$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/D85622299CA02E9652CA0DB7304F71B950BF346D.mft File: D85622299CA02E9652CA0DB7304F71B950BF346D.mft (raw, json) Hash identifier: cMmRa0ldixbwrbkY4kI+Ia0/kbPyLcYEovu7jZjxJkw= Subject key identifier: 06:14:AE:6B:68:67:AA:B2:0A:FA:17:B2:15:D4:6F:0F:98:94:95:F6 Authority key identifier: D8:56:22:29:9C:A0:2E:96:52:CA:0D:B7:30:4F:71:B9:50:BF:34:6D Certificate issuer: /CN=D85622299CA02E9652CA0DB7304F71B950BF346D Certificate serial: 7BF7AE057FCA77375A53C3B23FB208C23641D8C9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85622299CA02E9652CA0DB7304F71B950BF346D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/D85622299CA02E9652CA0DB7304F71B950BF346D.mft Manifest number: BC Signing time: Sun 20 Sep 2026 12:42:52 +0000 Manifest this update: Sun 20 Sep 2026 12:37:52 +0000 Manifest next update: Mon 21 Sep 2026 15:26:52 +0000 Files and hashes: 1: D85622299CA02E9652CA0DB7304F71B950BF346D.crl (hash: Yib4nUFKcVaDjwk7Ml51dRrqqt1gU8x7fd8jSeY9hBw=) 2: 323430313a613565303a3a2f33322d3438203d3e20313532383130.roa (hash: EjCZCWM26KDivUXMEfL07ocLZOd7dbm1FkmvXFA+kQY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/D85622299CA02E9652CA0DB7304F71B950BF346D.crl rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/D85622299CA02E9652CA0DB7304F71B950BF346D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85622299CA02E9652CA0DB7304F71B950BF346D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 15:26:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:f7:ae:05:7f:ca:77:37:5a:53:c3:b2:3f:b2:08:c2:36:41:d8:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D85622299CA02E9652CA0DB7304F71B950BF346D Validity Not Before: Sep 20 12:37:52 2026 GMT Not After : Sep 21 15:26:52 2026 GMT Subject: CN=0614AE6B6867AAB20AFA17B215D46F0F989495F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ce:da:2a:37:47:df:16:67:c5:5d:e3:a7:06: 47:5f:16:85:55:3f:48:ea:d0:ea:d8:2c:f8:f4:34: 8d:ad:57:68:bd:86:f7:a5:35:ef:9c:cd:dd:be:27: f2:fe:c2:c7:0e:f5:34:19:43:46:26:23:29:a9:70: c6:01:ee:47:82:2b:02:31:6e:05:39:86:df:28:89: c2:49:13:24:f9:89:ec:b3:f5:cc:0a:07:25:6c:f2: e0:e4:a2:3f:c2:f9:d9:f0:7b:56:95:7f:75:d2:d7: 62:db:5c:74:f6:e6:85:d7:a6:2a:ea:66:f5:75:a9: 44:16:8e:4f:c0:2e:b3:fc:5f:ac:12:34:d7:8b:19: 95:5f:d8:f6:20:0f:bc:36:06:42:1d:37:00:80:d1: 36:36:f6:dc:66:b3:9b:bb:fb:99:6f:43:de:c6:a6: ee:a6:6b:61:35:28:5b:cc:00:5e:11:1e:e4:7c:47: 18:51:97:ba:19:39:84:8e:d5:27:18:f6:b1:61:f7: 5d:a0:5e:37:d0:bb:60:57:a8:2c:fa:55:f1:54:88: 6a:c1:fb:52:67:ef:c4:86:8d:14:40:18:79:05:e1: 66:c7:e7:34:ca:13:5f:1c:c1:e4:24:80:bd:82:b6: 37:c2:d1:ba:c9:95:6f:4c:c0:6c:1c:67:18:ba:98: 6e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:14:AE:6B:68:67:AA:B2:0A:FA:17:B2:15:D4:6F:0F:98:94:95:F6 X509v3 Authority Key Identifier: keyid:D8:56:22:29:9C:A0:2E:96:52:CA:0D:B7:30:4F:71:B9:50:BF:34:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/D85622299CA02E9652CA0DB7304F71B950BF346D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85622299CA02E9652CA0DB7304F71B950BF346D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/D85622299CA02E9652CA0DB7304F71B950BF346D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:0b:b6:6d:24:91:9f:72:ea:c2:bd:00:72:d7:e5:65:0e:1e: 6c:b6:3e:8d:f1:43:21:82:86:42:60:32:59:8a:cc:c9:59:fc: 5e:ae:37:30:ff:a1:a8:f6:08:68:6e:f7:f9:22:ca:d9:2c:b1: 33:a1:37:ab:10:b9:73:7c:09:d1:d0:50:5e:bd:66:12:b0:34: 8e:08:9d:48:25:74:f9:c4:b9:ab:f5:52:d5:24:ce:ea:b1:dc: 10:37:f6:9d:37:39:30:a7:99:d9:c4:8d:c9:8e:3a:3d:40:22: cf:88:b9:a3:fa:69:7d:15:1f:95:40:5b:aa:96:37:df:91:84: 7b:67:ae:d6:70:7c:6a:49:e0:02:6b:68:a8:85:2a:20:5d:71: b3:e7:e8:06:e1:03:f5:03:27:eb:de:37:c6:0d:47:c4:a0:73: cd:b3:bb:ab:51:84:ed:b1:aa:2f:c6:b0:20:44:ef:78:14:c0: 25:ac:d6:d2:13:19:13:dd:3d:b4:bb:79:b1:bd:f4:e2:dc:45: 96:31:61:f6:63:04:b7:ea:98:72:74:c7:42:f0:21:c9:e1:d1: 6c:a7:2c:76:c6:c9:d6:62:be:dc:0f:3f:1e:e3:a0:df:ee:9d: 80:23:d1:76:ec:73:30:85:a9:46:77:14:30:4f:7a:9c:37:94: 1f:85:33:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe/euBX/KdzdaU8OyP7IIwjZB2MkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1NjIyMjk5Q0EwMkU5NjUyQ0EwREI3MzA0RjcxQjk1 MEJGMzQ2RDAeFw0yNjA5MjAxMjM3NTJaFw0yNjA5MjExNTI2NTJaMDMxMTAvBgNV BAMTKDA2MTRBRTZCNjg2N0FBQjIwQUZBMTdCMjE1RDQ2RjBGOTg5NDk1RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxztoqN0ffFmfFXeOnBkdfFoVV P0jq0OrYLPj0NI2tV2i9hvelNe+czd2+J/L+wscO9TQZQ0YmIympcMYB7keCKwIx bgU5ht8oicJJEyT5ieyz9cwKByVs8uDkoj/C+dnwe1aVf3XS12LbXHT25oXXpirq ZvV1qUQWjk/ALrP8X6wSNNeLGZVf2PYgD7w2BkIdNwCA0TY29txms5u7+5lvQ97G pu6ma2E1KFvMAF4RHuR8RxhRl7oZOYSO1ScY9rFh912gXjfQu2BXqCz6VfFUiGrB +1Jn78SGjRRAGHkF4WbH5zTKE18cweQkgL2CtjfC0brJlW9MwGwcZxi6mG79AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBhSua2hnqrIK+heyFdRvD5iUlfYwHwYDVR0j BBgwFoAU2FYiKZygLpZSyg23ME9xuVC/NG0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODQ3NTMzOGQtN2FjYi00YWE3LWJlZGMtZDY0NTlmZDEzNTA0LzEvRDg1NjIyMjk5 Q0EwMkU5NjUyQ0EwREI3MzA0RjcxQjk1MEJGMzQ2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODU2MjIyOTlDQTAyRTk2NTJDQTBEQjczMDRGNzFCOTUwQkYz NDZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODQ3NTMzOGQtN2FjYi00YWE3LWJl ZGMtZDY0NTlmZDEzNTA0LzEvRDg1NjIyMjk5Q0EwMkU5NjUyQ0EwREI3MzA0Rjcx Qjk1MEJGMzQ2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIILtm0kkZ9y6sK9AHLX5WUOHmy2Po3xQyGC hkJgMlmKzMlZ/F6uNzD/oaj2CGhu9/kiytkssTOhN6sQuXN8CdHQUF69ZhKwNI4I nUgldPnEuav1UtUkzuqx3BA39p03OTCnmdnEjcmOOj1AIs+IuaP6aX0VH5VAW6qW N9+RhHtnrtZwfGpJ4AJraKiFKiBdcbPn6AbhA/UDJ+veN8YNR8Sgc82zu6tRhO2x qi/GsCBE73gUwCWs1tITGRPdPbS7ebG99OLcRZYxYfZjBLfqmHJ0x0LwIcnh0Wyn LHbGydZivtwPPx7joN/unYAj0XbsczCFqUZ3FDBPepw3lB+FM30= -----END CERTIFICATE-----Generated at Mon Sep 21 02:19:45 2026 by rpki-client