$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.mft File: D88E006D219730C52DDDCBD6EB05C09A2F815C03.mft (raw, json) Hash identifier: cl11QjLfYufv9pSB5ssAkoLtwQlB4UufvYDNYEZIMmQ= Subject key identifier: 95:FE:85:B9:88:00:29:DE:D8:EB:B3:73:B5:31:30:AB:6D:E5:13:40 Authority key identifier: D8:8E:00:6D:21:97:30:C5:2D:DD:CB:D6:EB:05:C0:9A:2F:81:5C:03 Certificate issuer: /CN=D88E006D219730C52DDDCBD6EB05C09A2F815C03 Certificate serial: 2D0B18D6BAB09A41B355827E95027E531EFEE2BD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.mft Manifest number: BE Signing time: Mon 21 Sep 2026 16:37:05 +0000 Manifest this update: Mon 21 Sep 2026 16:32:05 +0000 Manifest next update: Tue 22 Sep 2026 18:52:05 +0000 Files and hashes: 1: 3136302e32322e3139322e302f32332d3233203d3e20313532383330.roa (hash: mldeFV7Jf6QOev5E++VL/jRK/PuO8nW0ShYwDv/SkQ8=) 2: 3136302e32322e3139332e302f32342d3234203d3e20313532383330.roa (hash: IaAf1+vjln5sceJpZ1s3ScYLsPQRM51r/bqMTajLuUs=) 3: 3136302e32322e3139322e302f32342d3234203d3e20313532383330.roa (hash: xFfth544qMvDawFqjY1oWbMZQMZwR8ATU9ANAJM8pNM=) 4: D88E006D219730C52DDDCBD6EB05C09A2F815C03.crl (hash: polOrOJt0cimr3y52YW26epawc15z06Y6YhB7pUHJm4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.crl rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 18:52:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:0b:18:d6:ba:b0:9a:41:b3:55:82:7e:95:02:7e:53:1e:fe:e2:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D88E006D219730C52DDDCBD6EB05C09A2F815C03 Validity Not Before: Sep 21 16:32:05 2026 GMT Not After : Sep 22 18:52:05 2026 GMT Subject: CN=95FE85B9880029DED8EBB373B53130AB6DE51340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:0f:4c:23:b1:6a:a6:ef:67:5e:84:65:a2:66: 08:00:24:d5:c8:34:de:ca:eb:ad:26:a5:46:08:52: 5c:7a:1b:19:08:70:cb:05:c3:ab:29:95:37:c0:b0: 05:be:5b:7f:e9:2e:01:fe:07:1e:5d:b1:e0:2b:6b: 4b:42:fb:1b:39:3f:c4:a5:06:89:f1:27:f3:28:2a: bd:f9:65:c0:f3:52:89:4e:c4:a4:2c:25:79:6e:8a: 94:74:f2:d1:19:24:10:b9:7b:41:1a:b7:c1:90:d8: f9:c2:6f:0a:1c:ba:66:aa:e3:d8:32:52:76:63:ee: 97:d9:43:b7:be:06:6e:1e:1e:e7:e1:bf:ea:a5:d9: bc:d5:6e:19:af:f5:69:6c:f0:7a:d7:dd:04:65:59: 57:f0:b3:a0:76:ce:b3:cb:73:b2:dc:ce:b7:a6:ba: 75:72:e3:e7:a6:2e:44:fc:aa:c8:99:c1:e0:09:b2: d2:7c:61:fe:1b:83:92:ff:a7:e3:36:0c:7c:30:24: 19:b2:11:11:81:7e:1f:da:13:f6:df:d7:3f:58:14: e7:6f:11:72:b7:99:93:11:f2:51:c8:d4:d4:c6:8c: d0:85:e5:e3:fb:1b:f2:75:53:16:36:17:dc:90:77: 1e:54:d3:92:ff:41:17:0e:c7:7b:d7:15:38:3d:df: 5a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:FE:85:B9:88:00:29:DE:D8:EB:B3:73:B5:31:30:AB:6D:E5:13:40 X509v3 Authority Key Identifier: keyid:D8:8E:00:6D:21:97:30:C5:2D:DD:CB:D6:EB:05:C0:9A:2F:81:5C:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:78:31:79:b8:dd:e6:5a:55:e7:ae:77:3c:98:d3:cb:7d:87: 04:98:12:97:3a:49:67:e2:9b:1b:a5:a7:8d:3f:c7:e9:c0:76: bb:c7:c7:09:bb:37:b4:e8:a6:9f:5d:e3:83:60:dc:72:26:75: fe:f6:c4:6b:c4:85:1e:0d:4b:c2:33:eb:7e:c8:88:6e:0f:65: 17:bc:8d:37:63:f7:00:d6:2c:73:19:4c:2c:86:06:57:28:fe: 4e:2f:2d:a8:81:64:25:e6:c1:fe:4f:c5:f6:d5:9d:ab:19:d2: d1:eb:41:3c:2a:ea:94:13:30:b8:7d:bc:7a:ec:22:59:9a:b9: b4:eb:db:fd:90:9a:0e:67:90:4b:69:ee:75:65:75:d1:aa:4c: 0b:b2:dc:51:a0:a3:dc:32:1b:8a:1c:ac:26:af:03:0a:35:63: 7f:bb:d1:9a:17:ce:45:55:7e:10:0b:86:36:68:23:8e:81:fe: 0d:f5:b7:ec:a0:d7:eb:e5:fc:dc:1b:27:15:87:7d:2f:ff:ad: ce:1b:b3:5e:f7:9c:0c:48:fe:ad:a1:80:5f:b9:76:6b:56:f6: 0d:cd:96:20:86:38:72:40:bd:d5:db:b4:37:38:14:f4:00:2c: 97:ec:8c:bc:59:2b:d5:c0:bd:1d:42:50:34:77:9c:12:51:e7: 5b:b1:f1:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULQsY1rqwmkGzVYJ+lQJ+Ux7+4r0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg4RTAwNkQyMTk3MzBDNTJERERDQkQ2RUIwNUMwOUEy RjgxNUMwMzAeFw0yNjA5MjExNjMyMDVaFw0yNjA5MjIxODUyMDVaMDMxMTAvBgNV BAMTKDk1RkU4NUI5ODgwMDI5REVEOEVCQjM3M0I1MzEzMEFCNkRFNTEzNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQD0wjsWqm72dehGWiZggAJNXI NN7K660mpUYIUlx6GxkIcMsFw6splTfAsAW+W3/pLgH+Bx5dseAra0tC+xs5P8Sl BonxJ/MoKr35ZcDzUolOxKQsJXluipR08tEZJBC5e0Eat8GQ2PnCbwocumaq49gy UnZj7pfZQ7e+Bm4eHufhv+ql2bzVbhmv9Wls8HrX3QRlWVfws6B2zrPLc7Lczrem unVy4+emLkT8qsiZweAJstJ8Yf4bg5L/p+M2DHwwJBmyERGBfh/aE/bf1z9YFOdv EXK3mZMR8lHI1NTGjNCF5eP7G/J1UxY2F9yQdx5U05L/QRcOx3vXFTg931p5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlf6FuYgAKd7Y67NztTEwq23lE0AwHwYDVR0j BBgwFoAU2I4AbSGXMMUt3cvW6wXAmi+BXAMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2EwMjEwYjMtY2NhMi00M2M1LTg5ZjktNWE5MDg2YTYwNzAzLzAvRDg4RTAwNkQy MTk3MzBDNTJERERDQkQ2RUIwNUMwOUEyRjgxNUMwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EODhFMDA2RDIxOTczMEM1MkRERENCRDZFQjA1QzA5QTJGODE1 QzAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2EwMjEwYjMtY2NhMi00M2M1LTg5 ZjktNWE5MDg2YTYwNzAzLzAvRDg4RTAwNkQyMTk3MzBDNTJERERDQkQ2RUIwNUMw OUEyRjgxNUMwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGR4MXm43eZaVeeudzyY08t9hwSYEpc6SWfi mxulp40/x+nAdrvHxwm7N7Topp9d44Ng3HImdf72xGvEhR4NS8Iz637IiG4PZRe8 jTdj9wDWLHMZTCyGBlco/k4vLaiBZCXmwf5PxfbVnasZ0tHrQTwq6pQTMLh9vHrs IlmaubTr2/2Qmg5nkEtp7nVlddGqTAuy3FGgo9wyG4ocrCavAwo1Y3+70ZoXzkVV fhALhjZoI46B/g31t+yg1+vl/NwbJxWHfS//rc4bs173nAxI/q2hgF+5dmtW9g3N liCGOHJAvdXbtDc4FPQALJfsjLxZK9XAvR1CUDR3nBJR51ux8d8= -----END CERTIFICATE-----Generated at Tue Sep 22 03:20:44 2026 by rpki-client