$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.mft File: D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.mft (raw, json) Hash identifier: 1mGFxKQ4ZY/LGXSvY9sAQHxQxW6pd+2lA7cnSYwS5nQ= Subject key identifier: 05:88:6C:50:B0:FA:EE:38:35:EE:DE:2C:58:58:D5:0E:F8:3B:D0:7F Authority key identifier: D2:82:55:06:79:8E:48:EE:4F:6B:D0:B7:C8:A4:B9:80:BD:F3:FD:89 Certificate issuer: /CN=D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89 Certificate serial: 7FA5BF8C1A0717BF29B620DF236A4F30E4591E31 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.mft Manifest number: C2 Signing time: Fri 25 Sep 2026 01:52:34 +0000 Manifest this update: Fri 25 Sep 2026 01:47:34 +0000 Manifest next update: Sat 26 Sep 2026 05:39:34 +0000 Files and hashes: 1: D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.crl (hash: xbNp2ZXcL98+NbslB249gC+jMZ1ZwLRvIoBSed0zDBk=) 2: 3130332e3137382e31362e302f32342d3234203d3e2039333431.roa (hash: dz8GDvSUHBxefCxM449tm0eNclhVLJnu4XpLW3XQ1J8=) 3: 3130332e3137382e31362e302f32332d3233203d3e2039333431.roa (hash: L6oL2whYFSSKY1+OlvsQBxpegvioTL+JL/PrizaKM4w=) 4: 3130332e3137382e31372e302f32342d3234203d3e2039333431.roa (hash: Jbbv7LheQBY4j7uxSO+OAvKD/NoLJjSel5LCZW8mlwI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.crl rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 05:39:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:a5:bf:8c:1a:07:17:bf:29:b6:20:df:23:6a:4f:30:e4:59:1e:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89 Validity Not Before: Sep 25 01:47:34 2026 GMT Not After : Sep 26 05:39:34 2026 GMT Subject: CN=05886C50B0FAEE3835EEDE2C5858D50EF83BD07F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:57:62:b6:ad:b2:4a:46:a8:c5:cc:81:53:dc: 74:f7:e1:2f:f6:9c:c9:f8:f4:98:57:48:9e:ef:15: 40:c8:f9:ea:ea:c2:a4:1b:83:80:35:09:4b:22:11: 6c:20:30:18:61:66:87:57:a8:32:76:f5:46:91:8b: cc:61:a0:d8:ef:77:fd:25:ba:48:17:50:51:ce:0b: 89:67:21:40:3f:c8:09:d2:4b:7a:55:39:b8:b2:1f: 07:be:b5:eb:65:c6:57:9a:bf:e2:e5:35:51:36:56: e9:3c:ca:d7:a9:b3:73:d3:7f:06:cb:6e:bd:1c:fb: 88:4f:73:bc:83:ea:1b:f8:10:d4:cf:f0:83:b2:65: 21:c6:f6:5b:d6:b0:bd:19:ba:c9:25:ef:2a:9b:81: 90:2e:68:f4:84:4b:71:ee:e6:59:d5:27:e3:e1:67: 14:ff:f5:f0:21:df:ba:c6:21:0e:5b:27:c8:3e:1c: ce:6f:65:63:c0:78:ef:d6:3d:e3:e6:84:1a:be:8a: 21:41:3a:8d:e7:08:0a:ec:86:2c:9b:16:8a:b3:6a: bc:49:8a:0d:64:55:a5:24:c9:03:7c:6d:5a:16:49: ee:88:6e:37:53:d4:2b:54:b7:51:7d:7e:f7:13:8b: f5:15:ef:45:b2:fe:73:9c:8b:eb:de:5d:29:50:b1: 89:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:88:6C:50:B0:FA:EE:38:35:EE:DE:2C:58:58:D5:0E:F8:3B:D0:7F X509v3 Authority Key Identifier: keyid:D2:82:55:06:79:8E:48:EE:4F:6B:D0:B7:C8:A4:B9:80:BD:F3:FD:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:36:59:7b:55:e9:2b:36:7c:51:36:75:05:48:7a:ad:5d:b7: e3:44:e1:0f:28:68:7e:81:43:94:e8:e5:42:ec:46:37:84:44: 88:ab:df:ab:47:1a:42:6a:56:4e:bc:4d:c5:15:7a:23:06:5e: 03:a8:90:af:17:f4:4a:fa:fa:ab:0e:78:5e:55:d8:c5:20:c7: 70:08:6a:c4:86:ff:3f:1e:25:b2:36:1b:eb:d4:62:5d:10:62: 44:9a:45:1b:6f:93:7e:26:c9:5d:d9:05:6c:bf:7c:7b:95:4c: 59:bb:55:30:35:15:23:40:eb:54:35:03:0e:ad:b5:71:52:0d: da:71:bb:7f:1b:5d:63:cf:75:e9:d4:e2:db:36:78:9a:ab:a9: bd:ff:43:90:c4:a6:06:fc:f8:2c:55:da:88:21:98:dd:9f:a9: 28:b0:e9:9c:a4:b2:cf:e3:10:86:45:02:c0:f8:9a:03:83:59: 2a:6b:15:3f:15:f9:68:34:cc:62:5f:b3:c6:23:f3:21:c4:66: 9a:99:09:13:9f:09:83:31:ab:13:4b:8e:a6:0e:ce:01:b7:9e: d1:1c:6c:2b:25:c6:62:d4:5e:a9:ac:90:e3:8f:8e:57:c3:7d: 3e:c5:a4:ec:32:ae:c4:32:69:30:8a:aa:3a:a8:ff:28:3e:5f: fd:19:f3:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf6W/jBoHF78ptiDfI2pPMORZHjEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI4MjU1MDY3OThFNDhFRTRGNkJEMEI3QzhBNEI5ODBC REYzRkQ4OTAeFw0yNjA5MjUwMTQ3MzRaFw0yNjA5MjYwNTM5MzRaMDMxMTAvBgNV BAMTKDA1ODg2QzUwQjBGQUVFMzgzNUVFREUyQzU4NThENTBFRjgzQkQwN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJV2K2rbJKRqjFzIFT3HT34S/2 nMn49JhXSJ7vFUDI+erqwqQbg4A1CUsiEWwgMBhhZodXqDJ29UaRi8xhoNjvd/0l ukgXUFHOC4lnIUA/yAnSS3pVObiyHwe+tetlxleav+LlNVE2Vuk8yteps3PTfwbL br0c+4hPc7yD6hv4ENTP8IOyZSHG9lvWsL0Zuskl7yqbgZAuaPSES3Hu5lnVJ+Ph ZxT/9fAh37rGIQ5bJ8g+HM5vZWPAeO/WPePmhBq+iiFBOo3nCArshiybFoqzarxJ ig1kVaUkyQN8bVoWSe6IbjdT1CtUt1F9fvcTi/UV70Wy/nOci+veXSlQsYm/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBYhsULD67jg17t4sWFjVDvg70H8wHwYDVR0j BBgwFoAU0oJVBnmOSO5Pa9C3yKS5gL3z/YkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGMxZTgwZDQtNmViZS00OTJjLWEwYzUtZDc1OTgyNzUzM2IzLzAvRDI4MjU1MDY3 OThFNDhFRTRGNkJEMEI3QzhBNEI5ODBCREYzRkQ4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMjgyNTUwNjc5OEU0OEVFNEY2QkQwQjdDOEE0Qjk4MEJERjNG RDg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGMxZTgwZDQtNmViZS00OTJjLWEw YzUtZDc1OTgyNzUzM2IzLzAvRDI4MjU1MDY3OThFNDhFRTRGNkJEMEI3QzhBNEI5 ODBCREYzRkQ4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFw2WXtV6Ss2fFE2dQVIeq1dt+NE4Q8oaH6B Q5To5ULsRjeERIir36tHGkJqVk68TcUVeiMGXgOokK8X9Er6+qsOeF5V2MUgx3AI asSG/z8eJbI2G+vUYl0QYkSaRRtvk34myV3ZBWy/fHuVTFm7VTA1FSNA61Q1Aw6t tXFSDdpxu38bXWPPdenU4ts2eJqrqb3/Q5DEpgb8+CxV2oghmN2fqSiw6Zykss/j EIZFAsD4mgODWSprFT8V+Wg0zGJfs8Yj8yHEZpqZCROfCYMxqxNLjqYOzgG3ntEc bCslxmLUXqmskOOPjlfDfT7FpOwyrsQyaTCKqjqo/yg+X/0Z8/A= -----END CERTIFICATE-----Generated at Fri Sep 25 22:21:48 2026 by rpki-client