b5:3a:c7:25:2e: 14:d4:ef:0a:86:7a:85:ed:71:e7:b6:6f:62:d1:df: 82:28:76:c0:a4:1b:45:2d:b0:e5:e3:bd:6e:1e:ae: df:09:40:bf:aa:68:62:bf:65:eb:fc:3b:28:65:c9: 9b:b7:6c:1a:63:ec:bc:4f:da:8f:dd:5e:1f:66:5c: ba:77:95:f8:9d:ec:74:ec:04:c6:08:0b:f6:f3:73: 3c:d8:32:7b:a5:be:42:a0:6e:16:70:30:9c:ca:29: 2e:d9:d0:32:c2:f7:f1:d3:4c:af:18:da:2d:d6:63: b9:e0:05:96:b5:c2:e2:fe:a4:38:e7:86:34:af:db: 18:4b:37:a8:85:1e:a5:31:54:58:95:c0:89:ee:d2: ce:d5:3d:85:0e:fc:5a:e7:1e:d4:c2:cc:3c:d9:68: 19:17:de:c7:a3:80:7b:09:93:8f:11:d4:c2:d2:bb: cd:d4:7f:9f:ca:a7:92:d9:d6:d2:f3:a6:31:10:a9: 52:1d:42:ca:00:c0:3d:21:e1:f8:44:92:05:e5:b3: 47:66:82:31:5c:64:0a:c2:41:a5:57:ce:6d:e4:00: 6c:e2:5c:19:56:51:e7:ae:11:b2:40:42:99:e3:ab: e8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:89:77:F6:55:DE:27:71:F3:82:15:97:EC:33:A6:BC:F9:B0:E4:C1 X509v3 Authority Key Identifier: keyid:D5:22:45:63:71:D4:AC:1A:AB:D9:4B:54:19:7F:50:14:F8:E9:29:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/D522456371D4AC1AABD94B54197F5014F8E929A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D522456371D4AC1AABD94B54197F5014F8E929A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/D522456371D4AC1AABD94B54197F5014F8E929A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:63:ce:2f:ad:05:3b:ac:b9:92:76:d5:ab:c3:66:d5:80:01: e8:59:fb:d7:61:bb:cb:ab:fd:9a:c0:37:cf:b2:98:a4:b2:63: 29:cf:6a:26:a1:d7:13:27:04:8c:44:7d:a7:25:75:20:63:e2: 1b:97:62:91:3b:2a:fc:81:6e:9f:ff:75:87:78:09:0e:f8:25: fa:60:f2:73:1a:c8:2c:eb:0c:d7:f0:82:26:87:60:71:5e:94: 12:3e:83:2e:66:e5:a6:89:d7:ac:77:36:e4:bc:5b:44:b4:8a: 71:3a:3c:4a:b3:cd:cf:e3:fb:02:7c:c2:cf:83:07:cc:c4:ac: dc:46:5a:4b:a3:1a:98:46:ed:65:df:0f:52:ae:98:91:e5:c0: 19:4a:f4:3f:ea:d1:81:a3:a0:0a:a7:ee:76:e0:29:db:dd:4d: ff:f9:f3:7a:7f:35:57:0f:89:e8:af:16:39:7f:a8:af:62:ac: b4:8f:8b:fb:58:52:89:34:78:42:c5:90:35:85:bd:b1:5b:22: 49:43:bc:b9:b0:27:fb:f9:7a:5e:3e:a1:61:76:27:c6:18:df: be:12:8b:45:92:b1:74:a9:92:41:82:31:47:35:a9:b2:52:07: 25:75:91:9f:56:1d:b6:c8:50:bc:fa:fe:b8:cc:b4:e5:80:da: f4:77:e7:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcaKdiM0PJl15LYlV/s1tDr5h0f0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUyMjQ1NjM3MUQ0QUMxQUFCRDk0QjU0MTk3RjUwMTRG OEU5MjlBNTAeFw0yNjA5MjAwNTI5MDFaFw0yNjA5MjEwNjM1MDFaMDMxMTAvBgNV BAMTKEY1ODk3N0Y2NTVERTI3NzFGMzgyMTU5N0VDMzNBNkJDRjlCMEU0QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/RjbB6JGAbzRs96NH8EmSILL0 gIglS021OsclLhTU7wqGeoXtcee2b2LR34IodsCkG0UtsOXjvW4ert8JQL+qaGK/ Zev8OyhlyZu3bBpj7LxP2o/dXh9mXLp3lfid7HTsBMYIC/bzczzYMnulvkKgbhZw MJzKKS7Z0DLC9/HTTK8Y2i3WY7ngBZa1wuL+pDjnhjSv2xhLN6iFHqUxVFiVwInu 0s7VPYUO/FrnHtTCzDzZaBkX3sejgHsJk48R1MLSu83Uf5/Kp5LZ1tLzpjEQqVId QsoAwD0h4fhEkgXls0dmgjFcZArCQaVXzm3kAGziXBlWUeeuEbJAQpnjq+jBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9Yl39lXeJ3HzghWX7DOmvPmw5MEwHwYDVR0j BBgwFoAU1SJFY3HUrBqr2UtUGX9QFPjpKaUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmQ4MGIzMjEtYWEzMS00MzE3LTlkMzEtYzJiZDE5MGMxMzg0LzAvRDUyMjQ1NjM3 MUQ0QUMxQUFCRDk0QjU0MTk3RjUwMTRGOEU5MjlBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENTIyNDU2MzcxRDRBQzFBQUJEOTRCNTQxOTdGNTAxNEY4RTky OUE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmQ4MGIzMjEtYWEzMS00MzE3LTlk MzEtYzJiZDE5MGMxMzg0LzAvRDUyMjQ1NjM3MUQ0QUMxQUFCRDk0QjU0MTk3RjUw MTRGOEU5MjlBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB1jzi+tBTusuZJ21avDZtWAAehZ+9dhu8ur /ZrAN8+ymKSyYynPaiah1xMnBIxEfacldSBj4huXYpE7KvyBbp//dYd4CQ74Jfpg 8nMayCzrDNfwgiaHYHFelBI+gy5m5aaJ16x3NuS8W0S0inE6PEqzzc/j+wJ8ws+D B8zErNxGWkujGphG7WXfD1KumJHlwBlK9D/q0YGjoAqn7nbgKdvdTf/583p/NVcP ieivFjl/qK9irLSPi/tYUok0eELFkDWFvbFbIklDvLmwJ/v5el4+oWF2J8YY374S i0WSsXSpkkGCMUc1qbJSByV1kZ9WHbbIULz6/rjMtOWA2vR3508= -----END CERTIFICATE-----Generated at Sun Sep 20 17:57:51 2026 by rpki-client