$ rpki-client -vvvf rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.mft File: D8435659F33EE1F7005A21C1387F49D353431808.mft (raw, json) Hash identifier: qdKcpyOsJ7MVATKaApiytCRKX1yzqhwAL1OcpMf50ho= Subject key identifier: 1E:A4:1D:6D:80:F3:04:03:06:9B:9D:FB:11:CD:28:94:2A:20:94:77 Authority key identifier: D8:43:56:59:F3:3E:E1:F7:00:5A:21:C1:38:7F:49:D3:53:43:18:08 Certificate issuer: /CN=D8435659F33EE1F7005A21C1387F49D353431808 Certificate serial: 6224F58F5C8D9DEC8A4AB0ACC74CE66A9C6AAA02 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8435659F33EE1F7005A21C1387F49D353431808.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.mft Manifest number: BD Signing time: Mon 21 Sep 2026 09:33:24 +0000 Manifest this update: Mon 21 Sep 2026 09:28:24 +0000 Manifest next update: Tue 22 Sep 2026 11:11:24 +0000 Files and hashes: 1: D8435659F33EE1F7005A21C1387F49D353431808.crl (hash: BNEDH9bN+4B9oADCbABcMsMm9bq2vxoeRMAFJZCL5pc=) 2: 323430323a653330303a3a2f33322d3438203d3e20313331373036.roa (hash: nwbiSYQUIY7u5484W08oCWpHX2RPW6F76Z3A6cL7rsY=) 3: 3130332e3234372e31342e302f32332d3234203d3e20313331373036.roa (hash: blqaAQUh+/Ci23PSpz6kWjhOXoOQ7V7lhdmAJgQyDKE=) 4: 3130332e3234372e31322e302f32342d3234203d3e203535363935.roa (hash: ATVTOuHtUSrfebW1xU18JBrcd7qLtJdgSsLLVk33uGM=) 5: 3132312e3130312e3132382e302f32312d3234203d3e20313331373036.roa (hash: DR008bVSYXJm82RMo+BhRQvkIWKNDedVtmRpjzWrQic=) 6: 3130332e3234372e31332e302f32342d3234203d3e20313331373036.roa (hash: z4cKVwkKHopCzCusKw3/HTDbOMxbEcb0WxL0/PEi5qo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.crl rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8435659F33EE1F7005A21C1387F49D353431808.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 11:11:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:24:f5:8f:5c:8d:9d:ec:8a:4a:b0:ac:c7:4c:e6:6a:9c:6a:aa:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8435659F33EE1F7005A21C1387F49D353431808 Validity Not Before: Sep 21 09:28:24 2026 GMT Not After : Sep 22 11:11:24 2026 GMT Subject: CN=1EA41D6D80F30403069B9DFB11CD28942A209477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b5:88:e0:e4:b3:7b:d2:c9:04:c6:b5:05:33: c3:62:c7:3f:72:f3:62:b9:78:11:d9:ea:0d:b5:e9: a1:a9:bc:2f:50:26:56:bc:d3:a5:21:5d:9b:cd:35: 99:81:78:79:87:94:ef:21:87:f3:6c:c3:d8:51:47: b1:ab:ca:e8:c8:99:2d:6f:e5:7a:c7:7c:70:bc:38: 7b:93:81:99:49:74:f3:f8:46:6f:47:c0:45:bd:95: 64:fc:12:db:4f:82:d5:72:0b:3d:cb:5d:33:e6:d7: fb:42:2d:47:21:c0:4c:4a:0c:f8:20:91:90:8d:7e: de:e6:f8:f6:6a:ad:90:e5:c8:3d:29:26:db:40:67: fa:d6:d9:20:7b:ae:b3:b8:8b:88:66:4b:3c:d6:0b: 37:f5:bf:8b:b1:7f:5f:63:14:5f:89:65:05:e0:70: db:39:b7:d7:9d:07:48:41:e9:1b:7e:82:86:c3:2e: db:24:18:76:30:06:4b:92:eb:54:9b:2d:06:f5:1e: f1:70:5b:e7:99:b3:3e:92:fa:6e:57:51:0d:b9:6f: c7:28:c7:57:86:57:c7:b1:bc:cd:4f:f2:32:ff:da: 13:58:b5:03:8e:83:d0:8b:1a:75:76:1b:bb:71:1b: d8:bd:87:96:2c:70:7c:e4:2f:f0:43:69:5d:31:ef: 53:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A4:1D:6D:80:F3:04:03:06:9B:9D:FB:11:CD:28:94:2A:20:94:77 X509v3 Authority Key Identifier: keyid:D8:43:56:59:F3:3E:E1:F7:00:5A:21:C1:38:7F:49:D3:53:43:18:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8435659F33EE1F7005A21C1387F49D353431808.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:ca:bf:63:49:42:32:82:82:ee:3a:f9:bd:7f:63:28:94:2f: cf:60:91:58:e6:7f:39:e2:25:d2:f6:9a:75:a0:ff:9f:a9:62: c4:be:92:fd:d3:15:01:6f:cf:9d:f1:06:2e:fa:ce:8a:a1:b8: 01:c0:83:53:45:2e:a5:9f:f8:47:fe:39:0a:8e:e3:73:2e:4d: e1:14:2e:7a:e4:68:da:e6:df:99:56:96:1d:21:9e:0f:ae:dc: a0:18:da:67:2c:59:a4:41:e3:ce:f6:12:b0:9f:07:63:05:82: 7b:59:3d:41:9e:de:f7:34:f5:6a:4b:c6:46:4f:89:f1:63:d1: 92:27:ea:da:de:2d:ad:dd:e9:1b:60:46:1b:42:30:0e:a6:49: 3a:e7:2e:78:e2:40:4a:94:a0:96:5e:1c:82:6a:c5:9f:66:53: b2:e1:7b:4b:6a:79:10:cb:f3:78:fa:06:bd:90:21:26:b0:62: 45:07:12:f9:c2:7a:29:97:84:37:08:00:c9:12:6d:d5:25:3d: 49:3d:93:55:6f:a4:a6:df:4a:78:f6:67:6d:ae:e2:02:f3:39: ed:3d:48:2c:c9:b2:74:d7:ba:3e:ac:36:7a:c4:0e:25:b1:f2: d8:a2:6d:a2:5a:75:e7:a2:a4:7f:a9:25:62:d7:6e:0a:3b:11: 21:7c:a6:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYiT1j1yNneyKSrCsx0zmapxqqgIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg0MzU2NTlGMzNFRTFGNzAwNUEyMUMxMzg3RjQ5RDM1 MzQzMTgwODAeFw0yNjA5MjEwOTI4MjRaFw0yNjA5MjIxMTExMjRaMDMxMTAvBgNV BAMTKDFFQTQxRDZEODBGMzA0MDMwNjlCOURGQjExQ0QyODk0MkEyMDk0NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCktYjg5LN70skExrUFM8Nixz9y 82K5eBHZ6g216aGpvC9QJla806UhXZvNNZmBeHmHlO8hh/Nsw9hRR7GryujImS1v 5XrHfHC8OHuTgZlJdPP4Rm9HwEW9lWT8EttPgtVyCz3LXTPm1/tCLUchwExKDPgg kZCNft7m+PZqrZDlyD0pJttAZ/rW2SB7rrO4i4hmSzzWCzf1v4uxf19jFF+JZQXg cNs5t9edB0hB6Rt+gobDLtskGHYwBkuS61SbLQb1HvFwW+eZsz6S+m5XUQ25b8co x1eGV8exvM1P8jL/2hNYtQOOg9CLGnV2G7txG9i9h5YscHzkL/BDaV0x71MhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHqQdbYDzBAMGm537Ec0olCoglHcwHwYDVR0j BBgwFoAU2ENWWfM+4fcAWiHBOH9J01NDGAgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTI3YTZmMzQtMWI2ZS00ZTkyLWIyZDItMGI5MzAxYTY2NmE1LzAvRDg0MzU2NTlG MzNFRTFGNzAwNUEyMUMxMzg3RjQ5RDM1MzQzMTgwOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODQzNTY1OUYzM0VFMUY3MDA1QTIxQzEzODdGNDlEMzUzNDMx ODA4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTI3YTZmMzQtMWI2ZS00ZTkyLWIy ZDItMGI5MzAxYTY2NmE1LzAvRDg0MzU2NTlGMzNFRTFGNzAwNUEyMUMxMzg3RjQ5 RDM1MzQzMTgwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFnKv2NJQjKCgu46+b1/YyiUL89gkVjmfzni JdL2mnWg/5+pYsS+kv3TFQFvz53xBi76zoqhuAHAg1NFLqWf+Ef+OQqO43MuTeEU LnrkaNrm35lWlh0hng+u3KAY2mcsWaRB4872ErCfB2MFgntZPUGe3vc09WpLxkZP ifFj0ZIn6treLa3d6RtgRhtCMA6mSTrnLnjiQEqUoJZeHIJqxZ9mU7Lhe0tqeRDL 83j6Br2QISawYkUHEvnCeimXhDcIAMkSbdUlPUk9k1VvpKbfSnj2Z22u4gLzOe09 SCzJsnTXuj6sNnrEDiWx8tiibaJadeeipH+pJWLXbgo7ESF8poY= -----END CERTIFICATE-----Generated at Tue Sep 22 03:57:54 2026 by rpki-client