$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.mft File: D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.mft (raw, json) Hash identifier: ygWrIUqebr9FqoFUSbZ7Vxeh81SJK5mQfmqZBmtiBBk= Subject key identifier: 4D:AD:44:5E:AC:79:C1:28:03:36:E9:C0:01:D5:16:B0:AB:6A:75:85 Authority key identifier: D8:B1:AA:A4:D2:2A:2E:22:59:E5:5E:7A:50:CB:15:FF:4D:D1:F5:24 Certificate issuer: /CN=D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524 Certificate serial: 3D2D00428F7D2A4701581EAE97D84E5F682429C0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.mft Manifest number: BF Signing time: Tue 22 Sep 2026 03:36:00 +0000 Manifest this update: Tue 22 Sep 2026 03:31:00 +0000 Manifest next update: Wed 23 Sep 2026 04:54:00 +0000 Files and hashes: 1: 3130332e3135302e36312e302f32342d3234203d3e20313430333839.roa (hash: B9uGziJoJ3vGf5NvgTMOSPQWAPSbs6/SbCQ1GHvUQS0=) 2: 3130332e3135302e36302e302f32342d3234203d3e20313430333839.roa (hash: bR+rHQrh2BbDBIEXZD76jtCgM3z29GB3K8OSA3PHxZ8=) 3: D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.crl (hash: S27aWHzSMS+BGozJ8zgTaRH50yt1FgvE/Eoq89v7qUQ=) 4: 323030313a6466333a356238303a3a2f34382d3438203d3e20313430333839.roa (hash: GMEzbs3Ig2nQxKeMH+leqKXvdoQrLyt3lFNSHrwIV3w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.crl rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 04:54:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:2d:00:42:8f:7d:2a:47:01:58:1e:ae:97:d8:4e:5f:68:24:29:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524 Validity Not Before: Sep 22 03:31:00 2026 GMT Not After : Sep 23 04:54:00 2026 GMT Subject: CN=4DAD445EAC79C1280336E9C001D516B0AB6A7585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c3:5f:4d:cc:e8:97:73:32:cf:3d:b7:4a:5b: 04:55:56:0e:7f:ab:c6:f6:d5:13:1c:64:2a:7b:68: a0:0c:7f:87:77:fa:e7:f2:02:7a:a0:b0:90:33:8d: a0:3b:90:56:37:3b:7a:3b:90:40:f2:eb:8d:f0:d2: d2:f8:90:31:67:04:d6:30:3f:39:b3:2e:95:7e:b2: 78:a0:71:f0:81:74:bf:6a:44:13:8a:a6:bd:23:da: 77:f7:20:10:73:2d:a8:86:3c:c2:60:d0:e2:8f:e2: ab:d2:95:08:4d:74:55:5f:2f:58:72:15:12:38:29: f4:74:c6:82:1b:fb:17:21:e0:83:5c:6d:24:fc:ef: 30:29:03:58:2f:1b:a2:57:bb:c3:e4:ac:c2:b8:10: 0d:e3:89:6b:e0:fe:fb:0e:be:7a:6c:61:4f:d0:93: c9:c7:b2:b7:5a:e2:22:fa:92:8f:e7:e6:5d:f6:f4: 6a:31:d3:b8:52:25:95:07:3c:05:3f:92:03:01:7b: 7c:ab:85:41:a0:35:16:40:7c:28:6c:5a:cc:6d:cf: 0f:63:78:d3:24:f8:f1:2f:ac:28:dc:ce:0e:8d:70: a3:8d:85:96:b8:d4:70:7a:4e:4b:dd:36:01:bc:cb: 1a:78:da:9a:63:22:b7:a4:16:26:9f:e1:98:60:4c: 6e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:AD:44:5E:AC:79:C1:28:03:36:E9:C0:01:D5:16:B0:AB:6A:75:85 X509v3 Authority Key Identifier: keyid:D8:B1:AA:A4:D2:2A:2E:22:59:E5:5E:7A:50:CB:15:FF:4D:D1:F5:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:54:e7:65:d1:dc:89:63:94:4e:cf:ac:52:9e:2a:39:9c:f1: 51:a4:b6:25:fe:1a:06:83:49:14:4c:3a:cb:21:a5:ea:7b:2a: 19:f7:22:3c:f8:cb:33:ee:f0:92:91:86:1f:ef:be:06:35:f5: 5e:a1:6f:34:a5:cc:33:83:2a:83:de:00:16:61:b7:86:66:bd: 1f:31:0d:12:ab:31:38:1d:19:de:95:ae:0d:41:b8:51:db:6a: 2b:ad:6d:80:4f:9d:94:a9:09:71:c3:42:07:94:b3:60:21:12: 79:24:2b:20:8e:c9:88:3a:f4:d7:9c:af:84:e7:da:45:52:36: 2c:16:3b:15:6d:fc:d1:34:7c:d0:97:1e:57:52:f0:75:3e:23: d9:46:6c:f0:28:12:c0:e3:4f:02:4f:36:3c:07:6b:9f:0d:7b: b3:82:07:18:c4:c2:b2:55:86:1d:09:c5:24:ad:cd:6d:cc:4a: 24:14:41:4c:d2:a7:6f:56:f2:45:d8:42:d1:b6:a8:ec:88:ef: 83:64:2e:a9:2a:99:23:15:ac:79:a9:11:cc:4d:e5:80:fd:ce: a8:c9:54:ce:00:23:0a:d2:e4:4c:c1:69:d6:94:c0:a7:21:a1: 7e:12:17:24:18:6b:36:94:11:7b:a9:4d:0a:b9:5d:9a:a6:52: e0:b8:57:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPS0AQo99KkcBWB6ul9hOX2gkKcAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhCMUFBQTREMjJBMkUyMjU5RTU1RTdBNTBDQjE1RkY0 REQxRjUyNDAeFw0yNjA5MjIwMzMxMDBaFw0yNjA5MjMwNDU0MDBaMDMxMTAvBgNV BAMTKDREQUQ0NDVFQUM3OUMxMjgwMzM2RTlDMDAxRDUxNkIwQUI2QTc1ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXw19NzOiXczLPPbdKWwRVVg5/ q8b21RMcZCp7aKAMf4d3+ufyAnqgsJAzjaA7kFY3O3o7kEDy643w0tL4kDFnBNYw PzmzLpV+snigcfCBdL9qRBOKpr0j2nf3IBBzLaiGPMJg0OKP4qvSlQhNdFVfL1hy FRI4KfR0xoIb+xch4INcbST87zApA1gvG6JXu8PkrMK4EA3jiWvg/vsOvnpsYU/Q k8nHsrda4iL6ko/n5l329Gox07hSJZUHPAU/kgMBe3yrhUGgNRZAfChsWsxtzw9j eNMk+PEvrCjczg6NcKONhZa41HB6TkvdNgG8yxp42ppjIrekFiaf4ZhgTG7XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTa1EXqx5wSgDNunAAdUWsKtqdYUwHwYDVR0j BBgwFoAU2LGqpNIqLiJZ5V56UMsV/03R9SQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2IzZWFiYjQtNGRiMy00MzczLWEzNDgtZmIxZWQ3MDU1NjUxLzAvRDhCMUFBQTRE MjJBMkUyMjU5RTU1RTdBNTBDQjE1RkY0REQxRjUyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EOEIxQUFBNEQyMkEyRTIyNTlFNTVFN0E1MENCMTVGRjRERDFG NTI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2IzZWFiYjQtNGRiMy00MzczLWEz NDgtZmIxZWQ3MDU1NjUxLzAvRDhCMUFBQTREMjJBMkUyMjU5RTU1RTdBNTBDQjE1 RkY0REQxRjUyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHJU52XR3IljlE7PrFKeKjmc8VGktiX+GgaD SRRMOsshpep7Khn3Ijz4yzPu8JKRhh/vvgY19V6hbzSlzDODKoPeABZht4ZmvR8x DRKrMTgdGd6Vrg1BuFHbaiutbYBPnZSpCXHDQgeUs2AhEnkkKyCOyYg69Necr4Tn 2kVSNiwWOxVt/NE0fNCXHldS8HU+I9lGbPAoEsDjTwJPNjwHa58Ne7OCBxjEwrJV hh0JxSStzW3MSiQUQUzSp29W8kXYQtG2qOyI74NkLqkqmSMVrHmpEcxN5YD9zqjJ VM4AIwrS5EzBadaUwKchoX4SFyQYazaUEXupTQq5XZqmUuC4V4g= -----END CERTIFICATE-----Generated at Tue Sep 22 21:20:47 2026 by rpki-client