$ rpki-client -vvvf rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.mft File: D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.mft (raw, json) Hash identifier: euIb/lu9gyxVinyW7+bi6MJoknLolYjYn6DWvcUb3DY= Subject key identifier: 57:83:59:52:64:1E:32:36:09:43:B2:A7:DD:5C:8E:F3:90:6D:A8:15 Authority key identifier: D4:FA:ED:0A:B5:E9:0A:36:B5:DB:DC:BC:E8:6B:88:EA:D2:66:A9:15 Certificate issuer: /CN=D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915 Certificate serial: 55649BB7D5455AE955CA7FE424CDF33304AA8910 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 06:54:17 +0000 Manifest this update: Thu 24 Sep 2026 06:49:17 +0000 Manifest next update: Fri 25 Sep 2026 08:18:17 +0000 Files and hashes: 1: D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.crl (hash: uyK3sklXh8K9S76q8aLM/bN2Zs/an5WabXGAiNLsXZc=) 2: 323030313a6466343a386534303a3a2f34382d3438203d3e20313533313530.roa (hash: 9hurPke9TvFgQ13BY5gZD2uH3uoeH6rZWMcJHoLiSRc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.crl rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 08:18:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:64:9b:b7:d5:45:5a:e9:55:ca:7f:e4:24:cd:f3:33:04:aa:89:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915 Validity Not Before: Sep 24 06:49:17 2026 GMT Not After : Sep 25 08:18:17 2026 GMT Subject: CN=57835952641E32360943B2A7DD5C8EF3906DA815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:28:a0:36:71:48:4c:bf:6b:79:fa:b2:e1:9d: 7f:d4:e7:44:ba:7c:99:7a:37:2c:63:0f:55:04:60: ab:82:73:c6:26:fb:3d:35:c6:c0:1d:15:9c:25:f3: 12:2f:2d:d0:ab:17:b1:05:96:87:b4:25:fa:73:9e: 60:eb:21:e2:78:91:01:25:0c:78:71:0b:58:71:6a: c9:bf:a1:d5:87:cd:59:a1:f2:e4:17:d9:de:fb:b5: 77:54:50:0f:3a:f2:85:4b:f1:a8:87:ff:26:e9:0f: 57:d8:cf:65:4b:ac:ce:e2:9e:ce:7e:6d:69:2f:dc: 30:8f:b0:9f:28:7b:e3:df:9a:00:cf:3c:6e:3a:e7: d5:90:84:84:50:33:18:a7:fb:c7:80:75:85:d8:e7: 45:ed:ca:2a:b9:00:0e:4b:54:98:75:60:82:5a:3b: 22:65:4e:12:a8:b7:fd:81:fd:bb:48:98:21:97:ae: cc:be:ad:91:11:81:f6:29:77:aa:fd:a8:48:62:a6: e6:38:16:15:5c:92:c1:b7:3c:9c:2c:26:e3:df:6e: 41:bb:78:6a:5b:a2:59:4a:4e:c8:5b:9a:87:d4:40: 9a:89:ed:45:51:89:4d:a9:82:60:b3:6a:2d:91:db: c6:4b:6e:94:36:32:cf:0e:f0:ec:3c:17:f0:f3:bc: 17:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:83:59:52:64:1E:32:36:09:43:B2:A7:DD:5C:8E:F3:90:6D:A8:15 X509v3 Authority Key Identifier: keyid:D4:FA:ED:0A:B5:E9:0A:36:B5:DB:DC:BC:E8:6B:88:EA:D2:66:A9:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:84:cc:4f:0f:e8:c4:ed:62:06:7f:86:f6:f5:49:c2:02:65: b8:00:0b:8d:81:62:c2:57:2b:44:ac:67:08:ff:a5:f5:7e:b5: 94:2a:03:30:9b:49:00:a5:14:08:10:83:0f:b4:e8:e0:47:60: ea:2b:e9:e1:73:ae:55:a7:e4:a0:12:e0:3e:f8:01:d8:95:67: af:f4:ad:96:84:e8:8b:07:f4:64:ac:f9:83:99:b8:35:2a:b1: bd:35:36:41:41:ab:68:a2:23:75:97:6b:59:11:c9:83:4d:1a: ef:a1:44:83:2f:27:cf:e8:81:30:03:4f:25:c4:87:91:75:c8: 8c:85:fc:3e:fb:1d:dd:37:a5:a5:5d:f0:16:da:49:13:69:5b: 41:4a:76:fb:45:a5:1d:fa:23:03:3a:f4:33:b1:ba:33:d0:1d: 70:ef:4e:7b:5d:df:48:75:73:4a:7e:3f:3a:f5:c1:aa:64:bc: b9:92:11:7d:b0:08:b5:58:95:e6:a9:9f:ad:50:6f:a1:7c:e3: da:34:85:e6:6f:74:8a:81:60:33:cd:b1:b9:3e:d3:88:36:dd: b1:c9:d9:cb:3d:28:9b:7e:50:87:99:6f:67:eb:c1:da:b2:20: 69:c7:bf:d2:71:26:f8:ef:91:df:eb:ce:d3:ac:93:55:b1:b9: b8:fc:04:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVWSbt9VFWulVyn/kJM3zMwSqiRAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDRGQUVEMEFCNUU5MEEzNkI1REJEQ0JDRTg2Qjg4RUFE MjY2QTkxNTAeFw0yNjA5MjQwNjQ5MTdaFw0yNjA5MjUwODE4MTdaMDMxMTAvBgNV BAMTKDU3ODM1OTUyNjQxRTMyMzYwOTQzQjJBN0RENUM4RUYzOTA2REE4MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsKKA2cUhMv2t5+rLhnX/U50S6 fJl6NyxjD1UEYKuCc8Ym+z01xsAdFZwl8xIvLdCrF7EFloe0JfpznmDrIeJ4kQEl DHhxC1hxasm/odWHzVmh8uQX2d77tXdUUA868oVL8aiH/ybpD1fYz2VLrM7ins5+ bWkv3DCPsJ8oe+PfmgDPPG4659WQhIRQMxin+8eAdYXY50Xtyiq5AA5LVJh1YIJa OyJlThKot/2B/btImCGXrsy+rZERgfYpd6r9qEhipuY4FhVcksG3PJwsJuPfbkG7 eGpbollKTshbmofUQJqJ7UVRiU2pgmCzai2R28ZLbpQ2Ms8O8Ow8F/DzvBfHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV4NZUmQeMjYJQ7Kn3VyO85BtqBUwHwYDVR0j BBgwFoAU1PrtCrXpCja129y86GuI6tJmqRUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTU5NjEyYTItNDQzMy00MmI5LThmNGYtYjg0Nzc3NmFjYWZkLzEvRDRGQUVEMEFC NUU5MEEzNkI1REJEQ0JDRTg2Qjg4RUFEMjY2QTkxNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENEZBRUQwQUI1RTkwQTM2QjVEQkRDQkNFODZCODhFQUQyNjZB OTE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTU5NjEyYTItNDQzMy00MmI5LThm NGYtYjg0Nzc3NmFjYWZkLzEvRDRGQUVEMEFCNUU5MEEzNkI1REJEQ0JDRTg2Qjg4 RUFEMjY2QTkxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALaEzE8P6MTtYgZ/hvb1ScICZbgAC42BYsJX K0SsZwj/pfV+tZQqAzCbSQClFAgQgw+06OBHYOor6eFzrlWn5KAS4D74AdiVZ6/0 rZaE6IsH9GSs+YOZuDUqsb01NkFBq2iiI3WXa1kRyYNNGu+hRIMvJ8/ogTADTyXE h5F1yIyF/D77Hd03paVd8BbaSRNpW0FKdvtFpR36IwM69DOxujPQHXDvTntd30h1 c0p+Pzr1wapkvLmSEX2wCLVYleapn61Qb6F849o0heZvdIqBYDPNsbk+04g23bHJ 2cs9KJt+UIeZb2frwdqyIGnHv9JxJvjvkd/rztOsk1Wxubj8BC8= -----END CERTIFICATE-----Generated at Thu Sep 24 22:22:37 2026 by rpki-client