$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.mft File: D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.mft (raw, json) Hash identifier: /EpGHnncUnERA8tHnjwSiUINWCksIIqZjyEgVQkukHQ= Subject key identifier: 5D:56:12:1C:9E:D9:51:AB:F8:C2:9F:48:21:F0:3F:FF:6D:58:F0:A6 Authority key identifier: D6:D8:C5:7F:4E:94:3F:88:13:2E:E4:2C:66:11:8E:6C:C9:1F:ED:BF Certificate issuer: /CN=D6D8C57F4E943F88132EE42C66118E6CC91FEDBF Certificate serial: 2698F7C3F4A68050B7C7B48E7B49C5430CA39CF4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.mft Manifest number: BE Signing time: Sun 20 Sep 2026 23:51:16 +0000 Manifest this update: Sun 20 Sep 2026 23:46:16 +0000 Manifest next update: Tue 22 Sep 2026 00:32:16 +0000 Files and hashes: 1: D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.crl (hash: A1nGfSZNqV8IwD3oPlxf6t7vcRTZxNYQxwawY0GAMhE=) 2: 3130332e3230332e37362e302f32322d3232203d3e20313334363230.roa (hash: /kAtttFbe36wHQ930SSRc642mBWubZeea+be7w2XSf8=) 3: 3130332e3230332e37372e302f32342d3234203d3e20313334363230.roa (hash: S0iGfqt7VJt0f+938bF+sQh55Ot8KzHz4KscepkNqjU=) 4: 3130332e3230332e37382e302f32342d3234203d3e20313334363230.roa (hash: 1n9vrO/e00jv7CzxxHzwEFPz/e1n9uFRka2H9k4SRco=) 5: 3130332e3230332e37392e302f32342d3234203d3e20313334363230.roa (hash: nH3TPvAFkZKwqgvDTzS/MZKBt6AIRZ4rxC5p8WMi6xw=) 6: 3130332e3230332e37362e302f32342d3234203d3e20313334363230.roa (hash: bx3Jz5RMo6M/oNMchr0+LwmSKVwAEYYJfafpXARS4Ho=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.crl rsync://rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 00:32:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:98:f7:c3:f4:a6:80:50:b7:c7:b4:8e:7b:49:c5:43:0c:a3:9c:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6D8C57F4E943F88132EE42C66118E6CC91FEDBF Validity Not Before: Sep 20 23:46:16 2026 GMT Not After : Sep 22 00:32:16 2026 GMT Subject: CN=5D56121C9ED951ABF8C29F4821F03FFF6D58F0A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:16:94:27:2a:1d:b3:9d:30:73:72:93:4f:b1: 37:b7:64:93:c4:cd:33:1d:c1:c2:66:89:79:f2:84: fa:54:6e:8c:c4:d1:8c:58:51:c5:23:8d:ca:70:d9: cd:78:00:7f:16:ff:69:c0:74:bd:74:48:65:8d:3d: 6a:0d:9f:40:12:32:20:cd:44:f0:24:e9:1a:c3:5c: 77:6e:c1:74:e5:ba:7c:81:4b:14:0e:bf:fa:ac:ed: bb:d7:76:a9:8a:ed:cb:e8:46:55:fe:b2:2e:34:aa: 15:90:ef:c8:0b:4e:7e:8f:04:10:ce:c0:56:b1:9d: ee:00:6c:39:95:41:20:7e:17:d4:4f:08:68:af:1c: a0:17:0c:2c:05:f2:34:76:c4:49:f5:48:d3:6c:75: 8a:d1:4a:56:a4:91:ec:dd:4e:33:ce:44:60:eb:00: 4b:2a:90:e5:10:bd:97:d6:0e:a0:40:64:89:d0:ba: cf:65:d6:02:a5:6c:ca:1a:82:31:da:1d:71:b9:b6: 96:bf:00:b1:c2:01:d8:43:8b:3f:1f:b0:4b:77:0a: 6f:71:98:27:58:18:01:3e:18:14:4a:b0:60:53:a5: f5:51:83:2b:2f:e7:cc:29:ce:14:9d:80:21:5d:78: 5d:b6:9a:c7:a2:f7:96:46:66:43:7e:ce:4b:67:6c: d6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:56:12:1C:9E:D9:51:AB:F8:C2:9F:48:21:F0:3F:FF:6D:58:F0:A6 X509v3 Authority Key Identifier: keyid:D6:D8:C5:7F:4E:94:3F:88:13:2E:E4:2C:66:11:8E:6C:C9:1F:ED:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:62:a3:0c:d6:2c:d3:5b:2a:94:d3:8a:52:95:70:3d:3c:d4: f2:3c:2e:a9:29:fd:65:82:06:ac:c3:ba:46:f3:93:e7:3d:2d: 82:3d:9d:e5:cb:81:48:fb:e2:34:87:12:4d:d9:bf:7a:ef:df: e5:e8:cb:a0:c6:3f:41:8f:31:22:47:8c:28:11:4b:9e:1d:11: 85:fa:17:ef:ae:7a:3e:79:24:b3:b4:c2:f8:2e:2e:18:92:c6: 0c:63:a5:43:6b:7d:92:48:a5:2c:b7:cf:e4:aa:07:3e:34:32: aa:cf:67:3f:c1:16:ab:e1:f2:e4:fc:9d:87:e7:2f:06:d6:35: 55:30:12:62:de:40:e4:62:06:b1:97:c4:40:e3:19:95:90:b9: 05:d6:1a:0c:0e:54:03:a2:37:15:09:ff:d7:9a:f0:94:da:56: 2f:cb:9e:88:df:79:75:b6:b3:ca:20:d8:ba:f2:76:b3:a4:09: 89:59:0c:b8:fa:03:ef:93:a8:50:37:14:ab:d2:51:c3:2c:58: f3:1f:ee:31:1a:af:51:ed:26:ff:70:60:88:c2:c7:be:3e:ab: 36:a4:07:7c:63:26:0f:8c:d2:e1:16:9a:8f:87:5a:55:21:75: 43:86:e0:fe:10:bb:42:4d:83:5c:6e:77:ea:43:93:ae:4d:84: 2b:46:5a:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJpj3w/SmgFC3x7SOe0nFQwyjnPQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZEOEM1N0Y0RTk0M0Y4ODEzMkVFNDJDNjYxMThFNkND OTFGRURCRjAeFw0yNjA5MjAyMzQ2MTZaFw0yNjA5MjIwMDMyMTZaMDMxMTAvBgNV BAMTKDVENTYxMjFDOUVEOTUxQUJGOEMyOUY0ODIxRjAzRkZGNkQ1OEYwQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9FpQnKh2znTBzcpNPsTe3ZJPE zTMdwcJmiXnyhPpUbozE0YxYUcUjjcpw2c14AH8W/2nAdL10SGWNPWoNn0ASMiDN RPAk6RrDXHduwXTlunyBSxQOv/qs7bvXdqmK7cvoRlX+si40qhWQ78gLTn6PBBDO wFaxne4AbDmVQSB+F9RPCGivHKAXDCwF8jR2xEn1SNNsdYrRSlakkezdTjPORGDr AEsqkOUQvZfWDqBAZInQus9l1gKlbMoagjHaHXG5tpa/ALHCAdhDiz8fsEt3Cm9x mCdYGAE+GBRKsGBTpfVRgysv58wpzhSdgCFdeF22msei95ZGZkN+zktnbNaZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXVYSHJ7ZUav4wp9IIfA//21Y8KYwHwYDVR0j BBgwFoAU1tjFf06UP4gTLuQsZhGObMkf7b8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGRhYTRjMGYtOTk5Mi00MmZjLWE1NDItZWZmNzQwOTFiMzM0LzAvRDZEOEM1N0Y0 RTk0M0Y4ODEzMkVFNDJDNjYxMThFNkNDOTFGRURCRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENkQ4QzU3RjRFOTQzRjg4MTMyRUU0MkM2NjExOEU2Q0M5MUZF REJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGRhYTRjMGYtOTk5Mi00MmZjLWE1 NDItZWZmNzQwOTFiMzM0LzAvRDZEOEM1N0Y0RTk0M0Y4ODEzMkVFNDJDNjYxMThF NkNDOTFGRURCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGFiowzWLNNbKpTTilKVcD081PI8Lqkp/WWC BqzDukbzk+c9LYI9neXLgUj74jSHEk3Zv3rv3+Xoy6DGP0GPMSJHjCgRS54dEYX6 F++uej55JLO0wvguLhiSxgxjpUNrfZJIpSy3z+SqBz40MqrPZz/BFqvh8uT8nYfn LwbWNVUwEmLeQORiBrGXxEDjGZWQuQXWGgwOVAOiNxUJ/9ea8JTaVi/LnojfeXW2 s8og2LrydrOkCYlZDLj6A++TqFA3FKvSUcMsWPMf7jEar1HtJv9wYIjCx74+qzak B3xjJg+M0uEWmo+HWlUhdUOG4P4Qu0JNg1xud+pDk65NhCtGWnI= -----END CERTIFICATE-----Generated at Mon Sep 21 19:00:13 2026 by rpki-client