$ rpki-client -vvvf rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.mft File: DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.mft (raw, json) Hash identifier: Vt1R2IZ1nsFEPJmuUlO3AzxQCeqvtg9B25wRFcQ2S3Q= Subject key identifier: 55:8D:C5:53:9D:89:B7:27:CF:3C:DA:6E:1D:04:24:B9:70:98:A6:A2 Authority key identifier: DF:6A:98:7E:2F:9B:F1:04:B9:93:89:11:E8:F8:3F:4C:51:C5:A7:4D Certificate issuer: /CN=DF6A987E2F9BF104B9938911E8F83F4C51C5A74D Certificate serial: 4FBC5EB51637D07742619D64E13135EEC8C3C3A8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.mft Manifest number: D4 Signing time: Thu 08 Oct 2026 10:51:27 +0000 Manifest this update: Thu 08 Oct 2026 10:46:27 +0000 Manifest next update: Fri 09 Oct 2026 11:21:27 +0000 Files and hashes: 1: DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.crl (hash: ZKmVaGxuAV8iuNpLXojeSJLzEppJOqfvFy7P6hQobg4=) 2: 3130332e3134382e3139382e302f32342d3234203d3e203233393437.roa (hash: fD3NLzLgoJ82TLwu7Dwyse03F0V8LT4TWwHSpMtUfEc=) 3: 3130332e3134382e3139382e302f32332d3234203d3e20313338313238.roa (hash: d1/YZ4nLn+eOZOqPz/6uDnp+bGReiCL4D5xWg3VSU5w=) 4: 3130332e3134382e3139382e302f32342d3234203d3e2034373837.roa (hash: 97HN/1c+8Hrc2pb/g0tPOiNTWcjkEdKOrzmx5piyFis=) 5: 323030313a6466323a653838303a3a2f34382d3438203d3e20313339393938.roa (hash: TTk5uxdYgabM/1XXzBbZ8h3cHs3Ef7zAmOsq9InOKKA=) 6: 323030313a6466323a653838303a3a2f34382d3438203d3e2034373837.roa (hash: WjZRwtvJki8cX6/hev6SY7XFmEOdsbw7GQ4iNASnaI0=) 7: 3130332e3134382e3139392e302f32342d3234203d3e2034373837.roa (hash: E89xRti4PVG0HV9DRFC+eJJ1GWYmvwIqGtNqlTsJLNs=) 8: 3130332e3134382e3139382e302f32332d3234203d3e20313339393938.roa (hash: pUwBvJ0FIKqMG3YypxwtIACCh9fdPkCe3slROTdlAFQ=) 9: 3130332e3134382e3139382e302f32342d3234203d3e2034383030.roa (hash: TkbyXPHwp6Kb69rQYjb4QN3MOoOzWNnMDZFwGXZxRRA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.crl rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 11:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:bc:5e:b5:16:37:d0:77:42:61:9d:64:e1:31:35:ee:c8:c3:c3:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF6A987E2F9BF104B9938911E8F83F4C51C5A74D Validity Not Before: Oct 8 10:46:27 2026 GMT Not After : Oct 9 11:21:27 2026 GMT Subject: CN=558DC5539D89B727CF3CDA6E1D0424B97098A6A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e0:0d:7d:8c:66:ab:5d:9a:96:e3:6d:15:36: 7b:1b:19:b5:91:ee:e2:40:1f:ff:24:b4:84:ab:70: fa:04:2a:cf:95:ff:31:37:68:0d:46:47:70:40:89: f5:59:26:61:50:0b:4c:58:a1:ed:ac:eb:77:1d:a1: fb:0e:ee:b1:79:5d:fc:1c:c9:ef:7a:81:e9:0c:66: cd:73:cf:ec:70:67:5a:ca:27:be:a6:c0:71:0a:c6: d0:a5:20:d4:07:ff:1f:7d:dd:85:61:2f:9a:d4:42: 97:c7:43:d8:3d:03:28:f9:da:35:02:db:27:99:ae: ff:72:42:de:e8:ad:e2:3f:81:bd:d9:dd:34:69:94: 37:0f:e1:ba:1a:49:b9:64:5c:bc:5f:d3:32:37:da: d0:46:86:47:be:33:c0:38:43:18:fa:04:47:69:bb: 59:8e:5b:8a:df:85:ce:d7:f2:46:a6:93:dc:e6:b5: 7c:9e:f2:8e:fc:63:78:c2:23:78:a6:4b:7a:db:30: 17:5f:e2:5d:af:a3:81:61:d8:b0:dd:ef:c3:36:66: 0e:71:2a:cf:14:63:44:bd:29:33:7d:85:7d:1f:54: e8:29:43:2d:6a:36:1a:9c:01:62:76:c1:16:98:d3: bc:ca:b1:a0:02:cb:24:fc:e3:e8:03:8c:3a:9c:52: 41:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:8D:C5:53:9D:89:B7:27:CF:3C:DA:6E:1D:04:24:B9:70:98:A6:A2 X509v3 Authority Key Identifier: keyid:DF:6A:98:7E:2F:9B:F1:04:B9:93:89:11:E8:F8:3F:4C:51:C5:A7:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:b8:0a:8b:62:32:85:05:5d:b4:45:10:55:fc:28:47:9f:ff: f7:bf:c5:8a:c2:6f:e1:71:6e:8c:2b:f5:d9:be:18:b0:7d:dd: 1b:3a:5c:f6:2b:45:9a:85:78:9e:c5:db:c9:fb:03:7e:b9:52: 63:c7:e4:c6:6c:97:93:7c:e1:6e:8b:ec:24:98:af:c6:59:1e: 31:6b:6d:e8:a1:10:81:9f:bb:73:91:7b:cf:6d:2b:e3:c1:eb: 1a:bd:99:46:9b:df:bf:e3:a3:92:87:c6:75:c2:2f:cb:18:fd: fa:8a:c1:fd:99:bb:50:6e:0f:ce:96:a1:0b:03:f3:16:15:75: 2f:40:2f:59:a1:16:88:f0:c6:98:33:2f:a4:14:da:a5:44:c6: f7:60:53:32:48:75:c3:1a:a1:47:c8:1d:96:58:7f:f3:ea:47: b5:dd:bc:27:42:67:91:b8:5f:08:a1:eb:1d:8f:59:79:dd:d7: 79:34:94:f8:73:5c:f1:f0:b1:29:04:cc:38:29:f2:20:f5:4f: ad:ae:44:52:a3:73:58:25:5b:4a:40:ff:6a:da:4a:4c:67:9f: df:08:77:45:69:a3:f7:ba:ad:2d:aa:b6:bf:be:b7:78:63:4d: 98:f2:01:70:b5:f6:19:cd:e7:15:7e:86:b9:d2:db:96:77:47: 04:6c:08:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT7xetRY30HdCYZ1k4TE17sjDw6gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY2QTk4N0UyRjlCRjEwNEI5OTM4OTExRThGODNGNEM1 MUM1QTc0RDAeFw0yNjEwMDgxMDQ2MjdaFw0yNjEwMDkxMTIxMjdaMDMxMTAvBgNV BAMTKDU1OERDNTUzOUQ4OUI3MjdDRjNDREE2RTFEMDQyNEI5NzA5OEE2QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg4A19jGarXZqW420VNnsbGbWR 7uJAH/8ktISrcPoEKs+V/zE3aA1GR3BAifVZJmFQC0xYoe2s63cdofsO7rF5Xfwc ye96gekMZs1zz+xwZ1rKJ76mwHEKxtClINQH/x993YVhL5rUQpfHQ9g9Ayj52jUC 2yeZrv9yQt7oreI/gb3Z3TRplDcP4boaSblkXLxf0zI32tBGhke+M8A4Qxj6BEdp u1mOW4rfhc7X8kamk9zmtXye8o78Y3jCI3imS3rbMBdf4l2vo4Fh2LDd78M2Zg5x Ks8UY0S9KTN9hX0fVOgpQy1qNhqcAWJ2wRaY07zKsaACyyT84+gDjDqcUkFFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVY3FU52JtyfPPNpuHQQkuXCYpqIwHwYDVR0j BBgwFoAU32qYfi+b8QS5k4kR6Pg/TFHFp00wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzBjMmExM2ItMWY0MC00YzAzLWJjMzUtZjY5NjE1MTZkNGQ5LzAvREY2QTk4N0Uy RjlCRjEwNEI5OTM4OTExRThGODNGNEM1MUM1QTc0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERjZBOTg3RTJGOUJGMTA0Qjk5Mzg5MTFFOEY4M0Y0QzUxQzVB NzRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzBjMmExM2ItMWY0MC00YzAzLWJj MzUtZjY5NjE1MTZkNGQ5LzAvREY2QTk4N0UyRjlCRjEwNEI5OTM4OTExRThGODNG NEM1MUM1QTc0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACO4CotiMoUFXbRFEFX8KEef//e/xYrCb+Fx bowr9dm+GLB93Rs6XPYrRZqFeJ7F28n7A365UmPH5MZsl5N84W6L7CSYr8ZZHjFr beihEIGfu3ORe89tK+PB6xq9mUab37/jo5KHxnXCL8sY/fqKwf2Zu1BuD86WoQsD 8xYVdS9AL1mhFojwxpgzL6QU2qVExvdgUzJIdcMaoUfIHZZYf/PqR7XdvCdCZ5G4 Xwih6x2PWXnd13k0lPhzXPHwsSkEzDgp8iD1T62uRFKjc1glW0pA/2raSkxnn98I d0Vpo/e6rS2qtr++t3hjTZjyAXC19hnN5xV+hrnS25Z3RwRsCO4= -----END CERTIFICATE-----Generated at Thu Oct 8 13:48:32 2026 by rpki-client