$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.mft File: 12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.mft (raw, json) Hash identifier: 6f37SrD+/AntE5yHF+FktoHAinH0Rl3rPyooH0UNaT8= Subject key identifier: 8F:EB:44:B5:D1:44:49:27:4A:23:17:24:32:38:32:2D:61:81:6E:C1 Authority key identifier: 12:BD:5F:3F:6C:5A:B1:A9:F4:E3:12:A7:DA:FA:AC:BC:22:22:94:6D Certificate issuer: /CN=12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D Certificate serial: 5F36306EA840001C164A44863D63A9A92F7949F4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.mft Manifest number: BD Signing time: Mon 21 Sep 2026 03:00:15 +0000 Manifest this update: Mon 21 Sep 2026 02:55:15 +0000 Manifest next update: Tue 22 Sep 2026 04:22:15 +0000 Files and hashes: 1: 3130332e33372e3232372e302f32342d3234203d3e203536323431.roa (hash: Wx7ZMhfu3QmD55ls7OXnHTLI9Lf1rMbERV/S++9hKS0=) 2: 3230332e39392e3131312e302f32342d3234203d3e203130313337.roa (hash: by6bVuVjvD6SHS/RSc1MKPNjclAKxLlvShxlE0Ivay8=) 3: 3230332e39392e39372e302f32342d3234203d3e203130313337.roa (hash: iv2uySioSu/LP3pkRp7Yqlhu3HDQ0VTi7eqjw18RcDM=) 4: 3230332e39392e3130302e302f32342d3234203d3e203130313337.roa (hash: vuwCjebAC0K8psv6+IDrny1yHZ/N79DOq7lCZjfajGI=) 5: 3230332e39392e3130332e302f32342d3234203d3e203536323431.roa (hash: rRunzg5grI5Ndu/SnsBkpVbfTxQjQL07FKaDwNl7X7E=) 6: 3230332e39392e3132332e302f32342d3234203d3e203130313337.roa (hash: U/FMi72YlD8fNIhbb89qQOjcqCNZEMwjeIPmXn3ZWgc=) 7: 3230332e39392e3130312e302f32342d3234203d3e203536323431.roa (hash: P7oRDyeMFp3GGVH+xItLcQl5cfAi5+V0YTxFNRF2C0E=) 8: 3230332e39392e3131322e302f32342d3234203d3e203536323431.roa (hash: yNSswNu7I5mxAU9hq/xHGawbAp2gMK9dl+S56V1qrxg=) 9: 3230332e39392e3130322e302f32342d3234203d3e203130313337.roa (hash: MAg0dVjN/VisS1hFmLJD+dd3x6Va1gOOR658nswBpQU=) 10: 3230332e39392e3130382e302f32342d3234203d3e203130313337.roa (hash: OU86nZYQrz1f0zZsfAKDY29WgpGVg/0ubhimI1XnObE=) 11: 3230332e39392e3130342e302f32342d3234203d3e203130313337.roa (hash: jn+GzuAFdRGnqz/8h2QUcRukZQjtYixsBnGXWuK3nO4=) 12: 12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.crl (hash: mZS1dN26zObu0CfgIE8j/oqLlogkkD517I4+cTNzWt4=) 13: 3230332e39392e3131302e302f32342d3234203d3e203130313337.roa (hash: 8vjkp3sLrVBHiAgyH56aiCnbINXIhcUYHhrNLKFnaHI=) 14: 3230332e39392e39362e302f32342d3234203d3e203536323431.roa (hash: p1nXgf4HFcxW2Y4PUtsAhVWmj9aD2WMQQIgpZQnsekc=) 15: 3130332e33372e3232352e302f32342d3234203d3e203536323431.roa (hash: M54jxmbu4YqiH5X9dKoh0g3u0CXxxc0mduMC1QC7i/M=) 16: 3130332e33372e3232362e302f32342d3234203d3e203536323431.roa (hash: 2s3lWabzD50sQ0ixmB15BHbTU/1RTqhE4LdKo/MqXUU=) 17: 3130332e33372e3232342e302f32342d3234203d3e203536323431.roa (hash: 5iKsngZjg/l5di0MQ+AlFhBsTwnY2MGxKfhU9yL6oXQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.crl rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 04:22:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:36:30:6e:a8:40:00:1c:16:4a:44:86:3d:63:a9:a9:2f:79:49:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D Validity Not Before: Sep 21 02:55:15 2026 GMT Not After : Sep 22 04:22:15 2026 GMT Subject: CN=8FEB44B5D14449274A2317243238322D61816EC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:92:66:06:72:ea:c8:a1:cb:1f:10:21:7d:16: f2:92:3e:96:e8:b9:6a:ed:d4:a9:47:fa:ee:9f:f0: 3d:2c:a1:97:e7:0f:b5:dd:f9:06:73:cc:f7:e3:9f: 3e:1c:d5:82:30:1e:06:45:e4:3e:36:0d:2d:65:48: 92:46:95:78:a2:59:26:6f:5a:98:10:1a:f1:8a:48: 49:b4:ca:f8:51:31:d0:8c:63:ee:fe:4a:b1:86:8c: 17:ef:dc:96:35:51:c4:c5:ad:10:98:7b:b0:0f:7e: 70:70:b2:34:e4:41:42:9d:8f:6a:a8:47:5d:b5:ec: 82:b6:17:b5:04:95:9f:f9:5f:6a:44:03:91:93:6a: 14:30:91:e6:ec:40:f3:ad:7e:eb:3b:58:84:86:6b: ef:97:c3:15:e5:f9:4e:74:f9:d3:96:14:08:e0:0c: 47:ad:94:44:a5:d0:f6:eb:32:67:5d:4a:9f:f9:a6: 02:8f:fc:16:99:f8:4c:5a:d4:38:64:3b:12:a7:ee: 69:30:a5:be:7a:7f:88:2c:79:46:a1:f6:2a:fe:46: 9b:d0:45:5a:37:28:de:b3:a3:b6:ed:a8:f0:ca:5a: c9:2e:a9:22:80:02:bd:3e:a4:57:36:32:a7:64:83: 85:d5:6e:d2:04:0a:b6:f2:e4:7d:79:e4:7e:91:37: 93:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:EB:44:B5:D1:44:49:27:4A:23:17:24:32:38:32:2D:61:81:6E:C1 X509v3 Authority Key Identifier: keyid:12:BD:5F:3F:6C:5A:B1:A9:F4:E3:12:A7:DA:FA:AC:BC:22:22:94:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:87:bd:ad:1a:30:2e:53:0b:96:f7:52:48:ec:ad:6b:cd:90: 92:b1:10:16:75:73:66:c4:b6:ab:7f:42:c7:a0:44:ef:94:58: c2:bd:2e:bc:51:b8:a0:98:4d:a7:a8:c2:0b:60:81:bf:03:9e: 8d:d6:bb:09:1e:cb:64:2e:03:5e:db:6d:86:f5:64:f3:6a:7f: a8:28:b8:96:bc:f6:6d:70:ed:77:6b:f5:e7:37:19:00:96:5d: ca:c8:db:56:42:8f:53:13:2b:cf:de:89:3e:96:aa:21:79:81: 99:76:61:bc:8b:19:9f:8c:0c:f5:6b:6e:46:6e:2c:6b:2f:86: b7:95:d6:0b:a5:5d:27:ff:0a:42:b5:5c:21:07:18:b2:96:b7: 0f:3c:d2:76:e1:5a:cd:db:cb:22:2c:0c:2c:01:7b:a9:a2:c7: 08:42:50:ee:4c:cf:4c:5f:68:ae:ea:db:1a:6e:92:3e:38:02: 5b:9a:1f:67:40:b4:48:14:73:66:45:01:c9:d0:8b:65:e7:98: bc:9c:34:a8:ed:34:9f:92:52:6f:0d:24:8e:06:82:b2:5a:61: f5:2e:1b:32:e6:5d:20:ca:91:23:d6:0a:12:de:dd:ee:dd:10: 9a:15:66:d9:2a:67:38:66:24:57:9d:f4:09:a8:c0:15:6d:45: 1c:32:42:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXzYwbqhAABwWSkSGPWOpqS95SfQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTJCRDVGM0Y2QzVBQjFBOUY0RTMxMkE3REFGQUFDQkMy MjIyOTQ2RDAeFw0yNjA5MjEwMjU1MTVaFw0yNjA5MjIwNDIyMTVaMDMxMTAvBgNV BAMTKDhGRUI0NEI1RDE0NDQ5Mjc0QTIzMTcyNDMyMzgzMjJENjE4MTZFQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCikmYGcurIocsfECF9FvKSPpbo uWrt1KlH+u6f8D0soZfnD7Xd+QZzzPfjnz4c1YIwHgZF5D42DS1lSJJGlXiiWSZv WpgQGvGKSEm0yvhRMdCMY+7+SrGGjBfv3JY1UcTFrRCYe7APfnBwsjTkQUKdj2qo R1217IK2F7UElZ/5X2pEA5GTahQwkebsQPOtfus7WISGa++XwxXl+U50+dOWFAjg DEetlESl0PbrMmddSp/5pgKP/BaZ+Exa1DhkOxKn7mkwpb56f4gseUah9ir+RpvQ RVo3KN6zo7btqPDKWskuqSKAAr0+pFc2Mqdkg4XVbtIECrby5H155H6RN5PfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj+tEtdFESSdKIxckMjgyLWGBbsEwHwYDVR0j BBgwFoAUEr1fP2xasan04xKn2vqsvCIilG0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2U1OWRiN2UtOTRmNi00MDAyLTk5ZWYtNWU5NmQ4ZTM3ZTUwLzAvMTJCRDVGM0Y2 QzVBQjFBOUY0RTMxMkE3REFGQUFDQkMyMjIyOTQ2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMkJENUYzRjZDNUFCMUE5RjRFMzEyQTdEQUZBQUNCQzIyMjI5 NDZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2U1OWRiN2UtOTRmNi00MDAyLTk5 ZWYtNWU5NmQ4ZTM3ZTUwLzAvMTJCRDVGM0Y2QzVBQjFBOUY0RTMxMkE3REFGQUFD QkMyMjIyOTQ2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFKHva0aMC5TC5b3UkjsrWvNkJKxEBZ1c2bE tqt/QsegRO+UWMK9LrxRuKCYTaeowgtggb8Dno3Wuwkey2QuA17bbYb1ZPNqf6go uJa89m1w7Xdr9ec3GQCWXcrI21ZCj1MTK8/eiT6WqiF5gZl2YbyLGZ+MDPVrbkZu LGsvhreV1gulXSf/CkK1XCEHGLKWtw880nbhWs3byyIsDCwBe6mixwhCUO5Mz0xf aK7q2xpukj44AluaH2dAtEgUc2ZFAcnQi2XnmLycNKjtNJ+SUm8NJI4GgrJaYfUu GzLmXSDKkSPWChLe3e7dEJoVZtkqZzhmJFed9AmowBVtRRwyQpk= -----END CERTIFICATE-----Generated at Mon Sep 21 15:45:35 2026 by rpki-client