$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.mft File: DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.mft (raw, json) Hash identifier: vTjrKQAkB6P3l//z1J4mKgDcXLiI1A83hqGtd3lOpvg= Subject key identifier: 53:C4:88:D2:09:70:36:AE:B9:8A:5D:5E:4E:1F:5D:B0:83:FC:7C:6D Authority key identifier: DB:9A:40:F2:EA:DC:88:1D:0D:A3:EE:A0:05:7E:81:00:29:94:C3:FC Certificate issuer: /CN=DB9A40F2EADC881D0DA3EEA0057E81002994C3FC Certificate serial: 1AA8EC6620B05AD60D1A3C9B9190C51209A29997 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.mft Manifest number: BF Signing time: Tue 22 Sep 2026 06:50:01 +0000 Manifest this update: Tue 22 Sep 2026 06:45:01 +0000 Manifest next update: Wed 23 Sep 2026 10:27:01 +0000 Files and hashes: 1: 323030313a6466333a643934303a3a2f34382d3438203d3e20313532373732.roa (hash: gnONcz3sXVxJxBOxBVij9AaOro25JvPxAm2egbKmGvk=) 2: DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.crl (hash: WEBsNJZtxRMcmw2QJoxd9nIGg8AsWekeTvik7560hzY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.crl rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 10:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:a8:ec:66:20:b0:5a:d6:0d:1a:3c:9b:91:90:c5:12:09:a2:99:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB9A40F2EADC881D0DA3EEA0057E81002994C3FC Validity Not Before: Sep 22 06:45:01 2026 GMT Not After : Sep 23 10:27:01 2026 GMT Subject: CN=53C488D2097036AEB98A5D5E4E1F5DB083FC7C6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:03:5d:68:5f:4d:9f:fa:0d:ef:95:24:58:e3: d9:e4:50:c4:c2:02:a0:20:12:d1:45:c4:c7:09:1c: 6f:56:e6:65:35:6b:69:36:da:be:55:36:5c:c3:59: 9b:52:bb:14:f1:87:63:b2:63:63:ab:e4:eb:f9:93: 02:f5:1c:25:48:42:fc:4c:f2:0a:b8:00:ee:0b:b7: dd:7b:10:ee:36:d9:75:60:ab:18:a9:4d:5b:0c:ab: b2:14:90:ad:49:d8:8c:03:ec:a7:c9:e8:9b:7b:55: 5b:80:36:02:6f:9e:d5:a2:9f:e9:1f:ae:16:c3:ab: b4:d9:22:58:ec:2a:4a:c4:37:70:cb:b5:b1:21:0d: a5:0a:88:19:0e:cf:75:8d:69:27:ad:67:c5:ca:96: 04:4a:55:a2:10:ec:96:77:54:9c:00:19:98:fc:26: 96:af:a0:5c:b4:31:0c:b5:c9:47:51:d9:15:0c:a1: a1:80:9f:97:fe:37:54:37:e4:2e:bd:51:98:8d:e1: c9:be:c5:2b:f7:58:9c:0f:27:62:4c:12:38:42:fc: 26:a6:b9:e6:b5:ca:0a:16:5f:28:8d:14:df:be:32: 08:ec:b8:c7:7e:c1:ad:ce:23:17:ea:e6:f6:49:84: 42:fd:db:e2:6d:ea:8d:09:85:65:3a:b1:59:9e:c1: cd:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C4:88:D2:09:70:36:AE:B9:8A:5D:5E:4E:1F:5D:B0:83:FC:7C:6D X509v3 Authority Key Identifier: keyid:DB:9A:40:F2:EA:DC:88:1D:0D:A3:EE:A0:05:7E:81:00:29:94:C3:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:94:8d:c7:55:07:6d:f5:83:4f:1a:db:20:85:4c:5c:a4:80: 4e:54:4c:06:10:d4:8b:9c:4b:6c:e7:17:49:6f:be:1d:f6:c4: 38:ae:81:64:17:5e:3d:be:d2:32:47:ac:4e:3d:0d:51:e9:1d: 5d:0e:6b:6f:1e:d6:51:42:24:7a:62:62:74:d2:68:03:50:36: 0b:12:e3:8f:20:da:77:c9:02:cd:91:49:05:8b:8c:01:3d:2e: 34:70:cc:62:91:87:72:e1:8c:52:90:c5:7b:f5:a5:75:00:c5: cf:36:45:c2:d8:a5:7c:2e:68:d9:9f:28:dd:70:0e:6f:8d:f3: 90:ea:0c:f4:e4:a3:c9:20:6d:4e:a2:c3:b3:ec:c3:56:37:9c: 47:a4:bc:2b:67:fc:7d:0c:31:1a:4d:72:90:5d:59:dc:b0:54: c5:8e:34:04:71:1d:a0:0a:fb:8a:c3:23:c3:e7:4f:39:47:12: 2f:31:7e:94:f2:49:f0:b0:69:8f:4f:e0:42:1f:06:52:a1:71: 51:da:68:80:d9:44:55:25:44:ce:f8:c0:6c:ec:f0:54:b6:63: 06:c6:71:50:d6:5b:a3:97:dd:e2:a2:2f:04:d6:ee:68:d2:f5: 37:0d:87:cf:12:ad:d2:fe:a6:f6:f5:6f:0f:cb:a5:79:8d:c9: 6d:f2:a0:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGqjsZiCwWtYNGjybkZDFEgmimZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI5QTQwRjJFQURDODgxRDBEQTNFRUEwMDU3RTgxMDAy OTk0QzNGQzAeFw0yNjA5MjIwNjQ1MDFaFw0yNjA5MjMxMDI3MDFaMDMxMTAvBgNV BAMTKDUzQzQ4OEQyMDk3MDM2QUVCOThBNUQ1RTRFMUY1REIwODNGQzdDNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrA11oX02f+g3vlSRY49nkUMTC AqAgEtFFxMcJHG9W5mU1a2k22r5VNlzDWZtSuxTxh2OyY2Or5Ov5kwL1HCVIQvxM 8gq4AO4Lt917EO422XVgqxipTVsMq7IUkK1J2IwD7KfJ6Jt7VVuANgJvntWin+kf rhbDq7TZIljsKkrEN3DLtbEhDaUKiBkOz3WNaSetZ8XKlgRKVaIQ7JZ3VJwAGZj8 JpavoFy0MQy1yUdR2RUMoaGAn5f+N1Q35C69UZiN4cm+xSv3WJwPJ2JMEjhC/Cam uea1ygoWXyiNFN++MgjsuMd+wa3OIxfq5vZJhEL92+Jt6o0JhWU6sVmewc3DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU8SI0glwNq65il1eTh9dsIP8fG0wHwYDVR0j BBgwFoAU25pA8urciB0No+6gBX6BACmUw/wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2NmMDFlYzYtOGU4OS00MDJhLTkwYzctNTBjNmYxNGNkMjQyLzEvREI5QTQwRjJF QURDODgxRDBEQTNFRUEwMDU3RTgxMDAyOTk0QzNGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQjlBNDBGMkVBREM4ODFEMERBM0VFQTAwNTdFODEwMDI5OTRD M0ZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2NmMDFlYzYtOGU4OS00MDJhLTkw YzctNTBjNmYxNGNkMjQyLzEvREI5QTQwRjJFQURDODgxRDBEQTNFRUEwMDU3RTgx MDAyOTk0QzNGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIeUjcdVB231g08a2yCFTFykgE5UTAYQ1Iuc S2znF0lvvh32xDiugWQXXj2+0jJHrE49DVHpHV0Oa28e1lFCJHpiYnTSaANQNgsS 448g2nfJAs2RSQWLjAE9LjRwzGKRh3LhjFKQxXv1pXUAxc82RcLYpXwuaNmfKN1w Dm+N85DqDPTko8kgbU6iw7Psw1Y3nEekvCtn/H0MMRpNcpBdWdywVMWONARxHaAK +4rDI8PnTzlHEi8xfpTySfCwaY9P4EIfBlKhcVHaaIDZRFUlRM74wGzs8FS2YwbG cVDWW6OX3eKiLwTW7mjS9TcNh88SrdL+pvb1bw/LpXmNyW3yoFk= -----END CERTIFICATE-----Generated at Tue Sep 22 15:03:51 2026 by rpki-client