$ rpki-client -vvvf rpki-rsync.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.mft File: D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.mft (raw, json) Hash identifier: 6bXyVzgcJ8T8AQVvflONgSCkC3MQLhfY1yF/RYyCIdQ= Subject key identifier: 4F:6A:47:34:D4:1D:1F:CD:64:21:EA:19:4B:B9:AA:4E:3D:1B:F1:0D Authority key identifier: D0:C8:B4:3A:E8:5F:0F:09:D4:98:73:29:23:2B:EC:E8:BC:C7:4B:8E Certificate issuer: /CN=D0C8B43AE85F0F09D4987329232BECE8BCC74B8E Certificate serial: 170068FD33A18CADE2BA2A3D96AD8EA9E1238E78 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.mft Manifest number: BF Signing time: Mon 21 Sep 2026 10:14:18 +0000 Manifest this update: Mon 21 Sep 2026 10:09:18 +0000 Manifest next update: Tue 22 Sep 2026 13:29:18 +0000 Files and hashes: 1: D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.crl (hash: SlPWNTg56DwymfcGgy84IcoH6rYe8yJClQxlE1nyFE0=) 2: 3130332e3135372e362e302f32342d3234203d3e20313431313036.roa (hash: yr/oT9BlQ/M4JMNvCd0w0W7t+J3wxH6iIKEMfOlwP+M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.crl rsync://rpki-rsync.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:00:68:fd:33:a1:8c:ad:e2:ba:2a:3d:96:ad:8e:a9:e1:23:8e:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0C8B43AE85F0F09D4987329232BECE8BCC74B8E Validity Not Before: Sep 21 10:09:18 2026 GMT Not After : Sep 22 13:29:18 2026 GMT Subject: CN=4F6A4734D41D1FCD6421EA194BB9AA4E3D1BF10D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8d:ac:58:f3:c5:9d:28:9f:6c:cb:e1:1d:34: 68:71:55:55:64:bf:d9:66:a7:37:85:52:3f:c8:17: 7f:08:5f:af:e9:e7:92:b7:b2:27:fe:32:1f:98:af: 27:cc:e2:37:9f:c5:f1:a0:21:b1:45:3c:1e:a3:3f: 15:b5:e9:2d:b4:3d:e0:7e:22:d4:60:fb:25:cd:5b: d5:74:c6:13:da:97:1a:79:79:5f:20:cb:d9:8d:aa: 83:89:da:87:fd:d4:67:a8:12:8b:36:79:88:12:ee: fd:33:ef:2e:d3:61:10:71:b1:c5:90:bb:d5:65:d3: a4:19:38:de:7a:09:a1:bd:b9:75:c9:01:d5:f9:84: f2:68:ec:a3:99:fc:32:28:4f:30:48:41:87:55:6e: 8d:4c:45:d6:45:47:62:45:f0:f4:35:cd:94:47:4a: 53:f8:81:59:19:f9:04:fa:c9:ff:1f:c1:57:75:db: 67:39:ad:5a:0c:99:a2:9d:12:ca:0b:87:ea:c3:86: ed:40:2f:87:96:1b:11:46:ae:24:07:c6:17:f4:ce: 37:1b:70:3f:37:4a:26:fb:02:32:47:ba:2f:06:40: 1a:89:57:8a:2d:a2:58:c2:2c:18:55:4a:eb:93:9e: e9:77:2b:39:8f:fb:8e:c6:9c:97:e3:9a:a5:3f:2a: c9:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:6A:47:34:D4:1D:1F:CD:64:21:EA:19:4B:B9:AA:4E:3D:1B:F1:0D X509v3 Authority Key Identifier: keyid:D0:C8:B4:3A:E8:5F:0F:09:D4:98:73:29:23:2B:EC:E8:BC:C7:4B:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:c0:ba:9a:f3:53:4a:08:8a:59:fa:c6:25:c0:54:40:ac:dd: 7b:58:88:05:64:f9:22:16:de:f6:50:51:90:53:17:15:17:e8: 14:79:3c:5f:d2:e7:5e:a9:98:8f:8d:46:a6:7c:b0:10:f7:97: 59:27:d1:e2:6b:05:ee:64:9e:4b:e3:cc:b1:c3:55:84:96:24: 02:2f:35:a4:e0:6b:7d:94:de:3e:1b:a1:42:a1:53:2d:8c:40: 2a:06:0c:36:e1:59:f0:05:08:4f:b8:5b:6c:e5:ce:60:b3:8c: ef:e0:0e:10:31:5d:ba:b5:bc:8d:1c:85:93:09:e1:66:34:d9: 5e:da:12:70:dc:b8:4a:c1:af:a7:a4:58:9e:9f:92:87:1f:1a: 2d:2a:4c:1f:72:f8:95:25:5d:d1:14:3f:92:45:a8:25:44:84: a8:48:fc:a1:ce:de:6d:98:1a:48:3c:1e:73:0c:2f:fc:59:ee: e8:ad:f1:3c:d1:6c:30:62:38:cd:28:a0:74:39:0d:81:74:f0: ce:2d:69:d9:de:a9:bd:14:ca:cc:e7:1a:ef:bd:b2:12:44:48: 51:98:66:91:35:6b:e8:d3:1c:54:e4:b4:f9:0b:5a:f5:6a:95: 2d:87:db:04:97:e3:ee:50:1d:19:e2:13:8d:5c:e3:37:6d:5a: 07:4e:b2:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFwBo/TOhjK3iuio9lq2OqeEjjngwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBDOEI0M0FFODVGMEYwOUQ0OTg3MzI5MjMyQkVDRThC Q0M3NEI4RTAeFw0yNjA5MjExMDA5MThaFw0yNjA5MjIxMzI5MThaMDMxMTAvBgNV BAMTKDRGNkE0NzM0RDQxRDFGQ0Q2NDIxRUExOTRCQjlBQTRFM0QxQkYxMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/jaxY88WdKJ9sy+EdNGhxVVVk v9lmpzeFUj/IF38IX6/p55K3sif+Mh+YryfM4jefxfGgIbFFPB6jPxW16S20PeB+ ItRg+yXNW9V0xhPalxp5eV8gy9mNqoOJ2of91GeoEos2eYgS7v0z7y7TYRBxscWQ u9Vl06QZON56CaG9uXXJAdX5hPJo7KOZ/DIoTzBIQYdVbo1MRdZFR2JF8PQ1zZRH SlP4gVkZ+QT6yf8fwVd122c5rVoMmaKdEsoLh+rDhu1AL4eWGxFGriQHxhf0zjcb cD83Sib7AjJHui8GQBqJV4otoljCLBhVSuuTnul3KzmP+47GnJfjmqU/KslRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT2pHNNQdH81kIeoZS7mqTj0b8Q0wHwYDVR0j BBgwFoAU0Mi0OuhfDwnUmHMpIyvs6LzHS44wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODVkZDRmMTYtNTcwZS00YzhjLWE5OTItZGI4OWVhM2JhZDM2LzAvRDBDOEI0M0FF ODVGMEYwOUQ0OTg3MzI5MjMyQkVDRThCQ0M3NEI4RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMEM4QjQzQUU4NUYwRjA5RDQ5ODczMjkyMzJCRUNFOEJDQzc0 QjhFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODVkZDRmMTYtNTcwZS00YzhjLWE5 OTItZGI4OWVhM2JhZDM2LzAvRDBDOEI0M0FFODVGMEYwOUQ0OTg3MzI5MjMyQkVD RThCQ0M3NEI4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAALAuprzU0oIiln6xiXAVECs3XtYiAVk+SIW 3vZQUZBTFxUX6BR5PF/S516pmI+NRqZ8sBD3l1kn0eJrBe5knkvjzLHDVYSWJAIv NaTga32U3j4boUKhUy2MQCoGDDbhWfAFCE+4W2zlzmCzjO/gDhAxXbq1vI0chZMJ 4WY02V7aEnDcuErBr6ekWJ6fkocfGi0qTB9y+JUlXdEUP5JFqCVEhKhI/KHO3m2Y Gkg8HnMML/xZ7uit8TzRbDBiOM0ooHQ5DYF08M4tadneqb0UysznGu+9shJESFGY ZpE1a+jTHFTktPkLWvVqlS2H2wSX4+5QHRniE41c4zdtWgdOsl4= -----END CERTIFICATE-----Generated at Mon Sep 21 21:21:52 2026 by rpki-client