$ rpki-client -vvvf rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.mft File: 04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.mft (raw, json) Hash identifier: mcsgHxmpP0ReMHIbxI7nnhe8B4viUpeTXPtV4+AgvkA= Subject key identifier: F7:EE:14:A3:7C:C3:4B:D7:20:90:90:99:8B:54:2C:83:9C:95:54:B5 Authority key identifier: 04:DB:B5:85:11:EB:56:6D:9B:E1:98:B7:EC:E1:71:D2:AE:3F:0D:36 Certificate issuer: /CN=04DBB58511EB566D9BE198B7ECE171D2AE3F0D36 Certificate serial: 647232FA5BE29546AE1835627CFDFED31EAE7CD7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.mft Manifest number: BD Signing time: Sun 20 Sep 2026 20:06:43 +0000 Manifest this update: Sun 20 Sep 2026 20:01:43 +0000 Manifest next update: Mon 21 Sep 2026 22:18:43 +0000 Files and hashes: 1: 3130332e36302e3138332e302f32342d3234203d3e20313431363330.roa (hash: ngWzWlF3BDUAfLENIH4eXpEMJ09d6MMBm0aRXwTS2DE=) 2: 3130332e36302e3138302e302f32322d3234203d3e203535363835.roa (hash: Sxgjfc3rJMR/6kggcztr6diqTcIFdNjFMaFwfjqQRVc=) 3: 3130332e38302e38382e302f32322d3234203d3e203535363835.roa (hash: bImD2ZtrKw/qYZlZEa6DVDo0ea7PH2tJcz0npEPPdds=) 4: 3130332e38302e39302e302f32342d3234203d3e20313337333033.roa (hash: vatB6xTCpKTsE4tbG+JDKUhfyJC22x4PAXCG04Pc2lA=) 5: 3130332e38302e39312e302f32342d3234203d3e20313337333033.roa (hash: 8fVyhPJOnEawBWwgARzQly7FMcHwy/+Ghg0XkCT2OOs=) 6: 3138322e35342e3134302e302f32322d3234203d3e203535363835.roa (hash: jiJN5uTtVqTyi/LsSOB3CZxJlHQ5mjW5GcesMlLX4EE=) 7: 04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.crl (hash: 2F/ZFWzEb8TKkEcvsLh2ADLPwMxVCztlNs4gTN2NHvc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.crl rsync://rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:72:32:fa:5b:e2:95:46:ae:18:35:62:7c:fd:fe:d3:1e:ae:7c:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04DBB58511EB566D9BE198B7ECE171D2AE3F0D36 Validity Not Before: Sep 20 20:01:43 2026 GMT Not After : Sep 21 22:18:43 2026 GMT Subject: CN=F7EE14A37CC34BD7209090998B542C839C9554B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ca:00:3a:0c:89:33:f5:e9:4d:b4:1d:a5:10: 50:e7:e9:de:73:fe:95:a2:bf:fb:ef:92:1d:d2:c0: aa:cb:e2:09:8a:1f:7d:4d:e7:ba:3f:f0:ad:c4:29: 68:96:7a:13:07:f5:ec:19:ea:b8:a1:d2:5c:dd:cf: dd:c0:af:f3:d5:92:96:56:bb:7d:7c:0c:01:0a:55: c4:5a:7a:06:7d:c2:b5:eb:61:f3:ac:f2:e3:56:9f: 46:1c:40:31:f3:20:69:6a:ea:02:1f:5f:4c:67:10: a0:de:4a:f4:c8:38:d8:2d:aa:d5:cb:72:8d:24:41: 4d:9c:56:6a:e4:fb:63:62:9b:76:9f:76:74:67:a1: 36:91:c0:a4:c4:53:b0:d1:3e:5f:cf:07:48:75:92: de:32:0c:00:40:53:65:59:5d:75:b6:7a:71:72:5d: eb:5d:ae:08:30:0d:f0:dc:1d:b5:69:25:0f:0e:73: 42:bf:99:c0:a7:e5:e7:23:7b:7c:ac:b2:42:1f:3b: 6c:e5:0a:8b:1b:75:85:60:8d:bf:b0:e4:5c:ae:6a: 6b:b8:3b:00:96:a6:13:15:cc:24:57:42:99:96:93: 7c:d3:b5:1e:33:b4:c7:e4:88:58:19:3a:da:c5:dc: 70:d7:e8:f7:53:8d:48:74:67:4f:0a:44:ac:b2:3b: fe:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:EE:14:A3:7C:C3:4B:D7:20:90:90:99:8B:54:2C:83:9C:95:54:B5 X509v3 Authority Key Identifier: keyid:04:DB:B5:85:11:EB:56:6D:9B:E1:98:B7:EC:E1:71:D2:AE:3F:0D:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:9e:d7:c0:4f:04:62:3d:0b:9e:2b:99:42:62:2f:8f:6a:ca: 6e:c2:d8:1f:1e:39:35:31:b6:c0:6a:b1:a2:4e:8b:63:9b:87: 5e:01:c6:16:b3:e4:cf:b2:de:46:b9:63:ce:3c:ee:a2:33:ab: 3a:e8:80:ea:03:0f:9b:3b:d2:ac:d6:91:89:d1:83:37:e7:c2: 4c:c4:03:a4:63:4a:57:e5:4f:40:51:49:93:64:9f:11:3f:fe: 4d:53:60:9f:90:40:fe:56:d0:e3:97:be:2c:d1:ed:e2:ae:7d: f4:f6:0f:c2:86:79:09:77:ff:1d:1e:74:e2:00:d4:f7:be:77: 3a:63:43:24:04:0c:68:2d:25:b2:87:87:d6:05:71:cb:e8:58: f9:eb:bd:d5:ff:96:f6:5f:02:f3:e7:29:80:59:3a:6d:1d:e0: df:fc:7c:00:47:bc:44:45:23:43:2b:58:4b:2d:fc:3d:76:91: be:7a:85:ef:8c:fb:92:b7:7e:98:91:7e:59:0c:d3:ef:89:18: 27:0e:8b:c0:12:c2:89:ef:2f:9a:0d:f5:a8:59:06:0e:b2:5e: 03:d6:f5:1b:f0:fb:e3:b3:eb:2e:54:6c:81:ab:9c:18:99:e1: 86:62:65:1c:7d:40:fa:75:38:bf:4a:57:f1:ce:3a:69:0f:bb: 98:5a:c1:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZHIy+lvilUauGDVifP3+0x6ufNcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDREQkI1ODUxMUVCNTY2RDlCRTE5OEI3RUNFMTcxRDJB RTNGMEQzNjAeFw0yNjA5MjAyMDAxNDNaFw0yNjA5MjEyMjE4NDNaMDMxMTAvBgNV BAMTKEY3RUUxNEEzN0NDMzRCRDcyMDkwOTA5OThCNTQyQzgzOUM5NTU0QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYygA6DIkz9elNtB2lEFDn6d5z /pWiv/vvkh3SwKrL4gmKH31N57o/8K3EKWiWehMH9ewZ6rih0lzdz93Ar/PVkpZW u318DAEKVcRaegZ9wrXrYfOs8uNWn0YcQDHzIGlq6gIfX0xnEKDeSvTIONgtqtXL co0kQU2cVmrk+2Nim3afdnRnoTaRwKTEU7DRPl/PB0h1kt4yDABAU2VZXXW2enFy XetdrggwDfDcHbVpJQ8Oc0K/mcCn5ecje3ysskIfO2zlCosbdYVgjb+w5Fyuamu4 OwCWphMVzCRXQpmWk3zTtR4ztMfkiFgZOtrF3HDX6PdTjUh0Z08KRKyyO/6LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9+4Uo3zDS9cgkJCZi1Qsg5yVVLUwHwYDVR0j BBgwFoAUBNu1hRHrVm2b4Zi37OFx0q4/DTYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODIwMzJiYzktNjA1YS00MjUzLWE0Y2QtNjJmMTI0MTI2ZWFjLzAvMDREQkI1ODUx MUVCNTY2RDlCRTE5OEI3RUNFMTcxRDJBRTNGMEQzNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNERCQjU4NTExRUI1NjZEOUJFMTk4QjdFQ0UxNzFEMkFFM0Yw RDM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODIwMzJiYzktNjA1YS00MjUzLWE0 Y2QtNjJmMTI0MTI2ZWFjLzAvMDREQkI1ODUxMUVCNTY2RDlCRTE5OEI3RUNFMTcx RDJBRTNGMEQzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFae18BPBGI9C54rmUJiL49qym7C2B8eOTUx tsBqsaJOi2Obh14Bxhaz5M+y3ka5Y8487qIzqzrogOoDD5s70qzWkYnRgzfnwkzE A6RjSlflT0BRSZNknxE//k1TYJ+QQP5W0OOXvizR7eKuffT2D8KGeQl3/x0edOIA 1Pe+dzpjQyQEDGgtJbKHh9YFccvoWPnrvdX/lvZfAvPnKYBZOm0d4N/8fABHvERF I0MrWEst/D12kb56he+M+5K3fpiRflkM0++JGCcOi8ASwonvL5oN9ahZBg6yXgPW 9Rvw++Oz6y5UbIGrnBiZ4YZiZRx9QPp1OL9KV/HOOmkPu5hawSo= -----END CERTIFICATE-----Generated at Mon Sep 21 03:25:17 2026 by rpki-client